81fbdbaf4a7ed22ef0829ee101a808a916e023f74b370a108869770037c61ea3

Resubmissions

22-02-2024 14:33

240222-rw92gabe84 10

22-02-2024 14:32

240222-rv9pbabe57 1

Analysis

max time kernel
86s
max time network
68s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
22-02-2024 14:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

downloadf-5984vghm1-rar.html
Size

17KB
MD5

d6fa5fb91e78e7e43a66729cf87665ff
SHA1

ea3765b6c84bddeb8a006463621e699fd413097f
SHA256

81fbdbaf4a7ed22ef0829ee101a808a916e023f74b370a108869770037c61ea3
SHA512

4b9d0e95643770f04e51cdeca4af17b5e6bd6870c406772a7e2336634ba1073db0d269f90c6f204f9845272be55d2a9f0d330ff33915ce12577835ad8d10b99a
SSDEEP

384:BfRIjUDGO2G9kLL9jl+dVchxMhZCUtiPziMKxv0uldCjw/vZWrFV:BfRIjUDGO2G9kLL9jl+dVc2cLKxXdCgU

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133530859672382693"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4212	chrome.exe
4212	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe
Token: SeShutdownPrivilege	4212	chrome.exe
Token: SeCreatePagefilePrivilege	4212	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe
4212	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4212 wrote to memory of 1548	4212	chrome.exe	19
PID 4212 wrote to memory of 1548	4212	chrome.exe	19
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 4640	4212	chrome.exe	88
PID 4212 wrote to memory of 2440	4212	chrome.exe	87
PID 4212 wrote to memory of 2440	4212	chrome.exe	87
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86
PID 4212 wrote to memory of 2804	4212	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\downloadf-5984vghm1-rar.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd0cf49758,0x7ffd0cf49768,0x7ffd0cf49778
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2896 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2904 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2172 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:8
  2⤵
  PID:2804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1552 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:2
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4732 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4952 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5264 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4632 --field-trial-handle=1820,i,10849226278219345437,14208060218468482396,131072 /prefetch:8
  2⤵
  PID:3788

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:584

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd0cf49758,0x7ffd0cf49768,0x7ffd0cf49778
  2⤵
  PID:3316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
0b7c0cd12f869468a1823c6a027bcf04

SHA1
8af8ac6c0831736ac82c5f16aea4e07de8443267

SHA256
c62f02122f173dd57358058c5a74cc91785b2807049146306063773b72ba12b5

SHA512
953467e3477f8289f86829ae4a12a78a5bcacae93181ca9db53f44e75f6d6a0bf74e919f17cf2f5e75f76f6a4a81be28ea6b3c8191e4c26aad852d50095da0c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\66043710-33e0-46f9-869d-9c6a31f356c4.tmp

Filesize
538B

MD5
ba6475abdfd4833f87274294f262d830

SHA1
098e39d9cbe14cec3961445888d554220af380f1

SHA256
e8d441ca8ccfd24a0f92fd4848339c0ebcf06082dc85adefb58d88b2eaecc4db

SHA512
816a8ad271b044d1ecc471afa6f1ab68ac0f2593a5e4c91f09b65cb115e29c1f1cb9d3414865626074a6460ae017e6ce36cd9a1438a6f656107ab665ea9a105c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
fd5ba7876dc04aea225462080981ea72

SHA1
a6056d5929bbed57051b4dac0d078e397ed0255d

SHA256
f7b29577fadb71b9ec6d62eee12075e8b90cd902a5c44adf4638f4f7010037b8

SHA512
4757beef204e0f6e7a2274c5a8a7795059064247aa10887b21f5cd90e645b8f9da81e83412c0917e3edfb785a9f3a5eb12d155c328a4e81258d427649c831428

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
3be169d52df4395310f2ed9e5d82f9b7

SHA1
913eee72691ee3da1421fd97ac9d5884cc44aba8

SHA256
f74cc09d22c53d9f3bef3b82f8b8bc0440e11847f316720b684ab610681295be

SHA512
c2abff79e861ea260961ce1f18c080e92f80dc36733c312b8106c53eeea2ee8d00a322dcb88a5982559a2620baf9a3cead17e15886bad0bed2deb843da0ba5df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
4b5b377062e55680511a889fa2d131b1

SHA1
00e585f542dc289d85dfd15e1d46c6173de30c4c

SHA256
e97129e1fa92e541f53958f4745cc3e27236caf610f989d5ab2e35bf928cc82a

SHA512
940f67732c26f3eca39d5458ac1c5b9a9328fe0f665601eba02e82ef75a11c25b6dce1a356dd8551902033a7d5d0852caf18d0e68869754e8ca2273ba5ec5f68

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d7c4101aa02d7281c0cd8ac025b782c7

SHA1
2db68c928f7978479858838dc3c00f2740c7f3d0

SHA256
05f7f78583234afd1bdebb9703b50b58115f78a23d80c17ea582bac35d65f3b6

SHA512
17542ee082d0f8d0542357a726170187240825ace16079b63cbfd40ed50f95100ab26705e890a8068bf742b48ebb7b1c274e2f7a068d26f6abbffddd3880f411

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b51cc7c016bdb527f8661387f902c2a2

SHA1
a60eba4ce289302091699b149254f2c27291300b

SHA256
e1aa3da13c774d227553ba5caf6736e31c48bc869b83a590ffc220cef4350d97

SHA512
18bc6c2c6f267f45f626e1f4b7e4c251482a58784603a9641506d8e72ee9ec1a194a2acfa976eedd0beca2ed2c1e219eb353ce708ca0cd9523ba096150ccb5db

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
1bd19a56781d194a7bc28259c5cf2305

SHA1
7dfe15d3e0084f2b1f621b0cd7782e4213eabf75

SHA256
687c0dfacc735518821adff74a8e42e1db9f1d3d36ae7961d2de0b31fd79aa5e

SHA512
d9303e9c3454774293e12399376e06f50f5fe4007414b3f476495f9781a355ffe557891706baee31fa99f7e6332977ba8e981a1c400e0a7edb3e691db6c6b06d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ec239b3b674f116a2f4ed73b54be8db1

SHA1
b862a2da498581adc85acdbee2cd94c82b81d811

SHA256
7440726baf9886086b537887067eb2f48ba685c5beffd464ccf61448e6aa66c9

SHA512
9648b713a80841caa27e2a13735400f56df691b891d3ecd4c1d5a71238dd9fe2ac4a2b276c2ed71a424e7ec325675e28e5bf2c5c39f3245f9bd77a7b097f23d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
130KB

MD5
11e3bf07441f6bcf95b1b7cec88e14fa

SHA1
3799fbdc8960eba04eb22a9abd9231fdee316e5c

SHA256
a8fc28cf559dca3f04a77dca238f75a975e1fe3f05defc55276385c716c0702a

SHA512
fa14d8edb12e147ae447ea76aab142db42b2d1169021772682ab4114585bfdf2a250c4d55d863f8b62e9958000e2d60777c3bd6471b0a47eec6df0c6f702b794

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
130KB

MD5
a36b3c2e2c772013178d66dccbbfe4f9

SHA1
6e82530f1d15c9d0dec37049cf896fc3d7a1026a

SHA256
b8d3a10d86523150edd7bf671f669deea4c1b56952c56962cc0ecc6d756586d4

SHA512
e043babfa8682e650551b7d37e56e776449c59900de8756be56b5092c76d50f010f0064b8c5aa23ddba1696f287f63015dc0e6a419bbdad10f2bc31d9b1b8e56

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
130KB

MD5
a7352624988252d31273fb93866ed008

SHA1
9c81aea02374ba3dbd152db3ed4c299a7a9bde3d

SHA256
18d0769047a37bdd9b21b99b26ec01b2f34050460de61c91a899516c7584aafd

SHA512
d3d36fd9faca05724ea3dc7b6917de02198eada15c8f726ea1b93e9ded7e6b5fdfa780a8f2b9edfd0480123215144e4f958ba0ed8cf037272d448fb13b34fe25

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit