hxxps://www[.]carriermanagement[.]com/news/2024/01/05/257446[.]htm

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
09/01/2024, 21:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.carriermanagement.com/news/2024/01/05/257446.htm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133493104446094961"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4184	chrome.exe
4184	chrome.exe
488	chrome.exe
488	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe
Token: SeShutdownPrivilege	4184	chrome.exe
Token: SeCreatePagefilePrivilege	4184	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4184 wrote to memory of 4748	4184	chrome.exe	87
PID 4184 wrote to memory of 4748	4184	chrome.exe	87
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 1860	4184	chrome.exe	89
PID 4184 wrote to memory of 464	4184	chrome.exe	90
PID 4184 wrote to memory of 464	4184	chrome.exe	90
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91
PID 4184 wrote to memory of 1172	4184	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.carriermanagement.com/news/2024/01/05/257446.htm
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff24d19758,0x7fff24d19768,0x7fff24d19778
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1784 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:2
  2⤵
  PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:8
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3004 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3012 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=6136 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=5332 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5796 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4112 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2696 --field-trial-handle=1868,i,11317220138915747728,2257066981220340005,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:488

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
816B

MD5
78c5965e1f663921ff3c2cad5689e857

SHA1
ad5e7c488cde0c26fc41eabca7ec3515f89c3487

SHA256
3be775406c5ff7df8939fbcbc2b1b90d86a0ba2cc433bf08ec188b23e9a0ad24

SHA512
af9bc47cf3b5034d1f3bd3fdcec74274ab049dff6e76fe883975c3755a234c4771ced6339cb918264a5285d85d1a3f01a268bf2ed3ef1ded4bdcb45296fe4003

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
744B

MD5
d971c8a3b061730c22794aa0b81cc18f

SHA1
b63737532038729a4221c05f91dc63ca9d283cfc

SHA256
0bfb509f5ff52ed8673abc29e88f0d229ffba76239885c20321aa551b5f5f870

SHA512
5565ee6c67a0a058bd8437af6956e7faac8b63347d2a870a168f33f4d46eaa6017618facc7dccc1fba3fca1862f7700399e4e32b6fda5abe50909892313c375e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
72cdfdfefb2c7d131f9269c32a4e8782

SHA1
0ebea03706dfc44d6484f78bfc430ab4a0bb3785

SHA256
af2d811530592c5b8f09e0520684943364aebc2a9af5ec581123846caf239794

SHA512
9af5e0439394eed6fef38764f51dc8b8b9cecd2813d9e38bbea00b6892f922c9aab6932279ec8854bec524b20a547439669985f952833c3c693201471485017e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
7d8983323de3b2de243d73d5398b497e

SHA1
c50b835d33b796fa39f468da4c9e65c5d0b7f69e

SHA256
21c3278d4e588943d0f668683c3f0f25fc775577554c27fd980cb0ddb891f7b1

SHA512
8c20e79e089a9a1eb5f02d5a472ab3a724b3fb4723aaac0eecedea6748bd433137693f54c04bb87202de4483521a6f928d3c06eb761baaeda97d161692a943b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
86fc42dd0465fc9778d53e1f75158c90

SHA1
223b0adeb4f93055c7b180b5fb5d83740106b8b2

SHA256
b73b234332f6acdf66f1564b1d42de41826c34472d104c5c378bfbbaca36c1f8

SHA512
6168e191a9b24239a4626c7e8404ba04929aeb9b1b0413bb92d738db9584e91ca2bb53fd62ac8fb4d1010bc3e5fe0a2634934d1a2354c5d4f947db25aaf13d93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
00e816ff44467e8be2aaaf639a83d487

SHA1
9753e6eff55d63cda72a9affa4d53712bbebef99

SHA256
8d841dd848bd961a93b032eb5a5413f5686bfdb37ad1a64208c9438585baa9d1

SHA512
9f98c8625bc9785f34b0dbaca640448bce20fb9088252bc75c1ddc30c6bf11e0d8143bce6bc215addadae4a193ce987feb5f3f9c4e4466abeee7b230462f6d97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
e36cbb18991dedd3650d69259c31fbf9

SHA1
60621eed37ce5e794e49702ead888ad99ea24f1f

SHA256
e286861630ea43935cd6731ac346e26eddaf2c444a744f66a338c13718ed2d44

SHA512
521dfbeb55d6c256939755f737d6e8d57f33545f3349d23e0bd13adf1b3daff5ac8abbf49770cff6d2dcf74aaab553ea751416096e013f5d6ee30a357ad7ee04

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
45ba9d36d3111db26b3e0b492f2f7512

SHA1
4984dc4998e3118dd4bcbef17240dd46c1a5f926

SHA256
1b30cc0a83a7a8f2b4e8f6129cd93335d869f1a9da9285de39c903638cb4a194

SHA512
eb904d61db2f00244881cdd06f7037df8a24bd7666e98e380c66fa278d2533e06e0052042460e07f3757be11698ec0845817a3df22835cbcae9f0d420792d2ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
caaa42603c54570128d400a7ebd339a2

SHA1
c35eee6aab409e1098e906e140ffd85a77e5736a

SHA256
5102e09321b1c32b0269468478ef54c7aa93bc067df2992c682ed70d78da7535

SHA512
0e70aee466f3b33e4a66a37f9c2a7f2dee406504d93eff451f06d9c24c7e3e21a32b71912ead15ef410b2b065249bca13426144570e2d901d38297f3b2f3e5e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
2496b2141bb822d4f462c57be71ed878

SHA1
608eedda8db45183a17118c11fe56936dc919002

SHA256
4ddf95792872b2af009a0916e93e86dde58f7ac5c72b02a59c7dda4d4a1ad464

SHA512
1f68cd2c723bc977938bf49b79445d54104d53a8c0ae73d3540a8a0ce7ce775fc26e59ab17762b2f0e2d17c38c6ab5016e7434419523e1d68c3375f1844d023f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
606965a5cc58428792f73a53c772a578

SHA1
df46fd1b13a5b133c914ad6caa3799d3a4d502e5

SHA256
263af3f304870359b07ad3c542a099f145fd1a627d0d16b57cf036adabfed34e

SHA512
1a58d8281e7deae1d2d8faaebee061b292d7bfb3690d19125e3db974e06fe58fca7845e7985c244f8ffbd97cb4981fae7bc93f36bad1d2867447bc2789765664

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
73c84e38f5703d3b026cd8fbf1ee6807

SHA1
34b9c1f27f1bd8ab45e46195e0c04bc018470ab7

SHA256
1892bafc703cdfb63659459749d326e72f9e54b10d5d6a1e4b072e16efd343b7

SHA512
20363254e280fa0667c761ade32812a02d6faae069fedfd59804e51aa299d9edea93aeab8fc046ce0f7bfa88c84ccba83ed511db8640657f2b85b172560c2972

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit