hxxps://www[.]uveds[.]com/documents/?YWNjb3VudGluZ0BzYWlscG9pbnQub25taWNyb3NvZnQuY29t

Analysis

user interaction
yes
max time kernel
34s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/06/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.uveds.com/documents/?YWNjb3VudGluZ0BzYWlscG9pbnQub25taWNyb3NvZnQuY29t
Sample260619-sdn7qaat3x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4860	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134263548619485975"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4268	chrome.exe
4268	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe

Suspicious use of AdjustPrivilegeToken 60 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe
Token: SeShutdownPrivilege	4268	chrome.exe
Token: SeCreatePagefilePrivilege	4268	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe
4268	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 4268 wrote to memory of 2100	4268	chrome.exe	87
PID 4268 wrote to memory of 4048	4268	chrome.exe	88
PID 4268 wrote to memory of 4048	4268	chrome.exe	88
PID 4268 wrote to memory of 4860	4268	chrome.exe	89
PID 4268 wrote to memory of 4184	4268	chrome.exe	90
PID 4268 wrote to memory of 4184	4268	chrome.exe	90
PID 4268 wrote to memory of 1196	4268	chrome.exe	91
PID 4268 wrote to memory of 4708	4268	chrome.exe	92
PID 4268 wrote to memory of 1196	4268	chrome.exe	91
PID 4268 wrote to memory of 4708	4268	chrome.exe	92
PID 4268 wrote to memory of 3188	4268	chrome.exe	93
PID 4268 wrote to memory of 3188	4268	chrome.exe	93
PID 4268 wrote to memory of 3412	4268	chrome.exe	100
PID 4268 wrote to memory of 804	4268	chrome.exe	103
PID 4268 wrote to memory of 804	4268	chrome.exe	103
PID 4268 wrote to memory of 2176	4268	chrome.exe	106
PID 4268 wrote to memory of 2176	4268	chrome.exe	106
PID 4268 wrote to memory of 4408	4268	chrome.exe	107
PID 4268 wrote to memory of 4408	4268	chrome.exe	107
PID 4268 wrote to memory of 3704	4268	chrome.exe	113
PID 4268 wrote to memory of 1176	4268	chrome.exe	114
PID 4268 wrote to memory of 4388	4268	chrome.exe	115

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.uveds.com/documents/?YWNjb3VudGluZ0BzYWlscG9pbnQub25taWNyb3NvZnQuY29t
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff3510c728,0x7fff3510c734,0x7fff3510c740
  2⤵
  PID:2100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,16081443905265942225,6505895585504598208,262144 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,4822868532041912763,15295063800089263740,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1564 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,15300958139978269263,10571764912097139397,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,18197596184860680376,4159292438008127145,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,6793152965865124117,10424057898608375528,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4404,i,2496983860907286816,18260033514504659803,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,777759142752314661,4186057669577176387,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5272,i,14526047118066139011,9484846837585010679,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3240,i,11263683237904183328,7369142950449087226,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5532,i,3349405779598562805,3000677107296477098,2097152 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3404,i,5559319773728811000,13801600623584302575,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2992 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3052,i,14615673441914530920,14346345476161615347,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1780 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3024,i,3333032501375286087,8222020700832528780,524288 --field-trial-handle=2032,i,9904706633545407186,2188190690138281760,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:4388

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4240

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0f72290e3018502c067843675098374a371620e5815deaa887d96f9cbf0c7d30
MD5 6a2d0eae771ea9ec35a4ea2f5b37c39a
SHA1 42c8c396645cd66da037e16fa41285f62424ff99
SHA512 4ebe8c8360420c3e0f184e3d3015fe02301ff0b54467f7fabf37014ac6fcab5b1bd4cb6bce0b21d76e01b8fd8956e5980149bf4ef01d3818d061bf9a4293d197
TLSH
T170E02B65C922DC3B2CFC1728B5654706E65113577B41A84F773D810C8FB8B7A4286CAC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 696B
SHA256 c17f2a852b4d367a02a5b23b78808457f6803f7d5386e45c5b94f8477de5610e
MD5 e9c7883973615a69ab39bcff5690999d
SHA1 139a9be0e06eade2aea2f2039db51843faf0b4ae
SHA512 46aa0e7f6aff9f2960d6ef87ed5c5f68bacd002a8260ef37df9a31a2a860f48aaf1357b4fdeaa594e5ef2f3e8a9924a18af0278935a4feab680ea1b8cf1ab606
TLSH
T18E012EA73ECC55A5CF504E318AFF0E00A3E0478A0A135B83E17E0FC58837AC54F950A4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ec04551fcd2f366b050cddac00f03743f965d9bf85aa1fc6c00e09d1acac7a3f
MD5 5f1ae27977d159bc8f99faf0c9a26dcf
SHA1 6e19e2ebbfcb0842259a36cb8e1aefc9bdc34eff
SHA512 ee8db82d3a14107bcae38db7f9cb4827fc1d5b2c7ce72962e58cfbf6d96f400ec5d38a9a2542153b01b446743097b59a77ac24cbcdfb1b38689dea932ba1b94f
SSDEEP 96:Dz8baaIEdobOu5h3K1YDBKeYiPBMGBUNBMn5KS:Dz6aaIEdobOM3KGF5Yi5MeULm5KS
TLSH
T15E91ACF783B4896EDA1192F0EA18AF1FDE6D0915431C3D2685D4AE2B93F34B2E10165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 32a1bb11f20fe4a89996b4823d9424189391745de39c5a7bffedde0f977e043c
MD5 84d9f7929b4e39b6954b8c01d2699d60
SHA1 0b576323460113f63ea13bfef1afa68715ab03f0
SHA512 b9b54a9aa950e55021ef7e44455473a56ca6c2d35873e91bc268445ead2995872ed205fd92096dfbe8945155da7cf86f5967aeaefc786e722d196d34fa4a52ba
TLSH
T16141809BCF3E741F506A896F1E85B80D797AB431629258F4DEE6C27CF0895F70B22016
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 63dfa9d05b49b79aaa7763cee0099a9b01360e05d4be23587ff380d9334612e2
MD5 ee033266c6f200cabb9a39b9d71af0f7
SHA1 b2ae1d71bd184328f8ee838a6f901f5ff34f952e
SHA512 c9c3b321f15be7314b5ab24034ba8486c1e49dce612cec7f7796e130133ed070712eec42ccba5f38a9aaa8ec14269b43fdb8034d5b9d86452824caa626985d70
SSDEEP 192:FRHxP5yWHsv7MF+pAPRp2dp9HHsb+WNnIhw2z25ky0eu2QcnaCVyIsnAUge:FRHxX4goUXq1wUR2eyc2RaCe
TLSH
T15642B66EEE11A97B6CCAC219FD26BB53D7F5102231D01D90EAFD8A2C06E76CC6217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a98bdc60508587b381355bbdda7dd4484815934d324703032cc00d53535e51f0
MD5 345bf0694d812f9fdfa1c4e4e4149fce
SHA1 7b454c369aeac0e0a19308d114666ad14d785af1
SHA512 389c1886903410f46ba82025c1740a99689cc49368143f6e484b7d4c70eb625b148cc58d3e095912bdac739ac8fc9d95350d54f60c0b1f5cca040c018c1633b5
SSDEEP 192:FRHxP5yWHdv7MF+pAPRp2Owq59HHsb+WNI3IBIhw2z2Qky0eu2QcnaWPyIsnAUge:FRHxXdgoUXL1wIpR2pyc2RaYe
TLSH
T1B652C76BED11A97B6CDAC229F926BB13D3F5102271C01D80EAFC8A2C06E76CC6217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e547018071f8191caafabb532205eb2331b74a9e1c58182278a0b78916e66d94
MD5 9c5e73cd84b581133c1c8573323bd873
SHA1 4e29c55d244e3dd871c2db8781c1e45acbd0973b
SHA512 2a1139c3a579fdac1f8b22578251d62adef760b062c511f51f6e64a18b8aedc90fd11c1fecdcbeba1c061279b5c66d94bae3ac396be7398ef04f95bbf7de25a5
TLSH
T179B0121080017101C49B12B02682589C71545F10EE1A170243E06B22C8271A18439190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae2d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ae2d.TMP
Size 96B
SHA256 1b18bd0762bc39d51a11e2be5553a5861b2bb15ed7b0eb43c57eec80c8ea76b8
MD5 5815724d52ce442a83933e4ec403e931
SHA1 54e50f6fa7716c8eed1fc08302cb6f96599cc779
SHA512 06510b6a4232118306827abb2947da7271cb9ec9cdff2c2a383e4113abb532c9014ad15a71b6559b4833c41f09d8dd0a5ec52a2c22aa034a64d0eceb268aad5e
TLSH
T1E1B02200C0022302C00303F02882C0C833E0CF2BC3230302C2E02BA2EC282B000280A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0e2196426e41a2a25912f8d66a87ea0b5166b81704a57f1b3e9bb186b0925406
MD5 a8be8850f422cfb1678d5fa85b5d8c98
SHA1 9c0864fb0656800b40e49ab3d26c292dfc8bbab9
SHA512 c3e45653178a097cc4ddb1773141834480689aea519fc7e8d5a57969ef136bb59cfca3aace1fcd8f173f513e2b1c2056a2f775cfc46931df45e8d5bab73ec646
SSDEEP 3072:/vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/+m7Rkm1tYpBeh2BAoM
TLSH
T1D1C312275E75E8375878BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 62655e4ded0e41677c3c9c90da248685950247fc5585f363fed50da27d3de829
MD5 c285f2ac9a9479f2f314a9e1b9523504
SHA1 583cf9bd6d07ade1cde9e284ec9658d1b3cb270d
SHA512 46586e9dcf96a5995a960e7880e769cfe49e2cb8d31015e7ae9e353670a7dae14e070c3c63e67f7b55fbddf9bbebad973d1f4ed6ea4484c3cfc4c13b4b39bcbd
SSDEEP 3072:gpGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:gIm7Rkm1tYpBeh2BAoM
TLSH
T176C312275D74E8375DB9B71EB08E0B1F1EF14AA7D920DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 64b16ae6719d474cda2d78078a39395d8ad652222c17260eda407d61ba9ff6c2
MD5 29297751feabe7f68583e2f989cda501
SHA1 7d96d1d92bdedadb6dcbaee0cd97fd101346d84f
SHA512 ee7c837605a17ee14debebd1b369c99273f1a699c5ca3d24e23600c6943ad02203529f82bad79e05b27dd5d04ba5da8796cfe291cf9be52644aa6452ff34e035
SSDEEP 3072:gnGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:gGm7Rkm1tYpBeh2BAoM
TLSH
T16FC312375D74E83759B9B71EB08E0B1F1EF14AA7D920DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 4464fad1114dae247155f12675159f14d93b4edaa170bf3f228e6272a33e41fb
MD5 7af42a7980d879e05a75b926ebca4702
SHA1 1edce3d22614574bb05ba2731a25d152c3e8c6d2
SHA512 08334ecaf95946bb016601cb1634a2f6337389900a9c19eab893bd93927b7f404217631c80c1025f23172f11cfb722a2d3436a97533bae97995e5faed05c2c24
SSDEEP 3:MsEllllkEthXllkl2zEklQV:/M/xT02znQ
TLSH
T1614404147FC41405CD0110305013C35003F0FD1107515743745155137CC55C01D00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download