hxxps://pfoafrica[.]com/bon%20de%20commande%2004/28/2026

Analysis

user interaction
yes
max time kernel
299s
max time network
298s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/04/2026, 11:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pfoafrica.com/bon%20de%20commande%2004/28/2026
Sample260428-nfbbesct7n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1548	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134218488262158110"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
5496	chrome.exe
5496	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe
Token: SeShutdownPrivilege	3456	chrome.exe
Token: SeCreatePagefilePrivilege	3456	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe
3456	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3456 wrote to memory of 5876	3456	chrome.exe	85
PID 3456 wrote to memory of 3484	3456	chrome.exe	86
PID 3456 wrote to memory of 3484	3456	chrome.exe	86
PID 3456 wrote to memory of 1548	3456	chrome.exe	87
PID 3456 wrote to memory of 4708	3456	chrome.exe	89
PID 3456 wrote to memory of 4708	3456	chrome.exe	89
PID 3456 wrote to memory of 2756	3456	chrome.exe	90
PID 3456 wrote to memory of 2756	3456	chrome.exe	90
PID 3456 wrote to memory of 1608	3456	chrome.exe	91
PID 3456 wrote to memory of 1608	3456	chrome.exe	91
PID 3456 wrote to memory of 3112	3456	chrome.exe	92
PID 3456 wrote to memory of 3112	3456	chrome.exe	92
PID 3456 wrote to memory of 5500	3456	chrome.exe	101
PID 3456 wrote to memory of 2540	3456	chrome.exe	104
PID 3456 wrote to memory of 1628	3456	chrome.exe	105
PID 3456 wrote to memory of 2972	3456	chrome.exe	106
PID 3456 wrote to memory of 5496	3456	chrome.exe	108
PID 3456 wrote to memory of 6100	3456	chrome.exe	109
PID 3456 wrote to memory of 6100	3456	chrome.exe	109

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pfoafrica.com/bon%20de%20commande%2004/28/2026
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8c287c728,0x7ff8c287c734,0x7ff8c287c740
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,3392908568895485376,16531395659504899208,262144 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,6053242075299286531,9145189424225861699,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1564 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,5908954985533000602,16478570677842378642,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2412 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3084,i,4689616462791453157,2790252866215557181,2097152 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3124 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3080,i,12833590515270175957,17311266990289429229,2097152 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4284,i,4613065021588391257,17355677918614931955,2097152 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5728,i,12211946206953576034,12734425399398495337,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4856,i,4794528139348753547,3948617771332634203,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4268,i,11065466215358903408,1927633558122195885,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5020,i,7558114655033940276,5800125959454833367,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=972,i,5037230788106397468,2087480489477334076,262144 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1084 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4752,i,10824447787800403406,9170431981088097376,524288 --field-trial-handle=1976,i,12326224727943519784,3242269916463839006,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:6100

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dc3710e5c64b581e4ad2c34c82d437bd5dd895142630c59128c99dd16d5e6fa5
MD5 f50e695f760e37a399b87e3dc659bea8
SHA1 9d536b946cc8027c781cef2f9659d008020aec64
SHA512 290aefe0e86f0e3cd31ed56d22d836e16d9ef1bfd9fc3cea288c5cfbf7b0700bb2ea249dcb41c94d9324c71c1ffde9e3ffc35956e2cb0005a673355502770bb6
TLSH
T12DE02B9BC921DC2B19FD071930845345EB15139B2B91594F7A3C820C8FF427AD18681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 744B
SHA256 b47ab1a8e6a35edf8ec7ffb1330dc963202b5311622e3116bfd470ac63180cc1
MD5 7d090cdbddbab4fcd2f47cda89e405c8
SHA1 3bda229b2c0760f8d56c7115008060573206a712
SHA512 4de2854080a53a0575387a45f861d46bb1645a29950b4497539408f31daff6b7b24b8ff1b8625ab00f2af672df386063ea2282ee919a7ad3dfc527d936952684
TLSH
T15701AF21D7FDA076DFDC0CF561D24C853160D597BDCA8B47E19228B662C32D5449164C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 fd5941ba0bd52af9e4b8d026a7729e92d0f0f3d5d644866bb3869e8260cc96f7
MD5 b9ffa0c1e877bd4fd65a4fff474e89b2
SHA1 022eab66cd009ff6dc493de595488d5d70fa3e96
SHA512 668c8c6e511950bff612b91c95d221de577e35b7bbfafd10080f7e2a6365c2f5d10c776b0b52f9cecaf8bb81e4dfd171fe894f77435f6efcc495d206ff7df345
TLSH
T1A1E0C225FBD511B9DF6D1D7A75E30C002270AAEB304ECB43B1DA00BA62C33DA59C1A8D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 625074b01bef0d1117d8fc48d01da3e1b37c11afcc3db9113f1ceae536c27ecb
MD5 4947dd1be37c266ba617954c19a25a0e
SHA1 8636c0a3a73f6b77dcd906268186d4bc50cc8ff5
SHA512 aaf9db1a86541c68c9f8795912f89e234939e8952baae37252b2bd6630f4394577ed4e4d8aef89885bfba7f3c34f8494a75ef9a5c9bd35becdc01b050a600446
SSDEEP 48:YALlqXwoPPwowwoTPwoQPwoEPhPhyaXYfo7Eg7os9mgmzs9z4s1wlsFwJzscw1z+:DuzkfswNgaIaEg74O1/SlgKQfS39Ek
TLSH
T1CEC1AAF3C3E9C96D951156F09B15AE1BCE5D0A24932C3C668CD4BE4BA3E2432E20574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 a25a4e28303206c297ed53791c02047b54571c0ac54b5b8b99c7ce91be76fb0b
MD5 65c58172e204bdfb19c99ec070df720c
SHA1 c6fc69d511be03eed7422c45b50f28c43f6b64ba
SHA512 2a13b1a942cb7daa31f69769323234cdd622ea02d9c2252c23d7840429548894524062a988b4a952b3b7ebc9846b020ea6b9f210a0f1c214f03398b7d276aa65
SSDEEP 48:YALlqXwoPPwowwoTPwoQPwoEPhzaXYfo7Eg7os9mgmzs9z4s1wlsFwJzscw1zsd5:DuzkfswVaIaEg74O1/SlgKQfSd/ok
TLSH
T137B199F3C3E8C96D951156F09715AE1BCE6D0924932C3C668CD4BE4BA3E2432E30578E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 868d570d300991cc7559772d69a0bba1aa7982ca4e98b9952ffaa86163949f99
MD5 75bd2bbc70329d4dc22af2bc0b05a499
SHA1 f5c6547417e39a18e90a7246475c6055bf3eedcf
SHA512 ba6ada992470c363e34479a0b3884b844a877d2423ed82ee34764abaa6b956c1f9b4f795a40faa5c5f23ee57233957e9eeeefa429698fef6dea4b76baabf7e46
SSDEEP 192:WRpdGt1DUBQXv7rpAPRp2IH9+Hsb+WNnhEUzI2dN2vHa4vZMiVyIsnAUgGWP:WRpd3WfUXZEwO32D2/aliTP
TLSH
T1DA52B62EA918793BECDBD21EF9527617D7F5203171902E84EAF8CA2C15E75CD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b0034c2afdab52872e23df1f97a715c9fd5b6e873b2a415be54408c601d669f7
MD5 faed1c071a13df085fefd41f158fd281
SHA1 df86143d5a99c55b5ca2a9274e248a8c844f1f99
SHA512 d299f5ec5ff5a5639316c817ffde6154f27503a0b9cd9866cec7580153f69cd39545e5b14c0a146e7a64ea28dfc6a5d18cb820583e5cce7aceb0c5e5803a0172
SSDEEP 192:WRpdGt1DUBQpv7rpAPRp2IH9+Hsb+WNnhEUzI2bN2vHa4vZMZVyIsnAUge:WRpd3sfUXZEwO32J2/al/e
TLSH
T1CB42B62EA9187A3B9CDBC21EF9627617DBF5103171902D84EAFCCA2C14E75CD221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e57b23d268b0f7106e4fee967ca62ac851f07aa32018f988c976be8dc368e95f
MD5 b0cecf6ff91873f80a10866b463e61d8
SHA1 85d284098a3d56be35470065f1b76b0ac97bdcd3
SHA512 49766be18fc2a343750fcb3e35f565cff478da6b9579748c397160f154fff415cb84f24aa4f395d47362d8a52988833c6ad136448592caab0c5fd31808f56889
SSDEEP 192:WRpdGt1DUBQRv7rp+PRpXI19+Hsb+WNnhEUJmeDN2vHa4vZMeVyIsnAUgGWP:WRpd3YfmXAEwOHeB2/alWTP
TLSH
T18C52B82EA918693BDCDBD21AF9527753D7F5203171902D84EAFCCA2C15E75CD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 646fc39b5d88ab2a54945abaa6a967811d8ab736d849715e998415582f9a1718
MD5 db48e31ad8bffe6ef3ff30d81f0b2a99
SHA1 1b6a942ab884d526d6f107e89c24585d078460c1
SHA512 1de2e9be7ac39c3bb28466522588fa7f73032074769a6b6da9399504b73cd23d5f7f652a889792880867b7a1f2f972f598d839985812aac8230bd2ba980f8d37
TLSH
T1B7B01290C4019543C01302F4198354883114DF15970A1315A3E4697598269A18038251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b159.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b159.TMP
Size 96B
SHA256 b2a0d8fad4bfa7af914ed4f0ee809fe0f31094b6dc2accc995ffd86993e7db7e
MD5 8008d168638e8548ca0f4501ea1a97b4
SHA1 8ad38b955278c3db0ae6df0f61f2a7d9ae3a93ad
SHA512 4dd2ddecd2ea0c7b38f949e2392b7e37237b838083e8180851ea69d29b0bfd2600a2baea497b38890dd272235768a568500dabc03690a37e72de235cf919eeee
TLSH
T1ACB00299E2367333C14203F03A9A95DCB1A0EF36D6035356A2E41A6ADCAABB24526564
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 20040e0c97ec7b3d8bcd43d976fc242ee7bd5d97db11f01ddf128c4f07f6d854
MD5 28f78118d500fe379436bd2f300494b8
SHA1 74b288d803920244a42c8a6b79c0a41c0bf0a1d4
SHA512 fe0e92b539ed55b70d1f4e51da77c67e49a7aa9b59e0b8c622f41b239d8f00bedf8d2827dd2f8650e59995cae807fa358dca775441912a530561da887a119435
SSDEEP 1536:zVVqcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:BVq3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1A39312BA8E1A59F795BE5B92729E7809CD12230E706F688C7198534C21D41CC2F63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 98f6fb83ff58de41fcf436f4ae43334ed7c0050ddf7b8c807688aaf1b7aa1a00
MD5 ee7ce2d030429ff4b117a84ad783bb58
SHA1 6a08953058381278cda06bfc972713ee60133780
SHA512 a5194bf9ffcb21d50a45cc9c087da8eb75530098205a9aca03637871b03f4c2660b6bc938757c64ee376f7b7e3e611a4954ee52718a15c5c5e3bedd3b70f6fe0
SSDEEP 1536:jVfcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xf3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T11A9302BA5E174AE7957D4A8176AA7809CE12630D70AFA8CC319C638C21D41C92F63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 6acddec55636026b30a285963c6f95b6a9f86a6d9853cae8551e1493288173ab
MD5 7e55dfc19988c9d45538cf6ea1391765
SHA1 0b258b1bc916784dbd9a9137452053ff9eec47df
SHA512 e1226eb9854457d32d9489d4cc8057a239e39398cb1bddc13f949cf8093852bad2669288d412a363ad44c51c57ba3464ece65fd563535dc1b5d02182356c7957
SSDEEP 1536:QVfcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:if3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T12F9312BA9E1A55F7957E4AD1729E780ACD22234D30AF698C719C538C21D41C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 25977e8ab1149f9273b56dadb94bbb7fe70ace005a26612802e25d122f35623b
MD5 6a52fbdd357e72df7d88c101a37d53c2
SHA1 7d9847e82d9c73ceb94d053c43b0db65b63217c6
SHA512 fd26b5d515369db0c9c4cb9927fd0393fe12c89a1260c57743bc9b5fe528b3ce62a47f29384cb6287aee095799d8fa8848510f0507fe3a1481acdba3d8626304
SSDEEP 1536:bVfcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:Jf3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T12B9312BA9E1A55F7957E4AD1729E780ACD22234D30AF698C719C538C21D41C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 de56eee55f17b4356ccf284820c978acfdc3ab800b8021f096dec340b3839376
MD5 28ad039dbf921af5782e981f7435c64c
SHA1 a8f8181ebc18f011f63577556eb0b9203f647921
SHA512 7ffaf5087aff2cb2d241de0e33eb5bc4b3ebf72d243cddb2cfe996dd3e780ddb5a158971a148d33b38c5a73c6d04f486aa9460dee8fbe829a47ef61c907e70cc
SSDEEP 1536:bVVqcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:JVq3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T15C9312BA8E1A59F795BE5A92729E7809CD16230E70AF688C7198534C21D41C82F63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download