googlechrome_MDE_File_Sample_5acb5e2fc50a7a3e5b2bfec90df36515bf141094.zip
- SHA256 f64682895de47eb6ffeb1bf177ff585a6db0f80737946b4fe205c8e82d22d594
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
googlechrome.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
googlechrome.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target googlechrome_MDE_File_Sample_5acb5e2fc50a7a3e5b2bfec90df36515bf141094.zip
- Size 265KB
- Sample260925-kdmpwstcjf
- SHA256 f64682895de47eb6ffeb1bf177ff585a6db0f80737946b4fe205c8e82d22d594
- MD5 5a9cd1aa8e0209e853aef754272c5c64
- SHA1 0d875179b1a28dc8afab80484a026ef24d23f994
- SHA512 761a3ffbd3c60106a0f26a527338f771ba4d13052e954b9be1eb6d61a65b4ae1230732a4b1daf7981ce70e1c91fe12bee1aeb28b51ab224cf85ba0a545a9a844
- SSDEEP 6144:ypq9N5do9j+XeGi1XKkZbIodcIKZY2HsNCNGjZ0hmw/JR:cyd8j+oKk9IQcI6YEqqGjZImk/
- TLSH T17444235560669F6D321B71EF63A831F9BBF4092440A8DC02EF8193BF0FA46764412EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
googlechrome_MDE_File_Sample_5acb5e2fc50a7a3e5b2bfec90df36515bf141094.zip.zip 265KB
-
googlechrome.exe.exe 648KB
googlechrome.exe
- IMPHASH b40446efca8a77ec5345dd9429014d49
- SHA256 8dff14efa3c2b8a348c120f5739927c1668de05c3d91425e30b4e6a3ba776791
- MD5 fc2dffb80a7768dcea7d140054e65418
- SHA1 5acb5e2fc50a7a3e5b2bfec90df36515bf141094
- SHA512 152bc6180d928647cacf3049a82e7c96942c76e566388726fd3b1eb160d20e961a0417bb781e32b0ba018e1e44f70d642a6f484734e81a6092a9377f1164f2f7
- SSDEEP 6144:FJ+35xViwqCg3Z5SsuNyN6sRZlld1DASthpjgXxSpiCVX3nohfVF2rX4g7o:X+35xaCg3ZTuNkZbd17TpjHVHnorso
- TLSH T124E4191667A480E4D176D93D456AC95AF7B27C020B209BCF61A5431E6F3BBE09F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:ed:59:38:45:1e:22:4c:0b:58:54:a4:f3:37:35:39:da:48:fd:01:b2:61:26:ab:59:95:5b:a7:a7:df:a8:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=International Business Machines Corporation,O=International Business Machines Corporation,L=Armonk,ST=New York,C=US
Chains
Sep 18, 2025
CN=International Business Machines Corporation,O=International Business Machines Corporation,L=Armonk,ST=New York,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=International Business Machines Corporation,O=International Business Machines Corporation,L=Armonk,ST=New York,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=International Business Machines Corporation,O=International Business Machines Corporation,L=Armonk,ST=New York,C=US
Serial Number
08:cb:cb:6b:86:63:94:e0:32:0a:5f:67:1b:69:f6:bd
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 14, 2024 - Jun 14, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
295244
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
libcef
cef_v8value_create_string
cef_v8value_create_function
cef_string_multimap_alloc
cef_string_multimap_free
cef_v8value_create_bool
cef_v8context_get_current_context
cef_process_message_create
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_get_path
cef_execute_process
cef_post_task
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_v8value_create_int
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_cmp
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_utf16_set
kernel32
RtlUnwind
CreateFileW
WriteConsoleW
GetProcessHeap
SetStdHandle
SetEndOfFile
GetTempPathW
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLastError
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapReAlloc
SetFilePointerEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetACP
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
LoadLibraryExW
FreeLibrary
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
HeapSize
Name
.text
Size
421KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=260, version=23917,
count=11, id=259, version=23917,
count=153, id=261, version=23917,
count=9, id=259, version=26706,
count=61, id=261, version=26706,
count=32, id=260, version=26706,
count=2, id=257, version=23917,
count=3, productName=Unmarked objects (old),
count=226, id=1, productName=Unmarked objects,
count=126, id=261, version=27035,
count=1, id=255, version=27035,
count=1, id=258, version=27035,