d32f3a860b863d38f117c2e7efcaa6909583d418f8578b526a7ed0153529644b

Resubmissions

22/05/2024, 03:10

240522-dn2s8sae4z 3

22/05/2024, 03:06

240522-dlsgsaac63 3

Analysis

max time kernel
98s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 03:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Virus Maker.rar
Size

82KB
MD5

d1f61793e7898df4b27e3345764ceca8
SHA1

f03b91146aeaf753b565620a022a238830ed56d4
SHA256

d32f3a860b863d38f117c2e7efcaa6909583d418f8578b526a7ed0153529644b
SHA512

6491767f6db68886d000b173306377f3b0bf2d6db765ce4c14139c9ad09fa44e6cb75489f3858e45c4000333d2ad517721f81cc48e94de25c75c17cac36bb617
SSDEEP

1536:S0s/fG5w2aRBBNACjLkvSrfqAbv0Zarjg5AfDLCNE3Ztg/776X95:5s/+uRBmvMfzrhfbD2NStk76N5

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2832	chrome.exe
2832	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2524	7zFM.exe

Suspicious use of AdjustPrivilegeToken 55 IoCs

description	pid	Process
Token: SeRestorePrivilege	2524	7zFM.exe
Token: 35	2524	7zFM.exe
Token: SeSecurityPrivilege	2524	7zFM.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe
Token: SeShutdownPrivilege	2832	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
2524	7zFM.exe
2524	7zFM.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe
2832	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2524	2020	cmd.exe	29
PID 2020 wrote to memory of 2524	2020	cmd.exe	29
PID 2020 wrote to memory of 2524	2020	cmd.exe	29
PID 2832 wrote to memory of 2456	2832	chrome.exe	33
PID 2832 wrote to memory of 2456	2832	chrome.exe	33
PID 2832 wrote to memory of 2456	2832	chrome.exe	33
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2844	2832	chrome.exe	35
PID 2832 wrote to memory of 2964	2832	chrome.exe	36
PID 2832 wrote to memory of 2964	2832	chrome.exe	36
PID 2832 wrote to memory of 2964	2832	chrome.exe	36
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37
PID 2832 wrote to memory of 2968	2832	chrome.exe	37

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Virus Maker.rar"
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Virus Maker.rar"
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:2524

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef73c9758,0x7fef73c9768,0x7fef73c9778
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1168 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:2
  2⤵
  PID:2844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1504 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1604 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2168 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2220 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1568 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:2
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3252 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3492 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3632 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3576 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
  "C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --reenable-autoupdates --system-level
  2⤵
  PID:1736
- - C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
    "C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x154,0x158,0x15c,0x128,0x160,0x13f587688,0x13f587698,0x13f5876a8
    3⤵
    PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3740 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2676 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2672 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2572 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3780 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3948 --field-trial-handle=1120,i,7239028328725446040,2864614746056098693,131072 /prefetch:1
  2⤵
  PID:1744

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2788

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\00304bb9-119d-48a1-a318-81ed3270c925.tmp

Filesize
270KB

MD5
003c4e9bd096dd4c984c8c298a45151a

SHA1
aea265737a314193f641476ec521babcb8aa1a7f

SHA256
953291d9416eeb9030b8a497c2b63bedd3f221dcbfd9f478e6f13b79adccc76f

SHA512
2adf9c8cfbd3f628a5aeb45d41540b5ea57a8617470692b4a927e2461fb22aac9e2cf561c4e146d2bb249bf8ec274148767cb9e1a7c80e626877ff240dabd1e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
206KB

MD5
f998b8f6765b4c57936ada0bb2eb4a5a

SHA1
13fb29dc0968838653b8414a125c124023c001df

SHA256
374db366966d7b48782f352c78a0b3670ffec33ed046d931415034d6f93dcfef

SHA512
d340ae61467332f99e4606ef022ff71c9495b9d138a40cc7c58b3206be0d080b25f4e877a811a55f4320db9a7f52e39f88f1aa426ba79fc5e78fc73dacf8c716

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
c8a1c601069dcf348c196b0fb0004317

SHA1
eb5cda31a6b7f569702d5f66e17a92c972d7b98f

SHA256
75065d60d3f9e2271952e8daf3f7febb602d44e6247e50f42447172a1d4594ef

SHA512
db0c586474b5c2e42b80f1b751d9eb08e0a14e7f0c520cfaae4250ae5792c66d57bb218f3acd11eac3895bd7704d832e2f4a03bf50754266a4a011aa3fe6f011

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
526B

MD5
e6dc8d3c6aeb123164f1eafadf060661

SHA1
804327b587b74931d0937f18602e27b7a6272233

SHA256
a4fb776142ac292fff7a2854bbed6c8281c31cae664a555645dc43b0c433edc7

SHA512
a8bfe5dfaedd792569e232cf6f49499c8daafae1d0581a4510c64484737bbe6b632e64c19fcef2fed2742cf820c88d340d962f5c91bcbd4e92254293dd82bc70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
33e7a021dda38f4ca189bdf1f7f17a88

SHA1
68cbdf8818521566da68496a0bc4b4284b8c562b

SHA256
e8301d89a55ca5c35408a4e546c8466be5abd253974f7cc5e286a1fe52b3626e

SHA512
b4581514c8e38b1f3e5dac3f5cdcc0e56f594071c0a9f10f7fc55a3c9bf93282b757e49878cad7a0c13cb20624bbbe4c1c2ed67364e38fed85c120115b7a105b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
96905be323e244c00e062c94a7aa87c6

SHA1
62186991ae463f74bac5618f83bb8eb86872211a

SHA256
e91cfe65627a463b4cd3bcec1ea54a47a56ea7642bd5fdf35b2ad8569ab0c964

SHA512
b9b8d863c2f430343c090359537b0853cf39a766d74f3bd458374a4bc3b46db566041483f597d7dd85211a4132208e028cae1606e88e3bbc34a3a813495777c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
d925589dd547e4bac83e5fcc09d959d6

SHA1
d178f4d93b949eb1fd0d7a0637da531195996ef5

SHA256
2edfc0896579f314f231d803661f00498be5edb316723601e180471c19fd9feb

SHA512
1e238b073f13a7ee5fabe82be28f466cf19c6e468c766b489e401609b8a12fc40e174b1247d7b564c3458bb346cb8649ce7dd8cd89a9284e41ec2e0abd1e6ef8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
270KB

MD5
8ee149bb9575cba263773f2d5110618e

SHA1
527c2602f49d0f63acc32f2077dcbcf30df724b9

SHA256
22f5422ef221e220fd8396cce3802058ff8f8e4f6197c3182bcccfcf48760886

SHA512
c483618276f5f2f63fd9000ddbcbe545bb49878bd2eeca9038be2c70680e2de59f3f31b551c4739107b1de16cecbd70ade7ffe746d6e0afb1d60196d7804ba54

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
270KB

MD5
fe108f7a082b18f2b121e3496cf1989e

SHA1
3926f26b3d911ed25c8fe90fd9f1943377cd8faf

SHA256
535b7441a72ce0e6d0f747fe5c21fef4b857ad5025b4cc3a18691aa7f84b044b

SHA512
aa9318563e5312db89cbf4f9f9495a0cbe736b3b3259f3613fcb6b42800aa570036a1d5bea04a940272e7c057a9f079b901040eebf4762975df55009bf11073d

Download Submit