hxxp://89[.]248[.]163[.]208/broadcast

Analysis

max time kernel
250s
max time network
268s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-01-2024 21:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://89.248.163.208/broadcast

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133495701431777181"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
4620	chrome.exe
4620	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 812 wrote to memory of 2480	812	chrome.exe	80
PID 812 wrote to memory of 2480	812	chrome.exe	80
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 2588	812	chrome.exe	90
PID 812 wrote to memory of 4828	812	chrome.exe	91
PID 812 wrote to memory of 4828	812	chrome.exe	91
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92
PID 812 wrote to memory of 1772	812	chrome.exe	92

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://89.248.163.208/broadcast
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8d2379758,0x7ff8d2379768,0x7ff8d2379778
  2⤵
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1736 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:2
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2220 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2920 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2792 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4308 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4396 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3848 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2676 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3288 --field-trial-handle=1804,i,913872833986546583,13692152991600101233,131072 /prefetch:1
  2⤵
  PID:3096

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1684

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\131f0c3f-b0f3-469b-8ed6-a4dd58f5a14b.tmp

Filesize
114KB

MD5
6f2f9dacef484fa75ef7f1c42563bdd6

SHA1
0da06d48d28b2e50cdc5fb681ba55be79ab39d20

SHA256
d7d333b9adf59a86e202945c8cc3518c4aa6f237e31d294752091768ecc12417

SHA512
96ff1b8298f52a0361f6d98ad2070d4a9efa9d7b43ec3cf380f90c5941a36a79af9feccfa59dd33d024b479aa1b404281dbffe2f6d2c974558ad214b7d247260

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
af3408b76c9e8e5920c42d309f3d4bcc

SHA1
495fd3916634cea8f81ba59b506c76392b6c77fc

SHA256
beb801d25672165317bc5ff00098b6d41e588f56f397eae0fdbc873e02256d8e

SHA512
3cef0f8da1a4390ea0b69d59671409f46f13026a8c28ccd0c548636271b95f0bc1d546a38355e0d159f9c6e771caf60e06b75ee87883b11c9d38322bf1df627a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
6c40540c09977a4cf09b79fca5bfb9fd

SHA1
d2139f482961d26a8312d3285f0f7b81026aef63

SHA256
f5bafe43f5b051ff00caff63b207868bbc59cf6a10041c2f7dadacd3aeaa28fd

SHA512
02c4db9a0e86d07e3519313a759443a10b1656cbceb974609f9ecf85f2c2785f5444aa2fc4f441a49a4a8a70053e61ea67494a0a6b00318e7e5d947dd9802fe3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e5feb412395004e24d461513d4cd1ce3

SHA1
ca9291bd7153c0a8b9d1c6029bd084e68e965b15

SHA256
91479598a8accc3013b3ba051860f4f808df15fd8d77d942f4acc29597fba9b7

SHA512
9926dfe96f25f3634c4c56c07051429c0037cdc0239357ab64e79ab220152eff66eebc8db49e208574cf6422c46491656a9d5088865e4f11f334e6e26fb4b3ec

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
690c74d9c2b3405277da7dea254be7ab

SHA1
f01431cf2c0c1a3531b59546921eecc1ed292187

SHA256
e460cc94919684b69b7d1aaa08a7cbc138dbb6a12b3aa67e89ab1530a0fa5aaf

SHA512
c19a2013896b63003156eba1af20e1b127d7d985b1cf255937af9139c6c5e9f38471026f36de39e2a15ea374c54ca74a704d84a7736c6c8bd7a53c6d4fa1c85d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
8356f4f35950f9daf32a54f184388dfd

SHA1
9ae1e88909053b63b67e79f67a7bb709e56e425e

SHA256
dc0b70dc981f3783cb73f96a3131792e213f180a8eff78b6879f1eb77e9f3b58

SHA512
750f6d7e016d34c954409b26e95432fa930090146706ddf7da44f1f7c36cd5683b64b1fe2bbfd0c2869dfb16b75e64efa3f22cca6b3b0b9be111f438acc4aaea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6d427cfcffa1345283a4072ca3b10a2e

SHA1
2c02599b35ab7710a025da0d15fb853f20f0e772

SHA256
aa33695d350a1efa3734d9563edbffa60e5a519eefe8e3e6b9b9d2738a2eac69

SHA512
a902ed2a406e7937998964435260256a6f0f9535a561fcffc891e67b7bd6b507d7096b0a5e179df4eb736637247a1615f9e2236fda1db0645e0148a495e26795

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
59f6eeb190a9c97c8b849fa32e4d11d8

SHA1
ccab9db54523061438e1303adcaa52db7d208209

SHA256
a32dba881ba13edffb31eb2ad1fa70024a862b3b8ef060ab2c05b3e0724ec4a8

SHA512
5f55b4dba97297192721b5c3f9441132fd74bc25b780b561f51f001493cc09e0e8ce8d3aaf70a1f96f0af5bf3a57fd6265b876d20dcc6095ada0fc70d4b12331

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d6ba0228e9385c25e4e8e080ae314fb9

SHA1
0029239a6d7c2cd405b833f92229c1e01c6b9d4f

SHA256
daeda1465c39abf9b4088d5edf7725db246451118b00896f09cb11892b312cd7

SHA512
d8b6488b9ef817029b1e0bab745e78d4aa244b7b79283954041bf7de434d8f8addf6388b20199c3d955a88f5cc1399cf23601e65b4397d880b15bc7a6c8bc598

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
982a35538512597b1f048465a03164cb

SHA1
80a0a9cebdd597473626a09795d1888e3af9a167

SHA256
66e06e30554673f78fda32893c6a1ba3bf433b276c4965b19a2cd374eba09205

SHA512
01934e4b53b420e9c5694016fe8725250d791129565be35f306d4b6ae5b3b6961c97dd44d3df0eb0754096c4e36c12a4ca9760ad961ddb515c719f0ac8252039

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
0fd5da4e414d0a90fa3b7a8a38a71069

SHA1
443487ba75868b5127f072199e36c51a793a6b00

SHA256
5ef11df9da2b718f70b3b445ae97131be545daea5a7369a007a261aa93701416

SHA512
1ccaf9c0ab2be667713c052e0a03888204459b0542328968ffb332c360de7989520657ff7684915b1846ae28741999e873707b2d5a0df78be466e4825c609078

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
97KB

MD5
a47242a2b271541122491dce257f38a6

SHA1
138310629a95523f18d16981411ac96c79bfe944

SHA256
6541ebe83e07123604d0622a6dd62d3f1ef92052888e7ca30d9e0f4cd2a1e8e9

SHA512
b4a6ce603b500b0218580f571c2ef351a4085edc37b4b0d6a00e981d983518846034829623bd35e35ebaf738008e651e9d4e9563daec15df07d0c04c2ffba934

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58fdd3.TMP

Filesize
95KB

MD5
1ddfd114af4ea6c0f5cf4a927ed24bcb

SHA1
949b3961620c09268c5c8725ffee464a2110c498

SHA256
b8267bf10c2441ec19bc70c5af873940d836ca1c5749e6560897b279adacb6ed

SHA512
eab49b8a51aff60b067943e7e39073b973407fb2aae68230605b9ac8411493faabdfe4ee48d004d05fd1032ab649a7ed6e82e08bd4c1aea59b9d2b44bc00d2ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
4555b52e7a1a08797364e282bb5d2378

SHA1
8cd7cff1731fd1fc47ae0480e80a42286ee45fd5

SHA256
8fcc862aa4229de4756d7eb396d082c9b7228b10c32021f153132851e9f5f730

SHA512
4cc22c1a13a4859c96c003fd0ba93e3a7ba72cab862760638472a8fe8e7b03993d6f0a86af2129c60427dc7369dfa0228a1e9cd63a1688fca7c37cd4437b946e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit