hxxps://thekakodog[.]github[.]io

Analysis

user interaction
yes
max time kernel
899s
max time network
867s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://thekakodog.github.io
Sample260905-pr7pfa1yes

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3880	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330853063706083"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
3640	chrome.exe
3640	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe
Token: SeShutdownPrivilege	4860	chrome.exe
Token: SeCreatePagefilePrivilege	4860	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe
4860	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4860 wrote to memory of 3464	4860	chrome.exe	81
PID 4860 wrote to memory of 1396	4860	chrome.exe	82
PID 4860 wrote to memory of 3880	4860	chrome.exe	83
PID 4860 wrote to memory of 1396	4860	chrome.exe	82
PID 4860 wrote to memory of 564	4860	chrome.exe	87
PID 4860 wrote to memory of 564	4860	chrome.exe	87
PID 4860 wrote to memory of 488	4860	chrome.exe	85
PID 4860 wrote to memory of 4480	4860	chrome.exe	86
PID 4860 wrote to memory of 4480	4860	chrome.exe	86
PID 4860 wrote to memory of 488	4860	chrome.exe	85
PID 4860 wrote to memory of 1900	4860	chrome.exe	88
PID 4860 wrote to memory of 1900	4860	chrome.exe	88
PID 4860 wrote to memory of 3908	4860	chrome.exe	90
PID 4860 wrote to memory of 4924	4860	chrome.exe	92
PID 4860 wrote to memory of 408	4860	chrome.exe	93
PID 4860 wrote to memory of 3596	4860	chrome.exe	94
PID 4860 wrote to memory of 3640	4860	chrome.exe	95
PID 4860 wrote to memory of 3764	4860	chrome.exe	96
PID 4860 wrote to memory of 3764	4860	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://thekakodog.github.io
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff98885c728,0x7ff98885c734,0x7ff98885c740
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,12974180130647765511,8882958849879251675,262144 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:1396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,12685053791119325151,13224007540954519531,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2180 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1792,i,16686113806134637117,3587467309613010311,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2796 /prefetch:13
  2⤵
  PID:488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3064,i,17761603232719805874,7074563902102049581,2097152 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3104 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3068,i,9645156481313312214,5611701312660753237,2097152 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4296,i,13455897351063447266,1616396137676889814,2097152 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4336 /prefetch:9
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,731189543351900781,12592087137120175697,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,15646932294687038943,2664592029871489104,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,16118635838540464286,17350122062527862263,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,2521027235885052542,3384803414867758566,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:14
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5568,i,9587294954574376458,12878024693864533830,262144 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5596 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3960,i,10039852175873015289,6466289890060893243,524288 --field-trial-handle=1920,i,3324672942552365597,7412845524341821655,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1496 /prefetch:14
  2⤵
  PID:3764

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:460

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a4d1259bfed76c7e3e5da78c903953ab693b9977c9609442fd53c7bb79a4b54b
MD5 e32f74d4b42b27c2a0c2167252476d31
SHA1 7eac7cfa0d1589d333648d8255e16ebfc59ddccc
SHA512 e94299091ff09bec7db5ed904aa20ef6f013c8a68675ec9b97f72287c4fefef5468aa434b123e996b621f879713906517c9d48f9d9b98ae80ad9bfa11bc7c788
TLSH
T129E02BA9DD26EC3B08FD27A950514747E75013571B50490F3A3C91198FB163A459685C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d866f6d74903c4c48186688529c4b60ff56d14f6746c2004d5b0abd6406df99a
MD5 ebe2920db681f022629cbbb27bb4ac8d
SHA1 8ed15df787dfb707690f3ac2e87ee5a2e191bbe6
SHA512 3d6074fb2a7f098ce6566cc05a7c5f3471bfa8c496c3fc7397861d17284cec8e735368b313b7c0d9ff01557065aa5f186597a99a1bf1b883d103eb534843cece
TLSH
T121519FF783B4857DCA1196F4EB156E1FCE690524032C38A6C9D46E2B57F2972D24078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 31f5de4bde5766faee39a48fcac654053dc500b175d2e94f473d1fe4d764fa4f
MD5 d50b4e5dc8bad5485f17d72bf49804ed
SHA1 6aecaf8bf988c423eee686ed90d0dd7b4c433c40
SHA512 5940171e10c2ca062a74218acfd3d73eff14edec301fbdb618ef29602a4d14c469e88aa5922f5f05a38cf52e8b4e0b4a26010bed69afd84fa29f08e4dd88fa5e
TLSH
T120419DF783B4897E8A0192E4AB156E1FCE6D0624131C3866C9E4AE1B53F2872D24078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 849102bb8d271c671adc778487b5347614f5cb022df3d5212469cbebff70feea
MD5 3121e00c73f01c9a18f43b0a5dd39f10
SHA1 adc562ba7d4f17c2841a6a65fa4e2baf3f7a3f17
SHA512 0de2119f80946d0a46aed227a2602abf4a5102f382916b7edf0cb5d6d9d6862efd3bbfde004b6b834d1868988080aac4becbf05fcc52752a28b4048a58da3229
TLSH
T14D51AFF783B4857DCA1196F4EB156E1FCE690514032C3866C9D4AE2B57F2972D24078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0e3e3a2872f23114349442792d48fc9c111e323cbb5d7b91ba27b676b68a5f86
MD5 d1bae26e3106dca7dab6e6a9a87f41d6
SHA1 24c9bd19743016edc1e7539211e8af172a365777
SHA512 8b5bf695c1897e294b2223a5668869f3c31f62c1028fe701b9a98237d2919a320959f26e40da218ffbc13837f6b768db35aea098918220f79755c46a727f038f
TLSH
T18A518DF783B4857DCA1196F4AB156E1FCE690524132C3866C9E4AE2B57F2872D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 45367525b30c6a047bacb4a3a5da3201530e5bd88ab5130cd219fd90f8a5773d
MD5 2368d3aeaac8cf94857378048aff06d4
SHA1 7e0b9d35663be009eeca5c0a15fe87eab329c25c
SHA512 e9f10f0781085e9ba2626dfbe1b878c1bd149d77b5226d682ea804a63e6cabfe93e8c41ceaae92ce08aa021d3d3ec4501284b218e8311e0ad49d03ea073fe957
TLSH
T1C3019EEFE66E745B217B45A70E047C0A25FAB43103516DF0CEA6916DE1951F31B03417
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a63a13aca36c1131e01b5e528188144491e92bc07d6a288534f64a75a04bd402
MD5 c59fdd05375ee1869c96642be81f6799
SHA1 0ef12e67efbbd57835f03e4c1c6005ad087463fb
SHA512 2dbabfc1df17b3d57e0f7a0b7c8d904e2c10d72f9bba92ce09bf1959a45086b0c1a420cd3d38736dc67ad0a9cde04b564bfdd1d59e9e3cd25af1761bd479c58a
SSDEEP 192:pRb3kUI3PWgv75pAPRp2u1lL98Hsb+WNnnFFUaRECY/aBh7Nj8yIsnAUgE:pRb3MW8VUX9DuwFFDENamE
TLSH
T17E42C72EB910697B5DCBD31AF9127B67E7F9102124D42E84E6FC892C19E75CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d70806dfb222a37fefb9d4b3f36bd8a040a60c686cbc26239305e59089330454
MD5 6daa2d1d98cd24d5f80d1455e9e4c956
SHA1 681db37c1ac0daaa2c8938bd9fc5a64442b7b910
SHA512 74a19d47ea57c77d49ddafa1b4af1e01d6b9278c68859092a069828662b5de61ef982bc0fca34e53f8b0ddf462e677f59aef0bbebef8754bd5cd6b28a7af580c
SSDEEP 192:pRb3rUI3PWlv75pTPRpju1lL98Hsb+WNnnFFUkseeY/aBh7NR8yIsnAUgE:pRb3FWVV5XyDuwFF8eZacE
TLSH
T1AC52D71EB910697B6CCBC35DF9227B67E7F9102125A42E84E6FC8A2C19E75CC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9a1296a7d2fc2eea1ecba3fc14bed0dd8a284af741e4694aa75e8a16c05bbb60
MD5 b7b67c1d9c3dc33297c66e506e01b9e2
SHA1 b0885e3c67dc934ef11abe51490019212cb02f7c
SHA512 be930e64cfd64adcf4bfe1f517f463f8a402ba6854f6f91ce10ee97baf1527540022e35724405bc884a3f50a5f783c16638f59d2933052623ad8748d4ca5fac1
SSDEEP 192:pRb3kUI3PWLv75pAPRp2u1lL98Hsb+WNnnFFUip2VY/aBh7N7VyIsnAUge:pRb3MWzVUX9DuwFF72Gaje
TLSH
T15842C62EBD14697B5CCBC32AF9227767D7F5102125D42E84E6FC892C18E75CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8e736522b211f88a11681f865409b36f0007fef9e97c22463d7663c45370418d
MD5 9431c79943ae26904c4e9577fb15720c
SHA1 b5e0376e5deb63a63ab8dd3e67369b8421742e6c
SHA512 76723401d3f78ac3f371bfb296ae4d5b88e5a90d7cdb1779dda2dc383ff295bc92b80cfcd116de19d376c7e4bdc6a77548670d93328d71507c301177cfd69b58
SSDEEP 192:pRb3kUI3PWJv75pTPRpju1lL98Hsb+WNnnFFUaREIY/aBh7NR8yIsnAUgE:pRb3MWJV5XyDuwFFDEXacE
TLSH
T16952D71EBD10697B5CCBD369F9127B67E7F9102124A42E84E7FC892C19E75CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6d6e219bcde8bacabfc536d0c31907620bdad31bf176117393c35533c07e585c
MD5 8ac232b67480e11b68b32c9ed6e1399a
SHA1 182ff80b577756a6bab27df7bcafa2c5c181cfa5
SHA512 82b91956773077c296118167877fab7eb09513c88811669031d154c2b5ce6aaa043a3540ba47c2489e052992c9919d2306ad96e09cd20f4b571fdc530fad133b
SSDEEP 192:pRb3kUI3PWy1v75pAPRp2u1lL98Hsb+WNnnFFU1KeCY/aBh7N78yIsnAUge:pRb3MWwVUX9DuwFFveNaCe
TLSH
T18442C62EBD14697B5DCBC36AF9227767D7F9102124942E84E6FC892C18E79CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6580b9be38e043e5d2436ff4ae9296f74b369cbea58296d9af5604bd4b1cc474
MD5 64d379491386bdf9d2b82bfed49740e5
SHA1 522dcfd2f4d188bbcad58538c6461f8bbd43b2e9
SHA512 5d58b317ff66bb8f8373e7f5972247e20a553af50c4ad2756a022edf34ee0bb5688a058056e953d457420c82cddb02044d6062aa1788af614d0c7bcf05ddc3bf
SSDEEP 384:ywjuJ7KxkXqKf/pUZNCgVLH2Hfgslu17pLuLcSjwxXODuh+ErU37PHG7iK:y0uJ7KxkXqKf/pUZNCgVLH2Hfgsc17pV
TLSH
T10B72FA67BC4C9E370F94CA8CD9167F4FADF5024A65E9886482FA9C2503D5BCA11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e7bc2096ff49acb1ee64d21c668b6ee051893b5f30b8e00b65abf7d7fd88eddb
MD5 96ad560dfd421fe18347b4ad2cf1c1cf
SHA1 769fddc9aa00d187629f450a96e2765a9622a337
SHA512 7d955c385e4a1bb6f40b244b7fe09d87c3d6d73fec29a8415bd2dd7e5f33a7726195b18a602b06f3df0a7f8d7095c6abdbf41ad56ecabb9e328fb00f10cd46dd
TLSH
T155B0121080019711C08602B0198354C87214BF22A60AAB0143E0E932CC2E1E18424060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589c99.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589c99.TMP
Size 120B
SHA256 7fa87ec29202b48705b05fce50e90719d774f47031cf44e2203ce8d239e5fe3e
MD5 611dca0cefc08ff0362cc3f58a5e9664
SHA1 d1cedecd0fda884c862180ae6abb37f9986c3372
SHA512 8c95afd83c997bc217edb5c9bc4c4f3a2ce9c478aabe5196c81454fc0eab878affb2e9cd745e1380a5e2f20927552cdc8a91b58ca8c32c43d15e618bb36cafb6
TLSH
T1C5B01232C8819331C10203741EC0849C3014FF21D606021372E08713983D7F00515141
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 dc773feec365fb7a5cf483af09bb6d3fc65e8c1dd7cc60237420f7cf0d135ee5
MD5 06189aa5ac00f9ddd7260a26c91a6217
SHA1 64dfba6210f2ab2ae7e5b2f2f79f0fc741c2fe13
SHA512 56d057db11b7d4afa07e2e779849965b158d0b28c085cd98d057d0d60936b4384f90b20e525d4379bb6dc9bc20229ee84b369b918276aca02dd3762758ed1764
SSDEEP 3072:OeGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:O5m7Rkm1tYpBeh2BAoF
TLSH
T191C312379D74A8775DB5BB4EB04E0E1F1DF149A7CD20EE92C8D85A0463EABCC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5a8a2025ea2d931cd784ab64348aed4ad4fcc249674b9519778fd67df009e2c0
MD5 cbe030a0c05881e40aaa05600e420a9e
SHA1 82f9564ecf9b7c2b747f65dcac24dcf2934fbbab
SHA512 a565cae56d55c12c8366c000d9f8660d4de61b2710dc6994d31ecd76860e451573880fcadc4b480f9011720fc3f3b16eb0e43976968a532b11a3c065a4477f65
SSDEEP 3072:lkGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:lHm7Rkm1tYpBeh2BAoF
TLSH
T10FC312275D75A87659B9BB5EB04E0F1F1EF149A3CD20DE92C8D85B0473EA7CC0A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1baddb85aa8d5821334b4f08ac07c13ef0cc12927058e1a398882ad9f28ae873
MD5 d6bb5a87076324977be25b70abc2819b
SHA1 e3829948041fcf0493c7722e40cdbd5e86102660
SHA512 2388c78ae28a5956d73e77700299bd8683d30527360ab87429d636a314ca44aed6396e79094cde03943a19aa23e245f823f8127b4878219234bc5d0331d498f2
SSDEEP 3072:yeGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:y5m7Rkm1tYpBeh2BAoF
TLSH
T181C3123B5D75A8774DB5BB4EB04E0E1F1DF149A7CD20EE91C8D85A0463EABCC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 63f39a1ee5519f8e66819a41ee115f0122214c242176b6e7eddc603742414623
MD5 e9e2d75f1320cd4a53236b7d973eb2c4
SHA1 551cadf53ccf525e7a7986c12cd39e8ebab1c002
SHA512 755debc4fe5c0d4a749926d11435254193bca7fdef568e0847f426a7c7f85b270069a0b7b229d3460d3d8f55412a8ff2b9de66056f433225fd11070e4f72be1d
SSDEEP 3072:4Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:zm7Rkm1tYpBeh2BAoF
TLSH
T112C3123B5D71A97759B4BB4EB08E0B1E1EF149A6C930DE92C8D85B0477F97CC0A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download