hxxps://www[.]muambator[.]com[.]br/pacotes/NL342335771BR/detalhes/

Analysis

max time kernel
299s
max time network
280s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
14-03-2023 23:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.muambator.com.br/pacotes/NL342335771BR/detalhes/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133233152501210422"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe

Suspicious use of FindShellTrayWindow 30 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of SendNotifyMessage 28 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 4744	4604	chrome.exe	66
PID 4604 wrote to memory of 4744	4604	chrome.exe	66
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 3004	4604	chrome.exe	70
PID 4604 wrote to memory of 4964	4604	chrome.exe	68
PID 4604 wrote to memory of 4964	4604	chrome.exe	68
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69
PID 4604 wrote to memory of 4460	4604	chrome.exe	69

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://www.muambator.com.br/pacotes/NL342335771BR/detalhes/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7fffbbcf9758,0x7fffbbcf9768,0x7fffbbcf9778
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1608 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2108 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1628 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:2
  2⤵
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3076 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3096 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5224 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4420 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4436 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4444 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4724 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 --field-trial-handle=1724,i,7771371530546792562,929490344370189344,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4692

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4004

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
a71ceb5de39035cd1ab96f0d63b54c7f

SHA1
c26e5f3a01d1145272de4ca7dd472ae0cadc0469

SHA256
a7fbe5bd492ce2fb7477fed637ccecf301c8edf65dee353a011dbaa2e02dfd09

SHA512
8674c5c296a05dc5cea90a04227692baf7388d41e77e3a18670a1f46188f5ea7127763ade6b196aa91b5497587099837881530c20b75e9b10252aba2c755659e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
600B

MD5
a6b7877fff17030fc50a191b3e9e4468

SHA1
1f4f7cf50066c122a5fdc1bb05a708e4d23f45ef

SHA256
6af531c68b3e109b1c29d1566e3d16de41534761e464f5ae72a4bc0f7f4eb0c6

SHA512
c90b7cfffd92c8bbf1a7a3034282ebaf3f43bdb5b3aa17f54eb920ad3d8539c24402df8838fbfe4cd508a68c5fad2cf7c5e802b047e72c76b53570fcd6118565

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
e6069820bcbca0a1e825c88017efa80d

SHA1
ab92c352e718de3ab39f90b0bfe1d137c74f53cd

SHA256
11107b007cf1522cf9170d83886741000f214b0f29ec6ab5038890edf1a619cf

SHA512
3182c4c9a076bbab9efde012e6251cda63a36132abf9110e4c13d676b753a4b4097ef6a53291c54a9d8cf9c494e09a64c22c5f71e5c220dd2d7e249344d00cbc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
9258a68a25cba665bbccf97f1517469f

SHA1
75ede7f9359156d2ab5c79137d371755cddbff61

SHA256
86f31f3c37c3d350d13e61f88c7faeb15c74402c09d8b97f4add8f5a78237444

SHA512
1cc9409e9b54d0c432231eac3d9e837b795299e121501e38732d2d5f7313d58f87be2400337a95b75984c397a7cf372c7ea1eba4f388e8b14d3d82a9e0b66b21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
893b10d8de0717255eedcfae88be47cf

SHA1
5f137582ea85b274176e9ff0f523a66e3adfe240

SHA256
fd879ec9ce895dcfec7b97a361143f4ac5d86ea430847417338645cee0927277

SHA512
35bbda3e479507d79363bf42806e25c1214e76df21e938271622c265fbaf0601490afb9b3ef608502c62bc4083b39ce9b2df38b8875f53ce3a21a314ae808e45

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f029ca157063ebb674b6d2f4901a5ac0

SHA1
855b027dc056bf2b2e3a7463ac5d378398bf1d2c

SHA256
a2c97df3ad051297aa693e3bb3fd0cee6c57a16e27e4db182d71e7cfd6e971d0

SHA512
eed66075a8e2d06e6c6f0dde3e8ca5103f59fa62fb19b3f7d28201210f7afc809c3351696475a5773889cc1c2f632812abce9362e69f85e01336d8f38ce6a2c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
e1d3ab3c30e27635f2bd588713996881

SHA1
36b02fbf34ca75e86f39313ab61c647882e04b0c

SHA256
70938d1fc4b1ddf723ebe80ab3c04bfe30dde831e35d2a0432ed587f05c00356

SHA512
9096fc2fc0e4917277c2432342daf6c331356a0c3cbfab4b9d893ac60eb3b4695900b266196e4db26e1ead47005713400b4116ba4e80edd31a21711c081fb17f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
da986e4bf266775a713a9ae562914bd0

SHA1
1635ccf33e995e8f32d0877abad3491ac58d0e79

SHA256
9fe618ae8bd71ecc7018f03f963b083d5b16e07d25fc1f7966fba38d7d441f3c

SHA512
bb06859039dfd5fe26b250b2184edf7317aebc175e9263de27f85ed107219ab3947b37c80dd9698f5314da7afa2f2c0a1e38124b6d35b9f6248b1fa1788faf3f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
bf7717da6b203cb34c60394aa1829019

SHA1
03f3620ce1dfd8f20631105fddbe0ed4ddc385ff

SHA256
b6fe57aededac2ba2311c3d7cd8766fad1119a15d30cd7e8551e6dbf0ea8d66f

SHA512
f3792effc419de9a614aba4bedd455cd73fbeda1da30c6d7cf76c2cecf1137b0c381186ff745ce9cf5f68647a7db4e54cbc3864a9f61880c000e6669586115f0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
23988fc1b9e517d6fdaee43351c6f4f3

SHA1
a4d0ea736b95bbb053fb03c4dad793b79eddcfea

SHA256
1455eb121ebfd613cbbfb493893bc3f9de3fd10fa6cd3b4c8bc75d1edec72802

SHA512
815e53fb8c6c7893c33c725faf544d7b9c11785214375d76186403d19d306c4e891cc7a74932b8897518169c6e6e063ac864a053e8b3bc232aba8dbcbc9b594a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
12KB

MD5
f7e3d35a4eade0c91142755cdb602f94

SHA1
5b9cdfc454b23514af36da11c647371d891fbdeb

SHA256
8336c51a35883a47c1a3bad73b129d6e74f0c466077c580ef61ed489543e4d1f

SHA512
9a90d17da70ef765241ee00bc41345dfded3210400e2dc1d2f20eef0a13f334ce5388fc2b2b74c790781f21c68d5674dd7433c9487f2be88c4518f74206de2ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
145KB

MD5
edf9a6577bf32c2c640e6b45fe425e17

SHA1
e7db4c23c2527a5456e38f27a419778ad923167f

SHA256
c0adc7bf3b7ac3945541f7661db75109e1dc92c6b0968ea96a1f5cdb60f1162c

SHA512
2b62ceba336c2812502c2b0facf9d55accefc085e82ef2c35970689d7a7acaf93afdb089b82d9324d6dada8b05ac5271a145e13f15de480432d22a7172d095d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
145KB

MD5
f03f0ef8b264ace79fba4d4aec26a8e7

SHA1
cdf6592c6ac653d275cd851017f821b627944063

SHA256
ad8c14a59762445143c1519e93a4fd11bd9cb9c604cbfb389894ffc02a9a756b

SHA512
c7f7953b7a468d8b951ee9af0fcb664e2471a63165347c18df9223f16885d318781606e547d1d4e7f70e7e4ce31a08f93ae86aa1a4c72edcb5428fecaf1afed1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
145KB

MD5
184ad6b96735e23fbe21c442d87be947

SHA1
ea6da272cd495b5a7c78cafa21e0c08dac0e4dc0

SHA256
0fac8285fc9c39dc9363bddba97e3e76f221bdbbf9ae9370bd1258bba6696064

SHA512
14f4f12e0f98658528ad7a99b93f0b8885e1bcf1baa69722a92e2b2bfee89c4d3af4a49f3cd1e06e9b5d4ff70f0b3def591d288c5a88e695749b7fb4431a42a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
99KB

MD5
dac20de5c54a0b0d59adf3efc77f8376

SHA1
749db7e1c98f55b02c5866e4c396bea2a81b4e85

SHA256
90251a2db5b44759b24cc6afaa3b4e787b145296a28582a89c2d1fcd20760497

SHA512
f3373cede078faed3d650f0edefd7d98906cf399bdea323ef9e4c46be1d1ff4738fc7aa33cffa1b389fa5efc512f6fecb3ee0eb2ab03703ef63bb38d020ff9e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe577261.TMP

Filesize
98KB

MD5
244a819f18183aa44fb01cd589e67a82

SHA1
eec3c510f4fbe41a0626627b818d2af084f0a394

SHA256
5321699705f8a622279e17af41ec808fdfdab619fdb91e94ef2747b1065d7f16

SHA512
61c2dd7fbe461d020b414c1f8aeefdc4c7c3cf098d694c48355a73236c77e6d5267ed49c59e2809e8f0e1c154af915758329065c3a6e3d9f4a407be4096c9866

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit