hxxps://qrco[.]de/bgm2Lv

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/04/2026, 15:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://qrco.de/bgm2Lv
Sample260430-skjktafs21

Score

6^/10

discovery phishing

Malware Config

Signatures

Legitimate website abused for phishing 1 TTPs 2 IoCs

phishing

Phishing

T1566

flow	ioc
3	qrco.de
4	qrco.de

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1736	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134220354705393840"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
436	chrome.exe
436	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe
Token: SeShutdownPrivilege	3024	chrome.exe
Token: SeCreatePagefilePrivilege	3024	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe
3024	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 3532	3024	chrome.exe	85
PID 3024 wrote to memory of 1736	3024	chrome.exe	86
PID 3024 wrote to memory of 4300	3024	chrome.exe	87
PID 3024 wrote to memory of 4300	3024	chrome.exe	87
PID 3024 wrote to memory of 3048	3024	chrome.exe	88
PID 3024 wrote to memory of 3048	3024	chrome.exe	88
PID 3024 wrote to memory of 4636	3024	chrome.exe	90
PID 3024 wrote to memory of 4820	3024	chrome.exe	91
PID 3024 wrote to memory of 4636	3024	chrome.exe	90
PID 3024 wrote to memory of 4820	3024	chrome.exe	91
PID 3024 wrote to memory of 2696	3024	chrome.exe	92
PID 3024 wrote to memory of 2696	3024	chrome.exe	92
PID 3024 wrote to memory of 3764	3024	chrome.exe	93
PID 3024 wrote to memory of 3764	3024	chrome.exe	93
PID 3024 wrote to memory of 2752	3024	chrome.exe	96
PID 3024 wrote to memory of 1096	3024	chrome.exe	102
PID 3024 wrote to memory of 2284	3024	chrome.exe	103
PID 3024 wrote to memory of 3756	3024	chrome.exe	104
PID 3024 wrote to memory of 436	3024	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://qrco.de/bgm2Lv
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffbadc5c728,0x7ffbadc5c734,0x7ffbadc5c740
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1796,i,12797998764558980249,4353997726135250707,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2056 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,7558839065054376352,15877219248210055847,262144 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2292,i,4092278842578452649,15073611441388411861,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3148,i,9990071194400284305,6249515934700086605,2097152 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,4421468089788579736,11552282741295579591,2097152 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4356,i,7113012757119254386,8501738763820605293,2097152 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3844 /prefetch:2
  2⤵
  PID:2696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,4302136091607457752,4717996375926442629,2097152 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,5510848584221155185,6590034141503969763,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,9786912612653026190,2221374482031485250,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5684,i,8038542309080298144,17671272276833264665,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,14192300272841732396,588285883700211287,524288 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5228,i,14146348676431139750,5344294994316795273,262144 --field-trial-handle=2012,i,3464989905334708282,7822056958954473794,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:436

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2240

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 42d7c5e23394f107ad2a6bcac5739b807edb40b9dee46d49f90361bae830ef03
MD5 1f2077037c021c9cb2d3be9231003741
SHA1 9904915a1641fe59dc12aa234334f88b698cda8d
SHA512 2829602c43cf2ee08c42c28f2611a0a49ee0b7eae09ef7973707ff38b113192e8a19d009c3255c8c6c020a86890ab28cb78e6ddd8bd8686a87adb479745fc610
TLSH
T195E022AACD25AC3708FD6B1861A84746EA0153662B40894F3B3CD20DCFB073A428BC5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 265ae73b6ed5e0dc04142486a768cb7b9536616f25ae527816b07782c4b01106
MD5 3055671abe98d7b0001e71235f0cc96d
SHA1 9a61a3a9b5835e4581261d7a26d00ddd89333616
SHA512 250f8b03c3fbc910a6d1074c561b9216f9747c14a8e972a427ac48f3ef0e8a3957e8d229e5c6b25ceb051beaa43ee4eab3dc33c6dbaf5e1fd1362e243f0e28d9
TLSH
T11ED022C5622C28A2E39A86312F1B50B46F30428C00F41317D2D8C8B2CAB2A3AF0001C8
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 c7264f1576c7db67b4d7b3ec1d741e420d96954bd448e030eb7c641bc36771b7
MD5 c1674711a510656a9e47f30c4b1cb1b6
SHA1 3ce240bca2848983611694c1f68c1afce67234a6
SHA512 0c5961324302f1a5e63347a900b2745d2908bdc3ba10ec2e48af2f4d2c8583827e80102f33a4d8ecdbdb920dbfbc83f0bd193c9e10625ef5638cc5a138c3962c
SSDEEP 96:D0OqQ5TsaIaEgd7/kXEtxQcJ/et8KdV4GXoX:D0OqQ5TsaIaEgd7/SEHRhC3TZq
TLSH
T146918BF7C3E8862D891196F4AB15AF1FCE6D0A14031C3C66C8D4AF1B93E2972E21175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e0d06aee92e216ecc147a2545b3dbf7821f2213caec3fdf1874a273360fcced7
MD5 6c10eee07cca4c75c02482639d274bde
SHA1 ea4e8f81c68e7d0ad35f4116266056d486f71420
SHA512 d97b309ce6d9d542bd9f71621b1da8197390464a4c85d741d4c6a4b12a01d89ccc1f56764a471d58593fe0460c7398c253fca715d94ecd877982856ddf519606
SSDEEP 192:7Rd34R/YHLoLNcv7ZpIpAPRp2NRP9wHsb+WNnM8ZMq2NyneGArBN2o4p5MTVyIsR:7Rd34VwOIEUXaOwfv2XrL2lp5M1e
TLSH
T14E42D62ABA50693B9CDBD329F921BB57D7F1102174942E84E6FCCA3C14D75CD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1d944fb5425f5f07bc419b95ad8f378b4bfc6e226689656c25948874beb021ef
MD5 4f4397c8e95aa38eade92f6ab2dd0af6
SHA1 64f190204fc8d3f392e68bef062de290ad862f1f
SHA512 d5992b80febf864e5144b3ccfc90e8ca9d756d7bb6da16771cdeb1e0b56da7ace4b672702e471d76764f5c681dafa365ef8b2b40700370f99135e2c5e94642ce
SSDEEP 192:7Rd34R/YHLoLNOv7ZpIpAPRp2NRP9wHsb+WNnM8ZMq24yneGArBN2o4l5MTVyIsv:7Rd34VwOqEUXaOwfv2wrL2ll5M1E
TLSH
T1F352D62ABA50693B9CDBD329FA21BB57D7F1102174942E84E7FCCA2C25E75CD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7636ca97e464fa287e6536caebbc6d07ecaf45942c5b2253628a3f5a47df5408
MD5 8d95d2f15ec96502c1495ce2cd0dabb5
SHA1 371331abe07a93919f958d1897688d67d30164fd
SHA512 fc189e9a15fcbbc535f191925de3ab196c4f13882e419e35f867dc727362a92bcc1b2d459fedba0516303a7cff8f2ce0abe919e1639775903fecc9465c54e5b4
SSDEEP 192:7Rd34R/YHLoLNfv7ZpIpjPRpbNRP9wHsb+WNnM8ZMq25pyneGArBN2o4h5MTVyI4:7Rd34VwO3EhXjOwfv2FrL2lh5M1E
TLSH
T16052E72AB910693B9CDBD329F961BB67D7F1102174942E84E7FCCA2C25E76CD221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7085bd26a00ea25f436317507845db76624f1e305c5ea5c1633f0710fb2525e9
MD5 6fedf8e0cda28604a18bc21b3b3a9b01
SHA1 6e736322a4f9228617a8d1dccd80d010032b80ff
SHA512 7c43690cde2a8678a5465e416e0cead981d993013a68eccf60d0f0f8520df5a31229546fee29023f6dada5f06f5e8901b2628e5ccb2a58fa5dcaf82771739eca
SSDEEP 384:UO62joO6z7KxkXqKf/pUZNCgVLH2HfgslBr7pLuLcifKO6/XODoO6P+ErU3f6HGy:UO62oO6z7KxkXqKf/pUZNCgVLH2Hfgsr
TLSH
T18972E9676C4C9E770F94CACCD816BE4FADB5010B65D9886843FA982903D4BDB11462FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 96ee8b5f5d552a6d4708efa31d3c020a141644ab53bdf5eed26f01e3fdf71aad
MD5 0cd17df15a6c226363c4af7dc448abcc
SHA1 d15b12ec2d7eb071ddc954b10c7b4795317492b0
SHA512 13834797667aa53d0646e4ebd8321b72e12ae1ff4a612e1ba8598d75a6b9e7f647a267de1033e330e75a3a09210e931784d79fc1b0e4debb7d7f3f3a594eaf4b
TLSH
T134B0125080059601C04703B4128614C83214AF158719130593E1A972F8266A18015151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584c75.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584c75.TMP
Size 96B
SHA256 0b82b5de59611e515a87e064ca66188a265b4bf0af0278a5c4e4d0c708e2b9f3
MD5 23170a3f6c263a88a32289a99f0bddf2
SHA1 cbfd935f0579cbfc3fa979746ce9918484f48014
SHA512 aa6f642a46f4b9b9b329616a810e80c02381c6c817ebb55a47de4ca2bc217cf5770187f3684926eaf28e5badae764abf4655c3b6f0dc3e8cdaed92cc076844b4
TLSH
T11EB02203C003A202C00303B0F28280E83220CF20C3C3220382E03A2ACC3223288A82A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 b4da3fa0c00adf900eb995d20151f079f4a8f073d3bc269be71a8b24ddda6aa8
MD5 fcee67bfef202259ea253a44bcf102f3
SHA1 6ad47a2a62007d95197e0f30590878921f2ce61f
SHA512 83998b9714fa3796f90bcb2c49b9bc3ef8f32782aa2b3d7a8e0c7b5c9d5d44dc71774f711b9ae6beac0c142d3bf74734d4ae4d659933d9106c7aa64e8228731a
TLSH
T1FDA0026C1249D207C550167012A3659537B04E5543161765839E49A4C86174046160F0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 a847974bacffa9a3e3c30faa6bb850cb2e2d21cb9c40cfff935e1a408310c2f4
MD5 3d12ccb4b7d83cf0db71e879c14990ca
SHA1 5a59d5ce648d7b52713e337a5747f43179de9bd1
SHA512 0cbbd35534f0ba2489d483b75ff14101f4128c2ff552f515a792391312db77fc99b82f97f1585a5b7603cd412aa7343b20fecbf8faf38ec466afd5fe171da771
SSDEEP 1536:YfcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3u:s3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1CA9312BA8E174AEB957D4A8176AE7909CE12630D70AFA9CC315C538C31D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 29b8cae582e34fe9d253e2474817da5c1661d13a45708eee2227af0dda06fa80
MD5 e047dc7da5e0109aafd2c06ffa7bf99b
SHA1 47b24afc756bd2e965dc607e5d4ed5a28d20dc65
SHA512 680b20cde25f4add0dcf3face25d3717bcf1cb6b80169c493400f6251cb06f77fe4af50ec66d7bc40703b855a93d7baba63e98f96adef298feee821fec85bbed
SSDEEP 1536:kHwcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:93Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1629312BA9E1A4AF795BD469176AE7909CD12234D309FA9CC729C538C21C41C82B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 86e1d22279c3f5f67ce7e4e27b968a043a0bcb54bb05416de008f6d252a2ed4d
MD5 f1e46a03c4c152b02c47cea520238601
SHA1 2fee08342b6a3dcf9feb5eb1d4deb176fbca7bea
SHA512 48d4cfdc5e2d1deca1029bdac0829661c44d428b9145ccc81bbe4c6876de03c6f4bd9d10ba5aae0df0f9be1ce8723fd7802e75177951be7fb34f0b75fd6aad51
SSDEEP 1536:zHwcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:s3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1289302BA9E1A4AF795BD469176AE7909CD12234D309FA9CC729C538C21C41C82B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 180KB
SHA256 9323227305478c92fe621e542fa8de4d8c20b2054e1c19837d2dfd696990e165
MD5 57186bb76b8769dd5086d70d8893ecec
SHA1 6a5c7c8ef0c0448849bf5704eed1877285f644e7
SHA512 cc67d2014ab77953f48b833a74d581810409d56654f12778e8a8e2901d393b49b6846d6366ac9fd34e720121f034062d95866f6fe934f685269878999b0c6211
SSDEEP 3072:i2P7BfgYiUo/4CF/I4xiUuljieZVpaX3j3Qw/xLANk0mUW5GmRntSFCjEEN4:iIBfgD7hGjieA3jrOk0HOGm/SFyEE+
TLSH
T15F041379CC665CAFC97C854230EE7806CD2A0709BA9B1ECB7065AB4E75C52C40B779E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download