hxxps://www[.]cxnetwork[.]com/user/email-login/vwvnhm8glkjuuq8z1kwpyq3dwxmyzbe7smtdna2jseyg3hbqbu/64106836f434835a036708ff

Analysis

max time kernel
42s
max time network
44s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
02/04/2023, 21:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://www.cxnetwork.com/user/email-login/vwvnhm8glkjuuq8z1kwpyq3dwxmyzbe7smtdna2jseyg3hbqbu/64106836f434835a036708ff

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133249530854522792"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe
Token: SeShutdownPrivilege	2180	chrome.exe
Token: SeCreatePagefilePrivilege	2180	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe
2180	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 1980	2180	chrome.exe	85
PID 2180 wrote to memory of 1980	2180	chrome.exe	85
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2736	2180	chrome.exe	87
PID 2180 wrote to memory of 2148	2180	chrome.exe	88
PID 2180 wrote to memory of 2148	2180	chrome.exe	88
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89
PID 2180 wrote to memory of 4780	2180	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://www.cxnetwork.com/user/email-login/vwvnhm8glkjuuq8z1kwpyq3dwxmyzbe7smtdna2jseyg3hbqbu/64106836f434835a036708ff
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffff1a99758,0x7ffff1a99768,0x7ffff1a99778
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1760 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:2
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2232 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3104 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3292 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4904 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3900 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5380 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4932 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4880 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3892 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6776 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6868 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6636 --field-trial-handle=1812,i,13849309399249601424,6238164158631730193,131072 /prefetch:8
  2⤵
  PID:980

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029

Filesize
162KB

MD5
b81d6636c3ad72c63e532e5180eaf7f9

SHA1
ddcd059999fff6218e98af62dbe3fa9c885a0de8

SHA256
2fb4351c49b47b7cdaa9516237a8b1e690e4448339d09d70a84c658729e461ef

SHA512
4f0b87bbf60061a8efca4906554f958b7c28cf582452e01a8316d8c5ea8c98beda6c3230afff207f0b92d316c4c2e0ca1b4631e7d7364344b4a76394115af06b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
ca1b68129ab3b381f13582e31f1bdc6b

SHA1
cabeb918c8d1826d9a55728da730a1181a562d4c

SHA256
aac63deef1d08bc67338edb5ba17343649536e616a813e2a0375f946ca6e63ec

SHA512
58361404b1943c1c310d46d4d1ccdedccfd952c3cf49f522faa9d9b367257273a3364a4adaa4c8f29c5f282cd55de30f90dd451af90bb1acd7f7b9bf47c67f24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
06e28348ec35cfa69124fb2de399eace

SHA1
265c58b2a05a2af437d0071f45c3960b5acaba49

SHA256
0d982a9cfb74e0f84833d5f06d9e281195b7d8e6fea2a4347ee3df2afaf29de8

SHA512
7390c840fd7c20307ba187f9b27acb9537048136a29b9610e39b796d973c693f565f00add47d7d17128de503d83b48186c0b927ae750cf395b4675d6024a27ad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
8da97b548ac3f5c51b5fb4904366bc02

SHA1
5de174eb26708bf5464ed8b5bf8676074449e4aa

SHA256
5bc70986bfd92392549bda390b8a64be225a46b38f77490858b4eabeebe73c11

SHA512
8b79adb3b91a91ddcb2182b939af29ad55b7a0bea67f51b3ee1bb1ddb8ce36f40c90ea17fd54d59b5f794112bccde140f849e4d6cfba99f40a8f50eaf95e9edf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
851970557f7fe30c4befcc8cdf08f4be

SHA1
259f9b66aa8c8a0819876bd4968c42c2e1de6f05

SHA256
2dcd82c417317d4a8943f7a0ec075b39e223204839e7eb2cb38b977d91f5e126

SHA512
696b2b7b358d259a7fb4e9973a0a0812d5820356668926efc60f03cda06bcc6e9765a1d1b9913864be13ad9424695182735ab98f14dab3d546323a222996275f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
9829110a46ea5c3afb8546dd90f5270a

SHA1
6af13c9e39bb59f64cf6a1a6eb9ff80320cc3fcc

SHA256
f1fedcba5120ca609e54d2bf6aac2daa50a9b6dd4e338727624576d176989d63

SHA512
b39a03761360765d5c1a1fc437c139bacbf15af8b9a43d57d27fa989c3a5c515915a5b447b519a549bb62a93cf911fb68572577f3a1bf33775d2d17d3aed884c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
b8572be53b8533e086a3718de020c553

SHA1
48a2aadaf170d9cf1fe480632d8d8171f84350f0

SHA256
e56122a5ede0f8e9e6c03d520a4385c210708fac83f9064b56effa511771c319

SHA512
a975b2619a1f8b243f284baedb1106ca94c32b643587f0419059ce19366b5ba0290330602b80fe5f313d13a32a5a37ca7eb081b10d21ba9373fdcaa44b5b03d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
48e18f8f2067524bb5361a8a2b5127f5

SHA1
2ac8bffdccd286068bca5f722af1d889673507d3

SHA256
cc59ac0354a88d472cc48c178fa398b43d5465273b9b913e40871bcf2d0079ae

SHA512
43858d0e81451095dc990561f6f1d8201b326780c376325e9b1ecf55cc9f265dc9313b4835e98a3d58116a008e0c8c02113185b5cc9bb1a704d1911e8462b696

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
7f1c0b66fae25939dee293f0bfb77fe8

SHA1
fab7fc600a8e4f03eafe38b960d234f65acd543c

SHA256
3d8bf87aed1ec2ea0aedb294dce032ba1cd686fc360564c2776289316c5405ed

SHA512
6f30e56fe9a8206e6f159b39b7e9732dc19817af8dd5905133e3ce9cf913a17f372a5aa37a75c9f647a35ea62bd49209bd989a9fc49481fdbe858e9aafddab58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit