hxxp://roadmap[.]videoweek[.]com

Analysis

max time kernel
210s
max time network
216s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
23/10/2023, 12:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://roadmap.videoweek.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133425395930574240"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
1880	chrome.exe
1880	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 2980	4796	chrome.exe	30
PID 4796 wrote to memory of 2980	4796	chrome.exe	30
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1416	4796	chrome.exe	84
PID 4796 wrote to memory of 1572	4796	chrome.exe	85
PID 4796 wrote to memory of 1572	4796	chrome.exe	85
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86
PID 4796 wrote to memory of 756	4796	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roadmap.videoweek.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc69e49758,0x7ffc69e49768,0x7ffc69e49778
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:2
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2244 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:8
  2⤵
  PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3020 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3052 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5088 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5232 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5628 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4008 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5608 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2504 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=6020 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5588 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5452 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 --field-trial-handle=1868,i,8051819792004038529,14034003213566400023,131072 /prefetch:8
  2⤵
  PID:3748

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3068

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
7cb963e00fd571a423ab994bba416132

SHA1
93cccfeb6c2219d1e5266e61a6b86d28e180c617

SHA256
7b076d8dc29192c8d5b7bea4f12fc62e75a6a2cd476530e9fc320e524d56eb9e

SHA512
fe376e1318a790aeb2f1a06041f5ca7ba1e2f62221c233cac0f53ce57403b6e4622137e1006ccdd5274191d69e06149be19152e7f5dae0981eeb9a031b068aee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
7b072a8430aec952745c92800d3fdc06

SHA1
a12963b6690c021ad7475f0092c8415519689dfa

SHA256
5570ef10dcb95d28037660741e50888b1f17dd897474c62c6bf01c4b9c6acf82

SHA512
d62c6ce44ecd63277a22ceedc2d535b8fd497ffcd04fd883c92524e981c93f5ec076cb12635d045bd2b1ac0120939104b81739de183779ed31e7ade03f6da5b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
726c69f018353cd2e8791e641c98bf1f

SHA1
d3e600eb0d5fb6e4de57b1521280328906af81db

SHA256
0081112c8c6548ea0b98b4b5e4fc80b20a23293befe9a9eaa6f926c15d308c11

SHA512
96743b5dea049fc6ff93db671d8aa67a2fb386392a77a893c0918e1e831f58af52381955a60f9458fc6f004be62cdfbf6b93db9b34bd21c7bf4fb31724ed89b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
f9ed1881976df684c7dd610ebe17eccf

SHA1
135999418cdc256dea21d0755ef548692cef1971

SHA256
144163379acdbc95d8546edbe69dac1ae842353b7eb2d271987eaab945f8329c

SHA512
a35dafd4bc21048e1e37a4002c5b234060265835aba610eeef7ceeb1c6cfe7824fbe74a70e0f8a7d6c8c4c07db1697bc8a29c6d9b1118e40e2610bad5a2a0ca2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
bdba476b18c50d6dacb83ed6f4f22e74

SHA1
e1164faffb195c8e4f778cf7184ddc16a3ecaef2

SHA256
560e564e7386b7578cd6f4bed8997c2f3428e0e776de839d961b429f052d03d1

SHA512
92d16aa4ad55cdecc5ae8db83d61934a8e7455eef11634aec6505dcf12f199f2707b2846c78edcc99a8ea4c4a9f2de7108bbe9f927bdd5b8b60bc447b2dcd045

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
433d6129098ddefed0de3117f23999ca

SHA1
aa4d4011e70a7962cc4ecd41618057c1478a2419

SHA256
6e45c34ee5bae9494be3319e4ac7ac6b0ff5597f77d90fef211d35310973b8da

SHA512
e0985c9bc2408c7439c89e0fe864f41bbac73e3e647c2c8e0ea8a9dbb430628be4a6dbbfeacf632773096a51cd8d24005268a14fc3445e6c8b42b47dab46f08a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
3a965c089b647ba825233b430762b5ec

SHA1
7af8e50ee149945a143ad6ad15930419d19a9a04

SHA256
b4297e2318a6bae279eea261a71c71c5590a76218d6afd5892dbb0c4ba8a9927

SHA512
6145097f0a93395ccf9997c3b8cb1afaa69ac558a0f21d97f26a331785e48a6c6230f6b2834c6a3ff4c8b6fdf65cc6fbca4d952040741f5470bf15fcd52d364d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
b090149f571d169f47618840b49ad50d

SHA1
282044eb511e3eeca9417498b4144811a569b2ec

SHA256
42ced39d3ebfb5c6b1247fa6ad63ef8b249695dd3787211af9e60a77da9d6ffc

SHA512
b623ac4ceed9975cafdb2a7ba931e4b71ee25d63ae7964448a3f4ef9fc3b959189d67e028b7f86be5f857703176ca7b7e0eef735f4c2f0f04ed55b2f68d73a43

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
9b385e15b9aee773c2f13cdaf5738ff6

SHA1
6f75f6cab9dcdaba6e1a80c556be294f7cdffa82

SHA256
ff6f7189c7ee6f3296401a5b6efe7694298a149249808e9739c736e3b5382f3b

SHA512
f4d0e0df82049ff83c7dda5ce6460573da49e390a2b0516ca635fa52bc3f8b507b286e1c1a71cda0561138b006549a5ab99c84641288276e13344a92b1f7e865

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
89d5c2e4fc663b6780d9c7682cdcb84a

SHA1
ddf599264d6ba5695e6b832f8ff39626cddbd7df

SHA256
6a389c9ebfb0e6f6feefd02103ff29e43ea329ae7812c83e0f71cb9cf66d3b46

SHA512
ea052f8ac79cd2830425ec99265d6af606a672782be544d335816809e53b7c601c767b8a9d778ce962857b9774db863d98d87a03d7fdae611c8f71def13a7127

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
a8d507bac9c4fa95af8fd2705284abb8

SHA1
eb91bcb950b072d39b7b5dd0e2807995f9e82898

SHA256
4d7c137a0d9013362b5cb060a75f5f10ca6a7b8bc5f4ba67119de91a6ba534d9

SHA512
19ad4af52f75490301c81f53b7e3630eb2e25890b04023f32f360a0e315213bdcc816bb3cd52ca22b8595ae54d9d008c4a108c0076cdda3e0c6a2f7fe6c19119

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
109KB

MD5
0ea4c6f455ca1b469445f1b99f348311

SHA1
cb81d051fc1e7907c6d0527a83d08db9a6d40b1f

SHA256
24cb66193fdd942f79aa24cb42139d15bdbe67eabf19b5abaf5d31a5950a4fe6

SHA512
1f39fc7c39e6a83bc1be6e962b61a3e0c3337972a8e7567b62ae63d3b7e3284deb4f2f7b345d01373ae49db2b34c46002fa897dd266cd65e49fd9fc3c5dd4f93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
103KB

MD5
1d9cde1c79ce4bc6a9ff2fdf7041c849

SHA1
91e3a9dc5cce359fd5bf6f00fe26d5ceeb073284

SHA256
132979736d13db6bb192b51e0529984d8856dcb0a0241fcca79ab811dce960f2

SHA512
3709919a879e766891dd9e683186f11825d063912db742020252c2eaccebba652c08ce2fdf30e1cf9861337f6320d3555e4d369b6d283003a7e1579ee2eae5a9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59c375.TMP

Filesize
101KB

MD5
7af5de7552e0717c8baa880042348e30

SHA1
6bdfcfc45b207ae9efbee579ea7f7b5dc9b296c4

SHA256
d51f9a7a6cba110a66d2154604e39c172f3d67d7b1b35ad54100527814a524d7

SHA512
30e1fea4d26e1cf995ce4f94e18588c829285fee47adcb9dfdcb32c0ac07caeaf21135c12351657addbeb9ccb0bd952acf64db4b680504038f8113051c013116

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit