Analysis

  • max time kernel
    1799s
  • max time network
    1799s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/11/2023, 22:32

General

  • Target

    http://roblox.com

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb6fe09758,0x7ffb6fe09768,0x7ffb6fe09778
      2⤵
        PID:4104
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:2
        2⤵
          PID:4704
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
          2⤵
            PID:4000
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2144 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
            2⤵
              PID:2836
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3096 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:1
              2⤵
                PID:4716
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2968 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:1
                2⤵
                  PID:2292
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4900 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:1
                  2⤵
                    PID:564
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5260 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
                    2⤵
                      PID:2004
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4964 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
                      2⤵
                        PID:1464
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:2
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:1844
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
                        2⤵
                          PID:1464
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5468 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:1
                          2⤵
                            PID:1240
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3948 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
                            2⤵
                              PID:1644
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3092 --field-trial-handle=1844,i,15054950883189612515,5709261826259089972,131072 /prefetch:8
                              2⤵
                              • Modifies registry class
                              PID:2420
                          • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                            1⤵
                              PID:3092

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

                              Filesize

                              97KB

                              MD5

                              0840480c8b96c43b7657addf57e33e6d

                              SHA1

                              8079d964c1efae6a4eefc365bc8d5bccb839a7f5

                              SHA256

                              08a0d979f700abbfae24085cc76498cca7c966966c553193c653ccab8a32028b

                              SHA512

                              f1efe946eedb66202575509e2e6da4a7655b228c750e3b00765809c4a3f463aa1d8411076e94febb5517d9c72c78309f3acfbb92276f8a5c75656a49c5970f18

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

                              Filesize

                              49KB

                              MD5

                              6983568534e8cd4d346a2638a0892bf2

                              SHA1

                              2df1d616ae8f4989dbe9427848e5974b195e0a5a

                              SHA256

                              02043e5d2b23f9582ee2645e55ac26e556496bf25f15d146eda049af1f8553b6

                              SHA512

                              11a02ae3e51eea6768f8274178feae2da5398e6c5f62a5d34146ca7edbdd484ff85e59a2e1c61a8c0e1a1eda8af8f9fe9d5470cd357c2b424719b41eb7effce1

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

                              Filesize

                              26KB

                              MD5

                              71c6e4dcb559033bffb685bfcac9213a

                              SHA1

                              25f961c9654c8b6ebdb65fc84b3e218fba9fe9fe

                              SHA256

                              77dcc1c86b052027db7eeeec2d6bad3d899360ca512a5c8ff38db272e9cee5c9

                              SHA512

                              f7065427eab4f90046446685101518f036d4472bafa41da4d0c80f30e3accb19d90f29c0483ff7b95a8282d1ef68b60457818e4c1457d307208b56d536e9ac68

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              3KB

                              MD5

                              78e620d835a9fae011445002a18cc38c

                              SHA1

                              aaf58c6b51f17f966acd9ebf6fa5e5151b59f200

                              SHA256

                              3024a07e45be95a1a63b53c535fa7026d02d1c13a40440255ed36ccc0445b701

                              SHA512

                              38e681115a3360ed5c3bc510f0cfa560a987524b97f9ba0386fa17dcd51cff6993e09ce5205128ea40601c79233e12e8d8e87051178f2b1968dd041cef084cda

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              4KB

                              MD5

                              00398ef909f0f9c400b80a89fbb827cd

                              SHA1

                              59d2127bfd4971d6f57f62804855b47d7602f4e0

                              SHA256

                              4b466b5d6f8c3b3acae238ef35d6db3ee4bd3649f5e0ba9709c83d3de200068a

                              SHA512

                              317f3faee1deedd1017e4ca9451bb095290dd227b792dfac6576bf309466cbe110604c5cc6f32d3b14158f6cafdacaa01747fe90b985ca502a1e5d37ff130287

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              4KB

                              MD5

                              78e0c4415d8f7bc176dc62f864641f3e

                              SHA1

                              607ca36d84f789cb2c36a439f01c34ccd504afa3

                              SHA256

                              53f380cea7814c690eb1ac5e0a8e3186d5b476a60ec246f8eeeca161c41ee87f

                              SHA512

                              cf38d2100eacb6a2a511b86dde1aaffd4442361b408698ded6650e1abea4e6f80e1e5457950655c9e410cd5452897ddd0eed4ecaf17eb9e9db468f678ab0fc40

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              2KB

                              MD5

                              e11cff137f9c4e1113fc3360e0375c63

                              SHA1

                              f126959b2e7161462a4bebdd7779f0e9996a2daf

                              SHA256

                              ced4872837499007beddceb5e25ea304d8bc4ea561fee7ec1b0e7fa11948e648

                              SHA512

                              a700ab602fc8771631f41c328d3a448d34b2ac5ca81327040ddbb2dd73f7d5f5a324306f7c5257527156e5427d93080f4c01c58aea62e694e3a8dc350a71016c

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT

                              Filesize

                              16B

                              MD5

                              46295cac801e5d4857d09837238a6394

                              SHA1

                              44e0fa1b517dbf802b18faf0785eeea6ac51594b

                              SHA256

                              0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                              SHA512

                              8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                              Filesize

                              387B

                              MD5

                              1d26d99ec256fba2d74928aaa53d1895

                              SHA1

                              6e3544b170b28bc1bd98fcecd0798e65ca297ed9

                              SHA256

                              ecfd8900b83c1e3da53fbd6061af66a52e9c56092fcd72486b674a184182bbc6

                              SHA512

                              2962faed411c799f988cdfd6b6d095fc9068960b53f09e4f93e50591f87c6e9da0322c3d12f5d58a33c393223f040e6f1a0291043ddc30c60ccd4a24989fa5bd

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                              Filesize

                              387B

                              MD5

                              5b7552a513f48e3a8abf627e3bfdaead

                              SHA1

                              9b7aeb1e3bdfa6248f6251a377e9e7c371ac6ff7

                              SHA256

                              d9de006e2b570dcdec2aa483f1967ea9e731303598cf72de33520495bd0e0cf5

                              SHA512

                              e97801d906b8afc1c9d2e77f9365da4d7f6cea0671a58d3b3e5ec2f4a9050e31ed992427fde60c7983d9d37c0c104f97dc500963984e1ca1432c0ac021676761

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe5be694.TMP

                              Filesize

                              349B

                              MD5

                              75b89a9d1f0e862918970087697e8b94

                              SHA1

                              578ea584b7fb512cc3f17f5d7b52fbe3587996ae

                              SHA256

                              b5242aed8ca1563b9f52475dc842aae955f03b842c8c952da4266aa5f949f006

                              SHA512

                              baa49001aca76a795d2cb4ad9136adb9d128e8ca07dea4973d877b2cfc1a79d78e0ea91a08d926b85ffe4f56a19f2f9045400d695438588289906a7b1ef77c1d

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

                              Filesize

                              23B

                              MD5

                              3fd11ff447c1ee23538dc4d9724427a3

                              SHA1

                              1335e6f71cc4e3cf7025233523b4760f8893e9c9

                              SHA256

                              720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                              SHA512

                              10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              3KB

                              MD5

                              e9cf1011f74b013eaaae1f287f3430c9

                              SHA1

                              22ee505bd4abac061f3545d8ba4b9dd9809e393f

                              SHA256

                              afeb16e5f4cb85f8e2e6fc62fb7952d1f891961f644047ddeb2f87733532306d

                              SHA512

                              801f391da374f63053e569b889311666d64d0ab4df201d76d868be4c4858cef81eab8100775d08c6331f8cb270060914c8c2d4a66f17da4f4739a32ea9ec1b07

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              3KB

                              MD5

                              e0bc3310f6c5bc69e5d4cc89bf53e84d

                              SHA1

                              c4d6686ff511d7267def945ceaf09727bc893d84

                              SHA256

                              83dcd984a140e35f8b6bfa9d58dbe98b3e394d8d17b3259a7587ff23405747f6

                              SHA512

                              e16f745b1d8000f576500495aa81ebfa9ad86d4f278f268af942531bac453ba82e22244313e9b78d94c337a2bcc3687905c0b51d6889e2b1e318b4978d524e52

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              4KB

                              MD5

                              2b39978cb9b1ab86476dd1ee7567f2c5

                              SHA1

                              7349ee5b8781547d29a24c364090f89b170324e8

                              SHA256

                              ae8505375b926e3939d92e19d89aba66e9f33387bff474d870262f8fdcec1109

                              SHA512

                              00af41a08251fa8a39c5966fc187fd271a97609b919d0896f2e85188289ccc500babb5d425fc45be2aaa4ef3056c417a6c3cab66fd0550a9b27a9b13c16be2b0

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              5KB

                              MD5

                              c050c30da0c858e38552cd806e3ccf23

                              SHA1

                              d56883f7be6949f34743f05d6eb90a43f84d7da3

                              SHA256

                              f9914c29fea92459e0fa655953897dfb9203575b326f59495baddcf5257f1197

                              SHA512

                              6335153e35a75aa90d5cde776c26b0571c6fe652c2d15cd2f4f9df86579ab53ff2f7f0fde18722cd04e54c8532552de576cf73123858e05e5f8b275c5d1a6953

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              5KB

                              MD5

                              8543339c961f3c6ec425c955e886bacd

                              SHA1

                              c890fbab5b55e670723d047eb2e9d3c3eaf4616f

                              SHA256

                              db942c88316c82673f121c9dc5242b3166be498e523a237c32a46e1cfe4e77d9

                              SHA512

                              82b8a3603cf933fdc46a041e6afd6e8f9f0f7216dd52acf0d7f161fce028855a517a4796a2fb91ccf80ba06f09c714ac7b05fab643edc3f74e359cf86b92eb14

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              4KB

                              MD5

                              289b1f80f97e64d7aebdee6ecf2011d5

                              SHA1

                              9884d40dede3764fef562d7a837f41ccdff22d81

                              SHA256

                              4aae3e8be1dc61db9596f1ce41c961234f125349b231aa91cdbbcdf91509ad5c

                              SHA512

                              1030190e92077d9a08d1d393963548eed4d8a52ea7ccb8ef35d6290ca09f4baf5d1396bf84bc455a0cbfa7abd0ae99b4f0171fb978d5b68610540e9977b70611

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              0182e755a473038fb3f336f386f2d967

                              SHA1

                              5be2624dba2a858c7ccec43f2684da29926e916f

                              SHA256

                              231df27f6c02e286a542f06bdfdf9e222e0634f467c219530e821f1890a072fa

                              SHA512

                              84ced23789825e1810a1d75ecbf694088083cd9c539fe5654489ce06baa3e289da9123681bdaddd6cb17fbf3df116b2c1aeb3068e9d5f4e1df479d37c218d4e8

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              028164c8593e7f13e96c62ac0d49a5ae

                              SHA1

                              97da2909695fbd472cfce024bfe27e0410d612f4

                              SHA256

                              f2c6624a299a4f3c399cd3e5900c8c39ad38951972058ba29ee1c357e7765845

                              SHA512

                              2fcf3f4b2138cded11fb20356bfdd2d7f0f7dd18a839f1a6fdabe7438a7174d892fc3958bcd4ef8f385a3492a4f4b5a9c125a50463f7d95a783ec75bf9a880e8

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              7a4f71fe54f40de48fc2522181386db6

                              SHA1

                              a55fbba03868bdbdb712750234ba765e7ecced78

                              SHA256

                              2914a9d4dec67d653bb89e61aa524022bca5b4f74e4f77df967b89d0310ceb13

                              SHA512

                              ca99df67efa65a20796964d2e849f651d9d2e4b6fbcaa8e6efb7a4bc91669bfec4a11dfed79bad42b93330b4e5d218e310ad4970ce371cba1c715add4da93e33

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              b2f70a5ed777c722411296a65958f463

                              SHA1

                              610e26361b6109eaeac0765dde0add143f79ca49

                              SHA256

                              0b09b26c3c2dc3b0ef6b9d47d10ccbeeb5b259793a5a07f85ab0122228c38705

                              SHA512

                              6dc73d8792a0b7b641102f0a9c0591c58e90e94f8cb7be268ea130510341115016d67357acb4a4c0ed36f4923cc58535b5c431358d476fd195e96cbbf8153bea

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              0cb3ba8b764e647f83b9058d694314bf

                              SHA1

                              7575eb35980d2a52b3733a05c664802e6a7b8d0e

                              SHA256

                              a2c80ec0d84bde2e45a33738692317c024ca52d217e51ecf4ef0f6554f062a36

                              SHA512

                              6845a4bb987e6fc360aa36285bc2e3d99c4317e1b50492a80aa7b51ecd023608daac3beef95b78f7a64c88fe6d7b778cd5804197405f21d99f81eb10b2086266

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              6e31f459a76d88bf7286f93dbbc3250f

                              SHA1

                              a8a42ecf2e0efe23cc75b7ceb6dc0e46d239ff69

                              SHA256

                              7257e69101c9cce5e10d6893d9ba251da0b5c821e410e793c7b92673166cba80

                              SHA512

                              f3f5dc03f2bc9bb479371feee335e50fb80d307cd1663e53ef3047ca1c9df658a4d0371165034c2256e5c20862d1bb4cfd92f68d5281697afe5ceed7b94ba023

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              c058788625bce853b0906209eba61bd9

                              SHA1

                              c053854e2038609819fb10c19c6beff0003807a5

                              SHA256

                              1341027d22ce5baa6333d46f25fc7ec67d882664901ebcd77850b2c7f6c371f4

                              SHA512

                              317e05a3c85df37590ed922069b68f74116d5ea43db5215e571a1d84027c75be7841b027cadd092571c8c9a48a1c61d4c3ecd4308794e77fbe8fa4f28cc26b49

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              596cd76340aa7b4341e0a5bf53324ee3

                              SHA1

                              cb595802e2f560d04f4df1d4c782f3f5bb61e827

                              SHA256

                              acba7ace7c0b15d07c356d19a495e6e086aaf7300f1bcc8fe16ae3063d60c381

                              SHA512

                              72424c7bd1bb68d06221ba7e9a3d12cbb6d124145385cb140a995f9b0a6f0a3a24a39467502f2f023441c7176d6a4f79ac6179a4f421a233196d5dd6fb2c7194

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              5aea7a261de302bf9b8a140123217faf

                              SHA1

                              77fc5ef3fce42c6d538e5f09b1a565741e776f72

                              SHA256

                              bd113bca61e865d72e89bfa3cd6c5dcc6f3bb7af6ae1d517b8e93175ce1b33b8

                              SHA512

                              365c8c749435183f09fdea6cc6c7d5ee2ef3686b12985d25349ebc16ea3575c056184746283bb30f6aa8c0eb9e28199e69c35255b2e7744e6ed57b4a0d8c78d7

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              06be70ed54e1231b7b868277c9dcab41

                              SHA1

                              c3cf6872672a5d70a5118526fb80480ecddec4a9

                              SHA256

                              0b8ca1e9117f702c064c5199d4515d13d0e567048a9c7b43913bd48f8cdac04a

                              SHA512

                              97610e11033db37046beba8ae66619448a651a26c7f2318b6a0a9b8709e9f8162f4014d4cc4905ad621134c824e3b9cf15286348b2222b9ddaead2535df65ede

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              6ade1f34feaa1c6af20b98014802a273

                              SHA1

                              14259835e50728ecb9469bade523dbf12ab05cfb

                              SHA256

                              3ab4c6bdd1dee09606a12a1e2ad1691a8785fa8e80d21336d40c40fcef02c82d

                              SHA512

                              3fbdbae95aee5d689845677aeb7ebd49b2eed686eb6bcd9ad5d5c21b81c787bf70a7d56c96b18b72116e3578c75fde05bd6f20c7cec705d0a744f5dbb003d8ef

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              2a1c324b37023a296dd671696979b479

                              SHA1

                              15e96c0905a9ae2898da8e12454542b464a08d41

                              SHA256

                              17bb599179cbcf8f250b34307841f41a7c8cd580d42f681213a124a343cef6a7

                              SHA512

                              1a035a925b7b9556aa9ff434bbf497a464638783bcbbbc4e4bce142ff03d8742b3d9a1d7b9b926cad00fde219506418d08dc00aa32cbb08434f2283cea22953f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              0b61e6f69727b7f7bcbc290cafc98c4f

                              SHA1

                              df59fee579dedaf060647745103019076699e58e

                              SHA256

                              ed64bbff7d85cec216906b3fd16c6bbc765b61f96e39264a90fe524242d0f727

                              SHA512

                              f22e2ac0380a032f8a3200ecbb2e028f6e64b61f7177fe41766ee360977b2a3dfda5784f99380db73754076cd69a4bbab3043478fe4dd311c969910f76cb518f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              94a6f08b95f03779b602f5b531822633

                              SHA1

                              b9d61ff4d8a162ac4b492ff5afcfbed1dcf1a4bf

                              SHA256

                              f17876c72b8e1a614a5ace58b41c445401dc450e36cbb4878cf2d150b7890012

                              SHA512

                              03c1586a5c678a4223ad2bac8c32f5c05591ea35b4a900c5b4dda15f97be448534a05d9ca36acbc63dee864822350afe5c116010346f31645e3530c6ab0d4a59

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              6534ea674f7eb0a98b1dc7226017fce2

                              SHA1

                              c045065c0adf6fc81f2c0da2bbfa1b4473a2ad8b

                              SHA256

                              886fa69291e9302c960f32c2632bf2621e29b9daff79bc2a7e24690d0261bd1c

                              SHA512

                              0375861b00d5f68f037c78a3d99677839da1cdd8a30d6b4ec7bfbb8bcbf8095201254b29ababa5c207a498c9abfac9aeae495fe21325354adaf4bf6ee8917ebe

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              ab1d0c7fa8bf7dd98e18273e5c02e92d

                              SHA1

                              0815a9c82f1fe8d50ae378cb24ff0a03fe9a94e6

                              SHA256

                              2d56003934ee3b15c2bf9a6ac59ef3780963a2675a137a41bef84626f2501b36

                              SHA512

                              d9fd35ccb774790532a5f759d270b96b52eab51735a862f563e7b04e6e907c7ce1afb4533330f0ed8789b1b324ad055d7a1ef9f7f7588223e251f900ff308074

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              3KB

                              MD5

                              bda18e9a6043e44bf784702688c22526

                              SHA1

                              c3afb797cce1a8e7c5e10cff82bfa15c9be33f67

                              SHA256

                              a3c7cf9b9823de1fdad36804f8faee12fdaf8949318aa453efeea4427b603394

                              SHA512

                              f677361115528a44b43820985bc849ba2d82a2b8cbdfec48555915ed3f65d2df3723b217288cef209e3dee92525559c40d3201c50d6e301f81da40c2051ede6d

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              f60b016bed2d714faa18d5539d937fa5

                              SHA1

                              c28d54db0d6fef44a9c9b0074d0a69fce85fb7f2

                              SHA256

                              dec7f55f0a2ed102df4d79ea0d9a03d6a410feaef2b0ccf28c43922ad401e5fe

                              SHA512

                              448082326bd2fed5bfb22aa1b2a738816c43007b063c519d2e7bebf4fff8cdd797307065ef447c57b6d297cc786d116286d591214f2a868cdf133b84ab8a7b7b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              5KB

                              MD5

                              696a5f9ad825f2c44f2c4a48d942b664

                              SHA1

                              626b0d7ce639ed1918fb2c7f5b38e825d4d33b45

                              SHA256

                              3138a8603ac816707d8d3ffeeae54d0296c7f03f16843d295e25dd880c3b1119

                              SHA512

                              38570946b1525e68a273eed8a355728018252ff81866f4cbfd31a74559b083fb3bcb98361db2de63772f5cc7944b608627a10de3a0efca16c41439f6a38a7499

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              33a1e2cab5675404d04bd9d2d4a95156

                              SHA1

                              7063a9ec9035819d1927cb3bd42687570b331965

                              SHA256

                              6e2d31c6cbb7641864cf7ac08fe1d4df681b8e8644f0eacbdc923e067d9aae04

                              SHA512

                              c1b18849e7e88fcb76e20eb95e297d425b296293380c53f976ca64820914ecb5b00c860d5dfc70133fadf7d58f69bcc11f2efc4af05bc9526e5d95fc60cf20a7

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              65ec3da8296754c8361c9f505ea6d5df

                              SHA1

                              cdf45332f1d011efefa2a01556eb786863ff0eb0

                              SHA256

                              19bb3c7558a9567740a2b1adda84d82bad2e19206dfc026b88272d3bda5d7837

                              SHA512

                              3cbed9e1b5708841e07f01168c77be5f147c091e13cb6f71fc6673caf5b2b17a74e560f1103101574ef641c4a1588ccd7ed6fe01e7e837180b35281883a6147a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              8a82356222e377f77edf2b64bf2d4f5d

                              SHA1

                              f69e005cadc5f3a129c875f4fdcd2ff969426ff2

                              SHA256

                              d243c1dab400a2a6c86046d8deb554303fde20364d66acb350e8ad4fb021e154

                              SHA512

                              5e08cc79cab14191c83fadb6931cb308f7771c9533236faa9b8ee1a43b8e1f740e85ff35921afaec4cb40041297276cf8a9f586bd8d0507f973d6191bd522c17

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              2c13813a46bd435a34affce5dd38d0ca

                              SHA1

                              e1290ff1795357b084f5c9e6856ba2a2f7302340

                              SHA256

                              d4e9237d4ee58dcc7dd9549dbc10d185a2b7ed6c2032e751f0e2f02a9417574f

                              SHA512

                              2956e52ddde0d6fea1e6fe0384ad871a439072be3c918e39bdfa7ff355de29697e594f0b7616e1e7052a30d0c4ebb7cbc08f9ea9584b625aec7e248a1f9ed63a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              50eaf23ca1f1bccbe4822e2e1e56f9fe

                              SHA1

                              4cd629fd05bce969315c9d309c6d047782166155

                              SHA256

                              e213d258cfe4ce0f5cd85bfe9a4562a1b0d30b0717bd62531540752d23bee7da

                              SHA512

                              9835f8f29174838846df5edba90443010522019de2cfda2863d1f2546057f144bed68c4f729fae5d7b50c35b60e6650d89e190fe1cdec8e089b8600413e0b965

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              109KB

                              MD5

                              40045daf894d1a7aaf7acf058f432eac

                              SHA1

                              041fbfffa4741e70cacec37f69904047fe3eebc7

                              SHA256

                              9be8dc16248923ed3ee5979464f0f66bff66f56a926fc784f69be66d882f792a

                              SHA512

                              fc2c8af7a70813bbf4b3664c8936129689a0de96a18e77532d7ee20b5038607ae7bcf3e6d0ba13e5ce20ac1c30bfe69b90e0f757de7b60b5e53ac1045b3278e9

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                              Filesize

                              103KB

                              MD5

                              8ebef8a5722ec97de880d2987aa7b321

                              SHA1

                              7c03594c12c3b925ee23a75a6b557f38de7083d5

                              SHA256

                              e245c37b87a22e0bdccfc9e3e7b5414bff816301b455a9524c451304bf1a8b3a

                              SHA512

                              848524c2328b54c5c07c0b368315066a4879c7c57a3350054ca002b913f3a051eb7459b14d95d017d093f44acd460debdde200dff685733c908af2f2088b344b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59b4fe.TMP

                              Filesize

                              101KB

                              MD5

                              239d8d24db59caa2a1c1ee19ccd722c8

                              SHA1

                              b719662bd01b841b8e72ebbf168dcadf6faa0cc7

                              SHA256

                              7d5342b0554992536a44b529cb5655c29367d5b42f56cb4e55c9225e46350012

                              SHA512

                              c88d9358989d31ed36ba26e04b48d54965ec122f0cd892751df10d465de11085d33c614b489e20651f7f431a21975f0c4c9fad7a2c0c5caf7c42aff94598856f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                              Filesize

                              2B

                              MD5

                              99914b932bd37a50b983c5e7c90ae93b

                              SHA1

                              bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                              SHA256

                              44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                              SHA512

                              27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                            • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

                              Filesize

                              2B

                              MD5

                              f3b25701fe362ec84616a93a45ce9998

                              SHA1

                              d62636d8caec13f04e28442a0a6fa1afeb024bbb

                              SHA256

                              b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                              SHA512

                              98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84