hxxps://www[.]google[.]com/amp/s/twincitieswebsitedesign[.]co%2ftask%2ftmp%2fc6bsdp13%2fcmlpbkBzY2FuZ2wuY29t

Analysis

max time kernel
299s
max time network
294s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19-05-2023 07:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.google.com/amp/s/twincitieswebsitedesign.co%2ftask%2ftmp%2fc6bsdp13%2fcmlpbkBzY2FuZ2wuY29t

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133289622677579929"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1336	chrome.exe
1336	chrome.exe
4692	chrome.exe
4692	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe
Token: SeShutdownPrivilege	1336	chrome.exe
Token: SeCreatePagefilePrivilege	1336	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe
1336	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1336 wrote to memory of 3692	1336	chrome.exe	84
PID 1336 wrote to memory of 3692	1336	chrome.exe	84
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 1956	1336	chrome.exe	86
PID 1336 wrote to memory of 2064	1336	chrome.exe	87
PID 1336 wrote to memory of 2064	1336	chrome.exe	87
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88
PID 1336 wrote to memory of 1976	1336	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://www.google.com/amp/s/twincitieswebsitedesign.co%2ftask%2ftmp%2fc6bsdp13%2fcmlpbkBzY2FuZ2wuY29t
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf6519758,0x7ffbf6519768,0x7ffbf6519778
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1792 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:2
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2172 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3220 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3204 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4680 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4840 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3516 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5288 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5300 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5380 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5404 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5852 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2844 --field-trial-handle=1812,i,15778529278804193074,5086232855512788262,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4692

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3720

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
8f15306cc9c7c6ce2bfb6eb24e7441b4

SHA1
b56530222a93c978f0f142396cb9cbd92b934a8f

SHA256
c75b69ea1cd741acc4052ed14a6de2ce842cfb607e4cc7191416fac1246e1a0c

SHA512
168f4d47f7980ef7336eafda4458bca20c349c587c567c28db07c5c0944ef0ef2c0a2616717b3702d5001c63ec3b80dfd5d2277088aa61ad4fc8f8ab4bd65dcd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
e74ae3f3c5f1c2915e301947b17fa65f

SHA1
86218b945cfa60f30ae0f4fbaee700be9488b244

SHA256
8a3aa941924dad39a1bb1f98d7f6a92cccc564e2d7e19f0d135704465c080938

SHA512
1af10b033db6782f65b8820f2f12b9668465565f2f7830c7562addfd3f78f56676f06afe861151c5e56f7d889963ff4a8ce21915c3a7127b58df7312fcdc2302

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
5407d26c8092365a8eb0c571ba09c145

SHA1
6a674d080bbade2965f7b878118279c676fdf750

SHA256
53bb0185bf8c6dbd5365bc2078daea1481cb30e807109d4bb0a69d37af68032f

SHA512
ec5c218ffeaae9a36fea05dfa833439a4caed835c97462441038247bd5d3d7146ba2db6cab7452cf9316f6cecf5809520d655c15a39ee1dd58b21c80152f6b7c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
91f29aec1793442d22cfa2fb4e13e714

SHA1
88d416c621a9bdb584571cf5dd032f2931c61963

SHA256
69a28da84300d9e5d52dea8714236c71ffda2ec8f1a9f2a0b2ef259063adb8fc

SHA512
7c312dfdaa679153c43c2455ef2da15906b6a40bec770159a75d9d148aa1b6125210a32d3060fab13b997044aff8247f9e38e0986d85fff09935b323259d54d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
98470b1605d59399591793b98947b4fc

SHA1
8a36bbbfc062283121f81e8899286e11dc8a83ba

SHA256
6cf7f36eaa2a66b6426f4d7461673cbf0e260589f14d864b1c9d5c84bb651896

SHA512
c5cefe916d58e38585e31f4cf253e8c964b1ef98fc397dd3c5df89ae6ca614de7eb39998a6693f63c5a7990e7abfbc05468679f869dc0673fe973a6100200c69

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
536B

MD5
7f643e719a3f886d0be785a6f253d3a6

SHA1
5de6266e003894cf6f89a294a6d6e3b8a9fa1766

SHA256
69d870ecf1a6f2d494a2877193372826e2f4fd1496973ad3e4440c83a4d6ac60

SHA512
4ccb7ffcfb0786d535e151cbdf4e4f0e76bdb53cddb11fec48803e4716d6920c1b7992f17bec178870b7c92a2625123f66573c137145d2fad224cacc42d826bd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
369B

MD5
23fe386bc99369c8d278e296475806cc

SHA1
fd10f28c7b9a5d017406e845bdcd7ddf84d6607a

SHA256
c135ed42f65bb4e66ad3e01e1eac8d576934029897b1a0741e424eb06df49359

SHA512
0f6f41cd672d6f2ee39a8d3f01cc8aa2e707d46f13b38b2a54b9bd4db1bc3a364530d4ee5805b0dc9e00c7596d7066f277543205a26f07a4b9c3a4231a40a0e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
f9df2823b5b663d59dad14c8c4f30725

SHA1
a76b57c86da333075e7f27e5479777abd44f7740

SHA256
94929597505d4abf889927c1b0d75a2ed67feab4e67288803a52022dababa668

SHA512
5479632c1a874b290558f679479f6e81a5965cd54016419fccb6e59d593f52fb92277663ab250c1ca253142d7384d1cab2f329638ec1f102a76db78ddee0ca90

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
45d9afda7c399468ca35589a8034dc93

SHA1
14d303515374c92c4fade67a549b86ecc7617b6a

SHA256
8612cca3d88471c88c473f7fe17726ed25fed8b2453837d047ff3fc25815534f

SHA512
a06256a35c8a3b28a5eeb51637f1d8524cf7ae27b4226d50888818287e7259429e0c69e467d25842d85711ecdf9d5d2794234413827c201fb17387b347e46167

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
151KB

MD5
815c884075be002715eeef6fd76c1129

SHA1
71ab75c314e98a48ac4a21bc4d910ec0561a8286

SHA256
fdc7d59e4868348104bfbf386dd3612a458b9973ae824a113c7a2e52b72a1873

SHA512
c07fa604aab88b1783d8e8e02780d358fd820bec78209660edf364ad703303087472105b88396fd2c7ac4d730988511068df0557467fc6eaf34e52ae15f2a8dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit