hxxps://send[.]cm/z1dg0c7dkj8g

Resubmissions

27/08/2023, 17:50

230827-werk1seb21 1

27/08/2023, 03:17

22/08/2023, 17:50

22/08/2023, 05:56

21/08/2023, 22:35

21/08/2023, 06:10

21/08/2023, 04:56

21/08/2023, 04:02

Analysis

max time kernel
1800s
max time network
1805s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
27/08/2023, 03:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://send.cm/z1dg0c7dkj8g

Score

1^/10

Malware Config

Signatures

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133375798790026176"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2288	chrome.exe
2288	chrome.exe
1804	chrome.exe
1804	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe
Token: SeShutdownPrivilege	2288	chrome.exe
Token: SeCreatePagefilePrivilege	2288	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe
2288	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 8	2288	chrome.exe	82
PID 2288 wrote to memory of 8	2288	chrome.exe	82
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 2716	2288	chrome.exe	88
PID 2288 wrote to memory of 1812	2288	chrome.exe	84
PID 2288 wrote to memory of 1812	2288	chrome.exe	84
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85
PID 2288 wrote to memory of 4608	2288	chrome.exe	85

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://send.cm/z1dg0c7dkj8g
1⤵
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcff059758,0x7ffcff059768,0x7ffcff059778
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1844 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2244 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2864 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2856 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:2
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5148 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2660 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5580 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5852 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5992 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3436 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6104 --field-trial-handle=1968,i,17951217066279374792,6476872069352487833,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1804

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
174c86a430b21b9644cb82e5d2984753

SHA1
5d57289b8e50de690d0788e5b13c627a71ef6359

SHA256
a14c6245049743e100892e645c44be4b061e438675ef3e4c14c8307858876016

SHA512
656ad017b41dab0e5ea6bee90055f7b52e9f17417679607a915b2cd3a13a10693f66281fa1d36adab7d4de1da81d3897e333d0c294ce06387fc1598db4c97d32

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
66ec585d4e793e13784de0d56d3eb172

SHA1
44b3e5aa57f728f7ac1b7d71257c09025094b1c6

SHA256
6e8c234e3c08a18318e4a45354bd44eb4b1cb9e4d647a9b9c546d613161f855e

SHA512
a0aa05cc9ada613e11ddfae6ab0c401831f0af3ddd3a161ddacb42c44d0045d0f7012b6b148506ca278dd3a1e38958c60f3fd067bf0c535d474ecb945c9092a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
477545b81c9e371e0b104edb35da995d

SHA1
2bc1d5f99f33142c841d2f7118848c1630037955

SHA256
c14b55dc91b8971b4a14eb62fda7d23fa3ba939920b2a57afecfebefc752ca27

SHA512
f821f0cc914371b55fe02c0106917a40844b2fcc73d50761891d8948000d0cea629c1c1cb41ec7cd5ba9b296d07c1f32597a7e8ba9381a80a60ce39ce61ca982

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
706B

MD5
66a5c41b03b5f94dd4b8718e2e9e3d62

SHA1
ffff592bbc5ed0602c5f37bf13580cd91f54384d

SHA256
c1db12d399222e807018dde40c281ff375f8f58377c966fe7784241030784650

SHA512
cc336ef1f9ee56fd3c259f223b27634963868b6be16c08d9cf9382d6199cca4715e08f9000ab5455d28ae6443b627dd76a6407597743fa016e6027284de87f8f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
706B

MD5
132f550ce5b917ef5458241b7bb0463c

SHA1
7bd8e18359e767169dae166270ef095321523cab

SHA256
71bde9852bc9fc1d44303ead9f0028293db0c7a6b790cce437ef70c997f56739

SHA512
80f2635f3ffc11bad4fee6204e1b5bb85fa60326ddcdf90f70129fd64f11e9f3fec7ad12cf168c7f487a3a8841541d4cdd13bfe5950d4adb46f16f822da26a47

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
338ffc50ed928544bbe0bafae8e471dd

SHA1
8d8216ad23e5ea689ef7ac599976c08a09861e5f

SHA256
c5b5a8d48aceac5f9d63de42d527e42c7aeb763fae9a39ecd419b572a85a57b9

SHA512
779d97074c2e9dcf420407301c7e02848a3dd8de3eb32d3733be686e9aaf23efe86161602a96bbaf73f701205a5b8e4b9a5f3a3d957dac8f9770c6f108a13384

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b5a216f7a47f0e24f7245102100e19f3

SHA1
9d048a37f7d56661f5e4889d488ae0e9ca240ef8

SHA256
44b249fb026f0b2f8c1b1a1e92788f7f3803d0188f927fdda34b5dc91100ddfc

SHA512
1fc1f55bc3d766969959c8509e4d7a678cff6f62800675e9ee29a24cd1048a5e7675cc159d313729cf28da704d1e3ffbe4d2fa3f1f8fc6162661a56f2e778dda

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ab4c28da95e9111036453fb0596aea08

SHA1
e3f86741197957a734f5189a760c867c5e361d89

SHA256
f77eb008d884131ae03d1b0f7ac884926f7a887126c5c74df178d65f6617e6bc

SHA512
ae15d71ceab6745681b2f2824e644c212b507305ee9b28327962e6bf054734b0ba9ad3927a60aaa3399d755ca48fb538bfe9541ca1e0b9379c4dcfbe897a1799

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
f413204a8fe56dad35e7814ef4f07ce9

SHA1
c3e11ff5c8591c9fb7f46acb2700bea7081888da

SHA256
5514371d6537727ce02879a67d9eb8097092fc2892eb005f08d6a483d1eb9530

SHA512
735ef2908d026bf863d3abca17cfa448ba3851cfe3d0527164ce029ef20a1d2517e78a048a034a764c230568de6a1145e5dc4c1a33be65180941a26d0cbdadae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
87KB

MD5
cbe8d52b52d3bec4495b74450bbcf405

SHA1
ea52e6df59c44acd253ad4076a0718afd37c282c

SHA256
b31f0be273f1bb05b066a7ba6972e784410bc643b5ae823a29b5ca1deaeb0048

SHA512
a386257cb3b9d037b6d19ef2574a83ce7f980d5a6deac18bd42d362b2f8ef0d8169a0b564e5d7e3d784d656ea775991c90d9eb9c2fcb81c69e761151c28b2637

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe584513.TMP

Filesize
104KB

MD5
02d1f34547e48f7f93c50eb96dd91518

SHA1
06bba251cbc2e6b9a21c2a6b5354cceb1bc2c069

SHA256
02e4a9146b323eeb5d0ff58e645c9b8731b6854e518214a15c47bfbf11294d4a

SHA512
3451727040b2b8e8fb58cbd6dbd5d651defe507391c012ba0c390b7962c80cf4d221c8df81ec6a6be20be92b6d6a3601012ea4fe5e4a3850a6661ac8df0776f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b683f0fd-b996-47e4-8dee-234ab513c65e.tmp

Filesize
110KB

MD5
3e138e004048762fdad4afa1cf475435

SHA1
02f8de433d34ed8810d83a953d91cb77d0f6d320

SHA256
49ad5d6b5aaa55cea5618b40c015e6cb2146f8f3637e0b6f14a15582694278fa

SHA512
ec9eaab315952b38826043aa4737db16d2be90dc8448e3ae76e63dd7b31ae29e74ce30540ff800e0d0455af41540341d791e89cb7e4462b6da46636915e6fbd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit