hxxps://support[.]broadcom[.]com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 00:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633177811254520"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
4184	chrome.exe
4184	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3400 wrote to memory of 2160	3400	chrome.exe	92
PID 3400 wrote to memory of 2160	3400	chrome.exe	92
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 2104	3400	chrome.exe	94
PID 3400 wrote to memory of 696	3400	chrome.exe	95
PID 3400 wrote to memory of 696	3400	chrome.exe	95
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96
PID 3400 wrote to memory of 4584	3400	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd50909758,0x7ffd50909768,0x7ffd50909778
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1724 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:2
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:8
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2208 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3180 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3192 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2920 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3724 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2616 --field-trial-handle=1852,i,2419035574733723629,10068461755509200821,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4184

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4116 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8
1⤵
PID:1108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
ee4358261982031bc4618621b178607f

SHA1
5e2fb691fad6abdb60b747f031701f5183d66665

SHA256
0323b733f4e923de789c88a76c58f5417797fbb6311d3d9a8f5364c0bcdea7c5

SHA512
a496fc529611974b844ae82235ba1354a7c31fe5e1568d9a00d134290141acc5e1462ccdb8017680dfcb39cc9eacf1b376ff76bea391e3473903ae2ec13c6f2b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
a6a5265b9bc7d2318b02d8438fd2285f

SHA1
e3c6c52643f4115bd7a9afa0d987ad22c0e3e961

SHA256
bf1957c13cc52c0e0a0dd6bbf7b1175a8066f7ed3aba7b1ba3600a510a239f69

SHA512
5c0a46c4ee11df5fb68f0eaa238c1b0e9167a1749ac5b7da9c27d59d86a990a486bbd42e6073c7e7e0e10c1e256209ad7b3638f4835fbccc70c1e71a631a8768

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
fd03875a90b8144dc9fe5f041d9d684c

SHA1
3050f71873653f286de1a16501607af74878ca21

SHA256
ebbaa31cfe641130cef00cdaa0c9ad7d1fde2902e954b5444a22ce4f26e9d07d

SHA512
2c8429eb40fe7d69d41f03f300aaa7882b72c990c51432e69dfb3aa155337856ab7757339cd1c9ac415efb27f07f96753a88099eb6f1567b5e3709f128dbcc45

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
986B

MD5
74f982aa1ca3a6c733a542996be8bf54

SHA1
4f68fe80169aac8e224f9ada34d2ebd6c10b1ed1

SHA256
2559d2be0a61517bbdcb119c8cbd05cbfe721e780c74e01334ac2012b2dd6d1f

SHA512
72fabe9f12f12d8be2878651946745d2f70f10353d452798e7dd4f9761e658a9ce56a55365f8ac55138ec4eb5d8e3ec0b593b1eff49f942ab3f360b575f65721

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
a7c632242525a0eae623572a200b735c

SHA1
bd2eb77dc610ce13ef43a150c080f5ce70825f47

SHA256
723ab61e975f72442faf42165acc7a542ffa9c81f782d6efe32755bf513dbe91

SHA512
56cd6d03b032c74fe9687f13f0c9ff990d415cd21c917067d7cf1f5fbf35d502d78352f96a3309f56caff335875e6ffd902911ecd6688c59f4b4380b14bc09f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
0e0dd8d268b2286a27df90f644f58e80

SHA1
3aeab51f163c1c985b50bef63bfeac49cacc0105

SHA256
ca68f55e334deebd3e7ff377e6250b9ef462108cb700a3c1ae9d859dcbd0ce41

SHA512
59935831daa0f9e857ae96970d35cb9d50adfb0bc28d8eb183b31ff6fdd6b21588a1a9e726e56177a6456cea7d9288728c388be9670306ab2733ebc310ed451b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
676110511b42ecfbf079a1981bd4a60e

SHA1
33389f90b4ae0db06fc0f42bf220c0934acb1839

SHA256
22568adb0d353041a878bc5c6da3d0ab07c837bec9f082c4eb9e7cd5ad9fd5fe

SHA512
23f1f25c8fcf430c4dbde3ae5d39e199a42bbca95261209475cfc1e89cb7ffb1f01af3416c54e2cd3561d76bb5e26eba639d4960332103e0b6a63f8404d8cfa8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a7ac2fca5efba6a905702ab3e34cac04

SHA1
279db1ad57e4bff0e30db1a159d7458b38dc7d3b

SHA256
5f56e99d5bee597094c492f57cf9e80a16811646dc047a66d9bbdd7e57dfef0d

SHA512
10e5ea3601bfb37d4a21d2e56238c3d27c1783965dd1f1805f263001c09fe04886c80d2cfe159630084cf313119bf2851073d6f41e88a257922169395ab77b40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
94fbeb3985598dbaee9f86b4cead800c

SHA1
6a3329e1c6a18d18bb4789a5c4d383fac9421195

SHA256
ebbfe960128c8686a56410d416e568fe244f8d22372d85888f368f769cfa34b6

SHA512
5d6e384a176e1a119281b08a3860009665b7cfebb6fe66079daf8cfe8e1e3144d331f45fdbaeb2851b0487ad01d9033fff4468dc7f27a274f1c2276cdcab33e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2532e2475d529ced8cc91ac5b1576a33

SHA1
0fa6842b23717b9f735b68af579f6ec978cb222f

SHA256
2ac81f080adf891cf342b09a072713c5bfcad741c6e8225fac67e19f7a236d12

SHA512
f9301e87914252caac4dbbb73c10b3e2ff9bf0daf0c9930a61ba590df5766f17ac14c4ce37c02d87dfb51c1c277a49ebc3003e0506cb4825eb1cf95868a69683

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
bc879d205fafc85d5d09938e40b886e2

SHA1
c8bc091c311f2a139ce6aa843118f97a99a74800

SHA256
db51127ca462323054307b216e4ccc4da936e1ac7a3b150701e4b2eed70e03d2

SHA512
8473a898879810cdfc6300b1bd64b9d0d263b56fc45223642156680d93b4b7e48f926d8dc77eed43afbf73c70f72ac634aa2e6c8f2abb89cbd52c68bfa39f47c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
128KB

MD5
f509853f09a70b74ebf819ef2820c758

SHA1
a47a5e0e6d8c1268849c955f02f88f007872fa35

SHA256
4db726ee00d193a0952876c4cff6714e5c085dbef3d89d73a81929d487e7517c

SHA512
a479435955550a31063cc66cc57e96a3adf85c5195386f871f8334eb99fc8d8c89ce2a67d0c1c4134da20fc9750fc58123d3c29f5f7d3cbcd08f4bd596544503

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit