Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1617s
  • max time network
    1586s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    28/02/2024, 17:17

General

  • Target

    https://www.dropbox.com/scl/fi/inx57c8w4kdkv8spy9y0d/CeleryRekease.zip?dl=0&rlkey=snnm3dovjeie7y1s7605e69x7

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dropbox.com/scl/fi/inx57c8w4kdkv8spy9y0d/CeleryRekease.zip?dl=0&rlkey=snnm3dovjeie7y1s7605e69x7
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4204
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff948bd9758,0x7ff948bd9768,0x7ff948bd9778
      2⤵
        PID:5016
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1780 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
        2⤵
          PID:2528
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2108 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
          2⤵
            PID:788
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2864 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:1
            2⤵
              PID:3288
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2872 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:1
              2⤵
                PID:4640
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1544 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:2
                2⤵
                  PID:3292
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4760 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
                  2⤵
                    PID:976
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4748 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
                    2⤵
                      PID:1076
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5332 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
                      2⤵
                        PID:4072
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4408 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:8
                        2⤵
                          PID:4288
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1792 --field-trial-handle=1840,i,1946461038931661318,14288144261807803539,131072 /prefetch:2
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1556
                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                        1⤵
                          PID:3824

                        Network

                        MITRE ATT&CK Enterprise v15

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                          Filesize

                          2KB

                          MD5

                          8b573f012554083a1df6d83c77fa60a3

                          SHA1

                          4621fe465630db7cb23018daaefca5d2fb1e9e20

                          SHA256

                          6da48c7fd25125d5621e8ebd9e4728ef870d91cbae4865f78bc8c936bebb36b3

                          SHA512

                          5a95cadab6caf381a5e9a0db5b5d0cf3ab654d262465302919debc300921f2c0d9dc2ed72bcc8a1dd836767cfa2f7dce067f1e5fff8152c06ec76a90f1f57a4b

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT

                          Filesize

                          16B

                          MD5

                          46295cac801e5d4857d09837238a6394

                          SHA1

                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                          SHA256

                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                          SHA512

                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000001

                          Filesize

                          41B

                          MD5

                          5af87dfd673ba2115e2fcf5cfdb727ab

                          SHA1

                          d5b5bbf396dc291274584ef71f444f420b6056f1

                          SHA256

                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                          SHA512

                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                          Filesize

                          1KB

                          MD5

                          6f36126d7cabd22c0c277c1c50c3f7cd

                          SHA1

                          d8374acffa88c505fc92461a03b3fe210dc1c5ec

                          SHA256

                          ed252a98410460b784df6746f2c5e1b329be7dfae099bfbd8b8ac68b02ecfede

                          SHA512

                          87010c6eec32a8f1f9129eee4c58157f6c10b76af7419cc7846b770dce2bf8cc226b444b44195bb1acf2a50909350aa63e39b7f0360ac06d6934fa349ca77bc2

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                          Filesize

                          1KB

                          MD5

                          f2954587b2823833395c07e475c30315

                          SHA1

                          617421c295e052b59260d3d8e05c726a87017df5

                          SHA256

                          583e7a7bc55360a07f0f6c014160a3c63469514c6fde4bb8f32533063a4cdcaa

                          SHA512

                          a76df1061ea469164a4bf8828b9a35ec83e2951ce899c778346285b897900404ebe694ce3a14cee0f92e191848f0b3a0d75f3711a45b075cf3bd4a8b497d286c

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                          Filesize

                          1KB

                          MD5

                          8ca8acdc0cc0718b157a85f591eeefe1

                          SHA1

                          e03738affdcffad9934b176e4153965d734592fd

                          SHA256

                          3fbb0195fc29bf5d70c616c3573fec9b55e282a9dc6eb4996fed4f92b42feb3e

                          SHA512

                          0996f06061254740da58e0c355d669cbd495250c7c5d471252a50375ddbb4309963a286c63acb201116a6a1202daf4f4bc3f61c3e167ccb2b5d1adf68bbde06c

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          cb71381b289954125ea5c2f252ec7c7d

                          SHA1

                          f1fd68baee35badfe83ebbac29caf86c6981da88

                          SHA256

                          f52d3ea3fe8a6d053edb9cbf47bcb91dd209c8d6ce8321c1c1f3cc16c8ceab4f

                          SHA512

                          0e4259f598e972bf29b0588f9b6ae6eb75e7517d3053bd1b8096da0a0df67c06381b655aac7cc910a715c25adb0b5216b3c19fa460d74892376fdd5110603ca6

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          618098370de3fe74388fb06cefc713fc

                          SHA1

                          8a6e64cf3ee879963b72d10edfceef152913f234

                          SHA256

                          e8736ace28b36d4e23acd43d8ccb901ba4e676fd34cb53f92720e33236161d4a

                          SHA512

                          6c4d842289f4a87847ab4207d192d1561823d0f1d52a3d688de70639f771cb9adf62abb18c76002621499b8cebcd4b117781b7df213c37acd253162ea86e1bc1

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          a37f75121cb1fa23bf6da7a4066b110a

                          SHA1

                          75fbc3bc2b0408eed13c521af18bb24e06926750

                          SHA256

                          93f4f845ac352d805e89f64cb8e9edf799e83d189488e9ec1f2121df296f4a1d

                          SHA512

                          b1324b750e9521e166ca1c463ed7a86782aecda0b9534c195098e3d4ced2d0d8e89ae4c864e2432dd4ca09ed684edae6012a599f18720f91a6842c3524301457

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          2d22f4c95a8dfc48f6ab057a33f23d5e

                          SHA1

                          f3ba0b6a438754378b5bcc3aca49ad9c94c7c22a

                          SHA256

                          cabd03cf6aa473c64dadbbc630d6c8c3e06f6a6b4dc29ac8b10be542098e2f11

                          SHA512

                          d2834a0de969d4c6f5d041826fbd5f49c686708a38b49baab5955ad06572ae420ab106363d2991b43e8ebc999c29974540bcae1c1974cd37496666454d46b665

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          34d7d04039a13f28e1496e9163fcbb62

                          SHA1

                          8a6489112a5457eb07bdfde930133ce7db3994ee

                          SHA256

                          e621d7d18a1c0d35b2b46f6a1e703d3b48b25744ff16716dd3092d98a03a80b1

                          SHA512

                          0ec661e530ab69801b88d765f67c4b3ff794646eb7906da0206945006ce6fa2e8760ce4e591a8df817a216cede3e0426721caafbe475f00f5a1b2f4af0d9ba6a

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          edc520c9ce517655b9c863cc53e5d3ca

                          SHA1

                          1efcaecad800d5deeb1dae121f85ec25be6b9f60

                          SHA256

                          9916bebc82044452c37c8cdd8350d0a686bb09d79dc4aabb24113eaafa94a610

                          SHA512

                          e24600408163ec51dfff884fafadedddf46710aff64ca9b92bf558e14980ef5621e1f69df317ff604f82e15efe6cc80343d3e4eeda3007b7f7e15fde6d6aed45

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          d0a4b88276b4bcdef28f44a26cee0d84

                          SHA1

                          15ddf53d67f422474db47eb4c378a37277a54640

                          SHA256

                          3dd5a222986ead22adaa3d3633987b5db544146660bcc927d3f6f05dc9038f1b

                          SHA512

                          b78fbde11d526c605993c76b565d44b7843422b031008f2a1415962382b842b39d7e8f02b2d43b9517f186d7f1c0efcd002fff327d91106952534b64a0381fcd

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          9cb54ea26cc57f9b7930d77cf4f69ae3

                          SHA1

                          7fcd79a65340952b812977713fde12849c5cf0e6

                          SHA256

                          7efc50ad25e362f1c50bc6ff8c4dedb16756c2c0bad6b0c58705d5aab79395c8

                          SHA512

                          1442936c4e0cacfd784f3ae47b8064f85cbbc49fa40ccc42418fb121756830da21ccb667ef14cce5a44c8f97b27a30b099dfa5c9f60e8b87ac01731a58ce6457

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          3fc08088a6cc85099336235ca69af2b0

                          SHA1

                          d25054aecf427e8c5a936ceabd484443cab3025f

                          SHA256

                          4fdbfddd6743784368ce73bc9b9b7b58af0d3dda5be8ea973fb6d57c7059f854

                          SHA512

                          e648cbf084628f2e050cd751ba4b842e5a441d9f96bd1649a684566724583fac40d057aa3f370b400d8c06512d84bfbe82ca7ef6146ed50135ecd8e92674d9e4

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          40ac4023669cda684b7e771c0725c4c1

                          SHA1

                          60da597fc71952f04f2bcfec298d052555aaf5e4

                          SHA256

                          8e84f8b14900f74175fc9fbe7986b5c8d683fd0e374d3b9d41bdd4675036e53b

                          SHA512

                          7cbf2504e0b93adba974d06260f418108119eb05248d79f963b7d50612297e3e2a0a4a1002738dd5cdcc87547d493d0754684b22cd492fc1f47d2bf1cc481bc3

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          34f3683ab9d8b15ea4f14eb8efea4d30

                          SHA1

                          403ccb0e25daaa0ec463922d46738d6369fc6582

                          SHA256

                          54db64640417e3b153372b1c6c34f5c8e6693158201223f32f4ca4ddfbe1eadd

                          SHA512

                          231ca675720a1b9f0e67768826adbc89f87d9ef1ff315d40680b7d085fed91285790793d9367e229d80c93d18990d53199f1e36eebffdca806c928a685e5c98e

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          865B

                          MD5

                          cf61b07ab79af0039015edf15c315283

                          SHA1

                          64151595417950fa0ea025086e87eb1155215cc2

                          SHA256

                          07f130d61f4b8c2ebf273dd3882b8c2783206c96fcd52fd4624ce892fc31f6d0

                          SHA512

                          ecc261cfc883f55c1f568c5bac9add1f729552af908b6439321cb5da6030e06da7d24d42742ab077bfd664b0b5c7e1ecaa33b7393e9244580e42c92c4d9465e5

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          b6a009e335ca56ab8b251d0503d03d33

                          SHA1

                          5fa09d7ff9b6571627ab53a7363dbf9529683d1a

                          SHA256

                          d518eaa7b01a2727c6683060fa3f20cc0c5c62eb867e7eed579c6a26c7c90e42

                          SHA512

                          7851411bb461bf1d9a638f4aef2b766b438b930ce56935f710de058466ea3ba89713ec4ecfd709fac9ac462e89820fa5eeb85934d2ea6a5b0983c22d37656603

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          9b5b196d597a04a93bd2299ff6c6e1f3

                          SHA1

                          1ebe95536341f5dbf0c3fc271ae858af74ce0882

                          SHA256

                          9434d114b2929cf971c09a02c83ba301e739b439d9fb2f291454097d2b477177

                          SHA512

                          c66cb8bee39d3ccb2a60da3611d474348c27960d357056c919fa3693d508d9f62131c1e1b4dbbf6e6c9f18244cbcb39c47b832917b63284dd6bd2b31b3ff7e7d

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          b4a7980077c6f452d84d8c4fe447278b

                          SHA1

                          863dc1d2fe686d930c0035dbcd87ee2e68c7d524

                          SHA256

                          8632bb1c39091cf6073b27c8ad00d3ec56ffd19f9f3e900e6d8a3fe247cf9004

                          SHA512

                          4123704c001bbfb4939e75b6c178934a60c652a21f253321c3805807a339bd24e77631e59241a3ef0b155e8da0021bc3fa0efe9b9b3673ada2ba1de1329609d4

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          ad176dc9ff660a624d215e7299cc3c53

                          SHA1

                          286dbacac0c0ee1cf644c267c7a7243f4d6fb260

                          SHA256

                          1bb76602ea98f918ef20ed1d547680c4d6566b642622438744e637ed78600077

                          SHA512

                          727fbf18a86e3599d2d17902b0f60d3873b13198fb5cc2e0c5405ae3e7656cc674d6ce4f5a83e201bcf64ff01c8dcee76601b7ee453ab26d8165fe459b0f5128

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          867B

                          MD5

                          76bf81b4a6b5f8ea81168e9d4c0141f6

                          SHA1

                          29dbbfc50d9a1ab03d4e7155e2968c75e3b8a09a

                          SHA256

                          1f46ebd88b633b962662b2cf76ad8a778a7ca0c0fc13fc44ce815d8fd6f4e771

                          SHA512

                          b370fb997956b7f7ca67eb9f36c6fab2d915e1faf351bc69b4780904808df756f7849f24a635e8d6d2a9709265ab2ca8715659b063757a2c7985d983fc1a7dd9

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          6KB

                          MD5

                          b32d0c94e9c680a73bb1202412afb268

                          SHA1

                          0bff003b4740aa11e1889a88d5d6f2e24b58da67

                          SHA256

                          138a784a2e0def021d65247429025b40228a017623c75bcbbc4333bee6f8e4d5

                          SHA512

                          4b95e076e217792b53647d0c4202c741a31ec0d119b6aa9cc5a1eb66979440b3a0d86162a25eeb6e8ad32ddc46f138b4b5c2a8110aa47a864fe648d575394e71

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          5KB

                          MD5

                          e61d9479d8fa99ad2c46c14ec43b10f4

                          SHA1

                          e0672e81e138102944e3a7b283b01e713a4b1ced

                          SHA256

                          ae3eb7f4d6d7243c277b1f44d53ed682774ca3af56f67321e529bf1acc818a99

                          SHA512

                          12d17ebcdf275b66d69d7c4718c310a61899eac82670da716fa3700f019cf9813962cb72f8cd7f7b046c4150d3712512d25d1afda526057a6ff6b707e1d07e87

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          5KB

                          MD5

                          3aa2777add0afbd4e61bb2d3a94c5f49

                          SHA1

                          74fbd20e2528b23742ec66249568c8268bb37144

                          SHA256

                          6a36173e9acfbf7e98b4ef1b2f7aad5d84eaf79f72c4a8e6879c085fbd122960

                          SHA512

                          35d7b52822d9ce049ccd442b1fedf56517273af0fadc3eabe58762c24207c420ad21f6c14fc0bb442ef7b47723968e6d5f818d68abff7680f092075e1b692d2d

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                          Filesize

                          130KB

                          MD5

                          e24e65613e831aa0413a28610388fe9a

                          SHA1

                          f3439898973dc1f67dacaa84b8236028c68a8507

                          SHA256

                          9e7bd08798b0bc9c79c3fa4d434cbafabb0c2b366794b96150b5ee2475d4199e

                          SHA512

                          cabdb20a6060986460f48e5029668b715fa2be96369978c70f3cdd993e516193515180c7b6081386ae809b49e4c3a4e91eb4cf171b126978c88f14f58c63d702

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                          Filesize

                          2B

                          MD5

                          99914b932bd37a50b983c5e7c90ae93b

                          SHA1

                          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                          SHA256

                          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                          SHA512

                          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd