5acf32a94b5ee05903a9ca0176789b6089a2be0521ff31b7cff34de39c28e4c5

Analysis

max time kernel
891s
max time network
1690s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-04-2024 18:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

watch.html
Size

891KB
MD5

6272169e339cd0e9f48b242550da1499
SHA1

0016a79a0be2d1b7ca87c67eafd59300a9648dff
SHA256

5acf32a94b5ee05903a9ca0176789b6089a2be0521ff31b7cff34de39c28e4c5
SHA512

029859d8f6ee4c411c8c35b028b63dbb6a2d1027721dfbe989403df3ea83adf428b7196df31b1b8de53fb0170a9c21c731085606dc08d436d77503414d7c8272
SSDEEP

12288:XrIpIJI0InIGIsIGIxI7Ii/uztwYlq6qn/1++aOh:X6mzCY0

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
2864	ipconfig.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe
Token: SeShutdownPrivilege	2660	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe
2660	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2600	2660	chrome.exe	28
PID 2660 wrote to memory of 2600	2660	chrome.exe	28
PID 2660 wrote to memory of 2600	2660	chrome.exe	28
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2704	2660	chrome.exe	30
PID 2660 wrote to memory of 2440	2660	chrome.exe	31
PID 2660 wrote to memory of 2440	2660	chrome.exe	31
PID 2660 wrote to memory of 2440	2660	chrome.exe	31
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32
PID 2660 wrote to memory of 2252	2660	chrome.exe	32

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\watch.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6ce9758,0x7fef6ce9768,0x7fef6ce9778
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1140 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:2
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1484 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1624 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2280 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2288 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1452 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:2
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3224 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4012 --field-trial-handle=1156,i,4011126488976264221,11082269423033163121,131072 /prefetch:8
  2⤵
  PID:908

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1084

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
PID:868
- C:\Windows\system32\ipconfig.exe
  ipconfig
  2⤵
  - Gathers network information
  PID:2864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\file__0.indexeddb.leveldb\CURRENT~RFf7699df.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
65827c7553a4e36f467e3de69579839c

SHA1
4ebbb368aa0dfe22464b717a6fbf071702ea415d

SHA256
a6f1bba0c9eba33e67ba802e917f4e25711dce5e3fd59f84b05bbe19d9c43bf4

SHA512
708424d1859675260a21092a268378586bd2397cef7abdc7035a7a70b298d0579ceacc751315328258684a45bc6e2cbef6f7ca17ff8cd228041e91410019d52a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
b3ecbd54e44bd5aca901a84e6d7b00ea

SHA1
b2bc0bd0259457177b036d5720328c45eb59d762

SHA256
9dc6cd169923817e960609bacf46bac2c7b8ffed35cefc789e15eed7c583ad85

SHA512
0049afcbebec74ab3c00cbd0a7e86efd569ff06c12142b1638a8810b684b0db3c95da4f4c71ddcb30ee1f1e02da8569f199487a70808710c4432c61e1e9d2989

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
843081fbb576b17243e8c6c62b16bbcb

SHA1
9bd5992d677e8619dc260b825249c4f66c42913c

SHA256
fc8b726f5851af36fccfb059e64a558fe35eeb6d42b91c2a013d56acfb6c3120

SHA512
0a9a88d4d337696ffb5a884bf477c949311430b3fdef9a5c0a8a2b009f9d956fe878763c78ea2219db039ee010ead19d042353a5e2d7a707481a29b76fd9aa05

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
0babee9a23e8e0bf78f57f4612406745

SHA1
6282f5d4ca9c7a172f24e584cf52961332f98aec

SHA256
69e0278c1ae31da0572c679c50b0bad62488922c86d2e1ed3f3fcf80055d5dcc

SHA512
875eac68dfd7901aa57844c428a94a35ee7631f5c015626e5dc1a160d2c02562f6989279fa960979b7fed5896e3e6c2ade705d2641c106cececd90dbe2350d9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
361B

MD5
0dd6b96f4b7bfa5a219c346a7dc93f66

SHA1
fac2259ddd57b82dd533cb87fb45b29da3d287f6

SHA256
658161c2745cd34f608b47a6cd5a2c5077198d54379df030312df32ac864f839

SHA512
92bb85bbe26b736c40fbf3ac89db5b30f964f777851e86c55f15750d6da3d0933ef96da5fa618ba72085fee3a662035e6b45e462aa5f57846fbccb68dd1a678b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
b49b72138b68d1e70c7664930d959b9e

SHA1
5a55901ccef0eab7eb9a6cf0213acebbd673e90d

SHA256
6bcff011c04bb9afa8d303a596425a1a3da8bbe1881d318480130df357e452b0

SHA512
749b50c525ce612377ba8cbaaca5b10978965759090e5d187c089b3b9da679217fa38a3b02260271a9cd31846881b3041896c38e648bf85bdb9fcbeac38c8dd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
9ff0485204c7473dcaabed8a01159069

SHA1
c97bec1a14ab57f36078a4a278c2ff13440bd04c

SHA256
d99a8fa354fb0ae2812b7de1fae576a7d205ad3bd567fd08f620028783916f65

SHA512
2598652339e003da1b8d9869ace3c72e5a499e83e4a1db89d28271f59f5eef02a4365a54ec5e147b99a565128ae65d31f85c34eb77ab51c56994440ddabefbcc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
ae0cfe69dc99a7f2a67a8041cb612de9

SHA1
b9b7fdef7e913942160a9f5572a76f0c3f1b6be2

SHA256
4488226c5ad2ec265a8f7cc4245aaf8f0640453432d9959e4967bbe732161116

SHA512
303a7a2345882195636bfcbb835b85fa15e60576cbf923f87c96bd0dcf7f938baaf21427151a5c177b06a90fd5890523e5226596e7f18bfcb684da2ecb241e0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
3856e9f92d44b3de03348ac386a322ea

SHA1
564b8e2cc5d64135142e3073f0ad24a8f125ceda

SHA256
460b53bb26c2327eb76f225cc41121e6d1bdc74b140b888f9ddbcaa6f2c956a5

SHA512
8c4e2550799c7001108905476e98df40177b96872db03b7f987e94ec26643cad328150e8d9f85e5d1b875cde633af98ba784650b81948430d64d4f5e06e9caa2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
80B

MD5
16127d6c578b0ee93c79e1f7807d7cdb

SHA1
fc4f849ec5fd969e17bc8df36b97ffee003c66b6

SHA256
2e23334c5c7c9c5fd4434af9df80734e05555d68e766d49d1b552b9e3e1a06d2

SHA512
4ca59995eba1d59a061f044f66411b21fde5a59e17d8bfe4518c13784ed9c6320aa8af443f45d63bcca8522c7157cc2c25929a10a3e5ef7a46b51b3b6ffe009c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
144B

MD5
46d0175339bc1c30f37b3d150d6e9ef1

SHA1
e8a1d3fb14d99eeaca70d6cf6b98bc14de6d290e

SHA256
e0c70c013eae74534d42bc0ac55837198537bf4357fc79d914f74b9c69bb8986

SHA512
bf64250966ff9ce5a6d719d3f554ce6050117db83795aec53c11de8b809d0ffefc778413e3bf025d829f14898d32055086e9d0874585d020294a4a3603639e0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit