hxxps://url[.]us[.]m[.]mimecastprotect[.]com/s/cGBXCqxXNPTyGBYVIZbJVM

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 13:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://url.us.m.mimecastprotect.com/s/cGBXCqxXNPTyGBYVIZbJVM

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133623277793345297"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3108	chrome.exe
3108	chrome.exe
4536	chrome.exe
4536	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe
Token: SeShutdownPrivilege	3108	chrome.exe
Token: SeCreatePagefilePrivilege	3108	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe
3108	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3108 wrote to memory of 4824	3108	chrome.exe	82
PID 3108 wrote to memory of 4824	3108	chrome.exe	82
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1232	3108	chrome.exe	83
PID 3108 wrote to memory of 1252	3108	chrome.exe	84
PID 3108 wrote to memory of 1252	3108	chrome.exe	84
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85
PID 3108 wrote to memory of 64	3108	chrome.exe	85

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://url.us.m.mimecastprotect.com/s/cGBXCqxXNPTyGBYVIZbJVM
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb3402ab58,0x7ffb3402ab68,0x7ffb3402ab78
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2220 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:8
  2⤵
  PID:64
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3028 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3036 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4104 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4116 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3064 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5104 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5008 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:8
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5140 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1676 --field-trial-handle=1844,i,56913571895540085,2621268528116543190,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4536

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:1072

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
3ea93d29ddd073c01dd74a3da0a6b215

SHA1
0cdd16821f29b9795c82f25d8bf17e4ba3d847a8

SHA256
bd7a9f07be56267e0a87f29e7ad2d0d2c3273a294824107810fa0a9b00607a6e

SHA512
1eb92b7c6fbd0eb14137d7fdba158f45b60f68fd5952ea0c57e87a2262d49087cbe6a0b3cfe2120d04361600f5aa0815eb257bd4cd8a2909f5013c662f6ac31d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
871036a8ae51644c3de0d45952f0c4f2

SHA1
6a90faf4da64c51f18cda1656f4c4ad44d656fe5

SHA256
43680bc1064e8751742e1f4fdc654d22d8bf039e59ca0af8d554c6033794cf38

SHA512
c4d5d1ed70540041ebe6d7e07a5f33c1b6221756aec00c768ff63fe438019270d5996242f883d68970cf45bc052ac24955ff425ecb21a7954534c995e3c98168

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
383661b56298e1bfe35a47deffe017c1

SHA1
5d102d2916594e30e598b1ef6980bd50c90b3d8d

SHA256
04ace69bc62789e7aa29c2ab1f2312c15e9f6f8645bbd88bd1b17a245cb82c11

SHA512
53a17f411925248c6ceb3d632e5addb16f5556b18bff3ccbfeb3e6de2301def495516a91a307fa8e5316760cff435afa24ac09060af0a23d52174c8d2bb02b44

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
d8c136795310a7e9f716c67e1943dda4

SHA1
574caf9600023e1b3a96bdf0a547be8085a8a6b8

SHA256
326134fc4c5521cec7f7b0a03ffbbe85f7e4cb6fb3177e1fa45e96c262aa6e27

SHA512
b317c1f0ba865aa8bb783a7e0fa22c615c3a3ce0414454a1577e97448f2ecfebf57499820739f461c9df0549ff23265437c4f0708fb41830d82b5dff056854c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
f5be8c9002cb9c6fddfba1352f598f69

SHA1
26e58583526568b8a968783b5979724caff670e0

SHA256
d21d93c81efadce650bdf8aebdcdabadfa9ef7b73f7bc7e64bc0a14ad033e7e6

SHA512
995a93d0df354970949ebd988fbd706f2de8641260ad5fe917026cd39a65abfd400c5bbd1e74f9cfdd1c5645e45b6a44e7feb29cda3c8a17182e7e71d9e21c4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
7c115b6291a17f550dfb6c3f551d49a3

SHA1
1023167ada0f73451418ce64d99406523c8b09ed

SHA256
15f52b5ac4ffaad3a8e4accd22de87a7ecb62c1dd21a71455d9cdaa15f77218d

SHA512
3f1ce49ce3d2bda6554426722f9295db5f072e950096a02e37c83c998801b8d803071534d7aeba709b4ff2b1f1e61e3914da74f672e47430d42c6af68fd94f42

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
70bce5a9e60d75e7425dc4ab35b8cf42

SHA1
50fa8801b5d105887acdaf34cb8e4d7b3f0e1b3b

SHA256
f35705de5126c29c5dd7480bd293d78d66f56a0f9f635233d60c27aa23576f42

SHA512
001cc3b2efe801a205d8e3108b4d8856b088ea4755b3fca10c9badc1d4523d56a5c5b1b1fd26abbfb570425b1b2be959895019a0a9265b9be31ebb105f5b98a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2ed916a56982712c9145bdc862d46ba6a8c93e5b\index.txt

Filesize
183B

MD5
ebb0c0b80daf0fa46616153dc01efa0d

SHA1
9210ac3461748103a1db4bbc747e1be14cb7582f

SHA256
212dfbfc1056c38e892982d8a4f5d166579d88d33a9c0897cc5b8796056221d1

SHA512
24c250fb1becc1c37255e42a3551bf91302d382de38cb11460af18639b0d213a35c91ec21c9911051ac17fa97ccede33e1550e7868c2d7b255de460bb3b8bc0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2ed916a56982712c9145bdc862d46ba6a8c93e5b\index.txt

Filesize
190B

MD5
e35a22a183aa6ba90db4a08545577412

SHA1
c3dbb2d4d329699d034f22f48d54b6660be55927

SHA256
66c30488a5f0d619a4b3b5688ef34db232482c6f0b454cbd62c2bf57115a24da

SHA512
c87a2695971481859f6225477c221f60e9d5194939986de5101359c48efadff88798df54ec286fd71cfd76e409e843b58b2634bf9fc59613a195bd0e3a812a83

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2ed916a56982712c9145bdc862d46ba6a8c93e5b\index.txt~RFe576793.TMP

Filesize
124B

MD5
50fd00953da9e10118a007682b5dcc6c

SHA1
9f822d2f4fad1d883567786e7b20172adc53e282

SHA256
224e9ffd7faa2509fccc73f064f37dc1a967803cec52ac404f77ff3cdc200c76

SHA512
cfc8edbfd39783acdb89417c70ec0e6912a94376734c6d95f6acfcf56e66a98fd0c30526282f846f9b02e91610af0a98d925ae723e0db79814f364431a57c7f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
129KB

MD5
9cf86533526fa550244ceeda402da06b

SHA1
c5b174495ed4854f98986e3ad73845f7732f63f6

SHA256
fb3c9cb4cf1dc56693acab5b28fd71145aad1b7b0921c389af6760729bbe1129

SHA512
7237f9b6deac4c6f1ee141d51f6b10f88341f032564d4d3a21885d92711c316a536238b0b02e6c2960707069e2b661f66259f1a22320e93a33b687a7836cfd06

Download Submit