hxxps://pitch[.]com/public/4838f42d-b71e-42bb-aad2-7099d67debfd

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
29/08/2023, 20:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://pitch.com/public/4838f42d-b71e-42bb-aad2-7099d67debfd

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{AF497798-97D1-4D68-AA8D-3805A34A29A9}.catalogItem	svchost.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133378133049250128"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2136	chrome.exe
2136	chrome.exe
4632	chrome.exe
4632	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe
Token: SeShutdownPrivilege	2136	chrome.exe
Token: SeCreatePagefilePrivilege	2136	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe
2136	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 4672	2136	chrome.exe	83
PID 2136 wrote to memory of 4672	2136	chrome.exe	83
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 2172	2136	chrome.exe	87
PID 2136 wrote to memory of 4680	2136	chrome.exe	88
PID 2136 wrote to memory of 4680	2136	chrome.exe	88
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89
PID 2136 wrote to memory of 1760	2136	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pitch.com/public/4838f42d-b71e-42bb-aad2-7099d67debfd
1⤵
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd485c9758,0x7ffd485c9768,0x7ffd485c9778
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1816 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:2
  2⤵
  PID:2172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2252 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3024 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3032 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5104 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4896 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5508 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5756 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 --field-trial-handle=1888,i,7240251112266447911,5436806415596340824,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4632

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:3728

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4551ec63-a8c0-4d6f-8e17-fc36363ded95.tmp

Filesize
94KB

MD5
51ce2172c1c82ff1f680b9d170a22cf3

SHA1
9485126952c32f0e64399f283c1284594aaae898

SHA256
617efd84361cf73f0f65cd383713028fb5f3034486ff292d1f2544500e04efe5

SHA512
dcb89afe0bbe3c8e3e29d11c6f2b34a397061664dd5f59b9320db816c1b5e4103397973809e2098af466641edba14a1f453f045c0822fb280da2a0328bd6f6b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
4fee33809c4391c130423753b4377b3c

SHA1
1f1ce7968242ef5aa1c57bb27eff3a78e5337554

SHA256
94ec26d0768be9b141d3c10ca080d6c0e940cebcaf031a444863d2842b4648ae

SHA512
55ee8210ebcbc49f1aeaa7edef0706a454a47d8eb0a255397646691997240f9f94cea7e52c73afb741639bc8e5121c4a903e47bdbe6db717be99d9fbc3cf3211

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
672B

MD5
fa6b68e070be07dd7551c6c09e4c93b0

SHA1
f9037985bdc65c5a362eefcbd7960cd4d555ccb3

SHA256
1c4b4ecd868a3e678f1aadc99f13c3053bc44c21d78d799803417a2a8c78584a

SHA512
adce19a2616f28ea7846ce48af6612899f98fc81d177756d943496b4eb72b22466bcfb19365e21e56b6e23dbd9949e3905b4746806b27282077a5facd910bafa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
df946272f4823f1b3c002983a99fdd44

SHA1
0ef531272f20246e9263679ccb9b4718831916f6

SHA256
8ef5181b657cd6c937aa6818186d7a3430a2315587f35d6e4c6fb21e41a99f58

SHA512
e445573d5845c9c2d1c21ba897e1b825688c56ab7eb99bdacc78178f9b831c245902bbfff31f20bb412e838e6fa9d2b98d38b8a3daafb96e3b178e59a1bf945a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
79d03f3d4c37852ae19ecd1fc2ccab55

SHA1
4fad7f7c34ad15afe9ff15cce51f1e603da07e2c

SHA256
fecd5392724a18a21e5d9e556133b64a5562b06b1d805b95c4d6601567f6d38f

SHA512
946b7769ee198f8ea82f6cb8886bd443b2f14c70b1811d9a38b3cbe3953e67d374776da6cf33f0c2413d1a0634f6af678c9338ff351253db4577da99b76367b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
05d75bc1b6804357895a0b2b76d53f0c

SHA1
a75db1ad0e7f34464d24f15297f22acdbd40ce40

SHA256
86d09251b44f38e1372f50c723544d51e48f3b41e93dcc04e67bb37d0f5b004e

SHA512
a1f7d3881085caa69de726b4bf91912de41a03283c6f8b899559a9bae0f1f1ae84923875b42d5248cc3a138361064a29198204555335fbcdcf910c918358dcd3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
b527b3b14ebf777a8ab7991c0384ec5e

SHA1
269aba5f6a341d3003fd721d9d936d7df8e1d239

SHA256
9a1d47f6d53686bfb1b1607301b7458831fba562f3b096e17afd3ec4b550b880

SHA512
882a71e26dc5906dfc0557bcda4d84154f72776a28559779a8c5ed629ac3c567651dca6c73ce1cb12db654dbd6c3ec70f33d16717f043e12f7da5e8b08a0d8c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
bdcbd4fc2e03ed6233e48a5da71bb6c0

SHA1
68b490088122f9f80fe66c24da5b166951c78a20

SHA256
2a520bac32f93c2e233ee3f2a5204a24a9b3b4d6b9c296ca9f43c04f43b5a757

SHA512
1cb03401a1a9a80c7eecb6bf35487862659c3b1e87adf56a69420a9b8dc1e77b79f7b2d42f3c8c4265be1d2b025724c43891c8478dff3fb8956d01cc5b1be35a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
d455c5e77baab384dfa46b1132c75abe

SHA1
bd6cfe31974540f9174f6087c9260859e97e643d

SHA256
057f3bb99972b853465eeaca1f817fd06294fe22c6b15ea7c0280843a0f4f52a

SHA512
215e39f474b9fe227f1f7ff2d3e921c41095ba321ee286a7725c94075fea58acc4a8bcc234edc67e4555c1d48b82dc93cc31284a30797ab64a5d0a13db4a7672

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
117ab9a620bd28355089b515b3f0b74b

SHA1
fa23c88b651ff2bc1a33faa584da941d70e78867

SHA256
fea6ad31c5785a88935291b4027b664a6a62c8f17ac661c52b2d84d8585ba9aa

SHA512
99e0fdb050fa71ada273499a5b8885721bdd806c5a87805119c4023911b639f64551cbf0c055266d3915f1a8124290308892a1d1c4dba63ad3b21bb32cda4785

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
a34c530e1baf13565484df1261bb0e3e

SHA1
ccd6fcb99a33c6dd69237cba2476f8a07bd1f14b

SHA256
eeab1b13520029e6a487d888105815fc56abf7d504d58d2e0e86499135566d06

SHA512
765b7d64e308faab0492c0913229f90dfac76378cbf2fe36b132b699725ebae0468da1bcd25fb511a915737532ef0bce95092694b74ceb5ef3e071b41aa452d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
94KB

MD5
a427f7be919f26ba4d3fb11b4db7e180

SHA1
5871760525dd4f7d8c80916bb48a4d4caf47ed2c

SHA256
d3084865b72eb18dc0a6468d630b2c92279ff600df87234ced5551270e91f98c

SHA512
80506d9e317e8310ff54911443bc93f62a70b0f2fc1b2c21e95348dccab5dcb3571d50e458ebe91ba08a8effe8852c7754b7754a8c0f9aa41023566d00dbbdc9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
104KB

MD5
a83d2ec3ba3ddd1b3461808176ed593e

SHA1
72a419eeffa9fc62638e45b86d259492f197987e

SHA256
d373451fe8d008ce92caa1e9e86e19c326025d62bd3a39679f9ed90426171fe1

SHA512
27bdb6ff830521f6eb151ce76d9e7bb22db18db800858f6d69b46c0ebf81b48d56c1f8efd36be93373df544bd4ec2614f68fa1e6c188b27f470792ae2da4c180

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58aef8.TMP

Filesize
101KB

MD5
16827b6e85a877e1191f592c46ba67a1

SHA1
c2192bb0483ea2ff0ae72278ba79d410e9daa9a6

SHA256
c552df57f9d7b068bba192cb6cecf8e6cf8717d334e2b5ba4553b8bc5bcacad8

SHA512
f480fdd6d6e2f0623b229a626e9f83c61820a87799f1009881952a19897e419f7e4553193c01d4d0f777741a4f820b89e3d5087e7566242f49f7522618ed2bf0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit