hxxp://forum[.]fibra[.]click

Analysis

max time kernel
600s
max time network
597s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 13:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://forum.fibra.click

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133494550660279102"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1880	chrome.exe
1880	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe
Token: SeShutdownPrivilege	1916	chrome.exe
Token: SeCreatePagefilePrivilege	1916	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe
1916	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1916 wrote to memory of 4276	1916	chrome.exe	88
PID 1916 wrote to memory of 4276	1916	chrome.exe	88
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 4652	1916	chrome.exe	90
PID 1916 wrote to memory of 3160	1916	chrome.exe	91
PID 1916 wrote to memory of 3160	1916	chrome.exe	91
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94
PID 1916 wrote to memory of 4400	1916	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://forum.fibra.click
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaed209758,0x7ffaed209768,0x7ffaed209778
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:2
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2964 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2984 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2200 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3920 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3996 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:1
  2⤵
  PID:468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5532 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4028 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3940 --field-trial-handle=1880,i,2066636519340177363,14425551292537356468,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1880

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
5c79fac1b2b9061c7a58963b19958be1

SHA1
8c4884d2d5b311642a5d96b16c5bf7ea5f603e9a

SHA256
62430740504bc244d49dbc3101520284d5d2c776e23ad31e9a064a6eac85d526

SHA512
7e837379f496ace57900ee3d7c853ae86f4dbc5406fdbe76c54e22170a28145148be52aeb4588a2247c5662808fcd8bb5e02fa762338da60bfbec8190b701ee0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
5afd0c4a963c141dd7a1ab3067418673

SHA1
0f07b0796922fec8915454802202d722b70b66f8

SHA256
ec75c8074888e31115979437d961a597ca106295f8c156a8c60b0e9533acd7a6

SHA512
68d69b749a3368ed3da44fdd7bf62ba9d20f82dce75346f6922e2b255333bf28cfba3a4038f6e44f9b474c207f852f7f39ed3d0452ea4d7333642f319da6b40b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
873B

MD5
f3d1fcf60280be1ad7cc537dab93361b

SHA1
ae8e9b04261f17da994eeabf77e455777d9688ed

SHA256
91d8c8d3a37ca8d6f60441555f4a4d28edafc8c979e8d8876f43b1f56c125510

SHA512
6031c2d09f7dab3bdde5df2c53735cd909bdae99e2b74f0b16ccfd0312cde8366dc5b687cb1a12d864ea81bd51201430217fd5a31e3a38a03dc1edd98829e84b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
efdeb3779313465f7d6d60f2e6a57219

SHA1
ae93cb770c95837ac2e0b7a48226b2dfa589e6f0

SHA256
f80743bebe3776472be5cd0fcb6edf4b4c6fb706fc45f6d8aa313f9e9b2444a6

SHA512
bff31275a425c0796b9e9b046d9f1827c088fa8b6ac7b1cd7d0303f981f075736ffb5fa38a9165c9fcd5ff1bc983c609da54e2dc41f4c1db736ed3e9c134fec5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e05b098fba162d9f3e26c7b7822c454d

SHA1
8e23d41b1b5a28c8711f94474e37b9539b6239c3

SHA256
a2f0c730964364195b7e30a8a0bb5b5150feb766150032bfcc42736f3f466dd0

SHA512
6a30e0084896681abff7897662881717355876e6e7d5878b1fe60f3e6d289c38f999a37a7dd36b33146bb62a9570ac7cf73f5d6e5052ce5ed683f32cf7fb7015

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
135KB

MD5
e3d9c441ac3a7a0cff31532a42eaca9a

SHA1
5eed55fc74d74d6d199464fc93f6261966587b70

SHA256
fb7ffac57c3ae3abbde715eb27dba73b1a36f868263e358a979486209c5f2433

SHA512
49a2043ed555eed267a32267bbc642b4a5cf922745863dbbbf2a4c7ec18c1476c2e506116abb023ce5b2478c2ed0d66fda910865aa89ebe923716a64b1f54a72

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
425dc83528b9e679279269bb10e23add

SHA1
4f9664ee6c2a5dbdfc4eb14749bed5da8d1526f7

SHA256
92017040ae07344fb312acf5175a5ce1008859ca5cad5ed0f703f832e54fe2c7

SHA512
e28bae764d0e9645710ed5447867a41fbe521254aeea1a6c087300a63cd17f298b50bdb180da5252c6d8562ccae2e24dadadb4e039be5e18ee1fbf969a6785fa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
115KB

MD5
faef490c66a7a80af3e24a254c630334

SHA1
1e3aee07a4d12387dc52fa00cb1c916fa0ba49ae

SHA256
99aba59dc642edeb1c2a47962cb9a36408336781ab201e7fd48b180bd50ac9a8

SHA512
62a1d7bf2be7e3bb39e99b7bf4f28d1d0d1abe6a8989905c726dd092ab20416a542d86d0c3461a546407b268292ee4975f2223411be5a6f4071c3347ecfa5f23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
115KB

MD5
1efa74efa5bdba70508910a2e6bc554a

SHA1
eb823eae0e3de33306171ccfcabb0da750ad8d36

SHA256
4ae6ea0fbc99f28f31f16269fa5ae1cb52df250b56c86bbce4a900f47a724c92

SHA512
2af9aea955c51c536e6f4edfc05fc6f89edaa4f26004935b23b706009946e0527cd28df3325364669a79a63fce71a38eb3a212a90c57f24311628f0c895b4241

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit