Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    299s
  • max time network
    291s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/11/2024, 10:59

General

  • Target

    https://drive.google.com/a/pcd.club/uc?id=0BzEYaL8XBo4ZS1RDd1VLR1hyemlKMnNxYVBDbXl1ZmhQRFMw&export=download

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/a/pcd.club/uc?id=0BzEYaL8XBo4ZS1RDd1VLR1hyemlKMnNxYVBDbXl1ZmhQRFMw&export=download
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4752
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb906acc40,0x7ffb906acc4c,0x7ffb906acc58
      2⤵
        PID:1936
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1924,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1920 /prefetch:2
        2⤵
          PID:3436
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2156,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2136 /prefetch:3
          2⤵
            PID:2212
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2228,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2192 /prefetch:8
            2⤵
              PID:4340
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3120,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3140 /prefetch:1
              2⤵
                PID:1492
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3136,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3184 /prefetch:1
                2⤵
                  PID:3560
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4540,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4520 /prefetch:1
                  2⤵
                    PID:4380
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4688,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4708 /prefetch:8
                    2⤵
                      PID:4800
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4716,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4828 /prefetch:8
                      2⤵
                      • Modifies registry class
                      PID:5016
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5068,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5080 /prefetch:8
                      2⤵
                        PID:2744
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4980,i,17318740399501572231,18233446812025207956,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4904 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:4936
                    • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                      1⤵
                        PID:1016
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                        1⤵
                          PID:3084

                        Network

                        MITRE ATT&CK Enterprise v15

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                          Filesize

                          649B

                          MD5

                          0c387a30901c4991c477b7612b222110

                          SHA1

                          4584c4adcabc74bbd21794383c9f74514df06b6c

                          SHA256

                          c7eff1b0cc6e19e1c035ecf247dbbd730f705130866ea86aab5554d33ac32f14

                          SHA512

                          058a125b887a76999a29b6e49779da5ecdb4e8904ba22fffb31869f647532c13daf6c8665e4348f876fe69132a4b4e1f4ccd920a72fd5dc21938d956d48cb322

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                          Filesize

                          384B

                          MD5

                          20ee462bbb2b2fb718142f10afbf1df3

                          SHA1

                          7f6ffdb320438a61ec643575bd023fc7287b29e1

                          SHA256

                          ff16078167ba2a8020abff8432b7887ca2fd6061ed32f355a8d7e183ecd16884

                          SHA512

                          b82b928fe51f5f9690fedf22fe147f61a6b0ed0f17b76d000221fa56ae786e45e82a0b36e656fc64cfc9f2e42fa63ad5be908b3c03cfd856bf5840707cb78a0c

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                          Filesize

                          3KB

                          MD5

                          080dfceb98f461d7afe1ea902ac6c8b6

                          SHA1

                          6c21d7f220789064321b92f219bfad8362ddf69a

                          SHA256

                          9898329f7c1ce4d8039d107e6790c2e5398a677e40364307c576a9b184c2c78f

                          SHA512

                          6f33eae958825730d169625da99a30264a36d8b9a966776e9ebcb095482d356267bbb304123e1d7567794056ea53e338249989fb362280fda58b0744d4bb4c0b

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                          Filesize

                          3KB

                          MD5

                          8218950e997aac907a62232f57aa7354

                          SHA1

                          c98be8e3f3d971686b30051fddbc96364b500c24

                          SHA256

                          31ce497b482d1dfa6e1d079904b5bc234b3b66945525e9ff5ed1da18bb299cb0

                          SHA512

                          434a1192331e8dc69478c48b8658cd4fc5bb1092eccb18593cc593aa2b0ba93f58fbb0ddcf894c4e0d35295bc2cbf9743993ca1640e8a463355f8a545abf0ef2

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                          Filesize

                          2B

                          MD5

                          d751713988987e9331980363e24189ce

                          SHA1

                          97d170e1550eee4afc0af065b78cda302a97674c

                          SHA256

                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                          SHA512

                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          524B

                          MD5

                          5df6e327409596dc40addb4bf6b33a7d

                          SHA1

                          1fa6f56bf3588ee280fb7664202a878137de78ea

                          SHA256

                          3937f82d64c2e1e03dcee10fd5ccb5fc12de00abb3fd4a2c372ffd634ce5fe8b

                          SHA512

                          fc19f838c9adcdcd88a8608396ca4b7e577d6b8bab17e6672254c95eefb29fc3042f45109ce9545cd186085b64af9fb0295079f86e148ae6d9f3602cd2f8680d

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                          Filesize

                          524B

                          MD5

                          93598e7b7c235157f218ffeb2f01fb0d

                          SHA1

                          114d74f3daf2724c2d0894d62dad8b0b5161630b

                          SHA256

                          5b2497282c7219b724cdf0d262683176dbc141718746e8c1eddd9176cfa0cc32

                          SHA512

                          cd8cc47fde80c2936c554e79d696cef300ac0130afdba99adb56282a59fbd6261db0cb1d96423dbcaa3041ff960b2e9df764c9658063266a8628f414ccc1a519

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          52b789185619afd961dfc8ad00859399

                          SHA1

                          dd6f42b393d17009cea6d90d9d0959bb50fc177c

                          SHA256

                          350f45f5514fbb7d1a70bd17c50f5c20701fe822952d2ccef7e2e5d18577cbc0

                          SHA512

                          f0bb6d95dca9ad3e50c6c07169be65aa1fbd0379ff6fee09cca6fe8cd166f872afb73ab18027a9cc0055ed2e37d6dbfe6ec5916a2d79abfcbb33f9120b953ad0

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          1c63d8f51555007c958495e0ada86270

                          SHA1

                          03a42dc620120a45cac6a638e7f0b2aea4b67deb

                          SHA256

                          3e22442b3c5f1cefc479f1666461282906785c7c74ef12a46b6a102e452dcba0

                          SHA512

                          72b4fd281c5eb32e7eda18408395ed6a757cbff0ce9d74a8e5c4e5bfb17845fb422caceec6e3adbea5135d1704387712838ec0b4c1e33d1a6971acc75a93a272

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          9KB

                          MD5

                          8d581b47682146d83aa162579e7386b1

                          SHA1

                          8e9397f7e8b49254da011b4bde743917ce6e2846

                          SHA256

                          e6b7fe5721bc82b92d71755497d36121003392a472346c7b4eae29293b325d0c

                          SHA512

                          0fc9ff4a856144f3bbb5ef06e54fa93d3467461d9a7050abf343e247ffeb09dbd663dc2795a961b63b0c8e1f72021b6593fa0ff0e5ee657785e1a0807f19793f

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          aa1f016bace44041465612e950ffb3c7

                          SHA1

                          e2372be76f73153aa238d61e6eb76b14eff4cd71

                          SHA256

                          aa514268b48113badf9918d17f2a17f5b253ed6cae5068e9fc97bfbf88cc606e

                          SHA512

                          d1fa2284b04014e9cee0fced5b42a4d0233eb42c636e8e431a495093d3472548bd151691c61ffc4ff292d559d212cc8d8cfb6146c651c07ade782caeaaa7db0e

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          e5cbe33cff965b69e13e1a57d2bd7413

                          SHA1

                          fc9b6e05fb3abc42041237dbaa68d573c51c82a4

                          SHA256

                          4b892a8a3f21c9614b857302038b24807bf6b2edbab4fda6bea56e96807d8c3f

                          SHA512

                          dc8b818e019aaca2674c542fa8d03b06554c12a5a57d22d96b7ea41ec821385f2eb25b78054c986fe0e39708800b23108477eabc1aee19074aa5c81c18f46c7e

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          3327743f06713f86b7291f1c9faa9cad

                          SHA1

                          c4a03e0bea2d4f125b7a9fca24dd3feaf21e401f

                          SHA256

                          618b7ab594138627b8fe22161a1ba7019d2f71854a735e7b648091c2d3b7e151

                          SHA512

                          a75c552396dfd3d722481d93456a16de2e19e6e2769f2e6cb9f63b6a386053ca7301c289a6494ef764b6783d6a3e39d44bc0eec892e991b5149452e37e8480b1

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          9KB

                          MD5

                          696cc30b0dfab12e64c8617445233a8a

                          SHA1

                          1a9acf67e322f0eb5c8e91ac067af5287bb7fd59

                          SHA256

                          869e1f828c4d0a9b3162a8b1347b29de88631fa4c7315818f8b45679187e713e

                          SHA512

                          8caf1d0ff95409b58da1ea223ba946de7d22da7c9118e6ba4b2fa560e802074f7d1ff22e16d44c721a29ad8971d902567548d2de1e2b739fcced672f4125d6a3

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          9KB

                          MD5

                          59a8a8cadf75f17926526475c3ad4e63

                          SHA1

                          8e9559c0833e2a9aba2a3ff63d6060f488ee3d22

                          SHA256

                          3f1bcabb6114f5f501d7bab14467af18098848209178a980cad8cb13859858c4

                          SHA512

                          2a1e77fc3db082934463b97fef513410b38b054e406a94755430de5df31e4f8c06da05871e971bbead7c6c0857baf44709956a51c8f89510f7d4d24167428513

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          339faffcbc0101cc42081679d9d3904a

                          SHA1

                          1a7d554fec47394fa99893e0b519dfe9bb8c273f

                          SHA256

                          94ddcefe03bc4ba59b351100a18f700a12bd234be00248be8bb16e4323887ca2

                          SHA512

                          b7b3f533807492b17e7046c25ccf607bd838a663f974bda762604611b88f65f4b47ddd85be8057268c17b5508f832f123fcfbdb72dfbf093a9386b9640f264a1

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          cf0ad33a433e692bccd0bb33b2f499db

                          SHA1

                          87b5d916a7b1f465ee564961a610b64eba2ea78f

                          SHA256

                          156192fca5bcccd33af92214f8abd9e50b2069301cf60c07d4e1a791108c298c

                          SHA512

                          878ef3434802e8fcf8838de891c40730539fffcd93ee6e7f71ccf585c65d100d6ce3880ceef43921b75b449f3d2c2b83b098da8d095dff96889a3022683d2ca6

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          7b4441da5ddb2541c9aa2600e08103c6

                          SHA1

                          dfbe77993497e30886faf59dc8289bd5e6cfe3ab

                          SHA256

                          330487acd981b876edd8604e8c05a3136e87d2b7a180b12abbd02bd7a52bedc5

                          SHA512

                          fb90e4d48246769a84542cf61ad8600a5d09c74a66e43422e7864d7eacdbddbbf1b4874dc979487e057a9960aaa32779fda7dbcb3e39357ed8068f32a424e4cb

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          a9d1ee9daf427a800cfaed84359706e1

                          SHA1

                          c21101907b2bb20ad67abc9cb3c1efe431b3ae91

                          SHA256

                          61e13d34ad22757a63a0041e8ee8cc336a7855b651df1504fa9257212bde00d2

                          SHA512

                          0d207a9eea4d7478560f3bc5ad20d0928e7c96559517067c527f0aee3b4308ebc2c276a50717ae83fb9d0dfbdaf8b1c51aef5c338f7b9bfca7662f2197be225e

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          c91134ae6547deb1e8b3f168728a9534

                          SHA1

                          87f464d6b97db1bab2943624df1899d6301ed9c9

                          SHA256

                          9233625b110d4cda6c99fa4e58b496e88d858fe83978cd55c64c6b824583f414

                          SHA512

                          ac5da178ea0ecc9b4335e914c001a22b9343fe3a9f2be015bf1bc46557c48359f7a14bfdb28e8fe87170f052975f83766a495752f3a1166402fdf8476e69aad1

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          9KB

                          MD5

                          4e3907bdbd97b472322322c652d58cee

                          SHA1

                          b42c848f1575244c994eaa2fb0926faf3bd8dd1e

                          SHA256

                          8f3fd9ce6c647b2181113c7a59ab70ab24a86a489b68661f70a9e58f9a095815

                          SHA512

                          4c40503172bf018d9362218210db4ab79e3a0df62363ab10d5bba1542d9c04b08fd8ea7e4f89e8e272471292f315a77e4bfdc8dbd4aff55419e236fd389bbf3c

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          b05b9560bbb8ff96a3194e703be1a2f6

                          SHA1

                          350bc320e0942337fe3e5261f7a721b352c0a78b

                          SHA256

                          28ad537200aa2fde75c29a6d05ce5d65adb1c87c770e2b4e990bbdec08f10a6e

                          SHA512

                          3e0bde6fbcb1601f5b532201a107ac42affa76e7f8b0b24bcd8ae17235e262eae9c7e60a8015e59eeb1026a985db7ee9b3a1ae6371ea250c76708f17939412a0

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          9643ba3075f5b88c51c4a1fa9921989c

                          SHA1

                          02d116975aee6df70335a168ff8ed55806724164

                          SHA256

                          30e76a7e70b073a0ad68e77ef3dbdd975f20b482b5d29e579a3ffa523601faa0

                          SHA512

                          b29f60f2f3e2434883e051a993052e2e87c9e6ea4e72ccdceea5d7380e555ff79ee1f53a204966493dd1d16886c320ce9ae92e03807b8d8fb74fe5c8276eeddb

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          6d3d256b17342ec0d26a4dfc8b2af703

                          SHA1

                          6f986264e32b349e326bf03bca4d8559578d443d

                          SHA256

                          51ffe7496f94cdf4b01115588b23923693f4c33ce466a58516856d0e674809eb

                          SHA512

                          aed89de78da5122af6d896ae00f49e2f9554a6d3ff68e1ef1ad1a13245db1fd4d21242c92aa969c9719c2f446dbe4c83e2d261b5984dd3ed41f18aba1e6cb958

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          c224d55d06b4d01c11eb1c1ef2a95834

                          SHA1

                          e9d18b500cdc12e525cda949569e68fe3e6422eb

                          SHA256

                          4fd7a657375125c1abc43b880f52870ae7e105cd14fa03b7662d790ff08875f6

                          SHA512

                          f4ce7d052dff02eb37663f4990d7e619a9ffdb8af8b167f8b4f83e05873af348f7c602a411dc0e13f4c54a1cf1fc12aac4d0e12279f356810878c3643df152d9

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                          Filesize

                          10KB

                          MD5

                          92654b6b5569a69e3580c399d37481b5

                          SHA1

                          7105f3a297cc9b8914c93a4ca1b1d36b6ab0b772

                          SHA256

                          73391d8e97a2bc7745f311c321666d8099c2402e8912364aa965c7161d1695cd

                          SHA512

                          70da12f57421cb0c10aa1cbfb86407de3a81619959d225efa5302d4d5d3307ca706fd2046fa38b74af8587848898ed26702a9ac195ad215baebbbcff2d0d8dfa

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                          Filesize

                          116KB

                          MD5

                          9b5b7c170c9a5a321391a45355a4a83c

                          SHA1

                          a0e8e522a2ac79d126c5509cbdccdf74f8dab8a8

                          SHA256

                          4a0f96286e057efb15d3dd1f1ab25e5c8d430ce2e9f8762e093064c818cc097f

                          SHA512

                          3fc0abb3e0fae92240e71e1c761cbd3cb019657066189ebe9e26e4b502a41eaed0193939e43a630c3b0cc401560666167b10198220506e23cfc0b3aa8f9f449e

                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                          Filesize

                          116KB

                          MD5

                          a2bd49f8a3f7169b81ff8c948dc33602

                          SHA1

                          64d925cf598977d7e715272e504a2602079abef6

                          SHA256

                          0eec17c126501ad9afa6b472fc546442e5825a5fb57fe59927ab2ba2891476b0

                          SHA512

                          e28f2291ea6b2f09e5e0501a49fe04c88bc0b4b8ccbe20d09894a4de86fb67b1d0968dcec5005fbd759a89d928564d1d1c98fb69a873c211bbf850abbc39fbcf