hxxps://cya[.]nz/DpTCg

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
29/04/2024, 05:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://cya.nz/DpTCg

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133588439198911930"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeCreatePagefilePrivilege	2072	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2072 wrote to memory of 4140	2072	chrome.exe	83
PID 2072 wrote to memory of 4140	2072	chrome.exe	83
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4036	2072	chrome.exe	84
PID 2072 wrote to memory of 4028	2072	chrome.exe	85
PID 2072 wrote to memory of 4028	2072	chrome.exe	85
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86
PID 2072 wrote to memory of 1812	2072	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cya.nz/DpTCg
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffaf6b4cc40,0x7ffaf6b4cc4c,0x7ffaf6b4cc58
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2032,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1996,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2064 /prefetch:3
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2244,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2256 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3092,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3116,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4580,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4984,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3308,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4864,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=960,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3280,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4020,i,9964325356535209173,11718370961013892684,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:4684

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:2888

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
929f2d91f6256d5e6f3ccbd80ba058b2

SHA1
9ce8c63092400f948ad3c7c64353ef5ea8a362b3

SHA256
864f7a022e311eaece4293463fa3b117fc895180da02b88acffb14a6d8fe22b3

SHA512
e8485ba86f5537d1874b57de6eb1ce9f0a1108a9bbf5756b6382abce0ab2e57845e775e1ee9d21db4c2d63d9bffebed034391842a78c27a0ea5874f28f90af0c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b3360e8ef6ca703ed3b6af954a4ca047

SHA1
e238082cff0259fe84fe4031eadf762c5c9acc0c

SHA256
6d3123127ed6e35a19d2454374a352fbe1ce16843bbb373161a35bb3920ba1ad

SHA512
031eb847f07b6e69ab6d738b5eb9be31a2f17cef610982a7bec2ec2249e8d1246a0617093f6f920e37e7fb42c464d29051f24c9a662d4ffc259814774694cd56

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d3c7519df8415833fff11a752d047e85

SHA1
ebf991a21ab7079f492f1df50dc1f59f8aa1157c

SHA256
0a9c6b49cc43a546222730a744da6833b9e65ee031ae18f6c281b0832c852990

SHA512
bedb5ccd7e74d14784787ba1d1cee200e430c8655ab5f23dfd260284ded076005ce0c47c59acce3e47ed3a8faece689b985a9c95830e39000191583ede9c30de

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e92ef01f6337505f55bf93f334d6bcc3

SHA1
06f55d2f007a7c5d120032bc302f7d902b40805c

SHA256
f9e2fa7b4d6348c7d47b2f7b06cf4c4792e37d49814b283ed0342610f921fb50

SHA512
a06c49d9b7793c19fa1fd18f7bdfa702543b944ddd513340a6fa425fb0bfff090e63ad8b435a0ef418e95d27600e0fc2d397510b1b56ebbb996a07ada919303f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
de7b5d2ee351a7133d7a3066acc03de9

SHA1
3c429cfdedb9122e2bfff8d0cff719154b4ccd17

SHA256
b0ca7fbb9da8c52b4c2eec86bd0e676c708a5a67936cba6490a598be3129d70b

SHA512
1f0ed19162945f58f14062eb4408aaf0824b57f8862dcb317e00ac4a76f07380e0904892b010d8277397d7a15773216226d647512beb0d021bb79862aa14d2be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
891f2ccb7e7b4be624756e1049b2d093

SHA1
a5e2f032c045513e9691d1d653159fb3307c7cbd

SHA256
7243207ecbd2d9cf5e6a94b0a201a9da6c195e218e598ef47312e77309dd5907

SHA512
33856c9c1e5b5dac4a57f343397867d18fff3581b10d6fd7daaa4c7f01c94adf402d3a78abb93a8d606b1c0d9bb50e184aa77c5c215dc456f26daf216f98356a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
483e1b6c3b681b562083fc52f64f6cee

SHA1
b101ebb9f5c21a49bd5a22c7fcb1985c3f737028

SHA256
2939caa900f6ea9f1df32c3d27bab963a74611ae874ed2779cd8972e623dd145

SHA512
b518bdffda07b62a04e6e425acb734b82c41249d8f4b7db858d4ebcb0201f078709c5d0762c35250026506ec8d6caf82c3c33616c1f1fe515bc1aa6c18ac458d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
3569d69f63192aa100ec0356c203b773

SHA1
565205ecfcc1d08b1edc5099e2ddb5482b772be8

SHA256
d404b3eccb0e077d5d39712aec3f94b2eb96077695d63ad69880238b95af0894

SHA512
059d109506275409e8ccc7990e95335dae4057aaae577b204748c4c7cc78692e97557a48291afda12743fa22b029ede14ac52c1327bb5cc484d9639330763c96

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
40645a9456ab28c0c0c7ff088a71f90f

SHA1
a4d0383ab8e558b7d457f589a9d2976dd15c1ae2

SHA256
b3e386e9884ecb39c3045a9996e9abb6a048321d87c728ec4c47af61621794ab

SHA512
76cc7b5732da325973e0ac792376d34febe93c3db8287d571ffef939b277e25a0fd477980be9dd55360ca62e0124483404f3e257e2c0d694af6ddd6076f259cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f06c611673651a18a514094a4bdc4233

SHA1
8969864e3e49a88320fc1b64e935e5164b6c9007

SHA256
8b1a01e2f96c60a7ed9d64b128949eed29e0a65622ef69c4cdd714ce1b5dc06b

SHA512
ff956c58fc034ab8358a8cbf0d844a0b6df1afbd10359209acd19ac9f8d0f11df728c63f9cba30a06686cbeed18a145afb19da7be2981e94f46858ced6dbdcc9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
86f0e1b38a190952bd7f655e516361ca

SHA1
af3a05e99cf3438cade385e83545667213bf585c

SHA256
c1a19897783bc79eac3a21eca4907e47840e72c086bc93ccdf3b5f6971703e1d

SHA512
0d94b3fc601cc1ee0fc0dbeab9c447ae589e42e88d6e018943d8d9e7930e811bf9dea0e6f6dd4b84b605c9af0dab4cee10fe6d803e04e02a3588006ee182309b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
77KB

MD5
8a8214fc10ef79add1fd894c7b01fdee

SHA1
992aa84162dd1048c33766c70448d601c9d1d648

SHA256
02b3b0599e1828af08766abb703bab8deacf6609604f290d9080f36483508947

SHA512
32f8726b4e08e51b95414716a61c1040e24422eca4d520f86737ea79e27851bda6f5608f2c25b1ad6a7922370484ee4151354a47e70093c9dec11b9a7fa073ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
77KB

MD5
f112028d4ed9075e2b8754ee5a12c72c

SHA1
79eb193abfca5f106479e97ecf0ac8a7b1128ce9

SHA256
fec985a3882fb4d657a58170130fd33ecec2b6a33cbf9f2fcbac577cee6b7742

SHA512
16d9804e1807e608d44bbca9197172645418ad644ed420b9c65fb956b79d0ec98fa854d9e037f168347e26816a713895ad90edfa28859f77f5ae26d46712118b

Download Submit