hxxp://jhvy6hnubgth rn

Resubmissions

28/02/2024, 22:50

240228-2r96safg3y 1

28/02/2024, 22:03

28/02/2024, 21:27

28/02/2024, 19:57

28/02/2024, 19:56

28/02/2024, 19:08

Analysis

max time kernel
1800s
max time network
1689s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 22:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://jhvy6hnubgth rn

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133536314332594403"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4908	chrome.exe
4908	chrome.exe
5012	chrome.exe
5012	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe
Token: SeShutdownPrivilege	4908	chrome.exe
Token: SeCreatePagefilePrivilege	4908	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe
4908	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 4008	4908	chrome.exe	13
PID 4908 wrote to memory of 4008	4908	chrome.exe	13
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 4348	4908	chrome.exe	90
PID 4908 wrote to memory of 3340	4908	chrome.exe	91
PID 4908 wrote to memory of 3340	4908	chrome.exe	91
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92
PID 4908 wrote to memory of 440	4908	chrome.exe	92

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://jhvy6hnubgth rn
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff912559758,0x7ff912559768,0x7ff912559778
  2⤵
  PID:4008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:2
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2152 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:8
  2⤵
  PID:440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2984 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2976 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3924 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3248 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4972 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4980 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5344 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3788 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 --field-trial-handle=1860,i,17372590454275122753,18128460727813426145,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5012

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4368

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

Filesize
195KB

MD5
873734b55d4c7d35a177c8318b0caec7

SHA1
469b913b09ea5b55e60098c95120cc9b935ddb28

SHA256
4ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d

SHA512
24f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
0cf731737a537698f2cafcbda5733a1c

SHA1
c7e8ddc581648b01f18609dcf3d9939d2653a486

SHA256
e147a27a784c0151f3c49af2115c00e18878ee4bc88d0b592e0278b63fc7db3f

SHA512
33b71e9358422203a05fd4e67283b91596d810036423b0d07cfae35753e8d15f9a67bdd0436a249da85c1236be4e15e67b28985061810a7185eedc3d37da4c12

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
52d4c2e7bfe5ffd78334d53ffe8c56c1

SHA1
7e82bbf41ffa5699dd2cdd2f223abb027c8ba26f

SHA256
780105894837e6c1a550292adb31bf9adece6cf40a8bbaeaccdd8f1576cadb27

SHA512
42d838d9a3585ed153e2ebe2480bb37d8fbbc657722bc8312ca632967041b64fdcc596339210c1841271e70b562bf5a1ce206bee9b2d72dea4fbd9ae5b33c787

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
1e245bfd2ec2f49d0bb1c58713266ea3

SHA1
3318e499a667dbf8032f73119b6dfdcb1c7eb059

SHA256
5fead6b948214fccf776961abca492b864142182fb4da48c7e9a280a0349058d

SHA512
373b09b191dac963c9de33f705bd4bf5583bf817376858d1034019516b3ea79623f09e59f51053f6af8b7ca549e7dccd4f9073f1d4d36bbc44cf917d8f3db6aa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
5ac7c99aab3ca37f0a5d813ff7a98d41

SHA1
932ea99d7d8e22848000a7e86fd64a2176755c36

SHA256
4e0141fbadbd8f184fa78515c5452d1643aab579e91f89ff66c9f4e9e387f5eb

SHA512
18887fb2de3ce1b413c154b2564a50d030702a7462d2cc01b648c7583a74e4859dc5c56176f47be61e4ab0fc849a15b224c424abe4a705aa446a652e32b62097

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
ec13608993eb6bcf2f49d4303ed0e8bb

SHA1
7ba7e27c76ec9d62ac7d28bebafe3c0c712a0317

SHA256
55118d30543319d20d3bb23e573ed750b5917e07e461183083a32062a2cb3a01

SHA512
af1e2a5b34bc950444e42d4c3af6a4fe2d44125ba7a4dd2c5dbd31d2e381ae5a65722a779e404987ca4e9b440dc7c7a8a9bb08be38fcade50f64abe53c1a115f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
5175f75a39e516b303542bbf8096678d

SHA1
1b096f207729dbbfe1a8576a6f9be17ae47e06cf

SHA256
981e227afaa1cb5bd008725f9399ce6402e75210d0cc9461cdb34f65537b23d9

SHA512
f291fab8f79dc54efcf19b11981637cf524cbcd8ae13c82d445301cc86b3670cfa34a5985dc18118ade2979b256f025911a5c9b781b8fb9009dc66aaa316832e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
207fb6448f1bfd85addccfbb8ae1cc57

SHA1
59b4375b501db8c2685738c090b6205daa34a110

SHA256
84738a4a36ea1e02ac3d23d711b061fe1f5290649bd1c28046abe51a2eecaa4f

SHA512
50e4543654f7e7ebcfa451d6a164b63083e570f849aea80fdf928e4b72207de625cb3dba09540853028a95060057168aded8d36c6873180512eef6deeaae2a88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6411bd5703d233b775535c3475ffd3eb

SHA1
fe0f817fc761d3804580c0e2abdb4bf7eb7f6fce

SHA256
9752e238a269ed4d6606e63c472cbc3eec244e90ba7dd02781e9e4744f331b8c

SHA512
43f00b84f9068f28b86c0941c372ce465e42ba10695e43741f7571e476b7a0068df7c0aedbe2b6eea1e00416a101ae38f802c833032f38fab07ee1ddf34ee38a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b10a054f0c6a9a6fb757bb29c3735386

SHA1
37e1234ab6cfed7befb8a87fc3db6d1e9a1f7ccd

SHA256
72d4eb7845dbdb4c315d03c1cb3fa68d2a97eeb595bd20311a470eb1cb437fb5

SHA512
187b6c21a165c30d7078cf6ff29d971042a87ec632b7d6154c3751afa149a09e1eed4fe7f6fee7a0dc0faaa0a090a729183128438ebcb52b55ebdfd756166c13

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
bcc1b2e2d50f0cdac8d714f6a23c12af

SHA1
4377166a8ef1f731bba4e1bba6e66ac2c460037b

SHA256
b65833fdfeb63f492845e7cb0783ead069215df312fdcec841fe46d5a06d5bad

SHA512
aedc40d5244e52f0dc79964339b9c96bd807b88c247b06eb1a6a9e8732e67691ee2032b20be03a762115e8941d626d3f1ed0fc6fdf777d6b4ddcaaa18934e88a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit