hxxp://gate-23911[.]com

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://gate-23911.com
Sample260912-ry7zwsdc68

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4816	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337852321256656"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
6000	chrome.exe
6000	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe
Token: SeShutdownPrivilege	2520	chrome.exe
Token: SeCreatePagefilePrivilege	2520	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe
2520	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 2520 wrote to memory of 3124	2520	chrome.exe	85
PID 2520 wrote to memory of 6084	2520	chrome.exe	86
PID 2520 wrote to memory of 6084	2520	chrome.exe	86
PID 2520 wrote to memory of 4816	2520	chrome.exe	87
PID 2520 wrote to memory of 4852	2520	chrome.exe	88
PID 2520 wrote to memory of 4852	2520	chrome.exe	88
PID 2520 wrote to memory of 3600	2520	chrome.exe	89
PID 2520 wrote to memory of 1576	2520	chrome.exe	90
PID 2520 wrote to memory of 3600	2520	chrome.exe	89
PID 2520 wrote to memory of 1576	2520	chrome.exe	90
PID 2520 wrote to memory of 2068	2520	chrome.exe	92
PID 2520 wrote to memory of 2068	2520	chrome.exe	92
PID 2520 wrote to memory of 3320	2520	chrome.exe	93
PID 2520 wrote to memory of 3320	2520	chrome.exe	93
PID 2520 wrote to memory of 4348	2520	chrome.exe	94
PID 2520 wrote to memory of 4092	2520	chrome.exe	99
PID 2520 wrote to memory of 4924	2520	chrome.exe	100
PID 2520 wrote to memory of 5676	2520	chrome.exe	101
PID 2520 wrote to memory of 6000	2520	chrome.exe	103

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://gate-23911.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8bb74c728,0x7ff8bb74c734,0x7ff8bb74c740
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,15531425901391644361,479854278782810289,262144 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,8540844695793640372,1084886032654930241,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,17680738607887301357,17484867611407203388,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,12181489415657187126,14883755702675521092,2097152 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,9654795063468194098,14161772812629143888,2097152 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4380,i,11921746237230509874,5903977262005659789,2097152 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4400 /prefetch:2
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,17936283375419329801,16672451511851893551,2097152 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5360,i,1962172576338544627,2683134772420485231,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,3909494531566627372,14419047308349580406,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,511354894250707795,6305025970101931970,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,10848342536693786228,11992670637604290453,524288 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1780,i,12986607126264990562,2155822913146288610,262144 --field-trial-handle=2028,i,10126364856572121529,6493350589346300188,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6000

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1904

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a8b4a2dd309e6f22cacb4523f7af0fb1635392bed62a0d54ebefed1e9c2dbcc5
MD5 85193ffe27e36605dd16472bde162b3c
SHA1 ff9f6a53bf83ee787cbc0218b2fee5908c9265d8
SHA512 173c5dfa8c3ceabb933e8de6e9b052a83dd31529fc00c86589db0638115076c1a8ebbd90ff90a163e9a321e0f215943271e0353cbf5c26f6df6bdfcd2fdc92b8
TLSH
T13EE02BB6C921F83B19FD1B2D50108B87EB4513573681841F3A3D824DCFB8A3646CA81C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 0826c2612e013f8bcaade4d53d5d397be04adbcb7e361c1303d1baf32e927aee
MD5 8cff69f06026564daea99968fbc3f390
SHA1 34380a48a5b09f3bba63a80cbd0e7646821bb021
SHA512 8854e3e7ae84f141279c3d80810ace8e3dba4822e1428e33a7f308fb2cc132530cea23c6267c7f8d254c1cde426b747aaa6707a3dbac5e67382fdbd55cb435ee
TLSH
T152D0A9204002AC32F7B0D27038830DDCBBF80EA89A1342DF93C1E0A8BB93912C980225
MD5 SHA1 SHA512 TLSH

Submit Download

2f8e1ef9-5ae5-499a-b9f6-ddec85675024.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\2f8e1ef9-5ae5-499a-b9f6-ddec85675024.tmp
Size 4KB
SHA256 9de27032853e38e1352d45bb157c22445cefa1c9276c38e73fbaf8a20c4754a5
MD5 3d5d7bcdc686a417085fe3cf12750810
SHA1 b2ce683002c21c03b5ab74296c46f5fb1bedc186
SHA512 31c28b4f5932d59d7ff3033c70fb328171e18a2acc8c5ee91597758ba54319ebbf9ae83660cba583c5243fad131ffb0397ad1160332e3c0252c2bf7fd587b7c9
SSDEEP 48:YALlhchbhihlh6s1Rs5XLsIfoKsVfsyosafKsBjRps4gmzsUtshcsmBswqzs64sy:D+1ALNCN+zaTjRDHKSnabDK
TLSH
T15DA18BF7C3D8C62DC94156F4A7156F1FCE2A0A24532C3D26C8D9AE5FA3E28B1D25064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 b6db8dfd15b75b468dcef45e20e702dc22b4355f0e3dc008ce13569985e9e609
MD5 ad8a109348e8fe044fbcb0562bbf8410
SHA1 6a2add5fee54bc749dc1d15090eca6c117ad66df
SHA512 c8f300298a67929400567f6262cfefa5f5798c4b7a2bedc818a440c65432d83ecebd78506b03390751230ff9137b824cd08111eff34ff03c8813fea0e1edb4ea
SSDEEP 192:hRIilNLEhtWv7GpAPRp2DlW96Hsb+WNn/jZFC2XTeBVyIsnAUge:hRIilqhtiCUXlswrq2Qe
TLSH
T14932832EBD10797B5CDBC22AFA227767E3F6102564942E80E6FC897C10DB6CC6217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 71e5c8cd3051e7b998c715a32343d1d883ea020d67bca6221612d96744777016
MD5 8f2e65329d2b7b82be4600eeb0dc1606
SHA1 97ae6957675c49a16f2aef58866bbd648814a510
SHA512 73ec8abb9e5d0e925a06b79459524b2df6235911eb117239669a211624b94bd84c6ba6441c85b241bec067bd9f9b880bd6e8d775eebed05b0d58aa732ca358b8
SSDEEP 192:hRIilNLEhtWv7GpdPRpVDlW96Hsb+WNn/jZFC2hTeVVyIsnAUgE:hRIilqhtiC3X2swrq2QE
TLSH
T1C942A51EBD10797B5CDBC269F9227B67E3F6102664942E84E6FC893C11EB6CC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6ca8845cebdb7f9478ddae4ae849f77d0d94d3fa3c0b3ba75c0c7313b1d5dcf5
MD5 74892d48179c50aa1ba55d4a5a9cd924
SHA1 f09385520b32929739c06fdf2a8cf21e3d04346b
SHA512 a0e95485333e0d31155657f3b1eae57b23aed983776b968158e5849ba879300a4a5f4b471a3305241e661e51e46126641776053093281383e7d62ec30a97f4d6
TLSH
T174B01255D4812311C00103B11551945432F4CF35D112938582E00D018C31150425B60C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59307c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59307c.TMP
Size 96B
SHA256 566e86a4ca432a913e516b173552a635322c5b1f8c41e381611d6fe0b84d8735
MD5 2837127b03cb582047e05dea5d04bc69
SHA1 29fb5ff14d54ece137a51cc5945097414f758432
SHA512 7b10ed4bc86b45bbd97ef06ca6aefa9674d317b9e62f9315c223043c691b82fb6186880b2b37bbbac244b9418542af1f5ade205db273f6af58700908ee8f16f1
TLSH
T1CCB00265C102A322C562C3B02999ADE8B1F4DF3DC7132216A3E39AE7EC396614525968
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 75f1525a02193a0ed6cc698366bcea13feabea06f258b8a02b81b2a6d6038d75
MD5 5903899883924fcba7b574dd8b7b7822
SHA1 6a7e98e7cc3a024266857621ff3fecd6f2e7e51a
SHA512 3273857edf17994bcb788857f5cd0b2e7bcf3785589cbbefd285b6064dd263409c029518eb30a677252200994c0256ff53ff335f7e0fab1ed3d082b6d3458910
TLSH
T170A002690AE80952CC40427560D10A44A2B15A94AE4AD20779D8F1498D9B240431202C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 205e212f4f8acf7cdb8192371aaf5e97a9d4b569ea16e027ad821e5de6f10208
MD5 661e078b3ae5fa7634831f506a0a7b2c
SHA1 0b396505d415a158f8aec6845b6dc18adb624720
SHA512 297b0f5eb71e45e277def59f506a55644abef67c394ddabb2dc54e4bc12c7baf08ab649505402a6c84f1a24f350d84830e27730e5ceeddd8d00d4f3de765035c
SSDEEP 3072:yn+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:yn+hFD+7t56OD9ZfSApprB
TLSH
T171D31232AA91D8BBC9BC6141B157A300DE766CED45DE3A09444A5FCEE09F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 c61860412108471a864066a7b158fe266e3d65336cea732a845b941472e85183
MD5 d585fd463d4e5893fcf704edc386fd4e
SHA1 70d43219e927d4b3c24b4b12bc5df17c7cc3e771
SHA512 a957a88c6772a8eb036c1239f6b2f7c4991b976d47f9f71b298f4692bafdc02a06dd036e7e38126fefe932886eae5e7b2a1013d27cbf21635c672d9ca03d0391
SSDEEP 3072:TTg+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:TTg+hFD+7t56OD9ZfSApprB
TLSH
T1C6D30232AA95DC7789FC7541E147A304CE766CED81DE3A0984469F8EA09F84C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 95b9fc7c14cccb353db0df1ed516c369b035ba674dfd0844aadbefd353bbdcee
MD5 d7a8d44dfab2a64d236958798db91ff3
SHA1 2e29d9842ab57139ffad71aff631e7df17bc86ce
SHA512 5bb5424d33ddb7b2ee8a88c37138bb4d2ff77a2e681890487a0627cf0bb333e134156b56e4238944352c3bdb7e1e8689ddf963554f8109b0f74f16cad804926d
SSDEEP 3072:y2+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:y2+hFD+7t56OD9ZfSApprB
TLSH
T1DED31232AA95D8B7C9FD6141A187A300CE76ACED45DE3A09444A5FCE909F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 64b0d20b6c0032bfe9e4019bc9b4435115c9655a4adac6db7bcb42cfc30d76ef
MD5 4c7e6a234cf2687d49b3563087693ea4
SHA1 3345a4a25d53f14f8ac79d371b978e6b4751d913
SHA512 09a1776de1b62b30c4b1561739ec328dd79ed724198526610a2338f51f030e011dc0a94573feae92d19a4c635ea88b37b6900a91be6790ffd10a674baf867ebb
SSDEEP 3072:T2+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:T2+hFD+7t56OD9ZfSApprB
TLSH
T1A0D31232AA95D8B7C9FD6141B187A300CE76ACED45DE3A09444A5FCE909F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download