hxxps://lnk[.]sk/nubt

Analysis

max time kernel
299s
max time network
273s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05-04-2024 02:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://lnk.sk/nubt

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133567586820963271"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4704	chrome.exe
4704	chrome.exe
1008	chrome.exe
1008	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe
Token: SeShutdownPrivilege	4704	chrome.exe
Token: SeCreatePagefilePrivilege	4704	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4704 wrote to memory of 4816	4704	chrome.exe	85
PID 4704 wrote to memory of 4816	4704	chrome.exe	85
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 1468	4704	chrome.exe	90
PID 4704 wrote to memory of 4996	4704	chrome.exe	91
PID 4704 wrote to memory of 4996	4704	chrome.exe	91
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92
PID 4704 wrote to memory of 2484	4704	chrome.exe	92

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://lnk.sk/nubt
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdf6ce9758,0x7ffdf6ce9768,0x7ffdf6ce9778
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1652 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:2
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2232 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2816 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2824 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4420 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4404 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4608 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3352 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3916 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3172 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3972 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4436 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=1648 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4060 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4856 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4596 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4908 --field-trial-handle=1880,i,867828609947914797,8076709236046363170,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1008

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
820B

MD5
9156ee1f24eddb996bfc6810d25a7029

SHA1
abad019daa627263b7c304147e5f5f4070431c9f

SHA256
7ba1a70d60f9d6737796f9a5a951c99274e8e80b93051d0d6eaa1a0728a80043

SHA512
646b889cdb7a2474a3f4d9367e29f29d256c824916c2a3456ce10c584c974568536e0c01f219ed24a713b1219879ac43272e7d2aa41f701f14940f931b442c0a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
9e9c06cc7f1edcf64b5353da6857e33a

SHA1
9c911805cde7a03e346e7b23e964843e68d2ef09

SHA256
3e827a8063234d0e35d51d03368a711d309f1e04c3ad2e245cad760dbd3806cd

SHA512
a9c1733cbe1aa01040447a1ea91840a881e98b694952efb85a44424f063e8c7b7ce2791c591e62e24ee87ff194f70b2e5d01c28ab1ac6a2e44f347962c8fe2b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
4bd6b7115b5524ad98bd03d78617580e

SHA1
6fc2d18893d46360e34807367dd67c0201a8452b

SHA256
cdd080fa6ced78bbbb09161c0e8bf1c72bdb5b6fd803a3e13825d6573220c1f4

SHA512
d4af3d2ea56214a492e8a38c7146e399069a0ccd182828ec2dff8605990065e09f4c2d4a3a6f817fe76750ef936ce4a22b6c1780f737be946a8ac23c9e00635c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
253KB

MD5
a77b59c80fbd0db0deee42bcf27c71ba

SHA1
f8217e3d5184e22b9158f93cc95db073deb73b52

SHA256
f1ac812c4d911ce3c980886225918b7a28ead24e1e1d5e42d75219532a1c6af0

SHA512
4e8e465df65adee23bd32628fdbace976861f6de03efbdfebab4123e80d32c9b8ca982e5ab667d7c5224a10f20aab0a639273bcb76745a849e8269e8f5086e6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
97KB

MD5
fe56a490e523941ab122f99f5c4aa6b2

SHA1
508a5ad572a51b10937ff41b3426eadb923eba21

SHA256
f1c025cf35e65d057d8102f0a10c0f3674a9906760fb49b3e33bfc45fb159304

SHA512
ea7739deb587cbe28b675815a439daf338e70217217ea3bde32257155a038d7d753d65c00a8098abcc8c51075904e87296f2a3fcd7607151a73cb7c3aa533c27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58d627.TMP

Filesize
95KB

MD5
d4f133c84db737b948a010d7d75fe725

SHA1
7d97d85e1709f2707f33f15ad79a01156ee4cbc7

SHA256
f48d7d2a24b381e8594e6e976bef507b23331b87a32daf6f3d4e440295131e11

SHA512
37994cdb72496cf360dd2524736be4f3031c1ee8eb03c1f4f44bccc68913e29ff76196efc9ce2b3fa85194bf8ec051b9b24630ac8f43ac85f847cf2827ffd627

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit