hxxps://workflow[.]masterdata[.]abb[.]com/request/task/875914_24

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2023 09:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://workflow.masterdata.abb.com/request/task/875914_24

Score

5^/10

microsoft phishing

Malware Config

Signatures

Detected potential entity reuse from brand microsoft.
phishing microsoft

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133248216656115585"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4416	chrome.exe
4416	chrome.exe
2124	chrome.exe
2124	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe
Token: SeShutdownPrivilege	4416	chrome.exe
Token: SeCreatePagefilePrivilege	4416	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe
4416	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 4632	4416	chrome.exe	85
PID 4416 wrote to memory of 4632	4416	chrome.exe	85
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 4172	4416	chrome.exe	87
PID 4416 wrote to memory of 3144	4416	chrome.exe	88
PID 4416 wrote to memory of 3144	4416	chrome.exe	88
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89
PID 4416 wrote to memory of 4636	4416	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://workflow.masterdata.abb.com/request/task/875914_24
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa75619758,0x7ffa75619768,0x7ffa75619778
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1796 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:2
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2228 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3196 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3208 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4576 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5268 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:8
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5008 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4960 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2852 --field-trial-handle=1816,i,13315777525795395419,11276849713697511960,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2124

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1424

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

Filesize
110KB

MD5
e012167fb363866fd5b00c4b3fe38319

SHA1
75d6ee086c42b8fe7466b8e510a7b5a41c963cbf

SHA256
189dda4314f2b3d461dbc1f53df667efab8aa730435f11cffcf162ac9a958cb2

SHA512
20b214a52c7b2a526b3621f67bfe630899f313c24fb5676cb65856341efe4de15b6945fc024a8e7cc7e30c7ffc8fae0ac9a6bfd2f9fba2a3830a8ca9f45ab6f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

Filesize
16KB

MD5
12e3dac858061d088023b2bd48e2fa96

SHA1
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

SHA256
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

SHA512
c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
600B

MD5
9015ab64d6b6be2cac6fcf8e0ea100ef

SHA1
6cc3404d22929bff4198d899a1cc302a3135aaf0

SHA256
978852ee4273a6bda79ced657f24494984253503fe81e566ec103b53c5890942

SHA512
2cf7ae2213e743a5f537921774400005d589bc2b2d18c6208a0c2756870f73c5a040e3e97115079ecc8ffa17589f1e686cbd031884242087f6736d542db77508

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
672008b4c27126d1081fc2a619fa6c21

SHA1
e34548df9b494db12da4ff21ddb9110e09ab84e7

SHA256
36a865b26f7257ea13d3682f686ea32aae42026093291cdcf41ffc2188cd0861

SHA512
52f756dc524f0748344d70b33c3f545dc8383a978b3887c2b9812c7e4330b90d18c232f0165213d9456276a345cdf6ddc77683422ad649f98568240d45ff7375

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
9b3f6abad32b22889da13a35e1bbdfdd

SHA1
8fbafaa598f0144e722c8eea242c3d8c2e1ed720

SHA256
b33e38924e180916488921b7dc572bb3ed37d5904b09d78ea76daaf0ebf2688f

SHA512
ed071c353909ef22d74481a182004b49fae69b25b4ba8071d20c8fe8086bef23f5328ca3926ea3c717e36a10b225db572c020a722ccf388dc17563a5a4de2265

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
2f7e1357d2a9b904f9f57d1f19736e58

SHA1
e741652a902cac6eae5bcbd679135e279a514e21

SHA256
10e775da159b92dd12fa2299b81065844ef93a5662b4315690cf6c959364dcbc

SHA512
b996636c4e0580338b6e08d890ebb32da83c6fe6d5bb35d454b5151615a90416ff1dc71b4cca94b9a8124c19e6e7472fe54040e2102e6d20da2cb0d48a0a2b12

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
706B

MD5
0671051feb33a98a7cb86b55a40d0b79

SHA1
ec2446ce7338042538016e37e549194b6d70f690

SHA256
d93d06a0c586ce413af6a675c2e1da4517e7580cfa708b3a8089cdbbc6afbb17

SHA512
6ff1e8afa78ef7031639a03ce203f8e2e07f8b32f7bc163119c300acfd5d9c00acb82ecbb5276545b99fa1f85d494d1223cb9418c13d37a6f36edbac351fbbf4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
873B

MD5
3a11b13c33976e62df6976d9ba56e79e

SHA1
5e23069433510f88de1a7cae1b60bd3f3a921e2a

SHA256
73174028a4519d5c75375049a3a1fe81da10da9bb803903a628a5e929e9ad6a7

SHA512
7f8808dcb8e5655114028984f7efd992101adc0a82b4d61d8940bdb3a4d701ed8930a0d15593ff15ddb1f006bea49cc9ff0b3b47bac99fc47022003f923c1551

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
4625ebcdc4c964adbb48ae75deea6630

SHA1
0789e9dcd8bdcf1ddfa5036295afb5772ba47c29

SHA256
5af5c0a4743628a235939176d5d9cd311aab064272df158127c715ef389cadd1

SHA512
3cd218029e4bdda200d697431477db4b0ade060621d0c41c9001d9eb1421e8b6a3eb66339793d008928277e2c520f74aa3f3768d692f5a3a291fc6e84016eb6d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
706B

MD5
be94446cf5a1814b9b960c0af96efde6

SHA1
ee73a7a82dc949b03403fe45adcc9cdd8028f9db

SHA256
90b50c210572caaf104ec3ace1141fa623b4c394a7c869cb8c8a977882df922c

SHA512
3269b267db029b42300b10e95580ff543947082902afb527d2757e57c1d0f5520b3332f781e53f0bd74043492df4665e15e32de7e122aeaa75a51aa302405dbf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
873B

MD5
8afe0f27b7db3dbfdb54ef6cfa4bf67b

SHA1
322657b1bedaf9699a78a744487647d7590fdcc5

SHA256
aedaea3de45d39a915315bb75da88358fdb5409f1549b953f83609165c4e2062

SHA512
3ce46261d9b2ea7aea86cf1f5a762e3ad64c78970e7b2869b2f4f0f6b85987f09876b32af67530ad15f95591d6e9d8bf328efce5411c60c07478c0b07ebfa190

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
dfe0eec5cc07dfcf2e5c4f8e3b3eda74

SHA1
4278f97f82f7081fdd7ab9b2553a0be61bbc17a6

SHA256
394af902f8e30c251c92e17541b9ae2db812a5749401b44274c3885cdf2a4080

SHA512
81317f101ca508eb40bd4a46003103a757b436043f3ba1108cc0aef0735acad94c7e72959002e5c453b807a453990eca7a5efc0ca4affa5cda2ce1daea8feb99

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
a528edb4146ac360d60939d6a0f1fadd

SHA1
a88be20bf09a7b8c3ad6f8c5af797061970252af

SHA256
9029093c38907872caed36e050c76eade0ee7c1bcd0e2df48540906bb6db5794

SHA512
02fd994ca937889e08b7cb9118676ffee3728d66b439c1e016061d7a51278d0865e881cea9c617baf3a06a10a2bf6b3980914e1c9bbdd472db6c8febb9d8a999

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
873B

MD5
06eebfe4c35c6f7ea48591515322a10c

SHA1
2cc3c6f41c8d855acabace9d70f5d3e21f75dcbc

SHA256
e3517275e833e201c9b713e62b00a2ca06c6488a74437cbde6f7d0382f358514

SHA512
1acae3b992f52897cd91f080cbb528de2ba8c77dfda7d19a0e4da2b2b2af0b74d2d818b39d188bb1fd7dda442c965e028e21e5b609bbdfe33e2585ca16d27c4c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c46d91c675126df779125515306ed7ae

SHA1
8d994e6cc585a9db5df0f2be34f94d9d58d1e706

SHA256
96b8bd5a91ec3685d9c7a371fff7bbce9595aee36f2576fdb426142dbd9b55ca

SHA512
9d2ca70da7bbffd62ea51f9dac9515ebbbfae1f96030838d8f7d5d26f332a1c2c7a6b33b4db04f8f3b0e920b3c5e6144165753446416ad6b63adc47ce9523686

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
d1e0b3525ccd310468c8268a67efe5df

SHA1
4aba486c7edd76327bea1c7b1c3df3bda982bcf3

SHA256
9fb5d590dcd6c4fe1de376c4885ea374a6118d997a3a99c1b6716223710a4547

SHA512
66bfe42d7b485d0bcda60f4f29384f65448db2206afe3c8db85763b2c5effca29ac31fd882e899fc8f7f918595699f9810d599cbcc2f9bea078c106424391f2a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
eb69e1e7da548e2c2e6f4c384f2fc3e2

SHA1
cdf2ac801fb9288110870328d87bd25732f45b64

SHA256
662367eee4c14a2d0d9fc42d42e8a8e4cacf330fe2f16ac22da503cb5e26f807

SHA512
474ddac6f9c2dc503dd6ce160d7ccef54ebe368200a4eeb1be4c5a71869ceff6bb03615ceee637d8e2853b49ce333c58270e71401c8983232792dcc1388a0d1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
58473e938ccc3fb52d888bd8adf18d90

SHA1
95968027c4b52af2333eed8544747163dddcda83

SHA256
a136a7686ddb570ff8dd9eead00f8db29fbf260af35231a6d1f2d485664f531d

SHA512
c836a095b141d41c08c68f679efaae2cf459785cae93a2e86c5c6dde72e93895375e0906d114b62884bf1777039149735202a9a3201d72d9f40f83ae5d1cbc02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
eb417fe0ddaa1f5b73417ca0c529579f

SHA1
8204ced7b451060159a2e4f6806597b56e611e26

SHA256
d6acd40d32c3f7e46c1551b5e618b143135c4f27912839973888dddd8ffc89e9

SHA512
419a60faeee02afae686aec7e3ad239f9f3a8322fb576dccf0dc1d7c00680750e30611097a9579e7bd0d30fc6ccc16a59f71bece2425eb20db4c08bf83432a55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
59cd9e21319b6d65305a1634e7f50416

SHA1
4572672b895305affc49c11163b2cd52ed6edcfe

SHA256
ab9f61f29c5a252c44b2041c67785127bf5de0f8648150b09c54bb18f42fd82d

SHA512
43259509d0d3fe9b5a5fbe0a0aa24530450e6a755a79549c8f2876254c7708f0a1aef9a30b6096c79791405dd064863a43bcbe76fccafc7e84fe2ec40e0922d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit