hxxp://www[.] myprivatepost[.] com/zerodownload/completeRegistration[.] aspx?regid=1&user=herrerauriel%40johndeere[.]=E2=80=8Acom&pid=0&BIDFromEmail=herrerauriel%40johndeere[.]=E2=80=8Acom&userreg=MIGdBCcBLZKba9S2zQvM3fqLQqtvNm26TzvVTQM+gsH3Yvh/RMoOAcLm+vEEQHFzyt3z2C2u/P3edaO8CO6hQtgAxy30R3AVp4eMmLkoWuh7F0Y+Th7YJjhKSHick1PCUNIjIg49iv7YQfnlYzIEMJhl2Dq9rzIli6u66O4FvJY4NeKpNJBIc/zbNcw44NTkOZUYFllZhyfrZNTvO0V7gw=

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 10:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www. myprivatepost. com/zerodownload/completeRegistration. aspx?regid=1&user=herrerauriel%40johndeere.=E2=80=8Acom&pid=0&BIDFromEmail=herrerauriel%40johndeere.=E2=80=8Acom&userreg=MIGdBCcBLZKba9S2zQvM3fqLQqtvNm26TzvVTQM+gsH3Yvh/RMoOAcLm+vEEQHFzyt3z2C2u/P3edaO8CO6hQtgAxy30R3AVp4eMmLkoWuh7F0Y+Th7YJjhKSHick1PCUNIjIg49iv7YQfnlYzIEMJhl2Dq9rzIli6u66O4FvJY4NeKpNJBIc/zbNcw44NTkOZUYFllZhyfrZNTvO0V7gw=

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133541962762825550"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
5924	chrome.exe
5924	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe
Token: SeShutdownPrivilege	2004	chrome.exe
Token: SeCreatePagefilePrivilege	2004	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe
2004	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 4964	2004	chrome.exe	90
PID 2004 wrote to memory of 4964	2004	chrome.exe	90
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 4136	2004	chrome.exe	92
PID 2004 wrote to memory of 1200	2004	chrome.exe	93
PID 2004 wrote to memory of 1200	2004	chrome.exe	93
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94
PID 2004 wrote to memory of 4840	2004	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www. myprivatepost. com/zerodownload/completeRegistration. aspx?regid=1&user=herrerauriel%40johndeere.=E2=80=8Acom&pid=0&BIDFromEmail=herrerauriel%40johndeere.=E2=80=8Acom&userreg=MIGdBCcBLZKba9S2zQvM3fqLQqtvNm26TzvVTQM+gsH3Yvh/RMoOAcLm+vEEQHFzyt3z2C2u/P3edaO8CO6hQtgAxy30R3AVp4eMmLkoWuh7F0Y+Th7YJjhKSHick1PCUNIjIg49iv7YQfnlYzIEMJhl2Dq9rzIli6u66O4FvJY4NeKpNJBIc/zbNcw44NTkOZUYFllZhyfrZNTvO0V7gw=
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0x9c,0x108,0x7fff3cb89758,0x7fff3cb89768,0x7fff3cb89778
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1772 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2092 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2916 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2924 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3936 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3696 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3044 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3708 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4052 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2348 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3768 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4060 --field-trial-handle=1864,i,15513086144376451119,15944399197817600260,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5924

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
cafa80d3be2f2d45785f0a7dc6f12203

SHA1
73fa33830e500a203fa62aae33979dcde13884db

SHA256
2d77f366e24149a41a6e5e4c824ee8b11f7d27063ca3b1d39ed452881855a452

SHA512
3201fc53fd1a2b48ca5b103f3bc90b65a131600c921868fa73ca1a51221f8902faed8ecea885732c86ed3b58fb8a9adb26bcb2351de6ddeb5ef14f2d1d804706

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
af05f277b41af0730e2d582f5612c4b0

SHA1
202eb6605cac26ab97407acaeda851697e08055c

SHA256
64fed1aa44b81e353602ac4d419a56564d048ec042344469dcb53ddcd87df265

SHA512
f3f918a1a97782038b65e65a9ced0563f6623710cf0c0844d7ab0bcd38692cb19583187809cbf96c2214f46274a27a9ed95e42d9cc5fc2e89b143d59c2f99e8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
b2f14c16359c43b30062c91e5dc051a1

SHA1
96320452aeb69f941daaaff9e7206cc7d5251a2b

SHA256
2c6fa01630b7891b8b240ec404b6a63cf503d8c52e35b9d4da2a48a3f9a60207

SHA512
2fb4983844e2fc04649a8862afac803088a93091a7edcd609456cabf0b1d120c86c06492a628c7c0661fae48a88e7134a84d1e89feb0aea4d561f8ede91bf809

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit