hxxp://minteqinternationalinc[.]us

Analysis

max time kernel
600s
max time network
602s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07/03/2024, 19:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://minteqinternationalinc.us

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133543130407432982"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2948	chrome.exe
2948	chrome.exe
2864	chrome.exe
2864	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe
Token: SeShutdownPrivilege	2948	chrome.exe
Token: SeCreatePagefilePrivilege	2948	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe
2948	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 2860	2948	chrome.exe	93
PID 2948 wrote to memory of 2860	2948	chrome.exe	93
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4484	2948	chrome.exe	96
PID 2948 wrote to memory of 4240	2948	chrome.exe	97
PID 2948 wrote to memory of 4240	2948	chrome.exe	97
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98
PID 2948 wrote to memory of 3848	2948	chrome.exe	98

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://minteqinternationalinc.us
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc3e139758,0x7ffc3e139768,0x7ffc3e139778
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:2
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2276 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2996 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3004 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4708 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4880 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3260 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2488 --field-trial-handle=1896,i,16021826579550860535,16902596964228627841,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2864

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3932 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
1⤵
PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1268 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
1⤵
PID:6116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
624B

MD5
58ccc22b7fb3013188e5444a5c696cd9

SHA1
b731b84cbb4b7916328132219fffa6699d339d9e

SHA256
b1a22935796ea597f539f6da8a314ab524f80cbbf2d6a3517c5b5455cf7f80fc

SHA512
1b468f7c8af2f5250c83baf7d71ddc18c76db4ea809e23dbafb7bcb57217231b76a26c717ab5cb196ae8e870b2fa37b3626e9d9f92e20cbf29211c9e5b199015

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
1a87df0932cb4cb2ba49bd863bd856f9

SHA1
2f9e33efbc84886465246ca9e11d4a1543c567dc

SHA256
68a53974483764c1548054f443a19b4fdc410b8f3cbbaf949f99296c0acb9fd9

SHA512
081bbd83aa0467b16452d550e4829fde0395dad66d9d0aada2f0865c0c7ae0db655a1ca13c09afee6bdf2deb169fa0dc657dc0d77e26322ba2c98c9944281d20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
5d498405d98826b48d888549a2ef9cb2

SHA1
37b4d8a4330464a21ede98c59d178106a030111f

SHA256
3e7a095556f076b13eb2a06302e16be3473738f1438e9b16ad69376e33625890

SHA512
8bae96babaa4f73b0a74f6aa6f2e2077fbea0cb48bdd0e1bc1961cf217761fb04deabe0fa74454eddb5011b6376962e8e356486a7b72a335a9b9ea5bfdac525c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
27ee7734e09e5e7b4c9918c602da5878

SHA1
0f2a7610b1f357b31b639be9dfee7ae1a6b43d21

SHA256
7304c313b1b8f2ad75500b25556928021ccb8dfddd420e5c0d1a86f1d79206ba

SHA512
31cbe8b8997b7b9f4fa8297f3f3400bf2a976393aad6fcabcc37cc72b5493af171b69949053e2768780170028f076fe5ff52d86924e07a8c7684a7f3d50e0627

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
537B

MD5
6068c8a04ec4372268e27372613238de

SHA1
da529ead275ede6f04ea6931489ff9418fe992cc

SHA256
3162256a844863dc4606d16ab030a9a810f972c4c7fdf41ca78fa4c6a6859edc

SHA512
65867dadbbcb2e3a258c0faddda86629e277db1367f9893b757d4f7263507e11d6db8eead914857a89544e6eee888983f7c5eb6c5a559f2368c761b503fcff6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
93067c899e170a0dd9398d995e1e36f1

SHA1
8556b0751495363e824eee876f88ce95914e33fe

SHA256
907c4c1a2e830f6050661a439d98973a7a223172175186a34f594a8c9e311e26

SHA512
ae50841de688f331efd0ae494fe0e1897a562bb984a96687d6d85878e0acaf54d80d3e88926acb2e3901887c5e707d7e2c278b268134b01021281d7279e5744c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
3dee81592ff26829fdce1f1ff49fe8d6

SHA1
9bfc8c87a2bc0f7dba7dd6ee4e4ce7f92aaa9e65

SHA256
df2c13f0b92a78583411319319a9dff461f3c092647bac0e698269de0b231d7d

SHA512
ecdeab4f498fcee5b33ee00cc3b29af154af201d55ceeecb3af834353bc0174cebdf8fad51883ed82c0e035724de49b8c5c16b207fd0d6daf86f9cfed0090eff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6368379c3b4f5c0ca109e4dcf8b873f6

SHA1
10a6331ae25c1e052b568c935471f6dcf20d6d33

SHA256
7a841f947b015ff0cdce4ec63675edb0975ee3df41170780cdae8bf1494eebaf

SHA512
157eda5d9da61bffca2271843020d78cc08b081405f4c52ea308f98568016d41fd0ac9e4dbaff24e6d2a978a2ac8ca686bc23b1bca07dc5cf188c59cdc02ab00

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
07314fb79988cf5fec5d5305b78af7f0

SHA1
b5670ea002c5c113388dd838b79bb0904cec7f45

SHA256
0c867f464af20287d8adf3ac0c654a80cd7f4001908b304cbf2fd495edfa3d69

SHA512
6db7ec09c5aae907b154e76d07aba51e2307909238787b4631d861c66ba10c95a25a78a94439b949996c1dc623bee4125ae8b1b637ee0078d68100ec86f4872a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
8a2fc238c7528df566376c42231c2eac

SHA1
5da067ae6410a18db94819470615be07530c950d

SHA256
e44f8bd4c9138dc358d5083122a68c60685537a61140d1007ae9d1e8e05157c5

SHA512
be219e283bea70cd074b2d887ee53364d96b86edb578b5cae5728637b643019950c14478118f08bc38aa639a01a8696262151d2cfd7f67901427d5b0a6966e2d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
458429759989affed8df74a40f00acc5

SHA1
7e2bd339b2defa8f6d7247021f675c8f033ab51e

SHA256
6385d054dbb1f46235e0882a4785386d65ceeba93eca58c00278a41246e33257

SHA512
649826caa3e07f0e992caa9f3b6b1cf6257bfb4ef6f5fd6f7cddc5e64647d857015935143e0bc8f12ff0a658f97bd524beb4b7dee64261add6dfb1369c4de1c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
93cde22e78ff6d42bc03ae5bb1760133

SHA1
c7aae2359ca8199c774e428dc8979a01d27adec7

SHA256
07545e38b75aa7796ccdc20649b71f04e44f4a17edcb3543a32d8395bcc713d1

SHA512
a7759fc2968e1414dcd3fbc4c02e68c8992735872da413d65aedd37bd9f931747c0ef5c83471be87fd5e8001505e9c24fa00de10cc4eb8a046244c23716398d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
f22fed685e32cf2f96a36e25d6ba97d2

SHA1
158952e13677d2530bd3338dfc49bb0bb96be3d3

SHA256
9ee83aed19148ed8de7a8665987ade305b031c1a1b923bb9a97a69dd4bf26a5c

SHA512
114272eb3226b0181bc83c6599bf7b7e1f6a72c9f36abae9cdd395e4d68e69e7f0c69a1c7721d62787fee34a12eba07aaa528b3349d8613b82a764352d47e703

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
9770dcf811cc2560ea1b74c1c923f866

SHA1
b7651e76d41c1a22bd51299f9359795d695a349c

SHA256
7e3eb557662a88aa589614b69a00a48177fd3fe938829c36f0b42e5aea046460

SHA512
a957ee86fc5100618e7fa7433ce6527fad8ec1a28f8fc69484221b1c37571c29692fb5fef2ddf63010f448bdc968a6f9963d218a1183513079302fa90b6f4e60

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit