hxxp://google[.]com

Analysis

max time kernel
1799s
max time network
1685s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
24/09/2024, 19:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample240924-x9dhbavanf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133716812427483090"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
4532	chrome.exe
4532	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 4756	1520	chrome.exe	74
PID 1520 wrote to memory of 4756	1520	chrome.exe	74
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4664	1520	chrome.exe	76
PID 1520 wrote to memory of 4580	1520	chrome.exe	77
PID 1520 wrote to memory of 4580	1520	chrome.exe	77
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78
PID 1520 wrote to memory of 4252	1520	chrome.exe	78

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffc54719758,0x7ffc54719768,0x7ffc54719778
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1512 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1820 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2044 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2620 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2628 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4392 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4556 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4556 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4632 --field-trial-handle=1756,i,6780470360935034440,2585321120007650984,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4532

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

49650a7b-aa39-4a5f-a7bd-97a92a58b649.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\49650a7b-aa39-4a5f-a7bd-97a92a58b649.tmp
Size 6KB
SHA256 66a93d8f8ef116cc71fd5d90dc3bbd808e3173995fe87b470b8a6ca5524c4012
MD5 284f9122a4652ed2c21a1098bcef3ed7
SHA1 1a3d48ff688ecb3fe996c721eddf2491cb5b7bfb
SHA512 ce7b4f7cbcb2b127bc83aa0a8671a41b7ac46feca366a843b2d35a7f3b87a3ad994027c768a9788c92ba28602cb39f5a64d3568fe927c76fb3743404774b9811
SSDEEP 96:pcA1fKIKA8iZx4y7Di+6Msmde2kw1kO4h0ttPjVhYtjEsXt0/cg2Vup:pR1fD8i4yy+FFkwrzotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 2709d4c8e75a6e3efe790f493abdbb45352f7d2698d413455815b6cdf62aa14e
MD5 78d0271d54fe0039ba13a6112baf7bed
SHA1 6185ac069849702871b49b4854bc0c565805944e
SHA512 ab5e3e9bfbd9901ec06d6f9e5fa26bb5eef42c7ef112ec76ba7b9df164b033651bb547670416766442a025e747a9dd40f240a66944e3b4eb132b5b87301bd2eb
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 50794c60309affe209917dfc2961af073e21011d21bb3ee85964fcd5a58e4f7e
MD5 04f93b3938f7df7f7a3fc513aebafaa5
SHA1 92ad5b3b42233eb8d98aa141ce33c926ec1eb7c1
SHA512 0d48637ab0dc964fdc609de1ba0c932c3b8c5084c0233b10548b6be894497859b24bd2583a1f59f92faa9a92242f22e0d58f761051e5b63d2a2a1ff4c753d123
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bb12b71add11a417d269a64cdc6eafa01a1239906869a5f89cdc34db696a5d32
MD5 28eaaaabe33c94d0b9f1bc2c3950f64b
SHA1 ae6b5f25ced9b6a0301e44751696c09df420b91c
SHA512 ac14c8190ea55cfec6778e717c8291eac07cbcb0598fcdd89c4fdf79147b9d3e60f0e38f509ed014eb4e8c7ba16d51bc88e492f43707d79d7c986193ae7adf53
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1018B
SHA256 41adf6193d05716940b937fd884aca93e910f6cffdbe41542d56e67540294585
MD5 35cc9d2ac8f9b6e9faf41851830c4ea2
SHA1 279b8a69bdb98938cc66b016a8f0d34404d6eed3
SHA512 c41ca5acce26be2eaab830ad5881ba91fa8d8a1ff5258964f4ab565251d012e099dec56935aec310270f218927e891f4ae6197d83d1caee1667b7a178e38c9cc
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 768d84688ca4d7dc4908323f546d3fb144727b750239d428cf1ac9c600880759
MD5 719ca348b339535edfee5039a4019cab
SHA1 6b93ff88153c4a6e5223dc2aac93a2b5a3dfcfe2
SHA512 e2deb86437b003bb79923824e59a461df305fe1cfc7fca75d4bbc9cba7faec7b15381ae83f3406f74eb2222c517f52a712c9b499a76bdc5f51091a138878d2f6
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 371B
SHA256 e5879f91b7625607b99ac62cffcb0d60227f72d70f7a22dd401406c0596ed5a6
MD5 f97d15124a0d2db66ffc6bbebd39324b
SHA1 306bc18259ca8e7fa78259d48fedea4f8efb57ad
SHA512 559dad3449083b6b587e40a224a657c84d5c7de8a821511fecd9d74a25b2be5e203f16ec474516d30864fff0db54fe9ae969fe92633a0e64af59c3f3854b7360
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 7f30597cf27e2b67d46ef3b355ecc7d0d689b66fa143c44ba7f45b7c570f6034
MD5 084697501e27bf2a032f7b118f54f149
SHA1 873131b864f309583026a8847f9dc4c104d9b85b
SHA512 19c30b53b0158bb6c3038a5badc855ef2ce77911983e26837e248dfce882ab97ad7f38deb57124fe92a88199e8a89949359f0bce40e0d366d831adc16e921a06
SSDEEP 96:pcA1fKIKA8iZx4y7Di+6Msmde2kw1hO4h0ttPjVhYtjEsXt0/cg2Vup:pR1fD8i4yy+FFkwWzotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 513b64001c5189e53000cfdc718f937938ed41362f673b0edfa68dbc9302ed69
MD5 20e446a0dcd67dbc3942356619419031
SHA1 a46ea37e7b5aea9f771b74de7f2227add89c0010
SHA512 8a578b8b65617b315ade040f9181e7644d002b6bd0ad55b8cf48fc4f560fa5d4a2cdbef03142b7622f02923b86159f5c430712bef64b0b32031ded19848dfa5a
SSDEEP 96:pcA1fKIKA8iZx4y7Di+6Msmde2kw1/O4h0ttPjVhYtjEsXt0/cg2Vup:pR1fD8i4yy+FFkwUzotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 9f0ac4f7b6d42ac2c2bfea10582e844cb463423c08b9744eb8c43bf596ad753d
MD5 62fbb439ef01d25f4807b28abfc3620c
SHA1 e89f5dfdebbc3db70a580b45fe85a17efaa22324
SHA512 2f537dc3c071406269db66ec88dbbdcb1c07a308919795d829163b38096849da3f2628a3850a503c88ef2dba0c69d67b3f418ff90410de3c5fab188bff984a85
SSDEEP 3072:1JeRjHQ1gH0C1nkGXmeWSyXHklNcGiiRn2a8EsI:nelHJ52My3klNli6nln
MD5 SHA1 SHA512 SSDEEP

Submit Download

persisted_first_party_sets.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download