hxxp://battle[.]net

Analysis

max time kernel
1800s
max time network
1797s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
27/09/2024, 00:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://battle.net
Sample240927-aeeqkavemr

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133718693525883026"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4472	chrome.exe
4472	chrome.exe
1660	chrome.exe
1660	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe
Token: SeShutdownPrivilege	4472	chrome.exe
Token: SeCreatePagefilePrivilege	4472	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe
4472	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4472 wrote to memory of 4668	4472	chrome.exe	75
PID 4472 wrote to memory of 4668	4472	chrome.exe	75
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3848	4472	chrome.exe	77
PID 4472 wrote to memory of 3964	4472	chrome.exe	78
PID 4472 wrote to memory of 3964	4472	chrome.exe	78
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79
PID 4472 wrote to memory of 660	4472	chrome.exe	79

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://battle.net
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb1a849758,0x7ffb1a849768,0x7ffb1a849778
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1520 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:2
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2064 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:8
  2⤵
  PID:660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2592 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2600 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4360 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4984 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5264 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5220 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4356 --field-trial-handle=1844,i,11662317158660590603,3351608287225470261,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1660

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 888B
SHA256 9b3059977bc28af7b0fb8db6526112dedc255833eb19e3ddbdc8d73873d0b7c8
MD5 0ad6da9b02fcbe720021e7b5e5d50b17
SHA1 4f5240d33a1f19f38c0ff0f4afff864e5aca5302
SHA512 bc4c269c2b8887473fcee612eb34e6e22ed315eb894ab79a73f6e12361e4eedca493bac472a5d5d331764864da6ae62b65c6ec787718a60966df7c8b6d97fb37
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0b3fce7c66f799ed1e17978a84f282e54f90e4f41169c646c4f14ee092f2836e
MD5 cc0c33f16bbd51f3a3317c570fbafc57
SHA1 59f7942938ec7d1106b84abcf708df026b15c031
SHA512 2fa573c8d76e330e0b5978aa25a26d756c145eb87d83f4077877d77bb7e67634fb71f77901c440e79f59d8ecd919ba0e9999a0736894aa3e386b0b35d2ac07ad
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 525a9dcb9eb047f480b9d14242957abaa610f0feee895b452d134e853c418d9f
MD5 95855192b50c0fecc3eba71a397deb85
SHA1 e227ca16c82b6c2bcfcb21374eca60b255abe77c
SHA512 6690fcd1987045d937d7de7e96bce6a67cd19b4bc91a6315ffb9ad1f01e953e592fbe9f44d760e3e40d5124db23b59318ebed06c2ddd6d73b32d23d33205af46
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 c6abefc46e9b3bcb535bde942fffdcc913d31d057c5a44d5e341805a34f1db6f
MD5 295016f1428a1ce0600394f2a007ac19
SHA1 2e1da7924b9214bed24bc0fe4fffc4c9b720ca3d
SHA512 2283127e62a350d2cf1c583408d412a3e36f6f4164265b05572325fac24517833f039d278604f74380f69756818ee247e3c4084f2666c29abc04f581b3d78295
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 1bbc4d5d95bd372f659f9491f268e9406831524fe755be326dc4c96219c511bb
MD5 93a14a7bd36d16310a1ca668e966485d
SHA1 d26ecb7e1d81cdda0889899e3d208b1e2cdb3673
SHA512 e0e04dfa121faa16f4e362ea37d3d8c56fbdd24a6602de17104d91237ded002db661fb2f218609b8a5213dd0e4284dd482f14af1a54401884a39e1bf4fb5d009
SSDEEP 96:CRgfKIVA8iZRy7Di+6MsmdeQKkm1aoOFL0emtjVhYtjEsXt0/cg2Vup:Cafo8syy+FjKkmEE/otjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 1f0cbdf5612e3c1cd9d22095bef36aa5d902ecc99ba88e971eec0a1cda3380d6
MD5 8b6d1b18027a32f5c9cf8d1b917ad281
SHA1 72bca39ac08daeb39796a3fa235ca1a610d595fb
SHA512 ef4e36db7b379d0b5230e826e3a1b23ae5fa820b6844629546b6e823e6356fb266be903ed87acf5f226952703f82063f74b95f1c4b7dee8f9583ada9f4b6027c
SSDEEP 96:CRgfKIVA8iZRy7Di+6MsmdeQKkm1aMOFL0emtjVhYtjEsXt0/cg2Vup:Cafo8syy+FjKkmEI/otjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 7ab0a847f43f7e10ce9a405b35891a248eb219554bae41ee46b8ff4ba8d7d65c
MD5 a323ddf269330008d4d9f8154608c141
SHA1 41b104e46e8a76bd8950cb7f7ad7ad98b0173a6f
SHA512 6a68b13d1ea5e8a572d59be01c7d5251132b187281003a93b2060ba94bab4d740bade424bf8966cceb38091aa505618b271081c95b2c042948d501b60f8f7bbb
SSDEEP 96:CRgfKIVA8iZRy7Di+6MsmdeQKkm1aMOFL0emtjVhYtjEsXt0/cg2Vup:Cafo8syy+FjKkmEI/otjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 136KB
SHA256 f23a9d578927593790ca4bb53d10bda79c8ee3b8aedba1f6ed0255c06e7307f3
MD5 dfce8e5ca193632579c1ae554d63c070
SHA1 431ea0e54d08819e9a2dfb2ccf4cff056ff83b4f
SHA512 09d9c19ae3cae183d7a22b0abfb3966e7931b703879cdf08e20e159f9f34aebf0565a9f3f489160712574f08121192c99e68263bf9f9ec19f54cce1449bbfad8
SSDEEP 3072:1JmDjHQ1gH0C1nkGXmeWSyXHklNcGiiRn2a8Esn:nm/HJ52My3klNli6nlo
MD5 SHA1 SHA512 SSDEEP

Submit Download

persisted_first_party_sets.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download