hxxps://www[.]fresnocountyca[.]gov/files/sharedassets/county/v/1/social-services/directory-of-some-communit[.]pdf?utm_source=chatgpt[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 22:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.fresnocountyca.gov/files/sharedassets/county/v/1/social-services/directory-of-some-communit.pdf?utm_source=chatgpt.com
Sample260916-2v3acafc55

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4696	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340729166433844"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1846164713-4096795028-774071693-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe
Token: SeShutdownPrivilege	3084	chrome.exe
Token: SeCreatePagefilePrivilege	3084	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe
3084	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 3084 wrote to memory of 4288	3084	chrome.exe	84
PID 3084 wrote to memory of 856	3084	chrome.exe	85
PID 3084 wrote to memory of 856	3084	chrome.exe	85
PID 3084 wrote to memory of 4696	3084	chrome.exe	86
PID 3084 wrote to memory of 4456	3084	chrome.exe	87
PID 3084 wrote to memory of 4456	3084	chrome.exe	87
PID 3084 wrote to memory of 3956	3084	chrome.exe	89
PID 3084 wrote to memory of 4340	3084	chrome.exe	90
PID 3084 wrote to memory of 3956	3084	chrome.exe	89
PID 3084 wrote to memory of 4340	3084	chrome.exe	90
PID 3084 wrote to memory of 2692	3084	chrome.exe	91
PID 3084 wrote to memory of 2692	3084	chrome.exe	91
PID 3084 wrote to memory of 3812	3084	chrome.exe	92
PID 3084 wrote to memory of 3504	3084	chrome.exe	103
PID 3084 wrote to memory of 4984	3084	chrome.exe	104
PID 3084 wrote to memory of 3936	3084	chrome.exe	105
PID 3084 wrote to memory of 4672	3084	chrome.exe	107

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.fresnocountyca.gov/files/sharedassets/county/v/1/social-services/directory-of-some-communit.pdf?utm_source=chatgpt.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffce5bc728,0x7fffce5bc734,0x7fffce5bc740
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,9813420317216005847,15526449928907859108,262144 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,8856581213141283545,15165156785313249317,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,11350309538172821236,12493208939732465649,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,15895111966979594377,101146832138999810,2097152 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,17354437691139011504,880855814304961937,2097152 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,17576910198872419286,2565188167194014046,2097152 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:2692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5296,i,12417263279785377623,1606518264330127733,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,17965003966792131495,3109293868448257561,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,1553247474811540975,7901441213595143292,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,5864087169432125256,16197279336006584257,524288 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4688,i,4329677063499456042,9068096861386437696,262144 --field-trial-handle=1936,i,177439881743957227,11274220090196233303,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4672

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3800

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2232

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4888be2a-1684-40fd-a5a8-67f17fdbc5bf.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4888be2a-1684-40fd-a5a8-67f17fdbc5bf.tmp
Size 132KB
SHA256 05a1eb25c3a01cd4df6fbc0acae4d538040065397a87b044ba2c2b6030504860
MD5 3e03c0fabb0deee1546d16c001f59989
SHA1 03d464993265a68e2c5a110f3664c4b4c2d51376
SHA512 1a4e2be7e6eb2e8e6635f7208439c9bdd950f40eae2229fcf6aa55c5543a536e4681ccd77ff07e4d40ee205f3e131678d61f9fd5604d9ab8397ee961e844cb36
SSDEEP 3072:2y+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:X+hFD+7t56OD9ZfSAppry
TLSH
T147D31232A995DC7BC9FD7541F147A300DE6268ED81DE7A0984465F8EA09F94C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64dc82ae-3dc6-4e1f-ad7f-949d70bb4f1f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\64dc82ae-3dc6-4e1f-ad7f-949d70bb4f1f.tmp
Size 414B
SHA256 460a8a969ccbe08fbf951417d02fbe96e7f8c3bbbabab5d6e24094e89af2f8d3
MD5 a570d23af7a850b7bf3b23f0fd4d8a9b
SHA1 c392d0ccd521df9387b783f0b5d85ddb77d0d312
SHA512 007aca3e10605e7306edbbc4ba445597b5a310baf1eb2008e2f9efa8b6f537f132c42fcffc9aa52c4c590b19fe502d18019c5f645c100015644d07888268eee7
TLSH
T131E022E9CD20EC3B08FE172960240746E740034B6680895F3A3DA61D8FF063B898ACAC
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 75efb979f5e848e2b91a2cf1952c698b518e41f3c307928631984eba1e58e9d5
MD5 197e7a006fb957a7b677320c5decedef
SHA1 18f4cf972a46e026f035c3912cfb21cc05b7a08c
SHA512 f2ab52d58bae70e669eb8f4defe035b39e4746f65e30e2f94b7a285de3e5c3ca6a7b91aa4105fe7f9b83d45bbc032f76c2306cd7f3fb2b0686ce3be79cfe585e
TLSH
T1AF61ACF3C3E8866DC91156F4EB256E1BCE2A0E58532C3C56C8D4AE5F93E28B1D20065E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 2b9b4f83ddf82efc12e1020009ae89d9bab64f56bb7378da99d07ae5bfbcee5c
MD5 7ab0a195f9db14a51da89d0a64a3e30d
SHA1 b366970ee7c35455bb66e5627d10107783206dbf
SHA512 526343513ce09e27672a8c90a25f5b22e8b4d77b3ee2ccc42299aac960cbf20c51933d4e0b8ef6c5c462f27c9e9d861a9da4a96819dc34b8ea6947c7b7165502
SSDEEP 192:wRDB9/1PgPv7D0spAPRp2mG9+Hsb+WNnwh+LQ25nehWVyIsnAUge:wRDB92HvjUXsUwcR2Kue
TLSH
T19032942EAD10797B4CDBD22AFA267B57E3F5102520D02E84DAFD8A3C15D7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 6a29a8617151632564d926d12d53664cf1db76e4198e5e7804ca13c5692bbc68
MD5 93606a7ec36fd904f1c8a08c22eee3fd
SHA1 301eb639bb4a5d87ed2e0a705d5d203bd97748c8
SHA512 0d5b65e856fa579514f6e2980245fff832fce9482fcc9417321a4548794c2e9871daa9c9c99a45bc0e5d09554a4e356972eb3d5f9581a67c2a4438b08181d77c
SSDEEP 192:wRDB9/OOwhYPgpv7D0spAPRp2mG9+Hsb+WNnwh+LQ25nehWVyIsnAUge:wRDB9IpvjUXsUwcR2Kue
TLSH
T14A42A42DA9107A7B5CDBD22EF9267B57D7F2102520D02E84DAFD8A3C15D79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a7ab49c4ce770528f1e546538c284ebff643e1fe639fffdc505dc82e8f110377
MD5 d20fd68f980e46477c4a81d1cc0a216d
SHA1 9e6b71c1ecec1397a6378e37573421a77c7e105c
SHA512 410ef92c1c599432e8bfa480958bfdf2e93ee4570839302e3420d92b339b89b3a1ac81ccf5f5d3249772ef409ee90a0c79355bbb61ae8b23a3f6b5de6bcc5b9f
SSDEEP 192:wRDB9/OOwhYPgmv7D0spwPRpmmG9+Hsb+WNnwh+LQ2hnehsVyIsnAUgE:wRDB9ISvjQX8UwcR2CIE
TLSH
T1B142946DB9106A7B5CDBD22EF9227F67D3F5102520902E84DAFD8A3C15E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 d6ef7be1fdf322a98e133d0f16a9689d7b7e779ed80b3b246f7f0abd127671a4
MD5 f47488285ba0b5fb4fc947c0cd4d65d0
SHA1 e2e420ed69ab302b7e65f41cd50c711369a8f339
SHA512 edefbf73c6e7d3b427d1f6fbef00c51ead37774dc83bc59794179b134a29fdd70c2466f4f32c36956cac1428a67c415f0977c6e87ea2e96365244a4ec6f04337
SSDEEP 384:FE3cjxE397KxkXqKf/pUZNCgVLH2HfgslaW7pLuLceSHE31XODxE3d+ErU3jcHGz:FE3wxE397KxkXqKf/pUZNCgVLH2Hfgsn
TLSH
T18A7209677C4C9A3B0F94C9CCDC277A4FEDB9024B65D9886482FA982503D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b4b765e75b330e1466722b2e589d603ea7d3c0906c36b1c889b8db5669cc3bda
MD5 84c53f082cb3fb4156b8b6882195f552
SHA1 7769c6b425249dddb6b977682e0aa125f7ef98ee
SHA512 4212fa546dfea442b83332b8ec23af51ce6872a6126f0753ba49fc3485c32dec406e7382ff709700f968d2380f398cc84b5eaf9cbac03b5b4b8cd9badb4dcd67
TLSH
T19EB0120581423B01C00103F06292D094B7608F38D122138981E00F03A8351508127148
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591a45.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591a45.TMP
Size 96B
SHA256 6012a6eb22797210a54c12ef17e80e7d587d608b183fd60b1c466a4173b73a69
MD5 5f43a8953a3427b218db9c75ecfc1672
SHA1 fff24eec9d136e4a4a62c7274f7a36af6fe959ba
SHA512 3ea7f9c3826a82af559c8c19cbd499b3f438e9b592d80c3a346490cca54fa691adbec0a46d4fcc3c02c2e8b880b9cf16efed38b1fc31084a4154d6ea545a3d36
TLSH
T128B02203C022A203C2C203F028A088C8FB20CF2FC203020283E00B22CC2C3200820830
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 9334ea1c71a0366d0c5a571a1d3db6c42de60c9ac1b498b88f0138937fe8b4a7
MD5 e24fa67ff515af11075cf6beeebd869a
SHA1 eea282f2d459fefa5d19111370d689b45e9181d1
SHA512 c9216c11bea7b8834aa49f9d6692aeeaa506c6712416347fd124c6413fa9eb16f5df9c7214f34cd2f8c1d20ac78481f28b01dd7bba2ff2f083d2320bb68fa233
SSDEEP 3072:o+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:o+hFD+7t56OD9ZfSAppry
TLSH
T113D31232BA95D877C9FD6541F247A304CE6268ED41DE7A0944465F8EE09FD4C07A3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 54f32e165a6a5c4f795c41802e4c0d3e51ed8a5d5017d4685bdb1b5015b008bf
MD5 f452578058db8012f6a0c1892fed3977
SHA1 adde4d097991b8c5ab01981835e521c33c548411
SHA512 b3eab7dfac2f33dbace115a1dfb7fe685d940d6ba0b8338557d08a71067d0eb577d4fe0f902d1c59437cd0284d95505437a1374c10d5cdc04e9fdfaefcd70599
SSDEEP 3072:J+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:J+hFD+7t56OD9ZfSAppry
TLSH
T121D31232AA91C8BBC9BC6541B157A304CE6668ED41EE7A09444A5FCEE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 aceb63f3f9877582acfcbc08e6d4836abd76185950c06bf51b850ef5d6456840
MD5 6f2d308d23c99422ae2323024097924c
SHA1 0df6c4bf0287dd0ea156f8ed591bfe0120647d80
SHA512 a77cdd1a8a7d7e0d8a860b107b53e752826dfabb083ecc2e5033241acb5f15c6eee8c3051cd54b1f2a8f8ebf797c2cf9a916ea96d2b8a44d4f666b056272d659
SSDEEP 3072:x+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:x+hFD+7t56OD9ZfSAppry
TLSH
T101D31232BA95D877C9FD6541F247A304CE62A8ED41DE7A0944465F8EE09FD4C07A3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download