Overview

overview

10

Static

static

10

2026-07-07...st.exe

windows10-2004-x64

7

2026-07-07...st.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 22:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
  • Size 11.8MB
  • Sample260707-2k6j1sf14m
  • SHA256 7ec69612dd8b7fc9df6b1dfe9c5aafcedca07e6ed2446b76f070f92c1eefab07
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 38 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 40 IoCs
  • Suspicious use of FindShellTrayWindow 55 IoCs
  • Suspicious use of SendNotifyMessage 39 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 27 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4620
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061"
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3516
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ff9970ac728,0x7ff9970ac734,0x7ff9970ac740
        3⤵
          PID:1648
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,15485514852376730948,6732042302458468908,262144 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:2
          3⤵
            PID:4672
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --force-high-res-timeticks=disabled --metrics-shmem-handle=2140,i,7074462636903153035,8768208190959181317,524288 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:11
            3⤵
            • System Time Discovery
            PID:4716
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,17873116911441766056,14650955195975116166,524288 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
            3⤵
              PID:416
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3300,i,10254445038818098711,14472872529870518549,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:1
              3⤵
                PID:5244
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3304,i,7240542085622439639,9134911339275576655,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
                3⤵
                  PID:5880
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3936,i,12894755702610325818,2997979984913583065,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=4032 /prefetch:1
                  3⤵
                    PID:3004
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3932,i,11991408055318014218,18074040821161564202,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:9
                    3⤵
                      PID:3488
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3532,i,10701396443571142987,605870586091265212,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:9
                      3⤵
                        PID:3952
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --force-high-res-timeticks=disabled --metrics-shmem-handle=4896,i,17640531016880216282,8664911200080241969,524288 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
                        3⤵
                          PID:2380
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5272,i,496452265047775929,9122676652803041996,2097152 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
                          3⤵
                            PID:2400
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --force-high-res-timeticks=disabled --metrics-shmem-handle=5400,i,4114842781542961927,14377528975508839220,524288 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
                            3⤵
                              PID:5540
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061" --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,6189931448915093799,13485960051318623262,524288 --field-trial-handle=1916,i,7631045848237799535,584373325934986086,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
                              3⤵
                                PID:5900
                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                            1⤵
                              PID:5872
                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                              1⤵
                                PID:1800
                              • C:\Windows\system32\sihost.exe
                                sihost.exe
                                1⤵
                                • Suspicious use of FindShellTrayWindow
                                • Suspicious use of WriteProcessMemory
                                PID:2540
                                • C:\Windows\explorer.exe
                                  explorer.exe /LOADSAVEDWINDOWS
                                  2⤵
                                  • Boot or Logon Autostart Execution: Active Setup
                                  • Enumerates connected drives
                                  • Checks SCSI registry key(s)
                                  • Modifies Internet Explorer settings
                                  • Modifies registry class
                                  • Suspicious behavior: EnumeratesProcesses
                                  • Suspicious use of AdjustPrivilegeToken
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SendNotifyMessage
                                  • Suspicious use of SetWindowsHookEx
                                  PID:3084
                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                1⤵
                                • Modifies registry class
                                • Suspicious use of SetWindowsHookEx
                                PID:1800
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                • Modifies registry class
                                • Suspicious use of SetWindowsHookEx
                                PID:5752

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    prep_Activatable Class_Hermes_perf.cache
                                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                    • Size 599B
                                    • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    cookie-shm
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-3368986390\cookie-shm
                                    • Size 32KB
                                    • SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    download
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-443834268\download
                                    • Size 160KB
                                    • SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    settings.dat
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Crashpad\settings.dat
                                    • Size 40B
                                    • SHA256 dcac3c6525378e60ee83687d90ddbc8e27675e26e1ed89e37acb2f313db7a90d
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    Account Web Data
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Account Web Data
                                    • Size 76KB
                                    • SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    Affiliation Database
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Affiliation Database
                                    • Size 52KB
                                    • SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    data_0
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\data_0
                                    • Size 44KB
                                    • SHA256 b1af37f7cce3df12611ef6205e991e91ff47be899fa54e3c097f6fb8987ca06f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    data_1
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\data_1
                                    • Size 264KB
                                    • SHA256 5602475fc719570916828df53535f0f71ed8d7d960266f448407468663fe16dc
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    data_2
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\data_2
                                    • Size 1.0MB
                                    • SHA256 7b5b2bd8bfdaf7d08aab7b3d0e364b34fc8494cc893936feb6347ae5f1e4ee90
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    data_3
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\data_3
                                    • Size 4.0MB
                                    • SHA256 8d2db56e21a6c3f80993e9e9cf7cb5a691c0cf61c8d239feea559302f6aaa294
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    f_000001
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\f_000001
                                    • Size 73KB
                                    • SHA256 42d5030920c2ac0a7ea27965c29d2210215ebd367579be42c9b0b3b868b707ae
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    f_000002
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\f_000002
                                    • Size 37KB
                                    • SHA256 1b1edbad7a265d569b3e7b947328f6bc2ca6b1c55e1a920d7f61b4dc6f91482e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    f_000003
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\f_000003
                                    • Size 68KB
                                    • SHA256 63f2e6f2db75fc55d62ae6444d238eacae78d6bd39b7137807753f718546efcb
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Cache\Cache_Data\index
                                    • Size 256KB
                                    • SHA256 b24d6752f734cb1bf2187104e5d7d65c6cda9edaed9f403bb87b8f5f8a963e0c
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    ba678a2fbd8c358c_0
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Code Cache\js\ba678a2fbd8c358c_0
                                    • Size 298B
                                    • SHA256 1751d3a50fa79f7e1ccbeeb447c73c2cf8864c1df89b0057c9b536d22ece8f7a
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    the-real-index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Code Cache\js\index-dir\the-real-index
                                    • Size 48B
                                    • SHA256 97c68757d8e61a0afc065445b84dc757d2fdb13083cf465997b9783f0a8ec363
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Code Cache\wasm\index
                                    • Size 24B
                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    the-real-index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Code Cache\wasm\index-dir\the-real-index
                                    • Size 48B
                                    • SHA256 6db87440679301b39f84e8add420bed98a60fa544b5adcfb221b8796de79e756
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\DawnGraphiteCache\index
                                    • Size 256KB
                                    • SHA256 644b7a402594ce7735ee652dd590af95cc16ad7c52ecece5ddfb9873cb7ac5ac
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\DawnWebGPUCache\index
                                    • Size 256KB
                                    • SHA256 6bced5b58a872a94d34b1f0333b2a3e9d4995d41a9286ab43ed925e994892602
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    CURRENT
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension Rules\CURRENT
                                    • Size 16B
                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    LOG
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension Rules\LOG
                                    • Size 283B
                                    • SHA256 f38a2639575c245ac35365f177f602859e5f88b56c79060f3f18b3e09e0b5680
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    MANIFEST-000001
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension Rules\MANIFEST-000001
                                    • Size 41B
                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    000003.log
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension Scripts\000003.log
                                    • Size 76B
                                    • SHA256 cc5dacf370f324b77b50dddf5d995fd3c7b7a587cb2f55ac9f24c929d0cd531a
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    LOG
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension Scripts\LOG
                                    • Size 287B
                                    • SHA256 cad63c4e22ce26eee6295317d5260b281d2a62a18342ccc579a91bef02eb7d7c
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    000003.log
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension State\000003.log
                                    • Size 228B
                                    • SHA256 48d535bb330519c00d150578734c6cecb056c4b5cdd2a45c70590bc896d27d9f
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    LOG
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Extension State\LOG
                                    • Size 285B
                                    • SHA256 970aced2180e16bec5d6649aae8c2d963c7110a7a8ab6196d17898aa95521e9f
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    Favicons
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Favicons
                                    • Size 20KB
                                    • SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    index
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\GPUCache\index
                                    • Size 256KB
                                    • SHA256 7f1fd620fbdb0d71aaf29056fae9555449bbb9b0651f24fc9265762ca5d53e6b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    LOG
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Local Storage\leveldb\LOG
                                    • Size 297B
                                    • SHA256 f41cd69200ae525e8e5ae8b17c8ff499da0b32edb8e089274f0592204675f673
                                    • MD5 SHA1 SHA512 TLSH
                                    Submit Download

                                    Login Data For Account
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Login Data For Account
                                    • Size 40KB
                                    • SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                    Submit Download

                                    SCT Auditing Pending Reports
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\Default\Network\SCT Auditing Pending Reports
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512
                                    Submit Download

                                    data_0
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\GrShaderCache\data_0
                                    • Size 8KB
                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    data_1
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\GrShaderCache\data_1
                                    • Size 264KB
                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    data_2
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\GrShaderCache\data_2
                                    • Size 8KB
                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    data_3
                                    • Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-168670061\GrShaderCache\data_3
                                    • Size 8KB
                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                    • MD5 SHA1 SHA512 SSDEEP
                                    Submit Download

                                    memory/1800-357-0x000001F4801E0000-0x000001F4802E0000-memory.dmp
                                    Download

                                    memory/1800-402-0x000001F4941B0000-0x000001F4941D0000-memory.dmp
                                    Download

                                    memory/1800-369-0x000001F493D50000-0x000001F493E50000-memory.dmp
                                    Download

                                    memory/1800-388-0x000001F483910000-0x000001F483930000-memory.dmp
                                    Download

                                    memory/1800-368-0x000001F483BB0000-0x000001F483BD0000-memory.dmp
                                    Download

                                    memory/3084-518-0x000000000E3D0000-0x000000000EC4B000-memory.dmp
                                    Download