Analysis

  • max time kernel
    330s
  • max time network
    332s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2023, 10:22

General

  • Target
    http://emailrep.io
  • Sample230616-mee3jsed97
Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" http://emailrep.io
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1176
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffba84f9758,0x7ffba84f9768,0x7ffba84f9778
      2⤵
        PID:4112
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1796 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:2
        2⤵
          PID:3572
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
          2⤵
            PID:4084
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2248 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
            2⤵
              PID:1376
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3036 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
              2⤵
                PID:3764
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3048 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                2⤵
                  PID:3804
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4580 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                  2⤵
                    PID:264
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3420 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                    2⤵
                      PID:964
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                      2⤵
                        PID:3832
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                        2⤵
                          PID:4572
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5512 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                          2⤵
                            PID:1256
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5196 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                            2⤵
                              PID:4148
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4996 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                              2⤵
                                PID:1928
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5712 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                                2⤵
                                  PID:1916
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5908 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                                  2⤵
                                    PID:3356
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5732 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                                    2⤵
                                      PID:3780
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=2444 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                                      2⤵
                                        PID:4488
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5440 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                                        2⤵
                                          PID:1104
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5152 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                                          2⤵
                                            PID:4516
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5796 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:8
                                            2⤵
                                              PID:4360
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6072 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                                              2⤵
                                                PID:4588
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1724 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:2
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:4576
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4984 --field-trial-handle=1816,i,3375230026974020796,1358592992267043895,131072 /prefetch:1
                                                2⤵
                                                  PID:2784
                                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                1⤵
                                                  PID:400

                                                Network

                                                      MITRE ATT&CK Enterprise v6

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads

                                                      f_00000e

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                      • Size 166KB
                                                      • SHA256 4d4fbc69cc1b9dfff9ff202d2cc4a9d003ad95df58cdc91a87fe071e12897512
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      the-real-index

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                      • Size 360B
                                                      • SHA256 271d423959a7abf3b15bfb6becd8974b2724f508f8552a0218bd583840790d69
                                                      • MD5 SHA1 SHA512

                                                      the-real-index

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                      • Size 600B
                                                      • SHA256 84a98c49214f2821405b92f5f447188732e4cb924585dc071eb74a58b6382565
                                                      • MD5 SHA1 SHA512

                                                      the-real-index

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                      • Size 336B
                                                      • SHA256 b51b06c2e289cab2a327a0d8014d260aa1a8fa04ee7a3060dc8fe725dfe1d52b
                                                      • MD5 SHA1 SHA512

                                                      messages.json

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_locales\en_CA\messages.json
                                                      • Size 851B
                                                      • SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
                                                      • MD5 SHA1 SHA512

                                                      dasherSettingSchema.json

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\dasherSettingSchema.json
                                                      • Size 854B
                                                      • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                      • MD5 SHA1 SHA512

                                                      Network Persistent State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                      • Size 3KB
                                                      • SHA256 9fab045102ec3d1050181ffb11010f48ca47d918fb71a674d482845d3c0e025f
                                                      • MD5 SHA1 SHA512

                                                      Network Persistent State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                      • Size 4KB
                                                      • SHA256 6ec9e9fcba7ee4f6d5579b81be72caaeb303d71eb086a31aa0466f170e6565d8
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Network Persistent State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                      • Size 4KB
                                                      • SHA256 c80ff88de1a92fc58b4b4a419a47c4157a8a96b859bd204e97e7b4e82a4b4703
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Network Persistent State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                      • Size 6KB
                                                      • SHA256 e31acc3651abeb2c5a0505447622b84dea1330193d7824f2676301d036ff0519
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Network Persistent State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                      • Size 1KB
                                                      • SHA256 fce2fc389ca1c6d6a23e4cf6e0d82dd2d1bc3879aeb570ead6743e233a6aa55d
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 ff4d9ad505f75801ce0c67bbeb4a50f0ad64d05f7d4118cc6c4f2422dd7ac5d0
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 d11c9690ef270d90a2f5f26b71a25e53e8b578308d0d95c7d56b7c7abcf377be
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 84e6f370885597011547545f505c844dff3629a8006477af627024b23378faa5
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 2ac1275816fc5a1d926b0d1297391173f65da3340413296f73d344de2e81b8b9
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 a32f33fc29718f33c1baf21ed8e22b0e8e8e2e60ecf41babe0dc65550b45b172
                                                      • MD5 SHA1 SHA512

                                                      TransportSecurity

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                      • Size 1KB
                                                      • SHA256 3eefe49dad14c5f68c5c5976324ae5378ff09c1013f985b7b77558d93e9322af
                                                      • MD5 SHA1 SHA512

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 7KB
                                                      • SHA256 0b6c486450ddd9735dfb88d3a1b960a91d4bf52459e1e79dc88971ac42f278b9
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 6KB
                                                      • SHA256 67037e3835fd04b6b53d086ebb54990735075f92313358427a56eebc900e0ed1
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 6KB
                                                      • SHA256 60da8376ed4ed22b4a0f83187ae907ba90bc4869dfab427a4963e8445992cbb5
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 7KB
                                                      • SHA256 96026b92dd7deebcfd5d3ebf96a00f14f04ba136b0b2ae3fe82c45d066944b11
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 6KB
                                                      • SHA256 f2b8af1f865cc3fce4015f6c8bc3d623ed34c6c8abc8edafe99ef399e26e0350
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 6KB
                                                      • SHA256 2d7c8961f74ea02c915bd95d5464e05a2202a4b4a3b23b6e9c2b7bc3b3ce7791
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 7KB
                                                      • SHA256 e0cbb9c9e767feebeeb038af81d986df9cae80af539852a786d18aa7935a959a
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 6KB
                                                      • SHA256 0b3add1aa1f3d54a2d0534760b440ce2c3320c2cbf3f92874ff972ffc521c112
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Secure Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                      • Size 15KB
                                                      • SHA256 995ff1955ddcfa8b2472f6533bd2911c79ec6e4c9f82ca8794a4711d7c23b2bc
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Secure Preferences

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                      • Size 15KB
                                                      • SHA256 b7dc8e690ca18d5a49ecd72265d545c2c2968f24bcddbdef3c151564582ec23a
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Local State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 157KB
                                                      • SHA256 4557061d471b5d3853c44717d983f38a9a818e261a990d628f154180cc0c33e8
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Local State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 157KB
                                                      • SHA256 dcdc6a2380b584fbccde91cd8c16c0c4ab43f3c622b0f7e90232969eea05d2ad
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      Local State

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 157KB
                                                      • SHA256 61e3bc4979e20e39cc3f8260af87f9e04951ef16c50fe71891090a5c13f4b92d
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      persisted_first_party_sets.json

                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
                                                      • Size 2B
                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                      • MD5 SHA1 SHA512

                                                      messages.json

                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_1115275745\CRX_INSTALL\_locales\en_CA\messages.json
                                                      • Size 711B
                                                      • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                      • MD5 SHA1 SHA512

                                                      cd897f8f-b4a5-4d0c-8f24-6314013af5c5.tmp

                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_1115275745\cd897f8f-b4a5-4d0c-8f24-6314013af5c5.tmp
                                                      • Size 88KB
                                                      • SHA256 d412fbbeb84e2a6882b2f0267b058f2ceb97f501e440fe3f9f70fac5c2277b9c
                                                      • MD5 SHA1 SHA512 SSDEEP

                                                      default.dic

                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                      • Size 2B
                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                      • MD5 SHA1 SHA512