hxxps://steamcommunivy[.]com/gift/126340239536

Analysis

max time kernel
296s
max time network
274s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
05-04-2024 20:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://steamcommunivy.com/gift/126340239536

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133568226991710583"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

2544 chrome.exe
2544 chrome.exe
4392 chrome.exe
4392 chrome.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

Processes:

chrome.exe

pid process

2544 chrome.exe
2544 chrome.exe
2544 chrome.exe
2544 chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe
Token: SeShutdownPrivilege	2544	chrome.exe
Token: SeCreatePagefilePrivilege	2544	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

Processes:

chrome.exe

pid	process
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

chrome.exe

pid	process
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe
2544	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 2544 wrote to memory of 2940	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2940	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2416	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 168	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 168	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe
PID 2544 wrote to memory of 2728	2544	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://steamcommunivy.com/gift/126340239536
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffe7cc49758,0x7ffe7cc49768,0x7ffe7cc49778
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:2
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2056 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2844 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2864 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4576 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4500 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=964 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4952 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5028 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4396 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4888 --field-trial-handle=1820,i,8097341574776793262,8637545241911515964,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4392

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
5e630f1e9ac7543f676276496d822852

SHA1
f54f18c6fdd9b4946d7dfd06d4553ed8f1163f2f

SHA256
a4105824f3f44938ced9074215907a3d8be3dfc9e6b0e14c98fd1a42726f7f02

SHA512
814cd60b0ffbad41b18d616dee146dfb6850fdc641fc377b9c7eb655e5c55bc8ed86f9f2e3a014b19bef7326b2d7c04fa3c6831c9c100af74feb9ba036634456

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
1a99e879e7bee12626cf8d47d6284938

SHA1
5f07e67650e90e768881fa779254a24c621b1018

SHA256
6d6beb8e3ea44bdd07a31e89794cf193ef1a208f39159b41901bdb4c5b7dfc25

SHA512
325353ccac6028ea3dbe6c89edb110dd351e02123e48a0ae0770b90fee6af8545201874d5517d4392073cfb6addca1fada304a6cb80d7af91f6674ab19666370

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
7dc31c26b50f7818a9c0274e67bce736

SHA1
47cab1edf741482f3f831a31e42de1821d22b7cb

SHA256
ba64e8e2c890deaeead36f8abf24bc487f9aa91d49d6d2addc768b250de82a39

SHA512
11070c01ab5f6b64919434d3a861bd1bf44be2a131e799e4f822ca2b4ff0488c19b419a5aa7c553fc52440a925680b83713169a73a13cbc80ea81dcb88c0eea0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
278434048adab42a37f47068e4f25aa1

SHA1
810d55f98ff489fe886c8877a0e3601e20bb34cf

SHA256
774bc53451d028032e088c393a90b7cf86fc2ad8b7efbfa7adf7c007de365e67

SHA512
f136d03327e83346e60a3f22ea3273b3d39d587c3a5001e660cc3f734bd4dab33eab2b2632c77a31bf514f935520cff6adfd432ed2d4190bf539715494c67319

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
b6f6ce4963cc6d2bb94bb23301351d96

SHA1
9f153c8213b84477c7eb2b5702942c1b3c69d30d

SHA256
199bf9f77fdf91f888cb54a64302126c9de8e09cff8c11b62d431e822148c2db

SHA512
3f37a52cfc1320fc8e5c2c0040c85a454fa2a32a1164cdaba3fb8670d74aaa24c40cbebd75291d6dd9c954902f5b25c3044f87424b8c4501f0ed2e5375126627

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
157133fb9c90e407c436c117c7f59d1c

SHA1
10f3e2e20119fe84009e144f8d3a56384e177992

SHA256
77740413a7efb1811f5e3471c001e88360d5e9aec371cdd0c9929e2bde2d961a

SHA512
12497a796bffbb6282d50512e4093ca630806c9b7095362f15c65741b8deaa8d5b6b0ab7bd7ccdfbb63db0bb70c595ba86e041563b6141de25b785b325b293df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0eb042ba8ecd97d4b4fa26064b0a5365

SHA1
67be35d876f81f813c150dc1b2d0ac456cc183c8

SHA256
8efed17d870068a6e220635e3c3ba8da91245cc86853f30a6e09baeab95688a2

SHA512
ea3176a38501389a0226784a0de7292d04be9c2b822b7cef12945a191cee18d85fa25db50e1a0d7c45d2d324c0b646867fafd5e70ef856f32d79499cb696e866

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
8cc5e5b99ddc1494d69a2f947e6b0cd0

SHA1
e85e597491e58d536e8c1c5e5a2092fddce800bb

SHA256
feeb52cf132214e94ad5363cb2289a103c70247280f317da4187409be3c6faa4

SHA512
733bd3155a52e06cc7217e8354362648010a3e5566121ad54afd1828897db8a54048de7b12c13cfa7387d0764cf46e6da1b429bffce05def8ed7b200de652f9e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
1c82c864913639ff040c01e4a7c0d267

SHA1
58cecbf40a193b05c06fbed41856e1cbc91439b4

SHA256
a651bcd8e77dadce2ecb738d621fef329807cc1a2f7c80deb145a1f3aa7a0574

SHA512
36c219244546e9ae6e6d8e2cc36d174c9193ad0c6bc69bd3e8db82166e8f3871ca647b8bff2eacec649dc4c86f3f4ab05d597f2df44c2a8d19c7e584785d5a5b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
136KB

MD5
c0bcc864b599fe36f7eb5193ec0d6b58

SHA1
1a21993a7425ec5f900e7c889781f206847dc113

SHA256
1b5e082d4304c3588638e42ed3620a8e37e6d1c6b988cf30ee71fba168cb095e

SHA512
33f0e4641c5eb55224731cf42770550dffb684f9331ce04a4bc634607aa4bc68c6be578e5e21a0ce77d4332cbe1ea2063edb0602358ba0469c4e44d9c87166eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
136KB

MD5
ef988f6e02745708367a9516986ecb08

SHA1
1fed0514cbfcbc0ae8b54c30ce09be0fc79005f6

SHA256
212e1f268b41e6db9af79e418439274d1affd42cfef6c76997048a7687f9758a

SHA512
da8ce0522c41ec6cd699ad5b26897c77155068f60e836ba0d189e76c09ebbefd974926d86fd560000efcde82666f4ce000dbaf7de55ef2abe5a8c6d71e758709

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
\??\pipe\crashpad_2544_WIBKAXUQUUVDZAPE

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit