hxxps://www[.]genpact[.]com

Analysis

max time kernel
193s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20240221-es
resource tags

arch:x64arch:x86image:win10v2004-20240221-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
23/02/2024, 20:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.genpact.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133531922292196954"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
572	chrome.exe
572	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe
Token: SeShutdownPrivilege	572	chrome.exe
Token: SeCreatePagefilePrivilege	572	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe
572	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 572 wrote to memory of 4844	572	chrome.exe	55
PID 572 wrote to memory of 4844	572	chrome.exe	55
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 4764	572	chrome.exe	87
PID 572 wrote to memory of 924	572	chrome.exe	89
PID 572 wrote to memory of 924	572	chrome.exe	89
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90
PID 572 wrote to memory of 2884	572	chrome.exe	90

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.genpact.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa625e9758,0x7ffa625e9768,0x7ffa625e9778
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1780 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:2
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:8
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2216 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3004 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2996 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:1
  2⤵
  PID:468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4728 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5152 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5140 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3184 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4476 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5704 --field-trial-handle=1800,i,8164047931599196301,1594567461200146531,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5016

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2800

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x420 0x2c8
1⤵
PID:4432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
1024KB

MD5
794a87071239d39210d5ac788e175187

SHA1
28feeb9a6aa1df80374a5862c5830a9edbd959c6

SHA256
186f2efb0aeaafe88856a0f6d61de1799e9d12a037a8ff8e0ba5a5e962c25f43

SHA512
e4142c2409ba70ceab94fbbaeb58584f1d0e8e2b79e09b8ff7d1491802aed6ee8d9f85f412d6556c8e76646dab1a932166842e2c954ac6d3c79221275415c804

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
cb31cfb8da26f278c733644806f4b2d7

SHA1
f07b4a1102a8119f0419be070d25d531fffd86bf

SHA256
d67a923e7a94aebbfa07936b95ff5cce99088025920eab6495328765e75ba6c3

SHA512
ee25dd84440163d0bef0aaa9840b7e7fe1268d06ca72813299edd4dda01959ca0c1023236d955323234bdf7401b3911fceb188c0377ecf1b49c64001854240b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
08666b6da8fe9d065dd95155377b1fba

SHA1
32841e95f2b04b9adb9f1f9302efcf29a77f9490

SHA256
8ad6c3436fcbbede27be270b2b40ab26b98d6202103e6b9f8f80d81680039d65

SHA512
cd8d2f1bdb1d03278de9191e1a04f7be0623c65de9d4ecb9c0f951018d832be0a0d23d77b27a3fa95955bd3f5963699607ee6509f7747d53a0e9b99b46e6f58e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
e210b7fd4b6e67054dadccb7f397f9fc

SHA1
9b45b56ae1bc0879a1d5497dbc52ce9bcd17173c

SHA256
48b37a8d2609d503a0d99e308c0175aa413544bed1a88d8d4d260603f465788d

SHA512
2d996b625aeafcbe1c9b3eaa6b0781c66f446d139e07c99f0b8564c416f0f408d02a551cf0c5fe3233aad51ffcefca5bca2238ca8d5eac8a87da72d0bddafc2b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
c88de3fe1061944999874dc97c279f51

SHA1
7c6b6f0d2f6d07d89d90e360530e7caeaa3dc8a9

SHA256
ea3762941dd2be951c9933cae65373803bb9b2e80da00409de8ec102f90d50c9

SHA512
6194a4bf9b3773bbf1d5d750a64af087f3381fc3e81d7b88789e738f8659163b9e29b16da3df3248255eaf6bfccaf8d115d44b240d341d95e22ceb95c2eafd3c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
704B

MD5
2663b9b5b7cb3dd44a6f645213124b31

SHA1
6ea60814859c7559095319f39297dc10b361af31

SHA256
096602ffec4499403d554c80c47d7af0b2464675e252ad330bfd195117062d51

SHA512
575a0a058b477e19d88ab083f38683fad3f55ed81f94755a992f05894a638296f6a586c6bfb45374f1979b63f4699970a3f2191d447ed8fe52c97321e73c2843

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
76f9605a04bdb01ae07f15f4dcea9ac3

SHA1
3206c8b16c3752e64824cc7cc1315f17845d4e64

SHA256
e100a15eeb721cc09532bb970cd36fce0f79fb1002ada810bb15560a92a8524f

SHA512
959fca562a9c244547a83ccfc46735e64eba1d422c79d3ea0bc1727f76d7cb22d1e583f0beca54692218b952a0a4df7798455de618de5ebcf74edb2f5dad85d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5d948d658f598abecb17afad8406c305

SHA1
c2399ae90d506df810ae743f683268c073bbd282

SHA256
422114e6a416bac562cafe7a747138c8da2b4a10e88edc00a3a412d820501ab2

SHA512
1021be99da98a81c9cd6f59ee0c6532c0d7b0039e5ffc63a7c77a2cbaa2fbc0776b487a9682a62f66b674f363a8af9c79fe5fb7115be1988987c9d8f1f6e149d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
39eac9eb21aaf8d08b28dc39a6ec99e9

SHA1
5ddb331b28aaee295d78bd5b4b524664535613b2

SHA256
25d74f76c144eef1105019096791d7ca15a6d57b791e436a32895ebfe8915547

SHA512
94a769b50e2d2164222584478ad319b89bbe7c0bf1b498bba5f896c43dffbcce277edf4f98b2b1b75d6783ca1e014f41b5899a6a2f7e8c2519dd5684c99e4af2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
57c590fb4118cba489e2742f61166f8d

SHA1
ae4b4c1ae0e6ff59d2c2b0c1eca3e150df97e2c0

SHA256
13ab3cc77665cc8992c8e781819d94082a6b7818a484d348f6534d555c5a87c6

SHA512
19a642f46fc060f6f04db1116129bf3a3e6f77e00339fe09ea113e21949323e47a55286ebbf92d586baf034ba197c8b4f61272a2eb5dd59986e3ca77de0bce33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
4d437b8758e1a312de88a31411df1f9b

SHA1
f5075e007482a744e5ca9a37e7319ee4de3234d1

SHA256
d5c3043715e0a373ecc4f26ca1e17a639db405c911bbf79b93644b223e990180

SHA512
1939063ea0109f54624b20f8030b84f1d833f1622a7bf705dcd5c4c6d1ee71fb7ad2fd57681980807c7271800ece6fa698db2c63014648bee12e5595cfca2c2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
b311b3345e1935dd4eb081d8b995681e

SHA1
45a2060615e164c723defe41b33ea6a1121a6baf

SHA256
ebf6b50f07b2d84e1402bd87e87e04cb252aa2e8c6a9c7e9fb33797371553c61

SHA512
fba305f8dea4f179c72fb8502f874677f45b6da4705b9ab25c10f6bda482cf2dc1e975b623293a6d3a847f23b1d6da76492a2b0a2999c38653e0a761e2113c87

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
9a635f472c08fcdd9d42051fdddb0af2

SHA1
5c74de88cee186046e56e23020f5dddf76c6b471

SHA256
14cd6b18d8cf54ca927d4aaafe90a9f41c2c58a4f774d3ab1245fad6a926b227

SHA512
752b62015a8855b435859aff22abd1968e2a756a5d0a0428887f7c7f63d561bc20dc920ce79957bd9ef6d15fe165b2d1bf225d50a9c497323554f59a5bb5b482

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
546aca584e50f691100661154776e1c4

SHA1
6f295100714cefadfe0c1aee632b13d7bc913e02

SHA256
db3cfe17eaa27f696ee37609aa31df72e7a82cbffdd525d3343b51cd13934e06

SHA512
7390e5f02333aeb963a4618fa3d80bff80c7d57c43128710c6fc661293a99767978d0ea9d1c52e475aa811b8fd6437928aaab19dac8db1227c7d6ccf25b6969f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
256KB

MD5
4c0b36efe03e74db94c61c8c5b68a59a

SHA1
f62eeec8f0bb5ba8c208b3db03dbb7cad7cac116

SHA256
14d54600b4d0e5145400957ffb8686b634ce6cf78aa946dcb9851c8c9e751a0c

SHA512
e7ee9af7889768b00b3a8a832c8c9b86807eb5fb0a1e64cce0d5e2b95dd31e275b513c08cc66f41489ea87790ead4fc811fadb77a6a58eb3acf974085cc3ff7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit