hxxp://Google[.]com

Analysis

max time kernel
1199s
max time network
1085s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
23/04/2024, 12:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://Google.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133583497317926073"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1448	chrome.exe
1448	chrome.exe
3856	chrome.exe
3856	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe
Token: SeShutdownPrivilege	1448	chrome.exe
Token: SeCreatePagefilePrivilege	1448	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe
1448	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1448 wrote to memory of 2304	1448	chrome.exe	73
PID 1448 wrote to memory of 2304	1448	chrome.exe	73
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 3528	1448	chrome.exe	75
PID 1448 wrote to memory of 4256	1448	chrome.exe	76
PID 1448 wrote to memory of 4256	1448	chrome.exe	76
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77
PID 1448 wrote to memory of 2168	1448	chrome.exe	77

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Google.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffeab689758,0x7ffeab689768,0x7ffeab689778
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:2
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2040 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2656 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2664 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4348 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4796 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4736 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4692 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:1
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4912 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5084 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5108 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5388 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5532 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4512 --field-trial-handle=1736,i,13020637170864363253,12577486397538213793,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3856

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
1bc92e5dbb149b558bf427a59c83a71e

SHA1
70b9e7fd2da06872c349fc1ab8a171be22e73ea2

SHA256
61893a7fc797ffa7edbc4c44fb4d36263cfc52ac3b7abaff3db2a068eca68603

SHA512
a2ceb3070f7797e638f37e6b560a158cd7260d295aa88985854703f02b8568fb002bbb67220b31accb08e89255e871b89e8fc96373d9528876e66d68f2dc6709

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3cac0b13-c221-41ac-a9d9-a85f17424aad.tmp

Filesize
371B

MD5
0ab3ad55de212db0c915e76eb73f6bb8

SHA1
57aec765786ea3ef929b7df16eed92d82ab4cbbc

SHA256
74ecc234291840a6b221451fd7e4f036bddc874b21829b609c78447fec3a3d7c

SHA512
3dbd5337182fc4a0e9f3ea219f0cecb1bf6f6c903c4bbf124af8c2ca9a5baeeeb0f4ed76056ba0beb5e7e38c9d58995483a894edf5d3f4c7385f591bb91c1419

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
89b5577e5512406541def2ca026d550f

SHA1
60129e78c7c7d5efcc0c710d15ceffb804ab93f2

SHA256
18b1f890404c21bef5a1d6958aa6045f452694edc73b3acdd466ec4855542a0b

SHA512
b1e03d3d1ea749dfc44b5381b547f19e564d15b11c6e462a6ba128b8901351ecde50483f6af085651cdb3d43779bcd145702cb198b2889de9f90cc47f84e2729

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
79889fd8208b19c5cc678de4e2077324

SHA1
fd5464c9e1fb3b51fa5a792c12b0e04fbd6ee28c

SHA256
e36c995b16f3da76df77bccb8784e251669cddff44fc44cf0e7cb59c965887fc

SHA512
2120bee097d8f95db9f7f9f62ac55b1d20c5247cdf52c775759d3d4be6159de38ab4bd7b5c1defd781acf6a79cc6bee19fa62e3d27b62ab354e43c7da2201279

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
c24a5f1262a720f903cc1c2a3b1be012

SHA1
7e0bff3c203d329f7c1658f013d891977e2f2d64

SHA256
bd45cfdf6a4aba6a3e5c0618884c6826766979f30a6ead7b43b86d5046e3c49d

SHA512
79aac5063886e1a0dd1e53a08e117f9e2e40a3918f761fb2576cc4c456c07a7dd310ee14b8ce4e823f518537606a564525d20bfcd4d8c5031c7c9b41edf74425

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
f5c0f3714f258ba3c6075a3a2e86e29e

SHA1
9aed8e4ff5b6444a916e35ddcae39f6f412b39d6

SHA256
dc269f69973b4f7a8c7db9d1f34b167986e4b3d6bb3aee410632b7bd0ec36928

SHA512
09d517dd3707a72c3d3bddc396bc24561ed2868c3b40683419144427155f121d0c5c93a1c8a0d6aff4ac0a4b39d1e3e8f17041d6cfd013bc05d9391c8f75b340

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d61e1418ca27c1fce20a1506f3eb4b92

SHA1
b6401b26b75cfcf4b3491cd3e45f8744f723d951

SHA256
ff1d80e13d58a8f9f7f72b557470daab8e833c1baa6e686b501d56cfb12ee35b

SHA512
921c636552a080afbaeb29608370cd961fab8378e2fd3ce0a3028d9dbc69db5560b0830263301761b722fd82cb6973131106c7a6c2a65f1c82e6cb342feda4c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a55b4dd38002dc70c257ed1e2b1e7879

SHA1
ff44e462fe2431a4f4909310d4b436825f6a3ebe

SHA256
dae37a4dc6a60627c2f5e8e54e0e247126321e3220211e31cb1d2dcf0bee6590

SHA512
19d95b0f486d45718f42c7e196fa50942f0df56df74fa78f9003124f5d93ac65a3452cfd5ffb7ac62228dc6441b611a7207a18b7c703c331dfbcf84eb2186b2c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
136KB

MD5
ae45aed7f039809750395ac780f78cfe

SHA1
5da9acc30919997edab650d9fed30bdda9032262

SHA256
caf509db977ebdbadb24b5d9ecde49a358fa2162a64080b10544164d1cb9564f

SHA512
b858fd4a9219dee3d3f5415b40058e8897ecf84be481b2b7c2e2d66ff83c4a9838507fe235e0f3023dc277423bec5440ce9e85395d388dc95c7208b842e5b15c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
136KB

MD5
4d9467eafc890a60e9b8e3795c03edcf

SHA1
e85dd3b0c999123440110686c25745fa98919fb4

SHA256
07ae931b1d33d6a66ef3c34db0e737300a98e236edd11a6339d7e1ec5a97fecb

SHA512
a8a33213800081fc1792dbd780bcfde812a4017fdcad832dae68948ffb79b1a0433cfd01ad2ed371097efa041e04d8fd45c3d73d3c5bfdfdf35c92ed7dc81b07

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit