hxxp://nnfp[.]jss[.]com[.]cn/5PMCZxYmsY-11frm

Analysis

max time kernel
118s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2023 05:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://nnfp.jss.com.cn/5PMCZxYmsY-11frm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133395755077258369"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2196	chrome.exe
2196	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 4812	2196	chrome.exe	62
PID 2196 wrote to memory of 4812	2196	chrome.exe	62
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 2040	2196	chrome.exe	89
PID 2196 wrote to memory of 3316	2196	chrome.exe	90
PID 2196 wrote to memory of 3316	2196	chrome.exe	90
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91
PID 2196 wrote to memory of 2472	2196	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://nnfp.jss.com.cn/5PMCZxYmsY-11frm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa63f89758,0x7ffa63f89768,0x7ffa63f89778
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2228 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2980 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2952 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5104 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3948 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4600 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1596 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4140 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3176 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5280 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --pdf-renderer --lang=en-US --js-flags=--jitless --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5520 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 --field-trial-handle=1860,i,18349472068686650861,10957190752590510788,131072 /prefetch:8
  2⤵
  PID:4196

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
db467cf82056891379d92982ce5e17bf

SHA1
adfcc53271099b1313d725e7fd1ef11b51ec2c4b

SHA256
3a18ef1ffc679970541f85542322e1decc6e1f8dcce90fe52dc0fb79d34383a9

SHA512
58a9c5d8a09f40504b4291ed497342cb4b64bd02612dd7003820b59aad56d1a407104b8147ed26e2c26e01dba8cf2a4880c43a7adeb78139bd75cdba4c598f09

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
e718edb776c4c768e769a1d15b139e1d

SHA1
5406da106442949f96801a25ca3e7b7c72a22717

SHA256
2e18ee4d0ee811e0d114206550deca66e848f21967582fc598766dbcb30ebc05

SHA512
553267448347d8fb8df080db2f2db2a5573cfbd1b574df35f6acb50ad4e06e0447e2b9a3ad5fd70450f603eb4c1d17033a0f5916e8d730e0eac892005902af8d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
eddcb9a93db24e990bec37da0382b32a

SHA1
9b4c1b4ec41838cc396766c75d1c796237792ec2

SHA256
0025b550731c61d015d77315a0ece0c0bd7d0afb8405ded38119a8784eeebb85

SHA512
e219c0fe697de85be9a87c54eff2584fd19789ba80714b0841d6c71554d0f95f51d654b1bc36e18dba69aadbe465d55b7f20867c098ca8a82ad55023403c9a35

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
83cfd2c21c28ad3ad8cc3fef23124b47

SHA1
fc4208e967f3338e039073b844673b64cc93195d

SHA256
347e89e4813a2653cd7fdbd0ddfc426c2df60ca438f774e48638bc0c672b7dbc

SHA512
64b6789504d35c190f333cb7e2e89d01e1544a103a7a57c80a75dbb2e17257312a7660523e144d8187c2be357581334a793d418d51895c9e419a144ee77f0c03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
a4ff8da628ace9e4a5f6d1783491f28d

SHA1
dc98c5c5383683c9fe9f77c11edf694957385670

SHA256
be77ca2db672e46c86cae063015ee4c4c1d45ebb368e14f7e6f8f172ccefb296

SHA512
09a8a99b0cffbb66fa77c660a509d5caba7ee3609a81f0b933b912f8cfb66917d07711729210b94ae863a85b1bb329de61ac38a3aa918ff4f2cf4ab0a0a23c29

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
707B

MD5
65253354288dfc1075bb328a4d3e3464

SHA1
77ec199226785448b01546a0ad5b3ca5637c325c

SHA256
b2afefefb67e76f1fd75ae2c36f402ebe17d9541788ebb0ce7434d5bb1e264cc

SHA512
87e401a8fbc3d594ba9250a9f6794db33cb5b79b25aa4c5417b13a18de6a55d3cbe8e6e92d1c924e5808eb9f6f2044ce55daaf1823275a49b656b34fbb1d9efe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
041c2179845a464790e2a0ee5c3731b4

SHA1
51e6c47397a9eec6d19806b5fb29e9140f93b7d8

SHA256
5ef2cf8f366fe6bbd0526baf162056cbf324cdbd7189c82c27fd3f484d5db7d2

SHA512
4200f763fff7ad654d1c553d986453d3da55b8d14c6b5613079c1a52628096bd9aa3c43ea2c7aea80166497d68079f7541ea2677f3bd3f3f498eef33359a2feb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
4ffa28431aa63875faf0d246817cdb55

SHA1
db9141b3019d74b78e2f58517b05d06816295e88

SHA256
72edf3133112462de1548241d082fdc87da0a0456fadc7e87147da9e7d08bb97

SHA512
1f9c38c575ecde85a1cc4488b50563bcccbcb3c2d3baf2990ee4acf7e1b55c3f3050c5e122fd6e7fa5df526ab30f4cb046643fb69737d3218f1aa4928035553a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b52dcdc386619f38fcd9b82c3852c14b

SHA1
90428fd0dca9f19a83137c4a3ae47f3eb93606da

SHA256
6ada9314ff36cb9336ecd112908eaab929f31f3c1b81b7ecc299a3824b0a2023

SHA512
f85bb270abc6ec6d66b6bb52debe72e2a4b2ef8db0b88e1105131b308dec59f1bea8a2ff53cf2e85aefa72eaa74ff62281b355642d6f8077fea9d2c3dcf00133

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
102KB

MD5
663a4cd99b2bf8d13cebd404589f84bf

SHA1
294f3c5563764cdcd07ca14e87cab1bc111281ae

SHA256
67905ef7c5f8e4024565d99bf624f4c5a8b364c975e7e17e0651b100417e2670

SHA512
ef594ea50e6d7c71a58c25925a4a8fee701f9b01d553039874a85de1f5239c3255d6b6e69c4e92c2a2e9dd58b6bd9e5ed466ca6712a1aefa8dc81b3cae4ad443

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
102KB

MD5
928611f42a37b6f5845294a1c4b65d0e

SHA1
9d13eca48a06b3a8c9856dc4761f6a900bf9c917

SHA256
e1196c9ba8d2d6de9c544e14c01f4df4bf1ee9682ca30bc5545ff9fc46ba8a14

SHA512
f274d9ee188c3b762170ea7a619a8f19b8183a6aac3bc9090000dbc2ac1aeb7d3f4a6a79b22082a40a49ac433d6909a277a94bbd33d55013a999eb1176ef6db9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
a2946e0c9aa1d2a715ce45193d31b5a0

SHA1
bdc3ed98ebaecee7864ce13287b41fc3375a9702

SHA256
ec5c9a3fffb988933de1ab57f94b2bbf579ab3be9f540ae84a9c7caddc436895

SHA512
8565a722d0a451edb5bd70c67059b5ec1eb246c12f97a1a2ce49fbe8444ab6645d3b611d3a461adc4b71e4e942426707848d7936b177435ef509054e84bfeaac

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
98KB

MD5
77a23ed746d80168607a05ed16c172db

SHA1
7c7b4a488a89bb380ba35983ccd0433b4be79b78

SHA256
6f7c0473bf0e7365755374f902a28ddf6ad26a5496a569406bcd26942f041239

SHA512
4a9839bd1a25f82142a133d418786731eb4c3305afb3c7ca044f91a76d125c7bef1eabf6f31b88c1cad3dcdbd6544461d5aa5e6811c7636f09b1ef0229e8abc2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
123f2cd0eb99e30dcad95c43f9e01492

SHA1
1c3855c7f3af2cb2e221c6cf1b94024f6a6761a5

SHA256
994c545415af73357f637bcc3c842a220c81bca00b6d16e1b3c911925ec98681

SHA512
fc24cc12fb2e822648e48d9076d7dbe24784d6c1b90bd90d1d09986aa58f073208e4054080926655b1b79307c9b7d801b21eab8afc8a1e42a4e12a4d4eddf003

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5802ab.TMP

Filesize
97KB

MD5
98a3c4599ba4b5c8959be4a6d3cd5b95

SHA1
a9ef52ab345381aa7ca77c9baff5e9644b907e26

SHA256
2db340d01fe520ea94b43962684b5774e4fc76ab8ffefb26791129825d27e99c

SHA512
2094e10a2196e63887f3f14a9bb57100e275439149c5bf1fb25627b39381878f2a0d9869bcf7c3e287f3d99d082e50f333d276f4d52363c642e41dd28c2eac67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\Downloads\IOBtnZ57li_yHtN9SiDZnOzxFicBXg1rfsdmomQIm9lG_IB_tSLGARq5N6a2CoM84JnGv9lj3njpbFTuP5xCyw.pdf

Filesize
46KB

MD5
60587b91be984bd5bc45e224f06e8150

SHA1
430bf463f526bde9fb32c8a80e98049543b5c375

SHA256
bbb6464ec8397e3b7506010beb53b8b53aa67b107b5d180356cb4dede867eb9c

SHA512
08ed81f29a1de682b6fe233402da324695f036c8d1894ee4735a472b3cce46b9e1845e286a5bffc9e8a2ee8b089e6d5c709a7fec8330add0157df9c0cafe2133

Download Submit