hxxps://krs[.]microsoft[.]com/redirect?id=lxDNVZKK

Analysis

max time kernel
149s
max time network
145s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
04/08/2024, 05:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://krs.microsoft.com/redirect?id=lxDNVZKK
Sample240804-frrtjs1gph

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand microsoft.
phishing microsoft
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133672216123157032"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2368	chrome.exe
2368	chrome.exe
4016	chrome.exe
4016	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe
Token: SeShutdownPrivilege	2368	chrome.exe
Token: SeCreatePagefilePrivilege	2368	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2272	2368	chrome.exe	73
PID 2368 wrote to memory of 2272	2368	chrome.exe	73
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4388	2368	chrome.exe	75
PID 2368 wrote to memory of 4824	2368	chrome.exe	76
PID 2368 wrote to memory of 4824	2368	chrome.exe	76
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77
PID 2368 wrote to memory of 5044	2368	chrome.exe	77

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://krs.microsoft.com/redirect?id=lxDNVZKK
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffddccd9758,0x7ffddccd9768,0x7ffddccd9778
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1524 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1800 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2040 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2844 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2852 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4764 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4920 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3176 --field-trial-handle=1760,i,16665533701413589290,12362666058341133228,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4016

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5debb20d-d2d8-4e46-8e9b-1d6eb561cc76.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5debb20d-d2d8-4e46-8e9b-1d6eb561cc76.tmp
Size 6KB
SHA256 b9018bd30a1233143cc1bd96c47c1e9152cd81763d649d0443387e2c5a9bab3a
MD5 1d9013253f099ee7b52a4961b8ee3b1a
SHA1 a0ebb44623f4a84f50085d64ef818b848aeda68e
SHA512 53a6eb6f805a9540cd4a37671469b31bae74f3b13f3fd61caf76b6df99079a64928dc3085919f4568dc061a0b6b7ed8f3c9201cfa3ffbf4da228f2dbd679f4dd
SSDEEP 96:Q7SbeKItmhZ8iZ7+y7Di+6MVQRgmdebVkIS1kOclrPgjVhYtjEsXt0/cg2Vup:Q7ieahZ8K+yy+FyGkHcYotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 209KB
SHA256 27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6
MD5 3e552d017d45f8fd93b94cfc86f842f2
SHA1 dbeebe83854328e2575ff67259e3fb6704b17a47
SHA512 e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9
SSDEEP 6144:ewpSHs6ljYg6trFqiSAprekukr20IgIgR:OHvhlo8XGus2oR
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 79f7b58390ba87eda5b1e5f435fa9ae129aac5aaa8a206862b2e8b8c25505b89
MD5 95d8565fce3fb2cbf6bf2e16a0dca15e
SHA1 74eb45580a26499c268fba7480cf8f6616ef30d2
SHA512 dd998c29d5604cd81c45e9c74ae91dc30f9b4e1ba4fd539fe9084d2194ce4355cc27e08d00fb03c45205455ddb92913cb8a656af26d4fd841b3ced1b548cd22c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b9384056cb164833242bfff42818104626458869b4cd96955f70ada32d6bd088
MD5 b4745a591e02a25b9987de409cae062a
SHA1 a18a6edcf0f99eab44c605649feac1d061799387
SHA512 f1b64df8dc81577f5d128d57fb0f53e0fcc00b420af03b3958aa5a7e763912ac1aa5c81739bb980a99db9da9cdc6240dfbaefc678d50fa45ab5543f36f9c37a7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8f9010ff1ef676ea7a331c25e02b91f801fc11aed4d4713d3812b4390a8d6963
MD5 b8726da960faff42557a00ffb1aa1d95
SHA1 0041ae9b7fada63a44c34d72e43ed78b0913dc09
SHA512 11f310a0415ef4e8eadc0c1f1489fa69e3e8e5df28cb228d7fc5570c19a1aacfb44e40a71c0ff8d2298afe265764cbbc9076da777832092c34f077b885271ba8
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 891d71741502734b560da91b626848317a18fb3c357f622fdcfac5514a512f86
MD5 fc795f0c64135a8292072e1ef98032f3
SHA1 198fe4422217b44fa418d5caee31d4460bdf567f
SHA512 bc8a4e3066ba48fe3651eff1741440c250f1587343fa1377a6ef68befc0362db00991e42ab124022214986e426a4d4a5efa63699bac950870e14a7fe2e3b2bff
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 af2db8eee2138c035ac5daf2a070765c8a10ef471d18f53c5da9cffe8c724ce6
MD5 34daeb297bd27f4e7813187d4faabcb6
SHA1 8292e6e77682a2b5af57c556c1286c27930a9b87
SHA512 ceff659f8ad96d5932c3182c20cba9e7e2fb7172e4fcc72f26ea7059a368f9578869aceaf71d9688450112abe01fde0a7fbb8df38b13a88c420186b1e3c50aac
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 3aad1e7d9f78aada2f106d97aee698d4fd547223ed37864a56d5fc1e03632ea3
MD5 755804c063db177a04677a2a24bafc74
SHA1 ae871674b045a864ad717b2a2bc22c30460cd2a3
SHA512 4e086e4ff4d0d8728241ffea4fbe2c617547cc7a84008ba95de9b43e06d639a1beb50177aff9cf9db45d5dd85d22129a5da22a3a1589bbf04be59ef62967e907
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 83e3a6d0d8218e6521efa20e931908116a035eaf4f366522491b542bb99adf99
MD5 60d92f2451ad145f31e07bf4b3a4fb28
SHA1 cc11e845d4793f41814e94d216c2a098316238fc
SHA512 4dd7cf362050c87f9ca7f1da42ed953b28210c3686fb05b60633c3ed181dfe5f7dbd28ea1dd6353204e0030041908bbebeeb57dd7af029152d23a0f17eb29f1a
SSDEEP 3072:ijHQ1gH0C1nkGXmeWSyXHklNcGiiRn2a8Esb:AHJ52My3klNli6nlE
MD5 SHA1 SHA512 SSDEEP

Submit Download

persisted_first_party_sets.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download