Analysis
- max time kernel
485s - max time network
487s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 18:11
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/kalexz4/.bat-Games
Resource
win10v2004-20240426-en
windows10-2004-x64
8 signatures
1800 seconds
General
- Target https://github.com/kalexz4/.bat-Games
- Sample240603-wstyasff45
Score
1/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133619125991273082" chrome.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2284 chrome.exe 2284 chrome.exe 3248 chrome.exe 3248 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 2284 chrome.exe 2284 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe Token: SeShutdownPrivilege 2284 chrome.exe Token: SeCreatePagefilePrivilege 2284 chrome.exe - Suspicious use of FindShellTrayWindow 33 IoCs
pid Process 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe 2284 chrome.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2284 wrote to memory of 2940 2284 chrome.exe 82 PID 2284 wrote to memory of 2940 2284 chrome.exe 82 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 3172 2284 chrome.exe 84 PID 2284 wrote to memory of 4732 2284 chrome.exe 85 PID 2284 wrote to memory of 4732 2284 chrome.exe 85 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86 PID 2284 wrote to memory of 3872 2284 chrome.exe 86
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/kalexz4/.bat-Games1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe3441ab58,0x7ffe3441ab68,0x7ffe3441ab782⤵PID:2940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1700 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:22⤵PID:3172
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:4732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2188 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:3872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3048 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:12⤵PID:4156
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3064 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:12⤵PID:4000
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4444 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:2132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4564 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:4152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=928 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3248
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1012 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:1012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4716 --field-trial-handle=1852,i,8354923494718377851,18226797603668410118,131072 /prefetch:82⤵PID:888
-
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵PID:1900
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 a9b0a2e367e62af0859b7e26bde2b2aad3923d4c0bcc39b8ee4423a78bf3b50a
- MD5 51f7a58251efec2ac343ce4affd205a7
- SHA1 b72aedb2e30e35aa45054917eaf41df91a3062fc
- SHA512 68b8fa626aa6010524f8189ede09ae1ed61dd9974e6ea64d870947b513450a294fe4964bfe0be263f365fc61f472c4785d2dbd8bbb212d737c65adf6bc656c6b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 4566ecef926ae79d55455cc5c3e7419ea2c354b26d82362d20f72746637e4ec1
- MD5 dd6ce7bf6c071205eaad520d5640f32d
- SHA1 b3533ec107cd9799d3fa7050eb658d70e7041f21
- SHA512 c18ce68bdd2358a89e9f50f974a5335fa9f670ea50e0b75bc64ffa283e5e6eb2daaba5311236c2fb0ef7fee07e5b9e2602c2fb816a66928a4fd12f3cff2b3004
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 607f34d7510023566e9d1cdcc4e5a66291ac6b7da79a88d84c48389f029349cf
- MD5 1a62243aa801536dc2f36bbc77ecd21f
- SHA1 1f048aaebf3c61725893da6ff7fb8b4afa10fbea
- SHA512 cddaebc714b4fc0f22afc7bdb14eeb426269d977d93dac7a86a7f9c071ba4f6c484d85aef9758f8b5f446962c2fe39a7900750db7ff0e7c415083a9545e39971
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 1KB
- SHA256 70e1d80c4e39705886a62cc8edf69ff0b7c74ccc1128b874e217f2fc8ecd177d
- MD5 952aca3db204c10d5bb3d3fbc62d2531
- SHA1 1349a0b46adc31d90c450ccd626e2b0db3468a5e
- SHA512 941dec1774b4067f8d5a8e4a1869dd993eeb9d633cb9e07bec91743506ec4d114d0a089ed6449cf62947f6dcc87b8342b28f51e6fffb2bef3a7183fb9b6fdce8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 1KB
- SHA256 03ca076e735b487ee2f8872c47778ed84b33d3f5b5aabbf8b4c214edbc2b10d0
- MD5 9253fc6c0b2895794cd0007d75f6ec15
- SHA1 df37ddb96a91160002ad3b7fb0b0b17356fdd8f0
- SHA512 2142f7d220acdf648c907ff74239a78568e564811611f21bb652b85a9b7adba81f98c6349a7839848e65cdfb10db639b0f77c8b8507f6a4a46018679d2c93319
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 1KB
- SHA256 dbc411304587f45b7a9ef732937f3210b520397f5f6b7626f8c008ce69fb50eb
- MD5 0b3b512993b8d9b37b8478551e52de38
- SHA1 e9b9334133b0ae6bb16cc33c2707aee4022aabd8
- SHA512 83dd7eb784b495eec9b210f7b433644277840e6f52555e270d241ac57889dc0c5174d15ea143699ab5d7bed54fc502f56fb44917752a8f9fedb97e8bf9545886
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 1KB
- SHA256 7d38f7a4e465adedba369e29d2197e146d1d93f9edab2c76d12b712a8a696b42
- MD5 4fe95956e8e941890a2dc67377b7df2b
- SHA1 fdcd9fe9fe4ff2f1164b922434869ca3df1f5312
- SHA512 c5959542c87c16e1faa445a65e58221da12d8be87925190f3828d2ae0c99eb4e04a4bf070c1b593a39fc48faa98beb5e7c235e93f8dc0313d46b87e885fec394
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 7KB
- SHA256 41696a286b9f541835b2c4eff4505a0686f918d9f706b9dd860de012a9010e5f
- MD5 2fc779e61e159376696a60056a0b0f75
- SHA1 1a86ea0ee18d10179905b9cc86c4311c7c891978
- SHA512 0685045bb496ef598fcba01b7d4b5165a79f076beb27a2faf3590328ce157d42e554fb9129bce9877156a46bd412d4917165369810832cbddb0aa321fe378c4c
- SSDEEP 192:vJfxsYAewaJ/8w8syh+FjNj0P5tjEsXtScR:vJfxlAex0Kyq5jMtIsXtScR
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 7KB
- SHA256 e6c078c0c46bb6616064df8ef7541f569b20c31c224214aaafbc8f24aef44fd7
- MD5 d9b13f78394d3e913a8c86adcc4c08fc
- SHA1 112324ffc7bddbb43c334b90c6c2431774981102
- SHA512 21f8c7c4b8f3261e90d59cf080cfe360deafebd20822942dff00725f0124b96fdfdb8696cafe55109fa69d663044502b9a6494ff5c7ad71762ac636d17c873b8
- SSDEEP 192:vJKxsYAewaJ/8w8syh+FlDp0P5tjEsXtScR:vJKxlAex0Kyq5pMtIsXtScR
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 130KB
- SHA256 b083f8e95ae59e0a4cfbd9663ba1a707993ffdbf1580395ed2fd9d626b8f569c
- MD5 0c14565201c990211f221d945e1ad62f
- SHA1 d27a38c5ada3793c59e7da303c90a40727b0fefb
- SHA512 936e518334e709c4804222381fdc1237db22532ebe77580f71033ae7d4c8f11333bd6d743f52446817814f162213dc9014ef7f7275f5b38c0b8603032b3f3743
- SSDEEP 3072:b3zgZoOqJ72dxqXQqd+9z7MAHQDgOnwy56J/I:b3cZDwwHNHQn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
- Size 94KB
- SHA256 5c73427b786044f46a70b47e2957ee325bcdf4ee6ddf93d984d566354d00e6c9
- MD5 da621c08397e497e88fdc1602a7d2229
- SHA1 44f556783d304642cf825e8827845ed49a8594d7
- SHA512 e5d76c4059354e6c51bd9660112d0bb2d1d270c5c346049efb1d5607b46929885dc68ed007b2d574f4d86094c2cf76e422b4251a84554274845070f27c812077
- SSDEEP 384:3QfYxEQvMcE0uQ/Jh39yHKwXpo49nAElzvvONCigW2JJdb1OAruG2oDnMC+Uz910:ZiQOJEdJMsqcacP+KLORU
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5c7d46.TMP
- Size 88KB
- SHA256 c3982ba30f60b4b674443bc933ba102da74fc9d1e4041b7ba380a5b13e006c6e
- MD5 7e22a7e6fa31fb07a7c0861061c814d6
- SHA1 44044e70f963ac3e8723ad83a96ea8e28f8b10e5
- SHA512 0b6c1165c0e78ff10624c7a9ecd91d2e9c2495caa7af5d2fbf6f6246ee93f2444d006939f4604c9d72e9e688275fc89d92344a500f845d04ff1deed69469de48
- SSDEEP 384:WQfYxEQvMcE0uQ/Jh39yHKwXpo49nAEivvONCigW/JdbBAruG2oDnMC+Uz91X28q:oiQOJEsJMXqVdcP+KLOR1
- MD5 SHA1 SHA512 SSDEEP