hxxps://github[.]com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware[.]ex_

Analysis

max time kernel
299s
max time network
292s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
08/08/2024, 09:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware.ex_

Score

5^/10

discovery

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133675827672758571"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4912	chrome.exe
4912	chrome.exe
4912	chrome.exe
4912	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4812 wrote to memory of 1332	4812	chrome.exe	79
PID 4812 wrote to memory of 1332	4812	chrome.exe	79
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 2320	4812	chrome.exe	80
PID 4812 wrote to memory of 1616	4812	chrome.exe	81
PID 4812 wrote to memory of 1616	4812	chrome.exe	81
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82
PID 4812 wrote to memory of 2288	4812	chrome.exe	82

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/mstfknn/malware-sample-library/blob/master/Stuxnet%20Malware/malware.ex_
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe29d5cc40,0x7ffe29d5cc4c,0x7ffe29d5cc58
  2⤵
  PID:1332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1696,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1692 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2112,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2204,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2168 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3076,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3096 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3100,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4604,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=212,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4440,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4300,i,4610662479415080990,17503936673630248891,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:4912

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:4116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2556

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
42f1654ac57b21b705694adfdfd84532

SHA1
8d8d512a0bb63574b0a4360dfac9968515f7e75a

SHA256
ee292021db83f9e83e376d06389e7c059867d2381d4fb073f1d5159055f99748

SHA512
6c5365c45cc6edf012365756ecbb9395fa47ea3b80692199daf8a0942c650d6a044d3883c9d9c2312baf0c766ed0eff72f0c8507304c66ef9f1b588073bdc60e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
165ff6dd87d4cbd45974beb2fa2d587a

SHA1
71df62f8608ceed31ae321c49f46f6ed49ae6e88

SHA256
74931df4bdfe564d2df09be1c95054033663e9616a18e3a4f85ad4b2158cadc3

SHA512
56c9867fe15d8f97a9170802c644bb8eb6ba66a7373bec4bc4d8d0861480532ad8f80ee02f15c78bd538320dff742e3ca8bfcbc6bdce360666276cfd2d2e27ae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
d3fc9eb2e85d0425d21127e416a92e07

SHA1
fdbb8f1d5580671ad40bc1e192c16db900ee028e

SHA256
aac579ddeab221874d352f8bb775369a7f6cbd2cfc925f9a04535cd8c946f6da

SHA512
9e766e4ed53166e84532ae1b951435190675a79e86d88c4c5419abc891a619095a0292d316bd846d33a16770ce123b089512e830120f7b3c5c1fa7f6e89d3ebd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
275374f8430927c183ed3508f05cb0ab

SHA1
5875352c87b9ba1cb6c79412af26d134553d8e65

SHA256
c5e31e133d1dc6e56edbac53ee653eba89650d33980bd686a65ef81452176332

SHA512
d5e762229e68547019ecb104e747c5d476dc7635e0ffc16e698795b02bf426534f577e325fc9fdd227ecf92d8046e69a8beb7bfab0779b50c5e058baedda1618

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
41a874d548b40eaa9512d36144e58a92

SHA1
eb7f685a14411ef31201d173afab5cac874f2bc4

SHA256
e232ab74561d443eb63750399a07c89cd3b4af388fcc801e8cb282ba86450e33

SHA512
f861d9d9bde60634062a78cd37bcf4c265d8811a85206921c93036a8f0c077ac57f488b84a5e572548bbe04634d8bb8c312729e29eac5e64a8dc89e216c100dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
55a7d7c4398358ec2f8793cc02213291

SHA1
c32a9caaa8bfd393f56ae70438c29d37ec3bc047

SHA256
a87bac15d66712110e28a8a7c592034ff08ad39e325e70f97e01fa134f32245f

SHA512
1420c84e764e7cf175e97bd13ea2b6b1aa6e7d26438a824398792b8175dd7dd24fa6e0fb95f78ffd7080462b811f9fd91ef7b0accdc9dc6ddfc640ef00e3b980

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b9077ad9ec8163a4c6c8eb3a46fe7112

SHA1
88c0c475ccb1b24f73dce2e3d66f61de968dd08e

SHA256
80a5063e99e1197554b9f5722be974b6f1d467e2d06812af26b95f5849cb830f

SHA512
addc343b87de36e40fe4e26408c874ebf6b3babd280f153193cdd1a139ce85d1ed496aca93ddfb6911bc1790d232fd5acf160e696232cd46966f683523076160

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
fa85b453fb9e8f60ed3594300294328a

SHA1
8875258a04853d8b17f42a94e2cfd56862e78266

SHA256
35cc00076bdba289d6a9f37ba6ce2f36a1cde9718326f916343b39669806e912

SHA512
618b175426ba7dfe020ed44776c69376494b65b4a73835bb246d679db75e87ae0876edc05b12af08f4e13c3d65fe1f9401f3608a268686979d42c2b699b30705

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
927c0ff8f764db8f53933dda8f87d778

SHA1
ce3fe92019f343025be7738cb4c35e810a10ca16

SHA256
06dc9189210b4e21e2abaa0b20a639928c9e9c740a7ba63ce3bf0d7704624e97

SHA512
8a5d58799075206bca5c4c4ef17bfa48566f5cfea08495cbbf5b9fd1e2cf59d4eb2b46b169fb9ec2b2c6523b6076cbfad23f942dc2df8b0a3b986fe368b9d232

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
6d9c6f1d4378ef1e75cce48da62d392c

SHA1
6e146d2687b5d377ed4b58a9bfcb1efd2eae0cd8

SHA256
546127a5f1f52d676765af173e2a38116a99513409182e3a6fe6e4b0b35cb019

SHA512
8526cadcfd087334be8b76b41877f735a01e5063f6107e5f92fcadc635c87f8711a7f7d47bbe50c23169ea5e8ae952871dd4480fe287db7d8fcf2ab38a7d4959

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
9de001021b149aa217976078a0a84b28

SHA1
94b0ea57e1b185107debcd84e3336744bf57acb2

SHA256
98ea104401edf96ea188f26826bc20f9df3b2ab03d3514f638e67c93e6b75b1b

SHA512
ba19f0b73f55b8e911b5b74293fea7dcf0cfe5e5d910bdd6134072011fb8b993daaa38a412aa752053b65423acaad939439ab523579aa9b900d175b9959286fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
1102ce6093e1d7917a357e8bf9bdeed1

SHA1
20340c1b4932b70f17083b19c45657c0677b6f48

SHA256
e714687410d25c117f9363e764e3679469bee5c45df5cbf6780c7168028b0036

SHA512
b713b0d61b1352af92eb1f546a139eaa1b2560503c2ab41bae775138d02500320d2b27f6153495418e43ba55af1a2778150b7a47508ee3450e880970615983d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5a75036c1bdfe830d5ed880aa54b7a15

SHA1
bc80db3349670da078a11309946690c832efef2b

SHA256
815e03bb09225b4702cb61de646c3142ea870c7f6ab27b75e74ba3a395e1be76

SHA512
30678238d24ef2d59acd97a2bc9e7625f96af00949701d9e4722cadc2401b8dacdf7684e1f3606cb96d6e065a6e70b39fe10d7bb2b6f7695c48b078fe4e3f3f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
68581bd8b5a3531f43ca9758e1c2ddb6

SHA1
6917ad34c86c26c84fc91ed7d4fc5186d29c5d60

SHA256
a143943feea868d2ab329d0d40a10b0e313dc4eba118c7c2d5a839bbf5918087

SHA512
3c2199cb08c1aa07bcbe93fb9ebd6e81bf4889e4f8681fdfea8c8dfa56475bb7f9db8bba4290872578aeb143fecf0ba353e72d22220eecd989eba38165a8965f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
55953f371f256047419ed7ffb2a21ef3

SHA1
ff5a82d9513863e804124a32cf48f46e673a36a9

SHA256
f12ade51e1b6d4e8d661934cade523e61313358b767b5fdc2220fde805deab12

SHA512
775c34b0041b2631f8ca8ca80ad5a122834ee6c82b74c6285566286719788eec547caf79243ed66642daaffa8d7933baa017cc0d7e9607d0b972ab11f34d30b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
266ba3388411a5a2508f62818fece31a

SHA1
7ea14357ecdb9e6a5ca571df3cdb568ff26a51a7

SHA256
6d8a153e73ca371a0b278cf82ed986d57c310ee2b226e4ff01b4224c4f0e80fc

SHA512
eee1c89947f87ce97c9c931c97c99cf2907dae3f4ac2329f9ce05afd32e9206d862dafa4b6e82b5436a213457223611c3bebaf963892c5082b2377e608432d26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
143KB

MD5
e2ccc081eee3be2352d49f2c051e3155

SHA1
50ea23ca4fdd5ab2cabfbe4edb2837ea68f992aa

SHA256
800b7df21e828dcd73f07d990d49a76f795f1978ac67117f82179b1cfc7e7778

SHA512
63665ca99019d2c30e15641eaf33836c8a15c4bb02d71dcf3719fbb65026085779b9d80f1f002465c8a4b29ed4b5e74aa147ee0656e355eda5b75dd4b5784986

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
102KB

MD5
23f909fd917ee0ca745b3a50470773de

SHA1
a4d8b8928210c708d2aeb24ae3d4503eb8e6c225

SHA256
8a9c535b25b57301c2b69cc936f0ba28c4aaca7e2135d2f43fc227392900c501

SHA512
569c91a1224ac1389e553ac5d05f3e0781cb7919a4881a65d40ed0f29955f1f45b02e893bfc743c6d046285433aa43fd97c92260c0a17c8f7dc3c93f7f345261

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
102KB

MD5
9a0b9e14f3363016e90f07811ec810a4

SHA1
f6d03cbf3359781e0a113f257c969dae0c419207

SHA256
758689a917e2ca06aa55464d3881d2200bbde16eb401764f2a934e8627547175

SHA512
a8dc0e7ef00e3d291a09b45f96a116d5fe68354c5ee429e7df4650e2dff46394f77eab057d502ec56989b4fd91486c3f45bb458abd20bfa7c90e3f31ca5f390c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
ffddbd95d0e3309f35436090a83fab60

SHA1
4122dc96273db463d433a3470aeeb9e6f00b3ea9

SHA256
9a725951aad7e14e51c3d5944a109b4b80189278edf113c7f5b9292fd90455b3

SHA512
d75663f023e7cbd954a7c6ba45362736494edf77f552a5216bdd8741cc75130dd97d355603622659d3074010cf1fb3a25125743d89d700ef8184355d5c3934c2

Download Submit