74eec9a8cd76079e8c216fbf73cdff71b4afea7df3b64b94172d1c5e9f19fe91

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20/02/2024, 14:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Grupomaringa_9817993.html
Size

7KB
MD5

c93549b2e45de2cf87d54298bc980c82
SHA1

79cd63c9f944a4fa3ba604f3f2e1f124644983e4
SHA256

74eec9a8cd76079e8c216fbf73cdff71b4afea7df3b64b94172d1c5e9f19fe91
SHA512

3f19701a9a606b01a3b1aa30f522ae38bf7d7fb192411a294cb6151bd6b084f23baf8bf877b679c6abf7d1e1e918574ae07d088f114a4d5b15315289c304ca65
SSDEEP

192:o043n/vrokzA83PMH3WIAc8zOadnPCiUyIHIyS:Kn/v88NUH3X7a1Ph8U

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133529121649825557"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1092	chrome.exe
1092	chrome.exe
2544	chrome.exe
2544	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe
Token: SeShutdownPrivilege	1092	chrome.exe
Token: SeCreatePagefilePrivilege	1092	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe
1092	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1092 wrote to memory of 64	1092	chrome.exe	84
PID 1092 wrote to memory of 64	1092	chrome.exe	84
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 4028	1092	chrome.exe	86
PID 1092 wrote to memory of 2196	1092	chrome.exe	87
PID 1092 wrote to memory of 2196	1092	chrome.exe	87
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88
PID 1092 wrote to memory of 4148	1092	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Grupomaringa_9817993.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9a7d49758,0x7ff9a7d49768,0x7ff9a7d49778
  2⤵
  PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1784 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:2
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2208 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3016 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2992 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4516 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4732 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3132 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4972 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5572 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4936 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2652 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4008 --field-trial-handle=1888,i,9300731311308637522,1963233470656385592,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2544

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
6eb4d702deb17fc2754cca39c9cf302b

SHA1
551875098633131ebfb5c99bb54b581ea5daea15

SHA256
bd86df5f96228f592ebcc0fd9c2b4ddf06148b1c831d238a44795ae11977a6d2

SHA512
401d33af7b03064ff23b2ce79b02785bd73eebc169dfca1b4455394197e22edb80ac8350251f6abef6ae29f52ce6042db6a22b4ba2a4bca05526f5f59afd6bb1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
a82831e30ddcede7b9ed02152d200e67

SHA1
91ebc51c19c9a6059ae86be18fa882dd0a1625e2

SHA256
8e79223c3b40d68c8628f5ebde3753dc5f41a11b0dc6db170a39932103b9089d

SHA512
92760ee0cae1321851fd7fe50222cc9c5ffa1b8068c573a556d91c4d6a9097bbe2bb80764b32bc0a07ef3aeb6a4a92ee5ace823c13a8c09736fbb096d7c0f622

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
0aba8a80b6f93207ac77141e2ed3a768

SHA1
842ec3917002b844854adec73e8d3b4b79679303

SHA256
c271a33c67fcdb50c19c6dc4cd44be2c64804e322388e6411c79f94e80df76a2

SHA512
95e39885f550a6dc30d8691700358e59fa5f6339792219e8fa8fceb9cb591ffa136730a4721c76522f73225c6718e36bb4cf6d612065a9ffcab4708f2eb20646

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
535B

MD5
6a813dcd983e00eb1dcba848aa4f8c2b

SHA1
7e6f36dd10c4716d7074631aa73c59f0b2630ff7

SHA256
cfc9879bc84dfa3aaa97c0ff07d846814f816315ecb012a588c694d60c58b7cc

SHA512
863a5aa13bb8d4ae6fe5aa787e208de73b52f55e65be275a6a6bcf8264b4ae8356beb9b01fb49bb38bcac61f301ad52994a8e2f4a33d6f91b2e077ed5133d4d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
6401184cc152a40c9a8b9c9e70cf61fe

SHA1
14a89f44c607d2948f113b80962a092e1f7f9337

SHA256
139917b7b4e41f11bbeecac17611737ea8eb0b5f05049531772df676afa6cb52

SHA512
2e26d2bc4724f80a38b0aff151d1f6f2eca1a38b1a7fc791fc7fb057967decf9ad6b7cd56e6cb6801e3bbe4ebbb30c97c28d5a235fbb03255320659aa8756c3b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
befc4c3c5a273c000884f68af9f946f7

SHA1
e560b1552567bc7d418f0072647b869c80d672d3

SHA256
50391168e2c2a0aad508fe3354406cf4a26425ddcfe2a052df715d3519c0c97c

SHA512
20cc1cebd41a96c0317e6cdcddad93ed06ee1fdd58c49e375ce28a5a5fed001e16f880ca1f60c2a9f8836aafcc773dc20b2992b2e489cc2192e659d1444d31b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
b89089d6a35ca36f02fcd980d1073c22

SHA1
3ab3fdd58531c7efb120cd98f49d793f373d85d9

SHA256
8b4cd82670ddbbe655ac7e2f90d797e55fdd944e9b5cc8544a54a3624bb7bfb6

SHA512
821419cd277d42083015330fed39bddedfabdb387da2c0bd85bfc782f770e657092d59e4c30e8bad8f5c665769096fc134c4160c1464a3ad3abe13b02e0f768f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
5ce618880a3fa52860872c9392fbb016

SHA1
edff93bdf86a1c39f504237e74e069fd0066be67

SHA256
f6a566ae9b8b6b29801093c2a3cd961b0bc0accc459830f4d175fd744ad59429

SHA512
58928b17e8dda9518ba382376e748a6faab2c14ef54cfb1fb6d669adfa8d67059990d39925be41af580262d257ec2145ab9e9f18f1b485e2b13b1d6e7bfd7302

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
ddf2ed706fdf18f2044c3adf511fa413

SHA1
fe24ea2448838d16e7bb4be12ff1dda994aab750

SHA256
e4e185f076d0cf75763f021a4b52df20758d8683befd66f7fba86a5622fc0e5e

SHA512
fc274e665a9fed964ced0e1c993b9aea2e638f837613ac48b58837eb79d9b4f366abc2d45361cdff5fb0c3884771c6bba988274dbff04d1ea12d3c652a8648d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
34844d0f89024f08bf9853b24e8bf577

SHA1
0094e8512c87676efe964d97d4721f3ece5894e2

SHA256
52d856d162b9af2e3569c33b3a5ae11405242f6e884e0ced85f42e2f9de115f2

SHA512
1f955d634d39e6917f621c13192dcb65843c43f3e0d1c57d3b996ea6da5d2020e9855fdb74cfb92eec16cd619bfbdf0d46533fc59e2e3cab34bd8605502752ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit