hxxp://sbcglobal[.]net

Analysis

max time kernel
149s
max time network
127s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
09/03/2023, 07:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://sbcglobal.net

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133228238985164074"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4280	chrome.exe
4280	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe
Token: SeShutdownPrivilege	4460	chrome.exe
Token: SeCreatePagefilePrivilege	4460	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe
4460	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 4476	4460	chrome.exe	66
PID 4460 wrote to memory of 4476	4460	chrome.exe	66
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3756	4460	chrome.exe	68
PID 4460 wrote to memory of 3460	4460	chrome.exe	69
PID 4460 wrote to memory of 3460	4460	chrome.exe	69
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70
PID 4460 wrote to memory of 952	4460	chrome.exe	70

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" http://sbcglobal.net
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a9119758,0x7ff8a9119768,0x7ff8a9119778
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1616 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:2
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2112 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2564 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2572 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2132 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3564 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3796 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3812 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4788 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:68
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4760 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4744 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2376 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3488 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2900 --field-trial-handle=1700,i,15901585082232962226,2683180101389475748,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:5032

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
d78ce3090e561a544842a56c5ec0fd7f

SHA1
ad009458b048a69e74e09ee87b66dd77917e2206

SHA256
fefdb5faaad64f688cae053e498e9a6f710d6fca9592015a3cc5db96881c69d3

SHA512
e9a7d3725e79831f36c0f1c7479f1f19328ca6c3e056ddefb54c19dc9d73b50106c7a2461a0e6336b7c69f0d1ce4f648f614b216ce4741a28a994dcb826ec194

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
fafad6afec5983aa0a290d2e5b0e8853

SHA1
ff493a55c6a0b696abf5f5770baa01d1af6b8219

SHA256
9da1690b5ed015adee2829684170d78dbafc52dc07a57fc7845d9085e431c213

SHA512
5a95aca0c80422cbb72f8353bfad82494429352480c3304cbb1de92c8510b8f2473702a5bb554d449ec36c8eb5e6df2cbbcd207f49c4337a7091becf6102725c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
ef97c27e13944bccc376a368b077b487

SHA1
b50009753092999cf07cd3ef9ea0ffc5fbe7e9c6

SHA256
1a77748717fca5146f2c51d86355852a53d9a2f706787aefb9868c73735a6f2a

SHA512
c511748812adf1d23cc464f239e0405504c7df21dc265a9e1330a75e0b01c791bfbc4e919089f8485d59525bdc6679e32688d5bdae6b49921855c0982a8241eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
145KB

MD5
127da89b36433d0a760f1ba74a64c424

SHA1
e1353d9af476763eff9c9cac92b0c473f9b7a31d

SHA256
ea286a3be46e4cc5b93dc196fae08ded7cd239f7e441bd75cf5e15e6fa0e97ea

SHA512
d56bf9a90c192a7e2a0361dd906079b94a2f23b01a3b63e8860a19d8f810349f757c9166eb64fa899cafdb74812c48c766be1ca607bda19992e37a59f6928328

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
145KB

MD5
58eb907558aec738539e9ec9c36205f6

SHA1
01e5a89fb39e89f7dcc539cb83bdfdd9da59cec5

SHA256
7f32c0585ce3e002505918b37d6b423c7c4adbde9d7f4a39dd2e4bf39748e97c

SHA512
6557f089cc157b3c335994164803b9683a0c99e96f6063896afc09ca2716086ca8751451ec270ffdb2a74b9045c29e76d550a5d1aed83724b8dd285a23a0c3be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
72KB

MD5
765bb91849ff84d6690fed8a45bcc9c5

SHA1
d2e53aa71f20e23242400cc16c64d21b53864da8

SHA256
03183f5cbea1c173550b6cb032dba20befb73f8dbca0687271624c1ef14b48a1

SHA512
bd2ea00a9ab95c2cf5127b9a5a347fc7633f2c65d68f5ee39711ad4b66f7da2a5b400e6c3e2027ad7852730e71a14618d78f2c13b3c3bcb4c93efb9380e342a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
1de3a205d734ce977470e1cc40357e78

SHA1
7392c6f991d0fa982d2a70fe7c149afb2c4d0331

SHA256
da3af2df6a7069ce3403fe891ed385362ce9fa53f5b8959a633155d64a8be1f7

SHA512
fae8b3ae8bd8d6402e02ad2382eac5f6b7fdd03f929c6664eb9d45dc41106efb60dca1dd4b1e0b0a6e61a3480fdb21de4a82f60b3638308601102fd39c471a0e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
memory/3756-131-0x00007FF8B42E0000-0x00007FF8B42E1000-memory.dmp

Filesize
4KB

Download