hxxp://beacons[.]gcp[.]gvt2[.]com

Analysis

max time kernel
86s
max time network
78s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/09/2024, 19:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://beacons.gcp.gvt2.com

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133701261238210626"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3912	chrome.exe
3912	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe
Token: SeShutdownPrivilege	3912	chrome.exe
Token: SeCreatePagefilePrivilege	3912	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe
3912	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3912 wrote to memory of 2476	3912	chrome.exe	83
PID 3912 wrote to memory of 2476	3912	chrome.exe	83
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 4260	3912	chrome.exe	84
PID 3912 wrote to memory of 5076	3912	chrome.exe	85
PID 3912 wrote to memory of 5076	3912	chrome.exe	85
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86
PID 3912 wrote to memory of 3620	3912	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://beacons.gcp.gvt2.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd8d44cc40,0x7ffd8d44cc4c,0x7ffd8d44cc58
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2012,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1884,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2268,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2280 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3060,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3092 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3076,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3116 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3052,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4760,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3304 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4360,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3808 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5032,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5252,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5264,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5296,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4356,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4992,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5612,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1044 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4548,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5696,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4628,i,11617031796723236062,129467135766776823,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1844

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:3116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4048

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
0306e98ce40ca3ed26b667aab92eb841

SHA1
6ee98a85dd92d0371e3b85e32a8c24a6f7c5e381

SHA256
2b41b2da003ec543bd3f0189f88e03214fea14d6bcfb47a1d6d204881b6cfc51

SHA512
7f689884f46e59cbb27fcd0f61ee0e9f444c177e5c2a7b1afc5f373947443688a3a34bb358704ab85276721e8442b4b9cb7206afa86c388f0b2fe2d4b1cfb61d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
94be11c0bee423963d4cfa0695f56f1b

SHA1
02ac11551f53ec8773994c288a331105c03ff5c4

SHA256
70036bcd29f00bedb38668a5f670a94c4015243eecf6fa47623ec808b43c0e21

SHA512
b3af203b5f57c696b89571dba8c050bdcd58b929c9d74c6161f2f86f373439de395557ddab02080d27e0c903ff948567eb1629d3c0707f18368880e15469f1af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
197d34cafa183390a276ac4f41f54a63

SHA1
fc1a97b5ff25442b9e9f06c098d12372629c8c44

SHA256
12e745519f00f0ad136906ad414b0bfcf66a42a947ece2482cf08b5d4e00c93f

SHA512
cc0fbd729109eebdb3ce4c8cf58239b13e272b4244ae6f2072edd4faabc684e88512397f7f62d6c3ff10308b4671a115459432996c6c06b531a77a130eabcc2d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
a7ab236e4bc1274633b99a14c903abab

SHA1
42201b1d8421873397a4d8ff02d9cab67569ff64

SHA256
bccd138d23fca6646516fc2481ffc8d60aa4c9a6d91f2004fa05f5d3a4819cc9

SHA512
da4a9870e32c979d95b29c3162cefec13dca22a01229ca79c4cf695d1613af2ddb2c40744630f16b1a081fb4597e0c83f6197e6c5154e42c473044fb1a5357ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
dd4ae52998aa3059cad3a0496a3746a5

SHA1
a5a8b0ad01e6e23e6e447f2d51403db3c936d065

SHA256
7d0a6a34e965a505adb04fcdd2dcae0069c5d33e16438271d64de702b5744161

SHA512
862b06183ec3b21846c97b277ca972da29cf4283cfab35f2e94bef914ce052a7a9edfc038516e1de19aa467d0da6b9eaa7634ceedcd7b5083f183f799d0ad96f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ad295a11b35bada1dde9eb3ff24e7284

SHA1
ba1543f3ef8387e4d7bdb8cb6b0c07f607b2f2b3

SHA256
b4e3c940cd0704625de44b011eb13519fd159f2c872d1300b8c274a9744c537f

SHA512
c87a60f4608bb6b658228c50320cf361d00c814a76a3ebcef93b0ebf408a646b257c3e711be7cfa9f93147b97b50c8b37e73f918344132a8c4be767feff06ffe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f10e9e6b8b5d467f0dd07dc2f7e730bb

SHA1
97a0ee7564f5919bc7c28f96b7682f7cde9dba18

SHA256
c45d15c40dbe4f9d1e3cac21ac4eb9c25170a2c781a6dfa55b30dfdc5755f315

SHA512
31d017801eceb55c9680b06d0893214be8d80904ac73fcb9fe3f80f21c69f405b41fc43d74cff6249f02fd884a3461420c08663ba707e50ba913d2e12578d662

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
67a3b53098e47f19fd2a03b4a48f9603

SHA1
6b4512c0a4810dbf7451741eb7546b4b645a01f3

SHA256
9c8ab2604078c7895995ae6e8e337acdb443581c74e287f3f2222298a626136b

SHA512
51bd31fb37ab20dbaf54aa810ffa31c3ad45e4ffe02781efafd1fd4b0f7ad751d062caf10892b2c2ecccf380f7a8b655d06e7be9182f0b50e7d9b5ec1c30f2ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7095db31a9aad57e5cd8fb7087035e59

SHA1
19dd9418b4d76e1bb323acfbfcd84628622d647c

SHA256
0648fa692272098675276c2d8983bfd2c05ff2c41c58b0c7982b99a3fda6c061

SHA512
3618e1a82dedad9def41a9af5216139dfaec9963eba472b5ad94c8e5bd5dc16f7a8ed600d15a1b358a54523f64b8f5b155da6d07e155c49720f3a47cc3c7b7c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
bc422ddd27bf948cb7d041e9a9f098c4

SHA1
335c499334060df99d97758306a2e80d2913b73d

SHA256
d65b7920aa7750069c1ce213b772235b536060e708e8c50d83575ecde3d385a5

SHA512
6833aedce3ae1d85be8ae5ba378dfab43beaea6a07adc3cb848c5d88e0c4c6db6430a880adaf65777aa7f442d4829138eca9299f977385c793d1a21b8a78876b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
6c117efea4fd9a91d7e705eb3d2aa7d2

SHA1
05adc70c72478abc39bb792a75ff20da8696d4a1

SHA256
01ad82fa7ae1a096a9afe3c271096e9f69b6dfada9932fc8abaf2ff4cd45648f

SHA512
a091cbf744a135f2fd4e9228f28f80e88a640ab07d5c5ab4dc1a1156e833614ce92c173516c121012e81fed8cab9302ea6762714a3854d4e219482962c26357c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
eeed94662ffc833ee9a7091ecf2af723

SHA1
e02cb2a2f9354df3b5aef8c4f781a62dd0743082

SHA256
d6c152e8008d228de725390032184f0727fa79a507f318628990233f57624a18

SHA512
613a027d32ff7465675e3d312035c80e5cf116803e6a6177f16a4e5296f59b50160aff80b1fa16dd69117e2e91b9776d2ca5dd455e33709adc1e8bb0ccde6c55

Download Submit