hxxp://pintarnews[.]com

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22-08-2024 13:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://pintarnews.com

Score

5^/10

discovery

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133688084758875209"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3920	chrome.exe
3920	chrome.exe
2492	chrome.exe
2492	chrome.exe
2492	chrome.exe
2492	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe
Token: SeShutdownPrivilege	3920	chrome.exe
Token: SeCreatePagefilePrivilege	3920	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe
3920	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3920 wrote to memory of 3104	3920	chrome.exe	89
PID 3920 wrote to memory of 3104	3920	chrome.exe	89
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 2020	3920	chrome.exe	92
PID 3920 wrote to memory of 1348	3920	chrome.exe	93
PID 3920 wrote to memory of 1348	3920	chrome.exe	93
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94
PID 3920 wrote to memory of 3192	3920	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://pintarnews.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x100,0x104,0x108,0xd4,0x10c,0x7ff9dd28cc40,0x7ff9dd28cc4c,0x7ff9dd28cc58
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1928,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1888,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1976 /prefetch:3
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1580,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3036,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3064 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3048,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3092 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4584,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4600 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4464,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3268,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3780,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4604,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4944,i,16307039454358062807,5783102232542646823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4928 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:2492

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:1540

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4300,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:8
1⤵
PID:5700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
734446ce8be10f4eec565d4046e15b11

SHA1
f615e717324768aa0c395c1d737aab6a0e6a41e6

SHA256
41cbf6a958768c408579a5f188594cb07430ee3bdbb20ad2461ca529ab95d7a7

SHA512
25500d606ee75cf0efe9927bbe5a665d02102abf7d4b64a06ffe41b9ec6b7d166cdd19ec5814d8b7c70e8b0ef279416700b74075aadc159f68f744d2d316e8fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
83ae54178873b60235bec7fb141e9b51

SHA1
62c9a23320e79f53e975252bfc86a00d5fcc102f

SHA256
e66d54dfb6db7fff86bd50d5d410bdedb48785f203cc9f500fe25ce2f0a24d07

SHA512
f3409f736a62788e5a41ba2715eaba4ab3785b89687fef958d0c0241d10544ef94fbc33b906737eb00ecb2e9cebfc1fbcabfb6daa473778d6c1df0929564b83e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
19297ad5da63c5c3203219ff0a0a1f99

SHA1
61e02847c617d4bcfb18c2c1748ebcfa3686d94e

SHA256
96eeee1b54da4d277bac9219bdb4979962c5738a24a8bda8b4b967e64f0c3ebe

SHA512
753698b3d13b45cb24fa0a80acbf32c1e32780840b3c2fe34b338d0daad3be3a3958e39103a0b3156a63167145a545f90842205f729601ff7fac0fca7d73d0a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
edf73d8a68855473a1bac7b5e1bdfa76

SHA1
35bdc82b50e5bffd77b507f918d6855ce77caadc

SHA256
4c7a03ce0b1acafeb3089b2fb829b469f08d8f1ee1b066b36c33690c8fc69c6e

SHA512
aa5d649f00beaa2e4abfeee3f77242c6ac3ae7e9452596b4af3e928b4403f206b98dea07106bd68e32419ff2a4f87511a9b48a133790da93789a071ee624b43b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b0c4b7994613ddca3527291e91a44916

SHA1
9e37f06ef130eceea85302132d92759dc255ebb5

SHA256
e1d04144b9e64f6b27ae9945c7ce857fbf692f80097a1cf7308ca16088d7259c

SHA512
7d379797c85b8e2dfa91aeeba5d874fba91a65f7ab57db98e0a069a50e68fdbc872605cf8becb781ba2478ebf37efc9d59844f975297fdb319cdfbbd5eefa7f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
6a27e3bbf0dd37324469cbdbeab047f3

SHA1
59d84323ef37278fbe4e0a0b5fed9558b0702b56

SHA256
f9ac8d6aa1a68f6c1781ef7fbb9d385bf23f535693a48860072031bbaad8480f

SHA512
88d3d42de3b54e42e1dde7094ff225afaac489908cd46b5d17be6074c76d298ba8a8b42d73795fe2f1ee9c2c995d3d35475ae158244ba66d33c60889f813c2a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
2f74d71e7e0a6043bfb8ffa3567c2a55

SHA1
525cac4dd3d48a47c0fd937bc8fb1dfdf592a491

SHA256
eabb319a41f4ab9d1dfa32172af2ae0f35b48d45b1b8b7f465cd192893a804f6

SHA512
8a3fbf37eb093579aa53f5f06f8bcb5c83b245219c8a6fb751246a19e79b9f5ae71cda58404b7b8e1e4ef359371673461355b5afde6f5b25e296f9606e69624c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
96b8b58850dcb03464f70e448ac796f0

SHA1
eceed8647c5034a8aa815b3df4b88da14c7a4f64

SHA256
abe79ad0c195b3739fc2ddc8eab79ab71212cbec753cf8a65a75d04aab225747

SHA512
6d5f97c9e6dddf043cfea55e8beff70e6fa50ea4948ecb499f2e52eaa11407226f21ca47e2c92b937fc49352f0079abb82873e13c56448e234e89c8219858175

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7a90e09a2022f7499055e32e7d9045b8

SHA1
2b1b6cd8ded2e172cfcf54823ca4586d74ef0e2d

SHA256
0b2e0480df7df4df9b5dbc439547e4129be4267269e5a5f885e47028fd2eaa21

SHA512
407c7ad089a8a44206771662ffbf3a0e1f30d10f68c67c445c7ec7d4ea5e6a9cdd3ee7f89be9e91b930ceaba8a39f41e870cb7cf8e385dace772949d292b74f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
4f23b4688c8d25754bf8d0d31ffc1432

SHA1
94712b2b8a23649d9193c1733c9b544b34a63b50

SHA256
0e76cb1eb47e00a7fdc14d35dfb3b8f151a183bdb9ec8f134093166b57250d0b

SHA512
8053ac612dd1cf05e73907d04875a8147c8991dc49919fca29b4f11436e6036ca2962589b5a36984ccb9aefd5e16e77c08c33291e5b50fdcb4bb2eb53bb140ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
34b14138d32e42b4dc72ca2fa308eba4

SHA1
deb225a05099b5a4fd09d2100c229c18761281e0

SHA256
3930330694ef6fd7351b57c10d1bb02726a07023dadf6815be45e38608725725

SHA512
48176c25d4d1fd3407faa1172f70e4d9742f3d6bbbd8e1b9f22e4c9e46bef94ef937e7d9440e56008144c4d735ec6f1674a498b8bfa5afdc01d4967da2bfabba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
0e7b7f0ea8342118eddb731435c5ddbe

SHA1
780fa738f40c59ed90ba206b31ad60d4def1c6ed

SHA256
889e6634b0b03d240639b25fe6dafd77cd7bbfe623fff77c3a7de89127c722eb

SHA512
4cd3537686e4d75bd4db2f2f8a9212ec9ef7e5506c2cd8f044f2521c2d8132cb15cb73767e683e5e98c5e0e3881556b33b0ed1b0f39e160473bf6a45621b1e91

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
02a3090555f67a3356fc58ae7b7a6b18

SHA1
d72f24f0577ec75fcc02b1ffa636a1fb2019febe

SHA256
11a8fd1530ab8304dd9807a8d251338829f069c042f52483a3ec0b04fca4db32

SHA512
06388e15e58a8e327cbd65751e8bcc85920d35a8d7ee1274150fd8d33c1ed07355c84e9197ac6b394ada010d3faafc187936db0f597cfabb96dfdca2538d8f88

Download Submit