Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2024, 23:06

General

  • Target

    VencordInstallerCli.exe

  • Size

    6.3MB

  • MD5

    57c6f59b4139374c5be091d7c8c8e453

  • SHA1

    bfb1f6ffa23c1c4493b64da704622f0341171097

  • SHA256

    466d2a0be1f380ddffed052df3cc132125fa34dc1af29312e14f13f358c8d2a2

  • SHA512

    2544c9c17d0e2fd41f9802881e0d08bba5d299f5b48201316e00bd7b0446a1dc125ac8b6203e3cf663f25309df6fea4a58abb8dee96f6cb341d3a056ce6bdfe5

  • SSDEEP

    49152:Ng8SpDPb2hZliMv7jrfvE7VJxHylRZJDA7iscU8ijRJHd3lq1mXN5WQye8m067OY:K8c7S1ikjr+Hw/JK3PV4lSn

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VencordInstallerCli.exe
    "C:\Users\Admin\AppData\Local\Temp\VencordInstallerCli.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1656
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4228,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
    1⤵
      PID:4976
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x4b4 0x304
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3012
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:540
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffb007cc40,0x7fffb007cc4c,0x7fffb007cc58
        2⤵
          PID:216
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1964,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1960 /prefetch:2
          2⤵
            PID:3460
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1996,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2160 /prefetch:3
            2⤵
              PID:1256
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2044,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2324 /prefetch:8
              2⤵
                PID:3108
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3148,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3168 /prefetch:1
                2⤵
                  PID:4424
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3252,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3328 /prefetch:1
                  2⤵
                    PID:4432
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4552,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3696 /prefetch:1
                    2⤵
                      PID:2616
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3756,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4800 /prefetch:8
                      2⤵
                        PID:4536
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5032,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5044 /prefetch:8
                        2⤵
                          PID:3828
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4720,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4476 /prefetch:1
                          2⤵
                            PID:1084
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5312,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5108 /prefetch:1
                            2⤵
                              PID:3720
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5388,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5376 /prefetch:1
                              2⤵
                                PID:1684
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4672,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5660 /prefetch:1
                                2⤵
                                  PID:1600
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5488,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5796 /prefetch:1
                                  2⤵
                                    PID:3188
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5828,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5844 /prefetch:1
                                    2⤵
                                      PID:1544
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3508,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6084 /prefetch:1
                                      2⤵
                                        PID:1116
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5212,i,13454388759089236748,6708238547729627541,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5780 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:872
                                    • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                      1⤵
                                        PID:2028
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:392

                                        Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

                                          Filesize

                                          210KB

                                          MD5

                                          48d2860dd3168b6f06a4f27c6791bcaa

                                          SHA1

                                          f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

                                          SHA256

                                          04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

                                          SHA512

                                          172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

                                          Filesize

                                          24KB

                                          MD5

                                          c594a826934b9505d591d0f7a7df80b7

                                          SHA1

                                          c04b8637e686f71f3fc46a29a86346ba9b04ae18

                                          SHA256

                                          e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                                          SHA512

                                          04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          720B

                                          MD5

                                          8260b27a4541098355db8d2f064a7b0e

                                          SHA1

                                          68001f57bc7b1e88d08e45f20b9ee1d26256dc92

                                          SHA256

                                          f2ddd335ea1e4a1813a180d23d9c5190c2defa47efcc02b18c18f62e4f6ca432

                                          SHA512

                                          5e9476d64ef83085806daa1382f8155fefe14a2eb06f685173205e6f58d823b3c72367ef250a318b9f1780858d15561c6b340033863a6b3b3a6efa9088209577

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          528B

                                          MD5

                                          c73ed5079b4f66f695a8e7760ddda4a3

                                          SHA1

                                          6ff34a60c70a9a3959682a4313b282e52c526c0a

                                          SHA256

                                          262f3ccd2ab19a80f5c5b1b2d2417cf6e6d101b092592843c9587ed360a7f909

                                          SHA512

                                          bb788a3a3b0dccc2196ea1c576bb2a32bf46494f94c1869b0e07edc5bdf22cf8efb9ff09ed9ab3e97b3ccde068bde91c56fcd447e45e53b8c61263ab17715fc8

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                          Filesize

                                          4KB

                                          MD5

                                          b44a3547c424a6cd1fb0091b503bc6ef

                                          SHA1

                                          2c574f3ecbc9360f06a72fbed9b1697b07dd55f8

                                          SHA256

                                          8253b0db09160ca277cafc56c87a7a70e7514a762dc6f58eb6ef5cdf270c5959

                                          SHA512

                                          2c47da2c444f3a91e475c81a5ffe9d84097e856fdaf2d5f97f1b09285e1a4d3ce9d765b5129205923641683c8dd7e2c540175bd061d125e2858e2158e078b808

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                          Filesize

                                          2B

                                          MD5

                                          d751713988987e9331980363e24189ce

                                          SHA1

                                          97d170e1550eee4afc0af065b78cda302a97674c

                                          SHA256

                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                          SHA512

                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          354B

                                          MD5

                                          cfc407a6bb5fc13c75cb5fbac5e1cb92

                                          SHA1

                                          bdd209909ac2823f66550699ee36507a37a00b70

                                          SHA256

                                          f3fc3be8b980701114a2b49b8f6c768e82f4e41cc893d5d3da591471fa41e409

                                          SHA512

                                          7adcf47b3afec80a2bd176df054b45a4e049353463e1aed38944c7d669dae83a5e69c82fc9a030006711871d1d2013649e862378716df1d61b3fee81f662f00e

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          1KB

                                          MD5

                                          c6592df405ad8d105c73188cf65ae6d5

                                          SHA1

                                          d818e1e145e9a4daae3434f6b718f881a5aee60d

                                          SHA256

                                          551eefbc3d9e45a1b75bdc73393924abb8b425abc949962787d137a7a98e441d

                                          SHA512

                                          5b5ac832d71b44054db3e44ebb0ecf215d164a26d7cb2074871cd0bed51b6bb6009bba8f67d26bb993895beb7ae9a59e48830e6869f20a7009f43fc6f48d45f7

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          354B

                                          MD5

                                          bae823fc1b13e82e13439e5a1420a83c

                                          SHA1

                                          17cd8f50c6afe1b0dbace0ef00277e7659fbd98a

                                          SHA256

                                          ec69dd113e88fdf64006d8a14c94b5235ac3f6e3d8295ec9f745c7f6829dd396

                                          SHA512

                                          aec9b4469019545e398804c67abb094c9ff369eb3b65f71bcd3c970249aeb5f730c59ba6771b6bcb65c1dbf749848884814ed60e93a76cd7dd520c50c7216525

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                          Filesize

                                          1KB

                                          MD5

                                          2d5228b5525ca8292117733fe5038076

                                          SHA1

                                          e7b844ccc63606aa38f75ab19fab7d90ab8465cd

                                          SHA256

                                          45c972e951f1b7b409501d16a01c79790ced03fb47cd55f63f98f69ca1fb4dde

                                          SHA512

                                          3736598968eea7843f9b4fbd9809c0a2863b34ddbcb37caad60f2983de7497f5b0770d44909f39a70050085d1c4d8845d14025ea8f96207d6dfa894c1a169bc4

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          8KB

                                          MD5

                                          1517a7f416d11f4139957d44d24811c9

                                          SHA1

                                          e328e9d0d72d0c511567f8b340dd16cbc64cbf70

                                          SHA256

                                          bc086acddaf5c95fe74bbb29e04ab86678d233133db6f55fc600d559e98ec20a

                                          SHA512

                                          b60860b74e0b2e3e75aefd9898a80120bc58c558c9bbfecec5d398ebc7ff979956c20cdd9c6ccad5cb9284ee64c47ea38123a9dd44d96fff7850e3426a68cbc2

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          4e985bae9292c43750f106402945e302

                                          SHA1

                                          27c33eed9a24bac7f48ba58a85a91936cfcd9daf

                                          SHA256

                                          e9d391bb32f805f54c5fbd6618737e31e5b9050c4541ae9bf2c751ef3fec6dc4

                                          SHA512

                                          be07d7966c1544bcf9ce268d4867f313eec91fa3729e62385501cd7920802317b71c8e547521646cf9189d1abd96fbe86e73d4c366261589d9a9759c36edfb95

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          8KB

                                          MD5

                                          5d5be25148825f0ffb01f3f3b007aace

                                          SHA1

                                          b5e5d7551f4133d0d44e53da5b7828d2eec323b5

                                          SHA256

                                          28a6f27b5cc899ef0dc480b009bfb77c484f36c738142063c94e2cd992ccea60

                                          SHA512

                                          e7bb7fabb65879ab482aa5363c2f570a7711b6dd5a38f5a2078acd6c291f9f5bb99bf6b336ff402ef7d11aa30b9c70484c7967c48fd4c8cf33bcf599f68e61cb

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          d32d793ad150ac6fcfb3b0bddf7bcee7

                                          SHA1

                                          6ef95bac04bab5e6742b162848b4c7d2bf90829c

                                          SHA256

                                          73509390dc05ccc9d7237bff70e1f13c2bfdeb957ed35b167d686c5f9df33e67

                                          SHA512

                                          88c9393e473a893873c457212b67550f9f5935fe50362fd131ec8d1f0f699d1de65caf8acf905d7d6eb504fb7296ef261d9f5a3f360cc24642754607703d0c55

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          0e702a66ce427415b478135fb9be1a85

                                          SHA1

                                          0bd7cbc4eab3d48934ecbb357f1596fdc1b26898

                                          SHA256

                                          455d365e10a5c921ec49526e553fb0360f0bf853e3db8b8742286a4093a0632d

                                          SHA512

                                          c53e361df5a2a7952674258956ae29b6c6905b8567b3469b5adc38ffe9c4ea0e2af8ecccc2b5c01ec0d48ed8bb65b82e1158067ea3448750ba9d2f42984917ea

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          8e7202253603670f85889735512eb846

                                          SHA1

                                          e74d1d109bf62160e8ca006265b0770c3b9747dd

                                          SHA256

                                          b4faddf547031700a7ca521ced8e4bf114d876c4022f4b9c9c91758869908e3c

                                          SHA512

                                          1f1841678fd1e8ddb5ee32e4ea0e276e369f3d0f8ff722041f178775d6fdfeca667469ea70afa791d677983094327afff7890701f1ccf3d8cb5580b8be136874

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          0b9d69b0e300f6528cb4dea0f2b2fcae

                                          SHA1

                                          2dc85c8990cfa667aa2c74890503416af3af2f2c

                                          SHA256

                                          d7633dd3bdfbf15b0507643d11797b59388c5ddcac26514dbb125d87386f2f7f

                                          SHA512

                                          308f04711e5f16b7553cc8eee709d181098fde7550755cd2ee3fa11a947253849c93ce4275547a5bd33a23cea47442dbed84b48a555d8e81d728fccc652c8ae2

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                          Filesize

                                          9KB

                                          MD5

                                          aef1c94fb7ca6c1ea6c1dccc5da40fe6

                                          SHA1

                                          c597cdcde59b0ccc1d1739057ae3e0439a20b599

                                          SHA256

                                          cb700797430b8c7139369c20f5444981f70886c983ae1c38e729c87bafc7f8c4

                                          SHA512

                                          b62ae995146f40e4aae10aacaeae0aa0cc4cdb9e5563ed08e9ec53c5587efb63a0d05ad2977ba255cb41ff24c573e945a5b120bc88fedf68470e2cf7243bb008

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                                          Filesize

                                          15KB

                                          MD5

                                          8d152a2d396bd8e2bc1f4ed5ad2edbbc

                                          SHA1

                                          8198d047b11e982bd76328603fabf224b31bb809

                                          SHA256

                                          643d33eea69f51ec81c0ce7218d89ee8a381e2a42281bc828e8bf6695c1d64c0

                                          SHA512

                                          c37c7e5e74e4e0ff0bfbfc863fdc3a3d925b4a210d2c1e96f7928e056b67dc03d29e841f7b0530e058ffb35a4905d31cb6c8794a94d61a6226d3633d071bbb8c

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          195KB

                                          MD5

                                          9727af86559711a1d5bdcbeab7b414ee

                                          SHA1

                                          4ec094f799ef84fd23a27d42301d1a19ce0bb68b

                                          SHA256

                                          573323958efa641e053ce48bad4b739c1a5baf30658f41dad4b617cc914dd900

                                          SHA512

                                          c2dad0ce8ed476e6551ef083e8f153a725d145d33009c55e0370abecbfec7c7ee91ea70e5284f637af0d9258eb6e1c60b4cb3d524e404e0d16c3fadeca2db418

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          195KB

                                          MD5

                                          994d0ad753ad5df2d181975bb0062bc0

                                          SHA1

                                          895c8a0c117af5c3c6ac96dcf0a621f19fb2e866

                                          SHA256

                                          d3a5ed691ded263a4fe41a196321e73b170447a2a32309f0f8258dbcf816fbc6

                                          SHA512

                                          d61b2a58c2cc574ba066f808c6a6fc476de4edd583315887f073589b843e132a3a93d8605f5aceeb79f52b06f4f0b1b682cfbd0e756180d46ca172ec2d938981

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                          Filesize

                                          195KB

                                          MD5

                                          4bec3e91bdbb8b66312658d28037285b

                                          SHA1

                                          397f9acb6455259a1c7f032673887d8845a874a8

                                          SHA256

                                          0709e23f682aa3bac759e05cf549d04b8190742e7d9e783109a4da83ab1ba115

                                          SHA512

                                          c882aaa0ea2e919bb4a6b9ee8e4fd60747109ccdf4f73edc8806d5cbb054dba2958025ab6b0f3bc7dc65f8115695c90dde8f2b5b83bc8fe128e6f38456647303