Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/07/2026, 23:04
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
General
- Target 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe
- Size 10.7MB
- Sample260726-22nersswev
- SHA256 574ac8c06cee36427f5612785722a54de7871c1e726599fbf7fcb46ee039544d
- MD5 5d2ab25dba7f9e016bed56a2e1239a60
- SHA1 c50eb18dfa193cec72fe85ce1a5d170862824483
- SHA512 6c6fe2f99cc0a6c1be52ad159354d6464dda058ffce3e3336ab779408d50f40bdba052473d35b306a04b0a77b2fa96db48a5778cebcf165da7bd6ef6406b03ff
- SSDEEP 98304:9guCzEic6VfHptwPfj2YiArSFg9UFr9+jvfvFviv2ELQBrvJPpyX5dj:96DJMrEHrcBdoJh
- TLSH T1C7B61887F86501E4C5AED175CA259213BA703C894F3063D76B50F7B42F32BE8AA7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4824 chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 2052 chrome.exe 2052 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 2052 chrome.exe 2052 chrome.exe 2052 chrome.exe 2052 chrome.exe 2052 chrome.exe 2052 chrome.exe - Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeShutdownPrivilege 2052 chrome.exe Token: SeCreatePagefilePrivilege 2052 chrome.exe Token: SeShutdownPrivilege 2052 chrome.exe Token: SeCreatePagefilePrivilege 2052 chrome.exe Token: SeShutdownPrivilege 2052 chrome.exe Token: SeCreatePagefilePrivilege 2052 chrome.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2052 chrome.exe 2052 chrome.exe - Suspicious use of WriteProcessMemory 22 IoCs
description pid Process procid_target PID 3212 wrote to memory of 2052 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 90 PID 3212 wrote to memory of 2052 3212 2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe 90 PID 2052 wrote to memory of 4356 2052 chrome.exe 91 PID 2052 wrote to memory of 4824 2052 chrome.exe 92 PID 2052 wrote to memory of 4856 2052 chrome.exe 94 PID 2052 wrote to memory of 4856 2052 chrome.exe 94 PID 2052 wrote to memory of 5008 2052 chrome.exe 96 PID 2052 wrote to memory of 2824 2052 chrome.exe 97 PID 2052 wrote to memory of 5008 2052 chrome.exe 96 PID 2052 wrote to memory of 2824 2052 chrome.exe 97 PID 2052 wrote to memory of 2956 2052 chrome.exe 93 PID 2052 wrote to memory of 2956 2052 chrome.exe 93 PID 2052 wrote to memory of 5224 2052 chrome.exe 98 PID 2052 wrote to memory of 2988 2052 chrome.exe 99 PID 2052 wrote to memory of 5224 2052 chrome.exe 98 PID 2052 wrote to memory of 2988 2052 chrome.exe 99 PID 2052 wrote to memory of 2076 2052 chrome.exe 100 PID 2052 wrote to memory of 2076 2052 chrome.exe 100 PID 2052 wrote to memory of 2320 2052 chrome.exe 101 PID 2052 wrote to memory of 2320 2052 chrome.exe 101 PID 2052 wrote to memory of 4860 2052 chrome.exe 102 PID 2052 wrote to memory of 4860 2052 chrome.exe 102
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-26_5d2ab25dba7f9e016bed56a2e1239a60_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3212 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719"2⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2052 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ffe2ad6c728,0x7ffe2ad6c734,0x7ffe2ad6c7403⤵PID:4356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --force-high-res-timeticks=disabled --metrics-shmem-handle=2008,i,3713843358783608220,14228026444326227490,524288 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:113⤵
- System Time Discovery
PID:4824
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,5110009203130305185,16124368929043100955,262144 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=1880 /prefetch:23⤵PID:2956
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --force-high-res-timeticks=disabled --metrics-shmem-handle=2184,i,11363390845785607041,9708048912953292413,524288 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:133⤵PID:4856
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,12916857874845752615,2927462474140217556,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:13⤵PID:5008
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,15076933022853719280,4816648337491536864,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:13⤵PID:2824
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3740,i,5080367487614707577,15058091533200180807,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:13⤵PID:5224
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3748,i,15100569654621018187,13559660478593184230,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:93⤵PID:2988
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4620,i,13259627849183337177,17803898059928297636,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:93⤵PID:2076
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4936,i,1032904319294577746,8583948234742375569,2097152 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:13⤵PID:2320
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719" --force-high-res-timeticks=disabled --metrics-shmem-handle=5192,i,8802801791836976934,18206491481904601535,524288 --field-trial-handle=1912,i,6486130165993194744,6135592795488438280,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:143⤵PID:4860
-
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2768
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:4716
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\hbd-1049208585\download
- Size 160KB
- SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
- MD5 ea2f1147ca310fa5d8e3dc3cca218f60
- SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
- SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
- SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
- TLSH T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-4012818054\cookie-shm
- Size 32KB
- SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
- MD5 b7c14ec6110fa820ca6b65f5aec85911
- SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
- SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
- SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Crashpad\settings.dat
- Size 40B
- SHA256 1b7704ed1f51113a13b946618561975df5785b44c132b08b83c63249e14197ad
- MD5 1df1e755d3b0409da234c47c2182de6e
- SHA1 5fdd5bdd1591203afc45ba6de500f3309aa23102
- SHA512 027c8e05d8b4286aeaefafd4a1479d351b37aecda9e32bdf4c0ba5dfb7de2a97ecfdf3d8cb786511dd58fc0e858344cb4a88d4b852decef3a9e01efa058db981
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Account Web Data
- Size 76KB
- SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
- MD5 b89fd902b32528a846212c73a9bfbe73
- SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
- SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
- SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
- TLSH T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Affiliation Database
- Size 52KB
- SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
- MD5 142456354ac4a1d7e89f037c2ebda0a2
- SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
- SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
- SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
- TLSH T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\data_0
- Size 44KB
- SHA256 4ce950cc55e68e3edd785a40dc018bb6e883d390ba030f316b4de5974f8a8952
- MD5 f768523d4efcdd6ba00169bc6632f796
- SHA1 da93dad6752c18976663f06ba7ddaad869e889e4
- SHA512 7741f5c474ca3c8dc2a5c5c1e083264d2e886430ad79b5cf4552ffee2b73a22e17f73bcff8a3bb37f2e594a8b4c47c31b715489b149969066e97fd5a342f8780
- SSDEEP 6:/FoEXEkMNaZK+KTEGk0VzZQs7DkEXwXi+duklltZ6i+rW3z5lt:d7XONEKIG7hkE2t/t4dr+5
- TLSH T1C5135EFFC64ADE03D24E10BC19076B740BBDC005D5611A27227C312AF6083052009304
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\data_1
- Size 264KB
- SHA256 c02d15bbb3854b66b99faf57631578bc1ea7464f7323285f933054ae78887bf9
- MD5 b29b4a44519b072d5bb8ad1154e67d98
- SHA1 29f53fc53e96ae8c219ad5f971790d9a962b5c1a
- SHA512 4df0ef10f551e9a9ccb34cf92c58c99234d42a48b45664c851b3034982edc5b93fc01234b848638bb645baaaa45308b454e6ed05a4ccf5e96e63077d5f28ea76
- SSDEEP 48:7fKflkOLYRJO5eD0HC0KAeM1XghuXo2MmXgdVEPLVBKWwtl:7iNaTO5eRueughOo2jeVOLHKWol
- TLSH T1B544C9F75D04DEC2DB19CBB55C41923CCE32D7261C5AEEB5F62884B25140AE73228576
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\data_3
- Size 4.0MB
- SHA256 2a09b9f617800d52d9b143d9cf4db166100d373a97a0c9d4e7bdd2b537f27c9c
- MD5 7474947ee729b7ad940417cd5cd55938
- SHA1 c7a37a213cf0ecddd10f0833d88578b554e78af5
- SHA512 29c6bd6c2c96d545a4db5822a6421cb0f90ccf6ddf84ebddb4402857c0455ef51eedfb21729bb5dfcbb47a3e9b70b9c02ba1997ee836b0b1407d3db9c7071d91
- SSDEEP 768:pUfDPLSgcRUv+M4JUfDPLSgcRUv+s4mfDPLSgcRUv+h4AUfDPLSgcRUv+44M5z47:QdA0RztxFz1z
- TLSH T103165DB64F68A946E785EEB0FBCDED1C3CB023C5ECD25892F01292694AE4FC41B8515D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\f_000001
- Size 37KB
- SHA256 bfee1fb8d5f46946d3e5e800db4765a0c7bb5a9b390417ac7a45b9aea132a750
- MD5 1376a060dadb5c3c87aa4651bb123721
- SHA1 d68a3a4aa87773ae91e033378d3aa6d1fef6bcf0
- SHA512 04a3034a448c0570132f6907a1461b82f6b859964f53cd75fd9fb786db6f9270274e66f03b7dc49d7597ee224402938048c70272d634dbfd86e6a1dcbbff8e03
- SSDEEP 768:n8/xALwa2Le2iDMZYIVhaRA8gE2HVSOCys/lq7XaYZCimq9ltrQx:nwGLmqtOY+aRALpVCz6XaYoi/9lGx
- TLSH T15B03F10CF4C6F1B6B661B79253C0731802706957C4959F8BACC58AA002A7CDEDEFE1C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\f_000002
- Size 68KB
- SHA256 6a61b95e873e0f5505dd480208c00ac0e32a4d913209648a9825332eb8b9b6fd
- MD5 7637378e46397a3f66a65894969d73e7
- SHA1 cda8574cdb9a71fb96e173cfd0a1d9189604c08b
- SHA512 fc3e5fbfdc0c873271c306c8fa75150d43366463cff354b2c146dfb3dbf195eda1d87077a90177ad5c2e6e993ae1f823bb1eb7535afa5c041c632d62fa67b971
- SSDEEP 1536:ZEqcbzcJJpTE0N6EvOHns627rRH/WipIdENTEQVInkL/XKjaaZVjC:ZEq4zgTRN6IOHG7VfWipCE1BFjKhNC
- TLSH T1B063120A8BD6953ED5F73F867B38630D235A70DDC74288A7FB20A4A12356C2D916346D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Cache\Cache_Data\index
- Size 256KB
- SHA256 e62cfa7ca0f633ff5d38e6d94ac517cdfd090ecfb45120d6be0c8519a82dffa9
- MD5 82e1e29dd76b664857f74f2961c678a8
- SHA1 79ffb339f4f3d5cf8015b0d9019b2175a4831f1f
- SHA512 0d366410ca6adf7093de88e8257bf9ca5aeadfc54e98fe834c0aee3003ca2aa24abe3e851f2042ebf5e430506a1a17ae60625619b67da57eb2a0b1251a3c93bf
- SSDEEP 3:LsLllFlklNllklkXl4Kql/allLll/mltMll//Zllll/2NtlNlXl3Nl/lZNtlQl:LsRa3lPKtu4eltzlll+Ntb
- TLSH T11744016ED786AE16C2C412FD84978B607378D809DB8FCB43174566206CC17912F0F164
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Code Cache\js\ba678a2fbd8c358c_0
- Size 298B
- SHA256 58236101b8d461c0a0b7892c35b46ea517e62b6ae520eacb7ee091479c6eab2d
- MD5 abb93c6f95dc4be152e6e67977931793
- SHA1 32f6db1f0327d556984e5d3711db659d1eb55c6a
- SHA512 772321ed84675165979a10c6fdb77aba41f1050479084588795d4efeb83d74dfc11a852c1a535561832435e2b0c6f3b54928d80eba8e9bcaae1daebc64e73a13
- TLSH T10CE02B81C24C0F1DD3BD96F7CDAB03044A0E82C429BE3603A880C2C277165341258233
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 f1c7cb521224ed07843699c1703f1cef240b6bf8830f42e811dd4de0cf90b254
- MD5 1b9f2ee2f0053819a13f32b827c952ff
- SHA1 d1f295095d0187ae3540b9bce804cb03cf827392
- SHA512 fec6d5ddfbe447b7472878d3164b839f1c7b1c5f8e19b752a8f9a4ffd9e862eb9e3eded79823c84d99a56ed7f031f35bb278de5084e00d15064a26b9125b15a6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Code Cache\wasm\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Code Cache\wasm\index-dir\the-real-index
- Size 48B
- SHA256 614896fce48b6e65c75416fb693b855dfdd85ab647b4087314b0358505a1bedd
- MD5 42f6b3caed98251210256a2f5fe4ee1f
- SHA1 be02d11968a2a5542e7757543b77cb2fb038c2d9
- SHA512 672d9373a48f544e4363825925d482f57c18bcc888242db5f22e8b747b908ed80d1ec3c4e8113d587a9b817b5648dec6b33dafa198b09c5e6ad76ac47a654ea9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\DawnGraphiteCache\index
- Size 256KB
- SHA256 95452bc8833104e211f1670c9a452c0eb4e592d09a13557d85c0fbb8216de1be
- MD5 8ba02a057ce4d714fbb38d077077e4d5
- SHA1 a563a5ff321256472220ca1fcc3be326fd580907
- SHA512 22338b2a45eb5d6e6a0847e9559f3e7777ca189243456b74202e6436b35a4c5082407ee08df66d59bf1a04e049bb5887b0764efb4186bde06f61a63be67a3504
- SSDEEP 3:LstlNllklkXl:LsX3lP
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\DawnWebGPUCache\index
- Size 256KB
- SHA256 a52a753ddc6c66fda07670d9db9a2a34e9436a08daeb7370bfcd6475cfc020f1
- MD5 f3b9d2fd70d2500f8c7d15910832b2dd
- SHA1 faabddefe384f276bd6081d2c8a15f7d9335887d
- SHA512 bf3fcde3bf86c339f0c6537d5c47e3deefa32fdb15d5ffd368a6af17918fa110fc0ae67bbb587deb893dbca06501c46267d4164ab003d2d6ba05bac9d2ee8c6d
- SSDEEP 3:LstlNllklkXl9:LsX3lP
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension Rules\LOG
- Size 287B
- SHA256 1ba9ab4929cc38df68eaebb84f59e799ca302495efb79db4bc9a5f358661cb72
- MD5 4570020394323276a1956f9fedbcc5b0
- SHA1 cb8a521e0520b23a04de7c5eba56c6230628a4ea
- SHA512 8fd1e6293bd554d3062ef84bbaad00f73bb2d5bc970b101777e666822eb0497f0f8c2aa6b9b62edbd3931d7c88651f6b5364d96cfe198cf3b4b5b51c2512cac1
- TLSH T172D0C20245D6D295186892EBCDB2930ECB682A0DB74C3655AFBDC85C740740ED7E5B81
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension Scripts\000003.log
- Size 76B
- SHA256 cc5dacf370f324b77b50dddf5d995fd3c7b7a587cb2f55ac9f24c929d0cd531a
- MD5 cc4a8cff19abf3dd35d63cff1503aa5f
- SHA1 52af41b0d9c78afcc8e308db846c2b52a636be38
- SHA512 0e9559cda992aa2174a7465745884f73b96755008384d21a0685941acf099c89c8203b13551de72a87b8e23cdaae3fa513bc700b38e1bf3b9026955d97920320
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension Scripts\LOG
- Size 291B
- SHA256 c4baae10f9e1ae5afbbfcc12a763e3e6356cf66b4aceb79be112ace6125dd4ba
- MD5 c2bad2ab15cc0a33e2078fb4cd2af349
- SHA1 ce758cacc8d41cf3acec144a90d110e38ffaa526
- SHA512 0524ba0a77fd9deec92eb9a003a869a5d3c82590f430126386d9f355227d17b49c67b5c825402a5a3cfdc8742c7483bff3ef7ed1efd7833cca96868dde31f525
- TLSH T16DD0CD0455F6D265182846E78E73A30ECBA42605754C75555F7ACD18340750DCBD1B40
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension State\000003.log
- Size 228B
- SHA256 48d535bb330519c00d150578734c6cecb056c4b5cdd2a45c70590bc896d27d9f
- MD5 af1d95e1f9eb485393273b25446e1ae5
- SHA1 1d762c96b1c38ba6a849a5b76d12fac636b8d780
- SHA512 826d207edd55401e1c13249350814adbb3ab00a135c46b8da8bb7267751c70580f183982cccbc1e47bf3e3f433f20ba1d2f2afd601fcb67b635c0e7429558165
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Extension State\LOG
- Size 287B
- SHA256 1f04d038d7fe2197a81ab0ceefd17468752c059ebcf4421b8e4a8167d75215a6
- MD5 c023648b132da873c3fb26a6a3d685db
- SHA1 4bca66f9242b3a4e61b3995024082ccbc4999254
- SHA512 22c32db07f2684f60bb6e459869853149ee1e2278dc19daaa90cb16dcc2869441f4677356b0057f0353ebf98535cb19e1bd08b3a30640bcc972c0b872ca633f9
- TLSH T141D0C21042EAC2569C2587FB8E37530ECF613509B68C37555E7ECC08300754EC7E9B44
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Favicons
- Size 20KB
- SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
- MD5 198e1617955c70ad9263e5ae041f3c36
- SHA1 623233da85a56e3b75fbd55f5159d83f764db270
- SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
- SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
- TLSH T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\GPUCache\index
- Size 256KB
- SHA256 b2a8286ab71416483acc0aaedcc2fc8fc94e78722e25150fea025460bb748658
- MD5 c1972b82f569a4f18e09b57a4a331764
- SHA1 1c8f9fcbbc9da51ea75ec8fa81a404a7c9f6908e
- SHA512 e25b39fe43eda2a6288eacef374a6e7fe02ca96efc22af2f6344603c18e6e827abbec525908606fe6404afaa457f0cba12f5456d5c26dbb656b35abc44dbe6e9
- SSDEEP 3:LstlNllklkXl:LsX3lP
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Local Storage\leveldb\LOG
- Size 297B
- SHA256 914de4959037cfd7b4a472d3514ebc46a58bdf39955f7e582d6393cab4b459cf
- MD5 5550bba7894244c3b701f2c38bcf77f5
- SHA1 3a6b15c1dc31d19456f9c059b22100449d787da5
- SHA512 449196347e6efa0e0c01b081b65fc7f87415d89dd1547736bf1e722a5b311cec6d39b1436c4fd31ec83811cd9c1721532899b3f97eb7186d08803d6a88e6fc61
- TLSH T187E0266182E6C296191482AA5937B34EDB30150AA58D27455D65D808B00B00DC7D1786
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Login Data For Account
- Size 40KB
- SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
- MD5 ba979c77c714b67908bc582ec373c723
- SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
- SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
- SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
- TLSH T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3610227719\GraphiteDawnCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP