hxxps://ww3[.]appgate[.]com/e/863411/on-las-vegas-event-highlights-/ccc3n5/5465751736/h/qDy4hhfajcCZaUZ1O1GLy2WBE8Te9NDWesIsikPArEE

Analysis

max time kernel
299s
max time network
300s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ww3.appgate.com/e/863411/on-las-vegas-event-highlights-/ccc3n5/5465751736/h/qDy4hhfajcCZaUZ1O1GLy2WBE8Te9NDWesIsikPArEE
Sample260804-as16qaaa95

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4196	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302770371048822"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
1176	chrome.exe
1176	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe
Token: SeShutdownPrivilege	4656	chrome.exe
Token: SeCreatePagefilePrivilege	4656	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe
4656	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 4656 wrote to memory of 4260	4656	chrome.exe	85
PID 4656 wrote to memory of 640	4656	chrome.exe	86
PID 4656 wrote to memory of 4196	4656	chrome.exe	87
PID 4656 wrote to memory of 640	4656	chrome.exe	86
PID 4656 wrote to memory of 2156	4656	chrome.exe	88
PID 4656 wrote to memory of 2156	4656	chrome.exe	88
PID 4656 wrote to memory of 4168	4656	chrome.exe	89
PID 4656 wrote to memory of 4168	4656	chrome.exe	89
PID 4656 wrote to memory of 4268	4656	chrome.exe	90
PID 4656 wrote to memory of 4268	4656	chrome.exe	90
PID 4656 wrote to memory of 4620	4656	chrome.exe	92
PID 4656 wrote to memory of 4620	4656	chrome.exe	92
PID 4656 wrote to memory of 3228	4656	chrome.exe	93
PID 4656 wrote to memory of 3228	4656	chrome.exe	93
PID 4656 wrote to memory of 1584	4656	chrome.exe	102
PID 4656 wrote to memory of 4300	4656	chrome.exe	103
PID 4656 wrote to memory of 1040	4656	chrome.exe	104
PID 4656 wrote to memory of 116	4656	chrome.exe	105
PID 4656 wrote to memory of 116	4656	chrome.exe	105
PID 4656 wrote to memory of 4352	4656	chrome.exe	106
PID 4656 wrote to memory of 1176	4656	chrome.exe	108
PID 4656 wrote to memory of 1796	4656	chrome.exe	112
PID 4656 wrote to memory of 1796	4656	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ww3.appgate.com/e/863411/on-las-vegas-event-highlights-/ccc3n5/5465751736/h/qDy4hhfajcCZaUZ1O1GLy2WBE8Te9NDWesIsikPArEE
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbf9e2c728,0x7ffbf9e2c734,0x7ffbf9e2c740
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,14337464547810505437,7975565993546299791,262144 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1800 /prefetch:2
  2⤵
  PID:640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2120,i,15983653303194204086,15464009141883264505,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,7486410786778125799,8119680774703801341,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2356 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3148,i,6040501397399250386,15637988673296051546,2097152 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3152,i,7219609732671873762,9416885064008659343,2097152 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4308,i,7207975981883464640,7985274500260881618,2097152 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,7799680066132978400,2395312871918725069,2097152 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,3106788184950370874,6023278751936408816,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5104,i,3404197637757314494,14756283570119307690,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5096,i,13433270433648880125,955621214083034062,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4048,i,2749175619813252547,7869383001492606571,2097152 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,13008007174641577702,16150293287676311609,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5084,i,13740343574436197140,10721818870704010720,262144 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1240,i,616978886775955395,11445102862626153208,524288 --field-trial-handle=1656,i,7164731008830260669,8773088724928758562,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:1796

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 23cf8698a6d1a61113ac270283bc4bb6404e08390b008351124f72e4c4b78dce
MD5 57005bb32208438a8e5c0a469e152cea
SHA1 7f1ae2a1dfe140f6c2f833cca1b87de7a116df8a
SHA512 c7cd3dd1584b299e7eda3ab5f14b3d9d654f7ea459b6fd631a3fa0ce30fb1aedf7ae4062cd9db7f289355e7399672d75ade4017eafec40841615e869b6c4fc48
TLSH
T134E02B69CC21BC270CFD471C5015064AE750135F2E81551F7A3D6108CFB062642C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 caf14a5a53838ff7734bcc9866704b5cdde38982f604beecdd4243ef8a273db3
MD5 6a95779abb82bf5c1c15a446c095579f
SHA1 4430eecf14703313e5022dbad8d3a6f958f5d63e
SHA512 24b8b08e9ec31160cc16d2d8aaf5566be054e168ab6ea48034ae46201bcbd90d681e6934d0653f744cf53a72206c4c23e6d5f1ed11dc20d076165b8d84b1701f
TLSH
T15FE08C16A2D63CBDEF708B3749F8AC9A7A304254418F5F42554620BAA82F790F546D90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 5ef87a1d69e70661f6864c83265d71dbc8460b279d50cf7a4f401c248f25f127
MD5 c10f089280f5430eda5276157a1f468d
SHA1 8856d7db3689b75fb1668b4a8cc0e6b6786e2441
SHA512 9701a568df4be5850b7d2f8435efa10be8f1ad554f11a84f6b44f8e7c2b5d9791575cdf4e3709df29ae1564e200b09e60c2fc5b0829517fd42a84f094e872d2a
TLSH
T122F0260792C27CBCEF308B3649FC6CED39305244408F1F03114610B6682F390FA06D80
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6133c2c01020de557c03036a61099f6f02fd725b9d86020d9f640798fe7c4875
MD5 6e8b495274e7c187d1233d46c1adbbd0
SHA1 c5cf86c7aa0c85489474e5e00287390a7eebfcf2
SHA512 fa15f1319f7104f03cc52c086db27b6c22a4240cb876d7a2555c56c5805818f196a1df67202d2627082f7fb4fa49c5b0a321a7d3a7bd3d79708948c4088349d1
TLSH
T1B8717AFB43B0D97E8B2196F5EA082E2FCE6D1124171C786A86D55E5797F2872E00068F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 8dc112476a35c5468fcc36d0e79fde13d62c166f23d3dc46e5aa10c4cc952d98
MD5 a930e8bc2d522cc81c2bc8ac32dfdf78
SHA1 2983774e8da84d7dd5265043c19946fbc38f0f25
SHA512 3ab905afea1e3eb41bed400373524868da2c20ceee23a50e47cb9a7a56a71889ddccbc53552a2b296739b6d5b97f49b22b466ccaeed926aa8b9c8299b7cf0a7b
TLSH
T148719DFB43B0D97E8B2196F5EA082E1FCE6D1125271C786A86D15E5797F3872E00068F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3bfd330e97b7a288ef9b6489f9019910dab8756dcbcb14c3063f8eb73d6f1975
MD5 6fdfa8b0766f67b40b1414e46b1e38fb
SHA1 d441615ed671e0d891c1321945095197e116405a
SHA512 70b7470687596286f4a66c9d132739b50c2e065654785cb30084a1641cba40bf647b2075af7715c1910ddd542e4e34f56a1d9491d370b1dcd54085edd8184fa7
SSDEEP 192:KR8X7hdfLX6v7spAPRp22jQ9wHsb+WNntN/v12Gq2S9bZaWzVxVyIsnAUge:KR8X/WYUX/sKwDV2t2gtaIhe
TLSH
T1DA42E72EF955693B5CCBD229FA267B53D7F4102521C02D94E6FCC92C15D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 17012c7afa14297abd993af3e83a3c79286e56c58be7825e458eefdd6037750d
MD5 617168b3f917069a9aab8b8a16da9522
SHA1 b15690764e157af9cd5033839313621eac7ea6bb
SHA512 ec007c3096a6889630e9a2624cc9be6b4b360b111a4350251f559da01ea1cc19d8a39ff2a29c15109e2418299d9850569030f6fd75a4aa4a388fbfa1e6af609d
TLSH
T101B0124080457611C00606F8116254C97158AF50960B170543E0A923882A550C014060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584745.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584745.TMP
Size 96B
SHA256 f7598794354d53367f99e798ccd8c00ccdb5b91371c933b7549e38e8dd6d7ce6
MD5 a7e6a9fcd087ea4f26b209ce07106fd7
SHA1 b17c8d1cbb62f8cd7a09d82168ced8d0118b0c5e
SHA512 4f321b814247c6c5c86932cc2b0a4ca81930c884fd7089d171c4ecc162c4547699654a57fc69bc1b98d5ccb0ac60d405e4f8065c088be1bdb3ce54a738cf7736
TLSH
T162B02200C2033222C00203B32B8C83C83020CF20C2032203B2F03AE3EC28A20C030C30
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 58e49f95835a4bfa31151d8921c003fb93897a9bc797d588cef1c399616effc7
MD5 8990c0d28cb8abfcfe2c2d46af49a6f6
SHA1 7e5bfed74f8e106fd740b31871cc983e0318959e
SHA512 1feba812098cbd9354505f7f77c733ecbf1661beaae255aa0b0b1ec0d8226c302f1ceb07e0f1037b8a7c859da51947e8172489681c7a7ac3d54b1b36fea56aba
SSDEEP 3072:KxGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:9m7Rkm1tYpBeh2BAoK
TLSH
T1D4C3123B5D75B83759B9BB0EB08E0A1F1EF249A6C930DD56C8D85A0833E97CC1A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8d49be3a56bab055ae556ed7f8b7d7884f81441b23a8d7ac4b77a8217fd702fb
MD5 8f7ecd4682ef9c0736d37ff3e45061ec
SHA1 4e332290bc542eab86fa53c3475d4cace9764481
SHA512 5765b47f3d0cb34f3ed3570571a9f54a9b2e3115405d9180dfdc4a9e095686aa829f2d7e7ce2f1955464b8268ccf3d479fb9602c2fb49cada74104e7b0c64c0c
SSDEEP 3072:FGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Mm7Rkm1tYpBeh2BAoK
TLSH
T1D3C312375D65F87759B5BB5EB08E0A1F1EF149A7C920DE52C8D86F0823E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 7b4d72914b78d74879e8d0483232460589070c7b31499d3115be5e93b758ebc4
MD5 4f12fe63f4003ab261dcc49767df34c6
SHA1 fe584032d78cce8b2db743dc2fb8fce0fbb36d59
SHA512 72abcf455ac30f88ea5a741352b0e0dba9d40941c509fb3c1c9dd628c5648fd5af2263e833e19227ad721500e79c0b1855b87c73ad12a5d3fefe0d58c404ab6e
SSDEEP 3072:yxGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Vm7Rkm1tYpBeh2BAoK
TLSH
T17AC312375D75A83799B5BB0EB08E0A1F1EF149A6C920DD56C8D85A0433E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2af859b4cb27764a292acf0cca0f28eabccf8398cd2c1b6ec9d2cabbd8d03d49
MD5 b792826851f6c7df2189e74de659d470
SHA1 21a570f56b990549bd160fe4521644ef5969ed74
SHA512 0f8cc4443965da25ee9e4cad9e2e1c3df91acdeb3ba09ea72eeb59190fba2de793e9f43c084b8a33bbb2d4847cc3a0e3256ed26684db317f97e3e14f955455fe
SSDEEP 3072:VGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:8m7Rkm1tYpBeh2BAoK
TLSH
T15BC3123B5D65E97B9979B70EB08E0B1F1EF149A2C920DE92C8D86A0437F97CD0A04D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 de42a18be4916f14c71e95511bdd29f16663101a0e0f33905c95f73230a3f9c1
MD5 d1fc05d75e8b5c012fcd377298b7cc99
SHA1 d391a98589545be20e7139867d30e6fb748c6506
SHA512 a7fadd83aaee06068086d13ed3fe1bd912cbb94b9bb7f6224ca898dc01e5c8e70ad3ed5fa33bab4fd6637db477924b249f89a05a340ee8a0d80b843197c5e4cc
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Bm7Rkm1tYpBeh2BAoK
TLSH
T185C3123B5D65F87759B5BB5EB08E0A1F1EF149A6C920DE52C8D86F0823E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download