hxxp://94[.]142[.]138[.]246/bebra[.]exe

Analysis

max time kernel
192s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2023, 19:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://94.142.138.246/bebra.exe

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133297836181402903"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1804	chrome.exe
1804	chrome.exe
4896	chrome.exe
4896	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe
Token: SeShutdownPrivilege	1804	chrome.exe
Token: SeCreatePagefilePrivilege	1804	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe
1804	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 4684	1804	chrome.exe	84
PID 1804 wrote to memory of 4684	1804	chrome.exe	84
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1428	1804	chrome.exe	85
PID 1804 wrote to memory of 1128	1804	chrome.exe	86
PID 1804 wrote to memory of 1128	1804	chrome.exe	86
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87
PID 1804 wrote to memory of 752	1804	chrome.exe	87

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" http://94.142.138.246/bebra.exe
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa66269758,0x7ffa66269768,0x7ffa66269778
  2⤵
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1804 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:2
  2⤵
  PID:1428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:8
  2⤵
  PID:752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3144 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3156 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4732 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4852 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5096 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5216 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3168 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4848 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=212 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3308 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2824 --field-trial-handle=1768,i,12290818715304385674,11452163940864231378,131072 /prefetch:1
  2⤵
  PID:4524

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
882B

MD5
6254d3b18eec560e035fe6984d5fdee8

SHA1
740dbb14621f66dea6656f321645451d593f1084

SHA256
c7a02c7e4e584c1bda5b4900098eb2d60c50ab3f9f3f7e25441cabed020f5d00

SHA512
36132b710b6f65fc5e375e9e067be0a3f50dbfabbe8fa5eca6f4fd7d93267d2bf6d51c46fac3fb7db3d76ab1f6e173fd05ef735d767da82553789a68916752a8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
bca9d96af772eb77c9bbd35d612efb2a

SHA1
96ef60a8547356df0e0608b4bd9b7e058111cfb2

SHA256
9b36905bd7e4ac0547a7e5c93b41df64e1249b2805e0f5f26483a432866dbaff

SHA512
46d371bbe38473272482ffe6f3cd96caf1d5516ea46802828207ab11a9d242d7c39fb361a6ebbb3b0ea3f8be186d69abd8863c6fafd0117e5eb3b7f0307e449f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d86ca5f9d1bac91533547fbe1244ccc4

SHA1
cb52629a1373cfc2ddbda49dff8ec3cecf9b9cce

SHA256
c31a070c76571b9e1b5b25724fce6b125c901306b4f55f25cc0063d3f0e67a68

SHA512
f116b972f12af2c7b6c70627c62f25f549d675f32f44654822686fa5539ad5f8719fff542609306cb57f7197f091966f33eea0a00f6c23a224e8f0b36856fc89

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
651df936b92acf979c31fef1d0558c2e

SHA1
4d8e075a27ec15b5d1d2a40caa3803c028a19929

SHA256
7e15e052c0f08ad89e9e29deca835d0eccc5b13acdc5280f1bcece72faef91d6

SHA512
74da176c73af224977ffea1d999762fed4f63eb8bcbca7993fe20f572a6821259a495f7961b10ff1b08c326a589ba49a90eda23c2a600aafbc94d5700241fce0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
153KB

MD5
eb51b37dab10b257170289271558d445

SHA1
0696620bd1d144e0dee77089f0cc8495bf4bd936

SHA256
c5e91503f1c3ce44139c3e290699b6845973e00eee2f4e0201f680a505f2960e

SHA512
d158c67eab0052ea38a18bf80959fc9b7f0479b5483b7ddaeb698e24c00d62346bedbaeab93da755d916b66b1ff0c7047413d09a851eabcafa14288e09d72627

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit