hxxps://google[.]com

Analysis

max time kernel
95s
max time network
99s
platform
windows11-21h2_x64
resource
win11-20231215-en
resource tags

arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
submitted
13/02/2024, 20:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://google.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133523282162043009"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2992	chrome.exe
2992	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe
Token: SeShutdownPrivilege	2992	chrome.exe
Token: SeCreatePagefilePrivilege	2992	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe
2992	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2992 wrote to memory of 4960	2992	chrome.exe	76
PID 2992 wrote to memory of 4960	2992	chrome.exe	76
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 1068	2992	chrome.exe	79
PID 2992 wrote to memory of 704	2992	chrome.exe	78
PID 2992 wrote to memory of 704	2992	chrome.exe	78
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80
PID 2992 wrote to memory of 3856	2992	chrome.exe	80

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffabf6c9758,0x7ffabf6c9768,0x7ffabf6c9778
  2⤵
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1856 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:8
  2⤵
  PID:704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1588 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:2
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2204 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2996 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2988 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4336 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4804 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4888 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2312 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3728 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3068 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4812 --field-trial-handle=1968,i,3844837156343123350,6879449680204631518,131072 /prefetch:1
  2⤵
  PID:4592

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
194KB

MD5
36104d04a9994182ba78be74c7ac3b0e

SHA1
0c049d44cd22468abb1d0711ec844e68297a7b3d

SHA256
ccde155056cdce86d7e51dfd4e8fb603e8d816224b1257adfcf9503139dd28f1

SHA512
8c115e3e5925fb01efd8dda889f4d5e890f6daaf40b10d5b8e3d9b19e15dadcb9dcf344f40c43f59a1f5428b3ee49e24e492cf0cb6826add1c03d21efdec52ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0ebb7b0af610c57b_0

Filesize
280B

MD5
168ad4f4f0c457a90775b7dc82a8a169

SHA1
c5dc2cb4081476a8eebd6e0bba584db335be1733

SHA256
a937da2289dce0def45ca40db46f3af58efb73068be93c3c5b1b0bd631ec79ac

SHA512
78eca5eea4313d4b1935b51a46e4049220d22fa37789060477626a2a41ba830fbaca19b249922137654960ce0cd51773da1972198f88c7d2d46d4c82201d91a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7cf0b743ec753693_0

Filesize
324KB

MD5
55e390e78dc381e0c12d10932324476e

SHA1
85a82d63c5a08b65d8c400af747b08f2850aac6a

SHA256
8ad57207e34d6c80ed3a8b7d5caf50aef206b6637e70cedcf20538bc7d916f38

SHA512
9246e3ae3abd7e627468c16e748f23576952426f4664cb42383b91300118c46c570e75e53b5196637daedc87426e17ea9dd916c6d9a5a4a1c6d0d6addbd41cfb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ac5d9cc93bac2b3f_0

Filesize
289B

MD5
3adc5d83585e77939ca7578fd7d6d23b

SHA1
c4ac8fe0c179000b9661ed5beecdb31689a6758f

SHA256
096c7e5abc250911ada0d8effd5bc3c0b695982842e20651170f647658d7e04a

SHA512
12e47d9fcc15c19fb6412557927eb529b0981e2186292a599226f440e95fbb69499cd2b1f4115eb65a3c0bd4ec0f48d5326da3a9d450431441445d003cfca89e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c2ae665f52d9f132_0

Filesize
18KB

MD5
8c51f7cd5ff80562eaac3eb472f5bb41

SHA1
76a5d3448010188a58322ce05daa466fd35e51c7

SHA256
69afda3e753fe1fe30ea9e6907b0ebd882777691fbbe138954f5e76f95de91a6

SHA512
7267bf186d84e368efd8b9dea1446605a7815028346e6264e65c76f0909e7c3fd9ca3b6e94d315bf35dbf4e3128d5e149263d6061ecd2fb3b2369d7f773f4754

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
1db14f5921647a6fb129a9df6309917f

SHA1
2d7aed8aacd5b14dd48f7bcb9d193f4b4b9a57aa

SHA256
96938faa746f1b2f04105f3cb1ef6eabb24b443a711cec679311b653c0a913b0

SHA512
e5e6147b6a33112dfbde6e9e7fd18ea6167c563b5a886455531661aa9f0e4213f359fcd6d66474de59a23027253c01eb59e4628d94ec01f63a1315bf4382a13c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
1591a7d1317085850086055a67236c9b

SHA1
18fcdb421396bb7d622d3c4d626c27d4b4997355

SHA256
1856f6385e1a3d11394ebcc4bc596b1f690e8b77589559f36951735ba216d5ef

SHA512
9314cb9192830761991e2976238bb11aa06072386065820ba38a1c5977e3eb0588a5be782731c8c7c4ce06156944839fc5fc23987c9a0d5afda6358803904097

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
3dfd2094bc333ae8bc248370ab425b74

SHA1
0b106e04b0b2bfa7f63fba1e5779101a8a6a3525

SHA256
d941649b08e695269ced72cd9ad9097d7b94ff55e08647ac44102b8364c7d313

SHA512
99ba42279d41536b7840265d462176d7eb2ea0ea14754c74aeffbac49b992ac8694185d95fab7bc00282c154bd1a0db70c9ea2e5346da49943e290529bdf6d7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
369B

MD5
fa94f090cd508ab3419ab31afaadfd73

SHA1
b685d09409b2deda09ef87bf3f125ef4773f2513

SHA256
0794d644a1699cac77857eb8ba86c6c22bbaa3ee398f61c2ac1e05b7cf71d6cb

SHA512
3235e427bbe99846928309dfb0ea123841e4d40605890eb59112fa1ab64642d13c07c779798bb3e4055b978c358218a01ae83eb577379c0d4b5ea6024726c397

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
369B

MD5
3ee3f03464cc383f73ccd1f47fe327d4

SHA1
d6c6cfe7f10712b2984434f5fb319a1dc4e87499

SHA256
30cee7d5c4521d2ae34e9b9f6a6e3cfb97205f2e192d8011dca7212c8ab22967

SHA512
52ac1f7bf8f5b1ce37fa1f488347943dda21f9b97c24eaecfd01813d281fb5444d0afb7201ad7b1171bc807532f2259267dff717167fc7c2468801ad715e1a2f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b4b9c1a85cac7d46f3edf5bdd34f2680

SHA1
f7b4936a70e72d38ab1178435ebda5cd2251ea98

SHA256
c6fc0061940a543af3f163252e064b15dca690921d544119618517ac746a0198

SHA512
91455f02894023a53a7e3a8867db0214d5eee1a817df7ca8e256be750a5827a157733f8fc88b29d3019fb8cc4106434efaf4ea2fabffe46b0b1438646867560a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
8b8af67918891f53754799957efb12ee

SHA1
418e5276fda61fa9397100315a7573062b8c7656

SHA256
42b7d71384735fff5d684906aa43c4f009ce50841e1e9b005944fc61e30f14b7

SHA512
cee2aeef3c91f158f8f817982b5f5e4a61479bc630feb8326ee804e176461100343fb53437ca7e0f62da1c9cd5e9c8041bd9a877563c0845f25c53eb137e0705

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a5b566a912505d88d1ff1e152919680c

SHA1
293605afb0555e4c22c2387a236942e91e68b138

SHA256
4589c39af79a443302e990769dc48a73d122aadccc54157a00ec9a1771547892

SHA512
cd7dca5d4515119717958741742eebc182357e3be8c0da6a095f5c715c61f45aa591b4eb6b7b668f249a7298580ec317e28fb04808784b01cc3871744b00d21b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
7f1cbbf44020e83a520ec993e18955d4

SHA1
b7f2ee18512d90c33ff0f1beee5b7d873d776155

SHA256
bc0c91e880ac357a9e08a9615fddd5d3c69c8a6a4ff62d590320fec9c4d7bf25

SHA512
f73c5ab96a3bf54a5341a18dc938492a6df8caca56761eb487f6ada91104cace240e6b09eea9acc9269d6c19134199f1197215c46d950cbc33056ada7e4c4ab4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
34d01d20a5eab649850a42e862ac6d88

SHA1
97f48ff6422d9a60865b4d8b49927e1dafa48ded

SHA256
bb8680b13019df98f016701002aaf4b6c643c54e56ae8fd00d6eac61f858f381

SHA512
195ef30f15b8332dbbdb24b896cbec8049624513b55febc00e948f845c166bc533dac8cc51e67cd4c663a39f2787915cd22f86dff3549e4fc734cefb2f81fe65

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
ae8264775592b4e7f999d4f020c880d0

SHA1
18547f4b2f1caf2a9a8b4eb1084a323549440b81

SHA256
3fcda663f33bc5107810c3ca2d67c44978ad7716d9de53d9ec0b3deb869b6977

SHA512
424fb4a74ac67b08cceaa17b30ffea01e9011ec85d9b9560e0985c67febe93280aa5dedcdd180e528fe63d8be5ea24bd29a09c9deb5edcd4254f1155a19c8236

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit