hxxp://youtube

Analysis

max time kernel
51s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07-10-2023 07:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://youtube

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133411388067423555"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1068	chrome.exe
1068	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe
Token: SeShutdownPrivilege	1068	chrome.exe
Token: SeCreatePagefilePrivilege	1068	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe
1068	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1068 wrote to memory of 1140	1068	chrome.exe	30
PID 1068 wrote to memory of 1140	1068	chrome.exe	30
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 1652	1068	chrome.exe	90
PID 1068 wrote to memory of 2296	1068	chrome.exe	92
PID 1068 wrote to memory of 2296	1068	chrome.exe	92
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91
PID 1068 wrote to memory of 4120	1068	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffccd379758,0x7ffccd379768,0x7ffccd379778
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1260 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:2
  2⤵
  PID:1652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2208 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2996 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3004 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4672 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3456 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4540 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4924 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4708 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5284 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2988 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3448 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4696 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2944 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3260 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4448 --field-trial-handle=1816,i,3618803338420684732,3247054171661777613,131072 /prefetch:1
  2⤵
  PID:2964

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
e436ab490666d679f1e5a914f5f890e4

SHA1
c45afa6f0d6d79c276c656554ee778f6b746d352

SHA256
985dc09bdedd2dfd36bd979100a19ea00cddd7deb6176db68913e1b797f52833

SHA512
5a8517b0c6d1f10a6921925b9bbe9e3db97ec84e37312c886e873251a74584f645887513bd9dbef5f7bb98d4ce831b4c48a02bf575601e87d5f091806bb4e9cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f09873df7dd46460998384674f2d6447

SHA1
c9b3a844dc52ae6acb89ab3172dd3885b913e5bf

SHA256
8507998337187c179792cf4c76209f5b4946f5711c516809cc38f4553294996a

SHA512
29c7b2cbd49a93ec6d9cfd223dd85d5c3cfd94ac324b28c7707b72fcbbe9ac2f0de61257b01ba9e95e9d48a4bbd91dce5d90be237ff3384c313d7bfa13b232f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
3c02b8d3e5a148b29a49e2bcdeaaecc7

SHA1
879d2ca649f36010f8259dc4326c80a673a5dec6

SHA256
10e8b886142b911113ad1510670b887040e2ece89f9c995c5cb316d64aecce35

SHA512
f1f28a23b9e339de81c211fe889edd334381b48a418232a27e029224465ba257e5dea908a09842c193ccdbf529aa9e429763cd1f69d9df8888939df4a23d524a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
069d34f8809e792d0b675af1510db459

SHA1
2d8e38d15c4d4a0bdf144ce457ca4799cd781d33

SHA256
7ec643f77553111a54d85ee9f93bd3128e26145868cd4d52ff312a8d4e148ff9

SHA512
1a5c2933a60f94554a86c065f4a75eefac39a1805604a8c8e8f51d1d6a572b23ca226f89ccceaf1a01e404143d3be52beab99d00f540d19ec40c545919213664

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
9342c0a30ad14ea6e0a933961a33b1be

SHA1
176aeb1c4c7c82feecae8359606ba320bd14dcec

SHA256
1b939e2570cef7196e3d6c07db7b918ef6107e297b8a7dece37edf5917d687b0

SHA512
b8f367928992d976359f36102d23f6ba496cd3588340ea4d3db8fecfe8190e5172195f124498d8b65108a1d655cdf35b18640f48414d25822ed62e5deadaea3f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
2f514d8daea4ca4c5eae61c67b40d335

SHA1
1a35170b2ad6bb1771e0f1a17c0c17e933d8f46d

SHA256
e0977233aabb060e348dad546f4cc403f48f9d410e0a8ec13c4a43554f44f898

SHA512
0e4bf00cb9f30691f44b36a591b68f878a2df42bf9971cb2fa586782c5aa9f19dddf7bbc551608c194d639ad4f1d219017d4ed8dce6104776de85896dfae2d1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e006f232d97b58e43903e92549a4a15b

SHA1
3adefa3e7af771c04c5edf672ffdc9a4d56d60a0

SHA256
d192bb8f7c4e3d0d62cbcc04281040c40670c9079df1079d7a3611485ed6b6cf

SHA512
01fc0df86ebf19291c88ade04258991d5eac1e7e8c22492fb9a2782b0341897eb54b062453ce6b7c6d391c22d92b492768063edf6a3fcb59d43c689a20ac0dc8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
170afb60afb7ac7da122e4531096b93b

SHA1
9396052426f1f456f03f960b86eb57a7e6daa255

SHA256
853579c6d8bcba34e67b6cc12bee6a5da195f4b79f4877c69e24f0a8d7d7b4fe

SHA512
b7a6f00861c0e2aff3bd22143e5d8e40b0b4de590e5d6a4abce5c4d26dcfac4646fe42bdb30b2628961bc628ddac59585cc23ee6f71566385bcc18b98595ac41

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
76bc22636c0591c9fc2a4f3e8e2979ed

SHA1
6c854513d33ca76b5cf70e3477266cc6c9fcebfb

SHA256
12a1af7e2016e3d7ac021dae4fa108cc35797e300bb460d3145a9a0a584cc866

SHA512
5c6c8631c9a011d46cd31df48f96a5e6f54c600ddfda3c4e45f918bf99d48a7716f61de128249a4bea2311b035fcdadc63cd12226912702241adf8642b5e0161

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
2fb4b6d2f7d37853bff2a948cd576ab4

SHA1
f76adfdc3128d30448b76ee836366117682a2e61

SHA256
5044430a5cfe3fd213d137a3427c384a3969e10287f5043004e4692d79152c1e

SHA512
aa177eaf134577695255d18e117cca6d9976ee0342a8677e18bdd50fea4aaadff66e1753ac16f47ba2f418d0330e6099c08db0148653a296a30b42eecbccd775

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
101KB

MD5
ad68e7420512ca899b770fc208808f48

SHA1
76439a50f5f64048a90c8d8fe7eb825b5b4a32cb

SHA256
c60a54661a79f156bed79bb63b56a487f49a091546ec7794913f1cfc35f806b7

SHA512
139cda2ce3305983de4a25766f31593163dee410d63f968abdc8fffc7ebbb11655c0d98becce1e02cc7932b4c6f9ad81860e2dce638096611c2e5b5b7ae62d53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit