hxxp://jnxm2[.]com

Resubmissions

26-03-2024 15:05

240326-sgm4tscg85 1

26-03-2024 15:00

240326-sdsvxacg36 1

Analysis

max time kernel
212s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20240226-es
resource tags

arch:x64arch:x86image:win10v2004-20240226-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
26-03-2024 15:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://jnxm2.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133559391811854466"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4804	chrome.exe
4804	chrome.exe
1904	chrome.exe
1904	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe
Token: SeShutdownPrivilege	4804	chrome.exe
Token: SeCreatePagefilePrivilege	4804	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe
4804	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4804 wrote to memory of 4336	4804	chrome.exe	87
PID 4804 wrote to memory of 4336	4804	chrome.exe	87
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 3480	4804	chrome.exe	89
PID 4804 wrote to memory of 5032	4804	chrome.exe	90
PID 4804 wrote to memory of 5032	4804	chrome.exe	90
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91
PID 4804 wrote to memory of 4112	4804	chrome.exe	91

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://jnxm2.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffac9929758,0x7ffac9929768,0x7ffac9929778
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1592 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2136 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2860 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2872 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4936 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4956 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5148 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3432 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5316 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=1856 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5444 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5780 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=912 --field-trial-handle=1640,i,14763040620787633411,15570287455515363264,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1904

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\45155705-a8f4-4b04-b306-3c507d6c23b5.tmp

Filesize
9KB

MD5
534f1e9a436bef57eaa43ab082723dc9

SHA1
b17c7520833367ecc88ee19fe0c50708e77a9253

SHA256
4ae9eaded9a2755384956c5cdcb2ff980a26da126c6c0c5c5650fb1eccd2c90e

SHA512
7927f2b0ae6865bf339cbd98ca0356bb17758572ca0c59b79aafe0eeff888f7f4157b07002945b7d079d7efa25f67680edbae102315f9cde5ac45df0808d9dd2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
02552affe2e23b4cdefe774097bffcec

SHA1
fe73d21c1a50351063d20886e0d00df8a0259c98

SHA256
30458fea6b6537248ec3407e5a7a525ad0e5918e2597392c69ae5b7ede40cff8

SHA512
c62d911616a8046398702f92fa7eec849d6b51018f31ea6b4f82563dd0804289c7020dee00f60feab2e9788bb6c812bbbf4e156d5bf02d59c82c0a7c91b1b6c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6cda6e71ccc408f03bd3fe2ac08d86f5

SHA1
bbbd69e081c2efa874233031f2ccb7fc68762066

SHA256
71eb49648953c1de217e51d5ebe9c742a559481e15dcd7c51e309bdc31ee610e

SHA512
085e3b2746a747983eb594dc57235e947065c3335dc1bacd136a8d69ea95e367e1ab3992858966bd2b2e97c191e47a38fc24343105f1f663874d99f008fddef1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
094894c0f9a136300d69eb09e365db45

SHA1
33624f43dccf541507bbce9805095531660eb278

SHA256
1badf9d635de9e80e292d31d1601aab9a867be274547cd03f9119f43ca5be708

SHA512
967c3a1669e1b7963aaed9431ffbfa5f673b33ada3c906dfad766eb70e12caec63ebb95c93fc79d9d7dacaecf53230d34fa87a364788226389bcb56bd56238b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
2d57d19e324e4027a7c2bfaf2d433e7a

SHA1
d7bc69f5117718f61441aa60eebbd1df15491142

SHA256
981cfa0ece20992a83a4d223320b89025854d8ea1cae271950ec371c9c26e86a

SHA512
0345d5bcc4413cae586116ce95cef6ce33c3d9acf96f6cd547d0670d7d72d649cadad884cf9e7a780643e5282ec570e276e084892310dbdf1915f518c95c7ab6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
253KB

MD5
85c5b9cb62da26d76496c7dbf222db41

SHA1
8225ae40938268bbde90e7c629a47286e606fdc7

SHA256
9583f3f3b4edc82a2a3f88600a8f10f9e06a8fe47bdcf9f3152c4844e6e08838

SHA512
513c8e178c8677d01e7325dec46716e5e1b91827cd02056e5ddb4891d28b4c72dd726df089a3ca25eae0099eb482151a5386fab7c1ec7912b45a8f6a85e8c4f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
253KB

MD5
7a7039f15593d76ff40b1ec8a591c351

SHA1
d1f0cb66978a64b6e66480e951440a9b303f47d3

SHA256
e198137cfd5099c1b2028107a94c79cd975eacb731c554ebad83904d9d487b2b

SHA512
9049c4893588a4c621c98e6730f9a5c2886960c50a58c827b57ae82a488d1895f6b670a9e94eecaf1094bc85f343466f9e323c4952e881517af422af07f6708c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
253KB

MD5
bbb9aec72e60deffde480d9f34198cc6

SHA1
f0b3971fb3f8c857ca8ec2ee6cb7468b12b19b51

SHA256
5d9a772225d2de6db960a9d765842aba4b8a555cadcedc1a6018ff2c57779fe8

SHA512
4209d2038e479d1db360e96269d4ceceade5372108ecf954a83d2c900cde9e250ed8a2f2c31d17d1fd18d7bb5c4fac5deeb37e78f45fb4bf96fb17ef9d71ebb7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit