lumma | 71db397fbd5dd6a239c4b575a3f32b530dc937c68b2c39178c46312eb04ba564

Analysis

max time kernel
191s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 03:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SmokeySpoofer-main/SmokeySpoofer/Auth.js
Size 1KB
Sample240620-dmaclavgqc
SHA256 f03759509e24bc267fcbb4d9c2a4dd76c7017095f41ea279024ddef00659802d
MD5 1e8fef6386f0c75e069aa1db7dd94825
SHA1 21fa06bdbd33fa0d989b3cf18f97402055484d58
SHA512 1878568d5743d10ac8e8f7346551d9e66cad0656b4b2ae47c56d5aa456f2e13022d5d94db0b558887b70113f50fd40df321e27c11a61d7162a52fe66fdc171fc
MD5 SHA1 SHA512

Score

10^/10

lumma execution stealer

Malware Config

Extracted

Family

lumma

https://cleartotalfisherwo.shop/api
https://worryfillvolcawoi.shop/api
https://enthusiasimtitleow.shop/api
https://dismissalcylinderhostw.shop/api
https://affordcharmcropwo.shop/api
https://diskretainvigorousiw.shop/api
https://communicationgenerwo.shop/api
https://pillowbrocccolipe.shop/api

Signatures

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
74	raw.githubusercontent.com
72	raw.githubusercontent.com
73	raw.githubusercontent.com

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	mspaint.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633264461661852"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4016	chrome.exe
4016	chrome.exe
3276	mspaint.exe
3276	mspaint.exe
688	chrome.exe
688	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe
Token: SeShutdownPrivilege	4016	chrome.exe
Token: SeCreatePagefilePrivilege	4016	chrome.exe

Suspicious use of FindShellTrayWindow 49 IoCs

pid	Process
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe
4016	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3276	mspaint.exe
3276	mspaint.exe
3276	mspaint.exe
3276	mspaint.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4016 wrote to memory of 4564	4016	chrome.exe	94
PID 4016 wrote to memory of 4564	4016	chrome.exe	94
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1996	4016	chrome.exe	95
PID 4016 wrote to memory of 1984	4016	chrome.exe	96
PID 4016 wrote to memory of 1984	4016	chrome.exe	96
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97
PID 4016 wrote to memory of 3536	4016	chrome.exe	97

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\SmokeySpoofer-main\SmokeySpoofer\Auth.js
1⤵
PID:3984

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9628eab58,0x7ff9628eab68,0x7ff9628eab78
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1616 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:2
  2⤵
  PID:1996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2248 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3008 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3016 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3560 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4440 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4576 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4540 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3044 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3296 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4544 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3412 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4856 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5564 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5508 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4716 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4264 --field-trial-handle=1916,i,9285721496260400174,17572846334999354364,131072 /prefetch:8
  2⤵
  PID:4708

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:3148

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3040

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\Logo.ico"
1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2840

C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe
"C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe"
1⤵
PID:5032

C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe
"C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe"
1⤵
PID:1712

C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe
"C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe"
1⤵
PID:4772

C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe
"C:\Users\Admin\Desktop\SmokeySpoofer-main\SmokeySpoofer\SmokeySpoofer.exe"
1⤵
PID:3712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 69KB
SHA256 83289571497cbf2f2859d8308982493a9c92baa23bebfb41ceed584e3a6f8f3f
MD5 921df38cecd4019512bbc90523bd5df5
SHA1 5bf380ffb3a385b734b70486afcfc493462eceec
SHA512 35fa5f8559570af719f8a56854d6184daa7ef218d38c257e1ad71209272d37355e9ad93aaa9fbe7e3b0a9b8b46dfc9085879b01ce7bb86dd9308d4a6f35f09e5
SSDEEP 1536:JeOVtLaJVLrEHhEEK50TEJW5TLMbOcRYkxuq/4YGVUAiX0vlQ36NenLHL:JvVtc/EHC0IoAOcRYu0RikQ36NQr
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 326KB
SHA256 4d21e64e043f3f03c39754589e8131f993de6565a9da3bf86a21c205e37b3ca0
MD5 40e01c775b4f150dec2ff43bdf0f1816
SHA1 29cc0f7eb904aced209cec12ebbf8e6ab192da53
SHA512 c868ed04136d1c38c2d4f22f7c16337532fa1b62a3da413df9815ddeb2fbd5a5175d7987beb796193a4e812a679c117928c97a4e87042ce4383433ba479b923f
SSDEEP 6144:NXU0Fr2P2/3gGMysmTjWqO6ScAvaTC1dH0S3RfLXHxLAbsR+srC8mhIt0bsadf0:Nkba3gGMXqOhcqaO1dHjXRAbdaIsr
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 133KB
SHA256 b29b94cfa8c0984b3e4e9cacae2db48bcee27038f1748d4a1fd29d35cdcfc1b8
MD5 c9c5c1f1ab9a50624a65b61336b2f8ef
SHA1 600ef0fa0cd426f7ec2426f4fb13779579642103
SHA512 bd914a5c76990a062eda5fa8c2bc584d2ae73c2cd1cabc449492fe9f088d3ec12951a75b1762bfa0396481709b185f13d9e04da3263fa3c3ee58d98663ee08ce
SSDEEP 3072:VIWmyQToG7YMg8IC+mQxLgTf/qNtqKYRF71rTqTU:V/MYrC4LgTf/4tqn/hZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 18KB
SHA256 56429f8f68e6cb36d6a05a3e7b8f579f958facae9a12e72b770b295d5dce3ff7
MD5 c8e6af913ef098c87972bb908be6a281
SHA1 8f628e566690d26d3825e6ee1619ee3a5600e729
SHA512 bc5e46b141568e0dfdc0eca94465bf2c6ee175d51ad4f9a1cd32efe40813f61300135512c92decc1fd8881528ecb69138867e5ccd0f497b694efb4039f6f545a
SSDEEP 384:us4Rz2pClUPhRvJmjwPc+daAirhaGxUfYOQk2Ef1:f4RDUPhRhmKADVaGx9Rc
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 252KB
SHA256 a5ded1bc2d8514355e32f90495818badfdf9878f63874c967da0197b232e2ba8
MD5 171045f117088eca09d640a3089b7415
SHA1 062599f4c29f696d912ad2985823d95f6f34eee9
SHA512 8120b632e4e51401fff2e84cd19de356b3843f73103ad18fbd1ae496d702b3a1108ce0ff6ffae4f4cd2d1b0562bdfbfb1a671e468692b694dac0097c529d7322
SSDEEP 6144:1PjTGvs0ofaLc4fMFtGXuW+CfP4yQPJOEpfDqIAReUcdh5LQ+ScVOXQ7:17TFfaLc4fMXhW+KPrQxOEBDqtReUczL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 163KB
SHA256 81320c19b14c74cc0f4440df9b3e1872ba364c823fb5fb25c80a8af7ef7f54f1
MD5 6d53dd4517b48262aab18bdc2ef3a830
SHA1 9c163a2d1fec496db66789ff4ad73b35baf576bb
SHA512 c3f71f748902ca950b9eece75a4114e7ae0227028cab4440b3155f2fd3dc2bc88a50531f720383f269d05575777ff0971b2b2c362eb459e4787eeee9b3a12bdc
SSDEEP 3072:My3E9YDGyA9NgicKOu3VRTUGjfybN/yxwF0PBTsjNMozjW1g5wO4KnI:M6GtdF3Q4fn16jNMQW25wTKI
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 205KB
SHA256 315b4276007df165d5aa3e9b7957209e824d990956a56a2346313b5717e87a0e
MD5 14745167f9f71a0c90cc2608a0e470a0
SHA1 bf049ff489936099e55bad9f255e36865724c36e
SHA512 db81d2a2ee4674e236ea1fcca572abb82ae98e3f855897416c8abc93a08124465459f25462a308a6d6d90e883ad493333b4eb9a43285f67fa6d482a39ad94fac
SSDEEP 6144:vxGATnzEw2vlIR6u4f5GshsmF5sJgMd5zPS7:vxFDAwMeP4fPemkA
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 42KB
SHA256 a9cd4fd5eb20c784a184ba77558208a441b24bbf3d149f3f018ea87ebfee5ac4
MD5 c61cb257ba75e1fe6c3687ba4ac68a0a
SHA1 d4c5be04814af250bd5ee823b295bdae9e4b3dff
SHA512 2e25b1a32d17bc377b5dcc42fe21b04d515e52db286484c22b33a6da54053900bd9ddf452914f371bcc7fa5f4a727ac2e747c50f5e08e72d321ab882dfb50f5b
SSDEEP 768:FJWMpwN5mNqgDNjMCCJMzu5T5L5qd+PZIpPSzMDFucdr/UsaNZUbgcjyZ5ai4:FJ8N0NxMXMuFZaPZ7RMsaNOglZ5H4
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 20KB
SHA256 4bf695f9d9be4d4e815594d2b7443042ec14e4dcbaa6d35031cc0420b8009410
MD5 357b4145c3264fe69f8c412e823adeed
SHA1 5fcaf1043bb72dbc719ce56a173b3da59db7ebc9
SHA512 974c8b0220e6490324f5eda5590d4a895d7d67b87414ca1124dd01ac92e3bec033623bec67b4441fd6b69bb9034d4ee8210ee0f92fdf0a8efb6546e62ef8f7fa
SSDEEP 384:9MSNzXvIBmn8SOF6+obifBB/SA1Q2nSkyv2EeEmD9QLsV7VnyqxXNjKN9K1:SSNEg8BF6fby5lzESDq8BnyqxdjG41
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 36KB
SHA256 8f951f1e047ce385bb4a999785def042031f72f3039ea096c677393bfa918749
MD5 b23078951d91c38ad508e190a81517a4
SHA1 8dec45198f7dde8f6f30155817b7b03ef6eb570c
SHA512 18da7c34c40298ebaefc6ced9b0b4769181addc85f192f258c70ac98b0275119a4e6f1aa938ed779fb73c9037036224a8b07dea403b9a5071996f2e3fa759e0c
SSDEEP 768:g8dFg+bKE6CJe3CEdNqKMY+3WI9d++GeeGko6tfcRAW85vf:bFm6e3CEdNJ+3Ne+GePko6tfn5n
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 48KB
SHA256 302ed4f6c8ac4312d71205603c4c28dd2976fafe4c05533c0a08ab3bdb531aa3
MD5 47b6e3b9a667b9dbc766575634849645
SHA1 54c7e7189111bf33c933817d0a97cefe61fe9a6d
SHA512 a12b74ff45f6f9e6abf459863c299e1fafe61dcf2bea8a7331ed9547de14ed29e2deba69b104c6960db93b458f83ba6a4ba454c5514105e7ffb96da96e26e612
SSDEEP 768:zMvSvBljQrutHs5iszuQ4pwCu3wNOVkGJ8moclCuraAj1fFhvUwmCXASzBkZnb:zjauts5isSQZzSd+JraOHUwmsAi+Zb
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 22KB
SHA256 f8a4c49273653af8dff6bc5e910bdc5a4ca5496c60f0221cfbf3da26df2388f8
MD5 1ac27973084a93966f6a90d5b518e258
SHA1 787986ea7a061e18e3d858c919a7692c6d100ed3
SHA512 3bbd2a13f7583890c4730aa4fbe49bd1d280950e28917389177b6eddfdfaee6b1969efa3e4741c6ab21e9f83154540ed80652f3c1c9145fd2fa6a0687b6aa461
SSDEEP 384:3xwJgCGH3Y7OfP7faydS0i/Q6t51u3jw2efEyPCajOFITGDfd6ldM0S4tEGvB2:3zY7O37BdSv/QhEEyPCajOe0CM0Xlw
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 672KB
SHA256 c7927418ccb1cd2cf469c7a6de6ae5835357faac8be23650a7069296fb485ba3
MD5 868febb4fff9ba47a267bde268e616a6
SHA1 9c35e6f8b3f88cc560042acc9c32fac24122c995
SHA512 ed2b8232994338bee6d425d8473c087b3a024ebf3484892343dae602799909d8cd1f83363a6decba13a57fa562e94ad62de3f125e72f62547d4e385228fb2e06
SSDEEP 12288:UiDKW/QQ7rUVQoN2I+BVATFx808ElIC0IL0d3AUizPmHMOPXHeU:UiiQ7rUVQoN2I+BVATs0NlpL0d3hvsA1
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
Size 16KB
SHA256 47440755fe9b7ca7673b65a10eb1a0d466598f13f5269351ba1d036ed44911de
MD5 8787f4f7963bbb8c5679e8301ea7dbf5
SHA1 d840a285dec90ee3a97d90ba42a2b31e9588baa4
SHA512 e0204b4faccca9e3b7a2308c5dfd16c8a8306a8bd13c470dce7c434217c370ed1468d97c28201fc75688992fe246604f5e9c9f6ec8ca63142d295925aef65e43
SSDEEP 384:sPODPebiDy1GaI9aUu8j65D7QBbkpTE7dbtBHW8ndti2W5eKCDr3:sPOb4iecaIvjWebGTKtBHRdti2iwn
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 98KB
SHA256 7dbfd918e5590fd909a105bb78da3f2070e4fa0e180d499f11120c993737e73e
MD5 f105192ecba9177dcaf6fcb675bce30e
SHA1 d052645e23a7a02cc8e5e02d245d7828932fd473
SHA512 5be9b7ca75414a21ff03a7b6d95c429191c8a4017a86f57728916e3b1651b477717a2de8ebbe65bc43847e1b9c90044a2cefad1b6904366ac4d9729dcb022998
SSDEEP 1536:5hzAkCfYbPeNo2rnuguzfRMtVMnqGdvY/8vU1vVyp31ct66IT75s1rEp/TDtFD:9CfLNFzORMtmmcUe32t66yi1rEplFD
MD5 SHA1 SHA512 SSDEEP

Submit Download

c2e3859bc5f2969c_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c2e3859bc5f2969c_0
Size 347B
SHA256 52084418063da691577181735b3657af04fc26066956ec5a17250c49a1cedc94
MD5 371f3e1d865b671228977e94fb426091
SHA1 6599de64270316b48a44c9012366ffb73e7ab094
SHA512 e5a6394fd5ea85369044d683a5170a3f809ca644fea552577ab85b6168953c820d6585fc4d94662bb80c76c7939f8e8c7079defca58fe8b4860c4085a2ec88d8
MD5 SHA1 SHA512

Submit Download

f58579430a643901_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f58579430a643901_0
Size 232KB
SHA256 8e20b6abbea7ac94d0342e9d4be3ec7c4d209053af5584c14436decf4defafbd
MD5 422192a842860591c310cbc496011051
SHA1 401760ff54ced8915f3e0b33b556ba78c561ab69
SHA512 1b86fbf35de94a863c329b29cd424456e20bbdb2292d55f96b805f91cba473b8afe29c0e225c2a88359eed7fe1cc969d34556e74ab2566616420692b6bb3ad10
SSDEEP 3072:AQV+6agnfgri6lBTMBe4p3z+IibZxf0O4s8UcHud7HR9skY3:/hWri6lBTaB6Ys8V0HRi
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfcabf602436de5f0d4259a88e47dfeee42c4e153088f4bbd91da12dc124ae55
MD5 a230ebcfa0ce2f454e448e33de2a1ced
SHA1 c508dbab4c34b621540343043db24a829395c0c2
SHA512 6cb9094ef012e2556b6911b5fbf5acf1e7111d07a5ec33b66ec09ca6368a6317af2de4d073ad57e9dbb452cd5d325fb230e141e7a12d6f43fb647cffc41a7d00
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d815242a38ad116e07857533896b7171523c7153f50b47520d49de68dbff7999
MD5 ac57e037798546ebced09fe6941f147d
SHA1 50144555322a17dbf055d2e67cdb1848ac1d3dcb
SHA512 e4cdf94b3fee9d534fee25830a33ec16b5903dd27377d910bc0c806ff329febb034d483d12ed919fc14fb9780a470cdd08acfa54a82d546d95139a3b87c71d31
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d929c6fa1ffd95dfb7522c6165114eaa542f6abde8541b9b236dc7846cef4909
MD5 36686845fb66162a6dcbcac2b5f10a31
SHA1 a7ef7a956d54084a893d2d7840cd256ad8bf0be4
SHA512 0c4bf466f3fb3bc7a06db120c5df904b953a1ddbcbb839896b4e49be71151e528388f089e461abdbc67b99a1bcc1b2294a52aeb5ad918344e5c45295c03486c4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c264f49bab28d15380878d6f8729d3e7575468e317b5d15bc379d15e81f317a0
MD5 70409e76e06fe610c12b6c5a3ca04384
SHA1 73c73260a6b3f21465c39b0bac96b7dbf2977162
SHA512 2876c5cb5be65ecf5efe06cc8906df1760cc97fe1806d5d899db585f7ff3d17eb39ee1b372f54eeb34aea4876356c88aec1b3a1e54699560e5fa436cddbe14c5
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 26dd8529294797a448fd557b76df6f51722f0aa5e507ea623e102bcd6e71965b
MD5 118052543d487fd75e158fdff5a0c50e
SHA1 4e216e9874fea6cf9b15f0175d0a64e1fc1c14e7
SHA512 8297a2ea1c5e9f2f7eef2e896ead8b760c6b1e8db68d96a43e10b3eecc193b8cb45ba2b08a1dda32e5550be05d06cc2c44dcfd70a63a6e74baa91fbc3fd61b73
SSDEEP 3:MsEllllkEthXllkl2zEgltW+/:/M/xT02zjp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 612f51357d82c7f33ecb26e4f343c55daf20f32dd625d5e99b1386f98bd90ad3
MD5 c56efdd711ee6d5dd7ddafc05dc45751
SHA1 7bc21b69d93af28ab44d7ca0700183cfb87fea60
SHA512 1bd872c7f044609ca45fce50274f9f420593b6d2a44fc5edf642e688528a7591963df0a80ae90e9b0a2dda7aee0c4bd6be43550a9590611a294be9e725018c9e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 10ea6832aa2485716f9e6f215b50971338b3af81f11b3a3a19bd7504849883a1
MD5 7600cb1145ac31295a7319946203ef98
SHA1 3c1d006c0b3f5553eff8b4dc8a48dd86de7ab965
SHA512 0bf73272fbca2b22a405f57ddd29eb3f48647be46760e74bdb945681d9eb30a75af839b68f44481ce56d613442fba7f131b781b5f3338aa59f1334f5022c5ce5
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2be2d994c8b4bb28bc6f92ea9d90aead470010776b15f42000a9f2101b977036
MD5 30de702f4fa40c33c252f155b2d11d28
SHA1 0acfe8cc8574827135ec202eec0abbaa564a4213
SHA512 7bc39cf88ffd8c630ad12f4d2dede55e3e07441e56c04f35430dd504b870c066e0090c90804ab143c5636e55cfededf025a0689652cb6c6e85249bfc45af882e
SSDEEP 96:FHaH6HMH9HYHSHSxHSrHS7HGPnHKH+HGiHKHaHHHN+HhHGRHGijHGrqHGpHGFHGs:FHaH6HMH9HYHSHSxHSrHS7HCHKH+HHHv
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 7387b15fede7cc1abd8e4143f7024865f6cb907c78751d852d07db27ec55837f
MD5 511597df4dc50899dd646ee6ac027394
SHA1 bef3342b01e906e329481fe864d46dbe7e4d8832
SHA512 9fc65ad3a61c913e60209ead6fe88006c28fc6425dd79372af1e6340fe8b7b4ffb0ac704c99cdac95375e85b84f7f2a8feb36d887c514bcec5a43f0d353ce077
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 4aec0b864c48ee954824a29898422fd7708aaf923ecd707ef750a7c314d2a7ff
MD5 6de760b62312585f76c7f2697ac6977b
SHA1 f86e96a9f5f6ba6f76e5b630061fbd4b8b8ca7fe
SHA512 eb1c73d85fe8d5912bf1c6d9f39d78e5a7bfcd503ac1316d1a6797b02355ffd89557075ec45e33718e69f1179a909946ceb56011deba9b54e72ede8400ae0241
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 3360e55a940ebd7a004adb1572126854cf5ab3943b3fcf62cac48487b306fa19
MD5 f984a64a451edfcf109834b8094fe5aa
SHA1 abf9c9ffeec72c7f61d21ffcebb4de3547d7f412
SHA512 0337c7570efdbcde4ffe5d3ac2ea2c77744f2dad9df2d7380ed30b58e2f1da564e7c7d65b9241c2ab769b5bbea92b119f8e49382b105a19e41682214e73807b2
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 b3e64162f7f722e458a0b7534e596bee590db1aa775fbe84a974054d1c7778d5
MD5 317c1048967edbaa359c12c459615151
SHA1 ee6ba88fe01b260886e48edf7b243d4cda79c6d4
SHA512 a4c290c74f579743713263a1d1512aed90b2324344d5865bb705f5798b5041b2a56a062201eafef604673f0f810f79c40261bf585aee6c834444151db2c4a3e8
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d04f3340258a129028beba369bae6e7f1cdf52dab7fd1df000a8456d8170e0b6
MD5 6e3a213a7adc005b5116935a5ac6459f
SHA1 235c6eb637084c5935291242bf40a5374fd36c63
SHA512 3f646c6df8e8a60c17aefaca6af3ef7a5a5d7a0f942295451c8abf43d5afe90a7d3943c52d0a4f11c7f111b3f8d1b92c56528fa4f64af84d2990c0956970b674
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 e3a1ea36a0186fe49205c2b1d12e7980c29a0c1fe7aee0aa858da740880d9374
MD5 27194561e7443174875c37e82e7f1d54
SHA1 4a8f703cc9804af7728154eac02d266d32e3a608
SHA512 94370f7261e811211e2eeac1f3a6e19b2cc0128b2278c8c9cf31c94c20f61e34f0145c63a8bbc8edaca886327d5f5a573737554aae34576161af15fda3f340a8
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d2bd43f50976216a2d072e7a39e9cc9a0d3f98ae8f7e8e384a48323ee95fbe1d
MD5 cb963a2a8d83109fc47c0a466fcb00ad
SHA1 cc4c182e1f08f672c59513b41645ee593da8001e
SHA512 9e90181b67e6162b0dcb27856c46030cc9a798ee69787f5e2badc6c8b04cdb65c5416d21da2d801ba7598b981d0dab1c415418f078694a31bf8581640049ab88
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 855912f7d74bc2fe050648a800d4f12150ef74fcaeb8fc6e51c9174607dc2ab4
MD5 b963c996b4ea76232c82e6db8e21c219
SHA1 67b73926b2422a3a70133841af4bb82c5fd56de5
SHA512 0af08c7ee46f6ba96ba1c3e4298eee362c3c150fe225739c2aa9db920a1bc0499f779d16a99af821b8f770d0ce56eeca69e1cb32f413ba7a4310d5842c4e7d6f
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 039d1db81c9d55ba14287e6cf69011e6c6277a26d3c30edfb7f0b0cd98992670
MD5 5684164c6a661cf439a545fa41f264f6
SHA1 11201d672e8e9354a5d77fa5cad0fb27f1174d5f
SHA512 e7c169d3b3cab26155733c6c992bb1c866437ed74206b4905e925c7bfb850da689beb13577b48047eb222984a35f075aca38a327077d10c795fbb18228ba2519
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 e34ac3cdcaff0131dd36874480e1dbd829878eb0cd203971af2a9c8ea34dc228
MD5 6c9c878d793ba56fbd3087be04f89157
SHA1 dcc0133d9ae2044b73290f01155dfa13df09c4d0
SHA512 9bb6e1f90fb7b09acaa03c899115d121a4818018b57845050cd71f0b5066304c034f7f564064fa94b91863e5b7e5a437bb02a03889ca1de393cab5f88c2fedfa
SSDEEP 192:kkc2kJHUZKaJx8fyh+F8IOC4P5tjEsXtScR:kkcHUtAyqiCgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 aa00cda66f3439e51054330111b92e825473a796dc7adb64ba6df66e63e8c41e
MD5 8ccead8ac67239ce7be7257e0f74814c
SHA1 e7e0db7c5b402bdb4b44e78919c0eaa2c94516c7
SHA512 aa5df87d97da357bb2e27a78bb615b57a25f728eb8964d8a322d7048c75e7c1d5bb949c56efa0d59bb7e55d6c6ffaedbfe15a74151d8d477430d3171bb814ad0
SSDEEP 192:kkc2kJHUZKaJx8myh+FaU44P5tjEsXtScR:kkcHUtZyq14gtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 f98bdf49c390935539bb6d9f91a31bbd338c3bd6434772b1074ece81dea94fec
MD5 8967b0d62ce43946c0d451e0a78765fb
SHA1 be407f964990b4127481be6dee9c81ab6971e894
SHA512 ad8cbb0d0f7cf95324e5e0399b635ea0fd80ea004bf149b9212f80d95418a567063c064b09491f684a9e26bc465b79d45cfd3ea2bb308ed0150ebf0758100bac
SSDEEP 192:kXc2kJHYZKaJx8fyh+F8IOu4P5tjEsXtScR:kXcHYtAyqiugtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 d40bcb0a0be8491463a654cf22e44b1ec3e631c7277a77113aff7486e4011e65
MD5 abfbbbfa2de5f690fd3a4e8f12832be3
SHA1 e206c9638ea230766ef06757392f25d0b6982f1a
SHA512 4e77c4b66169206120202bfe0704b0e1348078fe680bff541d9336ce06212f2654a1a7da433f1e95c1fec794d50dbe40cf2aec1b9a97b777d0fb695df786abbe
SSDEEP 192:kkc2kJHYZKaJx8fyh+F8neAOZ4P5tjEsXtScR:kkcHYtAyq5hZgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 cf3d62e596fd1eba090469bb63f96877afff5ff3647e58575e19f43c086243cc
MD5 d1a4b00680bcff5fa7767812f4326534
SHA1 c35d13fc6d5d73ac927b868f70c8ad72c3d2502e
SHA512 bacd3847563984bf55444275b3997375f3d10e7e03b10e630310787d81b788056271250675425a9cd2a9223e5ae388a172b312d2266ced5b2203ddff68d360ad
SSDEEP 192:kkc2kJHYZKaJx8yyh+FG9Nchnv4P5tjEsXtScR:kkcHYtFyq+GvgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 e1b1b4d75a3919c844ce46c344858a96d87abfb6d1061e064d590633d212f991
MD5 65b0308bab86d50936f564cbbebdfc05
SHA1 ba9c23e51c5cfbf43238a0b911696be932830357
SHA512 468e294108f17444ee8033d608ae83ad1a94514575b827fa31f9a02b8ea37ad2e2d32825a3d347b18f4ef9bbe4f3987462722836be33efa0bec791ba4ecb46e3
SSDEEP 192:kkc2kJHU1ZKaJx8Iyh+FxNcOMq4P5tjEsXtScR:kkcHkt/yqXaqgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 43772c6dfca429dd84a5b278e9e6a038060d8c87c188fb9287186a92459af12d
MD5 d92acf70feb2a58382beb5ad34e579ae
SHA1 e3ed0f8d9abc69c40344effa9295aad3ca897f84
SHA512 a73c41dfe4f3cedcfd8e145c0448d6d678c3edbc631f911368edc1e1e4f354c76b3af2022b4c5c6fda552a75b41c841fca30b903a7441eb7bd62b1f0ae1f96fc
SSDEEP 192:kkc2kJHU1ZKaJx8syh+FmNcOM13d5tjEsXtScR:kkcHktPyqQa1TtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 b99fc5028e59348031de9d177ef041fc01f130dc9df3833c96574fb90d6586c8
MD5 1ac9d954b102b4148e897f7566dc867b
SHA1 065acea22c6b0160cbca3190411f8e9f9dd47cd7
SHA512 2c929ff81b66e58a441cb4666791fceda6e06c1e98476a39871070429b029224165023d55382c3626a5c6ddc4409a1137f3f353af0a72dcda2475f282cd7a949
SSDEEP 192:kkc2kJuYZKaJx8Wyh+FG9Ncc1Ic4P5tjEsXtScR:kkcuYtVyq+1IcgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 39f74e122c1d1ec3f7142d1aa7e6f5dc62b17e063e1e48a11208edb462ecfd96
MD5 cfcf1278542618be4ed0c520aa1bc80b
SHA1 460492191dd72bd20e98dd261fa325db36d506d1
SHA512 51ea104b9b676ae7640643e342584b32849e4ca355d3a2704d32d12d062e0c278815ff3ff4d19b185477703e5b9b4d5125684efca1ce19dec459f8cb528eea4f
SSDEEP 192:kkc2kJHYZKaJx8Hyh+FG9NcImc4P5tjEsXtScR:kkcHYt8yq+ecgtIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 16KB
SHA256 2278f6d8f4b803458667572ab0cd525dc160d915490519ec6117ea392969627c
MD5 b759bb832dc8c742085187ee4a3b24b2
SHA1 8ab31eff4adca25c921c3ccdb200c6079eeb6012
SHA512 b249a51f3e64aae142091ee12191a2ac082d30f75a9455bff24c5ad0c70634f760e147521d9e7525cf68781dd21578d66e9d705720ddc84a35f8186324f6ff8a
SSDEEP 384:sUbZLPLeb9X1/1kXqKf/pUZNCgVLH2Hf9ElrUw2HG6H24p:s6ZLPLG51/1kXqKf/pUZNCgVLH2Hfqlq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 269KB
SHA256 44271495dcf15f7ecb9a427d46389872b6660b2cca8bb282930d8e6f5137c56a
MD5 55ba06d9351b580bb7c3080632a33946
SHA1 7f0f2cf440b4ff719319b4ced28cd4ab9bdeb224
SHA512 3c98bb5d75db63bff6cee07bfbcce2429b60e6d5459061bddad69f0aa2d82ad39ca192fee5a839ac329446b3119a88172bac8a42f6f84852fec781fb3e26286c
SSDEEP 6144:95g4NxDYROyVUIEOlLlwaf7loc84FUxiOQYRPILxZnhLMJjX0EeGzY2rLj:/g4jDY8yuIEwlwaf7locKxiOQ5fnReEa
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 269KB
SHA256 06dbb387344d6a5052f93adbcd55180fca3ff06b564e2aba6331594d0acfed59
MD5 2f19bc93fd88caf15addbaae78edf188
SHA1 e60fa8fc9251311b8d94813e970e7d28e215a5c8
SHA512 f9d0fd9e2c0cb86e67a4ab7578b783f88732aebf619acb0873151fadf57d1628072071452e11e1cb5adfdf31a02701120161d1f121017c6c8e2a0bbdc296ab55
SSDEEP 6144:G5g4NxDYROyVUIEOlLlwaf7loc84FUxiOQYRPILxZnhLMJjX0EeGzY2rLj:qg4jDY8yuIEwlwaf7locKxiOQ5fnReEa
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 97KB
SHA256 e973fa16265f5d7b12ad42517ce416b3b0a80d7c954175f378605fe3c35f564b
MD5 d9c9dcefd42f0128a87e25489bd8ec28
SHA1 4133ce886ea0cf37d05306c4e0da6282664133a7
SHA512 3bd7f6c354e1f98e7177a19f12505409f3918795895f531e0fca0bd86e656c2981395ba9a8ee8d3ee8c1ea07a7c5263558e565dbf41f4156b4a6456a75d385dc
SSDEEP 384:2joRxEQDxfRLl6IgCUdH7JcpphQ69EUu4g+bk/2phrbQASbkbjrukHvVQp+JD3zQ:NiQ2SJWQHwv/R3qeKgGpO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe57fb29.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57fb29.TMP
Size 88KB
SHA256 351bf7c7ac88cfc980c77e80cf57670c7f5a12e7495cc7437fdd6a709571fb3c
MD5 e71a30bbae24da9d711e6b4412066906
SHA1 a35cef07bf0f742cf2e85ee7921c801f96b114f5
SHA512 f711f95bd1e126ebe69526040b360dd484df2df77b7d24db02c1e4da1ad3bc0d9cbbfd1831f80a465de54f422348962de97c4eaf2b232a69a5670a5a2bc3fe02
SSDEEP 384:DjoRxEQDxfRLl6IgCUdH7JcpphQ69ETS+bk/nhraASbUjruHvVm+JD3zzEgXjFhh:8iQ2SJsQHDvuJ3qeKgGp0
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmokeySpoofer-main (1).zip

Path C:\Users\Admin\Downloads\SmokeySpoofer-main (1).zip
Size 581KB
SHA256 71db397fbd5dd6a239c4b575a3f32b530dc937c68b2c39178c46312eb04ba564
MD5 ba87cc00ca14cbd13dcde6a2a36893f3
SHA1 96baccba657953254f863c827a745ba6e888d952
SHA512 fe9f18128d83441c41860d1453658653f1c5a4958429598d7bde24f21830032627e52527b6e91511e5e65f8ee98fd8105c553717d7d517a4e4adc5f7ef0c5c23
SSDEEP 12288:jiowaAbs6anNi3bEWGSHdWCvFM70vbPmHM+PXHeD:jiZFbas3bETSHXFq0vasweD
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1712-1121-0x0000000000BB0000-0x0000000000BFB000-memory.dmp

Download

memory/1712-1131-0x0000000000BB0000-0x0000000000BFB000-memory.dmp

Download

memory/3712-1132-0x00000000013D0000-0x000000000141B000-memory.dmp

Download

memory/3712-1138-0x00000000013D0000-0x000000000141B000-memory.dmp

Download

memory/4772-1127-0x0000000000A90000-0x0000000000ADB000-memory.dmp

Download

memory/4772-1137-0x0000000000A90000-0x0000000000ADB000-memory.dmp

Download

memory/5032-1115-0x0000000000D00000-0x0000000000D4B000-memory.dmp

Download

memory/5032-1120-0x0000000000D00000-0x0000000000D4B000-memory.dmp

Download