hxxps://dolatiaschan[.]com/4/5737255

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
05/07/2023, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://dolatiaschan.com/4/5737255

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
4932	chrome.exe
4932	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe

Suspicious use of FindShellTrayWindow 32 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 3372	1800	chrome.exe	79
PID 1800 wrote to memory of 3372	1800	chrome.exe	79
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3952	1800	chrome.exe	82
PID 1800 wrote to memory of 3196	1800	chrome.exe	81
PID 1800 wrote to memory of 3196	1800	chrome.exe	81
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83
PID 1800 wrote to memory of 2436	1800	chrome.exe	83

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://dolatiaschan.com/4/5737255
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcd69f9758,0x7ffcd69f9768,0x7ffcd69f9778
  2⤵
  PID:3372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1296 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:2
  2⤵
  PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2256 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3048 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3040 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5016 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5440 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3980 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5664 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5240 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5984 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3260 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5576 --field-trial-handle=1908,i,17948582366115795376,10285545211660321516,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4932

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1896

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
823b7c10a87dbed64d326365ac2af950

SHA1
187f931e52552bd8657b96ac0e9a0f8ed7c57042

SHA256
894e30140e72511611241c7484ae915699ff316e9ee0a7eda66c4a6c2e8936cd

SHA512
9004424ce184737048718b7f7e3d72dfcf47baf419ad9890eb566d78b97a084fb56e18b732c4946db6cc247aea9d6a14fb7d52c4febb236c171349e76ef8ccfd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
0a2f841b2877aa083e3bf06aaffab58c

SHA1
7b3382e586891d0e7b887d2e2b83f0afc5d5e7a2

SHA256
7a30603ef2c089fef8a1870ab46fe0672376acad723c59a96735e0e651898feb

SHA512
6aa38847ea5e8aac04851978b16e16d56401afab22549e466c973c3b9fe3c0979fe9b094937ad44a02c692a4db63bd2b84e0ada3ffc2c9a56cccb6db016ec383

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
3f6f8a5b65c777f5512cd8fc21bba15c

SHA1
27a266da907fa665699dda7f5cad674eb5a1e87b

SHA256
d343439467c69f970941971859ad706d525f5a5ffb783c82836832be2bd47da3

SHA512
6bb4f5a6b6e73f9f10f7025cc3a6936edef59e05f99d3b80d434a5029815b06c38f0a278b0292721684c8d2c5616a48ce4f5c6a9d09edb165a56416d28147032

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
3e31cac57853e66458ffc0d3e37f8c09

SHA1
f6727209fbcda1f8b453bc987ec38e137fb144dd

SHA256
c78cd7d48b94e8246219c7215fea60a4403d5091837bc1669f97e9c544ee3ad3

SHA512
f9f641d2b8fe75dc4fd3b459b17d00975f882cc62295caa08f4617097fb5612c6931a224f4c44241d177666e6b96fb7f4daa8df5c9a83bbc33d59f8a31a346e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
471c1807a7da7670692f7d90ec1e1719

SHA1
4740a1db89fcb6cd9559451bee94b539ff689a51

SHA256
3e4e3a7af14ae4775d2c6fef899fb9377c6b6efdf95df7f398a7e4b6997c844f

SHA512
78aa98887f5dce687640d1ee2c11c97d273c92763be380177350ec24678dda51d5f8ab5be7282ee49404e968b7b14e801af279a3c1119e4daf25137c676c431d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
f7dc5eb947fc9fe075ffbb188d36b3e9

SHA1
57695d0f9675940a6e3cdf01b567f7f95b9c4f97

SHA256
0c642ed4602a832aa7296ac1bb9730d8a957f90fa3623e4cb01a4915844673e8

SHA512
4ede646ca8be866283786d2ca2a9cb943962ffa78ba1ab9571cbb77ebf11a02601eef4bf1b5d957659db19d38e0fed23f71981375cc9c9269c25ce43fb89e546

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
31fe3d35b39898bdab3bb1d6cad6b5a6

SHA1
de9020e37b61e35b00b5cfc981af983f7fbc4000

SHA256
c54995159136df3c182b7ab25aca035af147076513994bddd4b0034379763e4b

SHA512
19d3c7f1ea642c0d6085875ff5b9c06b732d42c647ee481a63bd0495d38e1ac7d3ba067c0474a0b64bdc968083bd7e267f7a2dbc4df8e6291366e21f8f1288e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
eaf51cc83decf1d708c810f59a1dfb5a

SHA1
533fc5d1dca1f3e43d16364f6360849a0f1af60a

SHA256
59f93236017cd14a6f79471a8327a601902353f1760ed7722fd0f621420f028d

SHA512
aa06b6c6b37c07a1204e1660f364e7220ecb5e3117cb6db303ebfb7b375d8e8d3ee3494dd14db4aaef42c1586a6ecf76cc52722f154bf4c5109f074e31e41fb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
1d945d4f5f75d5926f1da9438ac08ea8

SHA1
8fe385ed19f8ff3f4987cc016c3778861b61da0e

SHA256
003d6a315d7ee48f383f7e8b343201a99c42222d6d24e9a8b497faf02aa2c381

SHA512
2866d499bd37523077cccfeada02df014b43986ac1494457cb98668beaed200352a5e723b07600deb476bd3c75a3ff89bcc036bbc1679fdd4e2a2655e2432183

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
332dc4ccd51e83f0e41ea8f046367a7b

SHA1
0a4ab50fa8e79066882690f675fb12329a1b56ed

SHA256
a389daf1013e10a473f87e347ddd8b3a643ad2c05f8db323a5194c67a23a78ae

SHA512
e7a9d39f4a4c2b528ad5811df32d913dc2beca6b9b351824c949f56862f4644f11832288c8323b22faa7371953867718e728c14fa82087ea84d9d887653e6e85

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
f28ee13700825aee840823f2baeee9e3

SHA1
dc6c4d44e88508da5d0de3150d153bc62a420ae9

SHA256
385b500829b1e5c691791f41d6a7d7b2a955b7715c37cfb61f1758c47767dc7f

SHA512
e4d80525c2f316f485a9c7cc227779e2966d2ccadd24599d3cb6387b4efe2207aa60c0e80f1776576ca1ba596cf724cede3f8650d964e1ae5758a7823dfe9231

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
171KB

MD5
a86b26f94020c71625ad167cff0c0f06

SHA1
c48297ea143d4384e96978805a5882af543ff0aa

SHA256
63d17fdecc917446bb3fb8581c8e192d659264a9988df79bad9fa6c7d8450e10

SHA512
9d068a0b26ca6d3175687f4e3925976d97a9645e7b7c9d3b22dbaf6e97be6acaf30eac8a3b738d48943e2a4973cc38605f8682d261b44a388dd1ca9acf9c0789

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
171KB

MD5
5b5d814fdcf0ec6796f0828f9d661946

SHA1
61171aaf4ee67f33fe1ad771ff8033fdb6988597

SHA256
86d45015b7b860848b44e3be087502f03178fdb709315839865201b1ef9a3b77

SHA512
ffd32498b333254319bd5af31c632f92cd54c041ca52037219e6d094768f07027160e02c786394763f60199c02a5867791a66b39145ac39bad3774f8930c0491

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
4d7dead05a809cf43f8fcac3f157a876

SHA1
a2bc6fe0a77b5d934b3922739a5cd2370a7d6c62

SHA256
a94beaebf70734df475f1abf55660687a5767c3b3ba42fa7dc6d9f00006a4016

SHA512
4fc63651bd2dcc4c602517095de39be83c39e544b86bc1b8ff15cda27e0f576c0ea7d88ece6979ea00f1ffaa3d4001502daa900ca472f502c6db4c83200ce96c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5809fe.TMP

Filesize
101KB

MD5
3c361ad426d99531be81b52e64479319

SHA1
364c92c3a8337bff8f51242dcd3453254dafd36f

SHA256
749ffffb0839e54c5ad8b69e6247f0bbd0d1f7e2f6b8068001b3aab35062bd67

SHA512
86483f0779d6097a4c8ffdb1fabe7d70d2eff61f0f793165be03c13567041af6e353216f8109d8c008df19e73154c991be50b7979e33c4b6bc06c15accc71fa0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit