hxxps://github[.]com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware[.]ex_

Analysis

max time kernel
34s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
08/08/2024, 09:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware.ex_

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
122	camo.githubusercontent.com
123	camo.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe
Token: SeShutdownPrivilege	2676	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe
2676	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 2064	2676	chrome.exe	30
PID 2676 wrote to memory of 2064	2676	chrome.exe	30
PID 2676 wrote to memory of 2064	2676	chrome.exe	30
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2704	2676	chrome.exe	32
PID 2676 wrote to memory of 2896	2676	chrome.exe	33
PID 2676 wrote to memory of 2896	2676	chrome.exe	33
PID 2676 wrote to memory of 2896	2676	chrome.exe	33
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34
PID 2676 wrote to memory of 2732	2676	chrome.exe	34

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware.ex_
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6ad9758,0x7fef6ad9768,0x7fef6ad9778
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1136 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:2
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1384 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1476 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1932 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=1940 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1788 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:2
  2⤵
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3836 --field-trial-handle=1276,i,5961086717117149125,3952322876420720884,131072 /prefetch:8
  2⤵
  PID:1956

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
347daed01bc2621ea45ea4b079691081

SHA1
5dbb4e142d64005e14fdd54e7f2338e654c62c36

SHA256
4ee8258312a5cbedd7e550d12a696106ebcd1f625cc05c07e357778b91e5437d

SHA512
e1fb7f44260a26fa0c5e4c6c589cac5109fd52bad61e510cbf95279748307a6aad37b48dcfb4e8b9363e4c5ccf74b1d0f18e273a2f4628f7d5de217f9c13c0a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7fe8bddb64680f147cf968fc5b580760

SHA1
f72c69f0abf261ea7d76ffc0e20c53af49ebe209

SHA256
46f3102e62b58573dd59db0562af038ef09e6c515f8e13f758f0b08e5d94c400

SHA512
a0376db50c61a40f697f010efb142c5cd9367f05e846df67c51132d14f8b40fbbe2fdcd6577531a5171d0c149b049eaa62fffdee3f8fa3115d09b08d9e622f41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
413ab702b9d9b086b61e0ca20e19416a

SHA1
84dea6dabfe1f843deb8ba31dafdecad0344ff3f

SHA256
a098d110e628fc9259249cd2bf4ad0a123946157a03097a52e740dec1847b3a4

SHA512
faca53c6c81014e703be0925916295a0ad068c4f8b31965035d16d817c4ca1a5777a6a1754436127c5211d70c94e4616bfd1c5f94e26b3edfc807ca3b6dccf34

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
14612d9bb21840fd302df1e4af45b731

SHA1
e5733d869a75b47163ab018292c8bf2223d43615

SHA256
a3bf8a23410a1b0f6c398489da24ff6153c382375235db08868213a2064398a2

SHA512
4d8f09f6cec40909c2f34d802473bb43c47a564ec39d382f9c9c9d1bff2cc4b3fff3caf1fdc08ec5ba34c30985d5a2b265c45e95ed0b72c5a27ae901a5cd3f37

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
986B

MD5
34ce3e33063c18ff62065d005be5e946

SHA1
4198d0bf5bf3b3161ad2ecc052d801cceae2119f

SHA256
1b7930873dcf3486c6cc2ebd7dc50cf421c2cbfbe39248449750752ecafc3278

SHA512
a3e1496ad33fcddfdcaf7303e92e515c73a4eb20e9890721ec0b29264aad48b783455b6c3d54ffd620684eec69fbef0eb7d1462f333bb537321aa655fa834bb4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
0b915906616c4432cb5460e5df6493a4

SHA1
eb868ab9584336457aa3c2d401c915aaac5e76e9

SHA256
b27bcdcfb4c8cfdf94f61423bcb8325fe7c5f04b9cb78c3c487783e5ef9eb51a

SHA512
5d87845965c6daf4b85825e19ccfc5d8e551729b175760360cc2fd20800192d9f0f99b93c55948dbfc98d886660b23997ec951f3b499be4c0db1e017e7fe2f9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
524B

MD5
d14842ea2a5a3862ac565107961034ac

SHA1
4f6d729f5587319bf6ad980f9a27bf9d7fa16c97

SHA256
ea0ee20f37fd55cfe126f02e991372e983695537428a81258326d66cbee10768

SHA512
fc259b6ef132a820e0e4a6d0c290338fa1285919a9fec9e42139fa024cb3253b8eb8f9a4c5face9c65ec7084ceb3b9413aa759ce6cc6053dc55390ced115cf7b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
b0627dc9e517d12ece4a9b2de64fab69

SHA1
1178c64566fec827eb2b0fda068f75c15ba67be0

SHA256
7b6224df9c7b0c343f2ddba751116784524da4202a2d997b5eb37412a9276efb

SHA512
53fe46bfa67d54f5befcbb6945a0a8679090b6ababc57a39efdacd5a1f871d58e52a9e0e342251ebb274c0e4bca2dd5715c8d4f656cd42dbfdc36606328212ad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
460cdcc185fea9a8fdb0c4482986a545

SHA1
8b6185fabfe52b775bb553f45099698d19d55445

SHA256
b7943ad6da25302feab44d4ba5f3bee14c6783a3a03d743faf850813e27fdae2

SHA512
859536a78d1ce2fb9311eee4e4d19b642a57f1ceb67835cca93be9528fed3249926043b0aa54267f4b7ac495c217921020d4b377763269ecf8b981dfa9255762

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a34e35de37e2af889bd13d1340b18b81

SHA1
be3f6d3c622f6d8617c7b9b4f8dca65377f4c768

SHA256
f9f2ce57bce9aca345d19a5dfb6965aa56cbe755cc45536cbeca7ab6c38619e1

SHA512
136e48ff4a1145c05d5de8a3ef0be720ab38c35634347b2a7f65647a5b357558369cf118492e505ce833f03c734605e69a500d173b2f71919120f90dc64253c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c46735baa5c6a98e4e07b631966e00c3

SHA1
8d911e23c4824f83dfa19a4e6651d305d97557a0

SHA256
c182f49807862b0ccdf2bd3906680b9eaf61b0b643186b619ffc4bc7d9728139

SHA512
f72014dcbc6849b75093a37a4a1c99653b30f0d4c7dd3ce681f23454d47c26195853a4eb198e218d9ace025640b2735dff18e558f23e063045865b8970608aca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d93a47551829d08983e8c5933821cd6c

SHA1
d7f9acf2987d5f28f6a90f37414f44d6dd60b74a

SHA256
69e0312482a7dc9c2023fa798c04108a7dae9e8dbb84b80dfcf40e7d4015767f

SHA512
53a6a0882cedf3661eeb017f7e826f554b0c3f2b6ec507216f64ce7caf7205e437a5e11c62a75384c3a05d06863e3833778f47b8a415c410c53d6ab7b071ed88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabBF2C.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarBF4E.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit