bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 30.6MB
Sample260731-dle7fsak2t
SHA256 bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210
MD5 5a04b9b7ebfcc735780e931ad3927f16
SHA1 9dfaa636cbfd36ac4d26e69ed1491c9960e64c4c
SHA512 c16b267c278d8d1e6a356dd4daf2c0c6065cfbfcd2bd82a70231b746ad072f3634cf31de28b2a92f4ff9ae3f3ea34189ad7c9dd02a5e798e4cd0f4d0165c0765
SSDEEP 196608:AomEfup30YAGn0/QnMBeoSyE3c6dY2Gg7lfXL40HWLqRstoFp8XUZ1Tbk+yCuw:Ab5CSyIhlPL40LR2Q
TLSH
T16E674BE3F8926A94C4EDC374C672416BB6623C191B3463D712A0FB241F3ABD0EA76745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
28	api.ipify.org
1	api.ipify.org

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1828	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
1240	chrome.exe
1240	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1240	chrome.exe
1240	chrome.exe
1240	chrome.exe
1240	chrome.exe
1240	chrome.exe
1240	chrome.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1240	chrome.exe
Token: SeCreatePagefilePrivilege	1240	chrome.exe
Token: SeShutdownPrivilege	1240	chrome.exe
Token: SeCreatePagefilePrivilege	1240	chrome.exe
Token: SeShutdownPrivilege	1240	chrome.exe
Token: SeCreatePagefilePrivilege	1240	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1240	chrome.exe
1240	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 6024 wrote to memory of 2236	6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	89
PID 6024 wrote to memory of 1240	6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	91
PID 6024 wrote to memory of 1240	6024	2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	91
PID 1240 wrote to memory of 3512	1240	chrome.exe	92
PID 1240 wrote to memory of 4244	1240	chrome.exe	93
PID 1240 wrote to memory of 1828	1240	chrome.exe	94
PID 1240 wrote to memory of 4244	1240	chrome.exe	93
PID 1240 wrote to memory of 6004	1240	chrome.exe	95
PID 1240 wrote to memory of 6004	1240	chrome.exe	95
PID 1240 wrote to memory of 4372	1240	chrome.exe	96
PID 1240 wrote to memory of 1076	1240	chrome.exe	97
PID 1240 wrote to memory of 4372	1240	chrome.exe	96
PID 1240 wrote to memory of 1076	1240	chrome.exe	97
PID 1240 wrote to memory of 5628	1240	chrome.exe	99
PID 1240 wrote to memory of 2940	1240	chrome.exe	100
PID 1240 wrote to memory of 5628	1240	chrome.exe	99
PID 1240 wrote to memory of 2940	1240	chrome.exe	100
PID 1240 wrote to memory of 4608	1240	chrome.exe	101
PID 1240 wrote to memory of 4608	1240	chrome.exe	101
PID 1240 wrote to memory of 2760	1240	chrome.exe	102
PID 1240 wrote to memory of 2760	1240	chrome.exe	102
PID 1240 wrote to memory of 5204	1240	chrome.exe	103
PID 1240 wrote to memory of 5204	1240	chrome.exe	103

Views/modifies file attributes 1 TTPs 1 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
2236	attrib.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:6024
- C:\Windows\system32\attrib.exe
  attrib +h +s C:\Users\Admin\AppData\Local\Temp\win_update_cache_8492
  2⤵
  - Views/modifies file attributes
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867"
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1240
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ffbe17dc728,0x7ffbe17dc734,0x7ffbe17dc740
    3⤵
    PID:3512
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,10658155199103797704,4385149197468336743,262144 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
    3⤵
    PID:4244
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --force-high-res-timeticks=disabled --metrics-shmem-handle=2008,i,4744436404045992609,2373150938344455742,524288 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1828
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --force-high-res-timeticks=disabled --metrics-shmem-handle=2276,i,14245586069987413580,4070040392580463929,524288 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:13
    3⤵
    PID:6004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2836,i,4442199750626632919,9870156521759874891,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:1
    3⤵
    PID:4372
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3048,i,1033100685726546805,17774012343566385152,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:1
    3⤵
    PID:1076
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3680,i,5806630564904966274,15422098575083749195,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:5628
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3712,i,12808328686353252880,3387116206816123603,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:9
    3⤵
    PID:2940
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4788,i,3161646851670823011,5171728653093244889,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
    3⤵
    PID:4608
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --force-high-res-timeticks=disabled --metrics-shmem-handle=5044,i,17245051516978949690,9807383942778956813,524288 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
    3⤵
    PID:2760
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5212,i,12307166420927459323,8812501283329702010,2097152 --field-trial-handle=1908,i,2808793814707578137,14249732909618492141,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:1
    3⤵
    PID:5204

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5812

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cookie-shm

Path C:\Users\Admin\AppData\Local\Temp\hbd-305659087\cookie-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

download

Path C:\Users\Admin\AppData\Local\Temp\hbd-4203509195\download
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Crashpad\settings.dat
Size 40B
SHA256 adcb01c47582c1e646671f76d23b67382224e74e7748c77cc257a36c354be7ab
MD5 3dd862aeb314b8238673cd6b22cae15c
SHA1 e57cc0c5a05141e6377b1019d6c2cadb075958cb
SHA512 996882c6653366d9253611d8c2928bb51381a226cccf3067124d3f8002334237043062b09fdd51401776bc253f2bf0f7c85e68e3d2c4a94acd8ba829ad636759
MD5 SHA1 SHA512

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 42f77535234c0de598e6d600a00894ddc19a186f428cc2e8b6554b5a9465cd59
MD5 fb438b0b0f5d7942f6a88edcc84c8bba
SHA1 b957d3d1c1f64f014b3b8ca7ae11df95d48b3a83
SHA512 3378a78fed8eb35b7b8410b3bd4857348d481dd1dbf631f9dac48dcb91d161259ed278ba492ec234ea64a4dc2ab78f335bdca3414d8515871479cded5fcc4bd2
SSDEEP 6:/FoEXENGb28kN+FzTG/+vs8+skIX2+nC94En0ptiZvtEucF:d7XEGbMNk3NvsBs5X2+CiEIwvtEu0
TLSH
T1A4135E7C598C3D17EA92047C5C4B17B323B14C48C701861B7AE27A21E589762688AF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 deabe8ca1fc1887e45946f60452668c024507ac2aaad2063898bb8e363c77642
MD5 7837b50c356ade13320614bcafc3d026
SHA1 93b094f2c3907016dd3160ff5ee7bf62b1bd8dae
SHA512 f852865a705458cdc25e6fba5e00a66b7fe94bd102207ff593eec67d2734abaf83e9a276ff5cce1f657cb290feddcabdb9c7623bea8f7edc7146b785a95b0025
SSDEEP 48:oolEXgYJP3zlblQpPKF3SM1XgHZ7MmX4IKXtdVEPLVBKWwtl:/Ud5hblQp6SugHZ7jITVOLHKWol
TLSH
T1C444DAF71D09DEC6DB18CBF45C41923C8E3245122D69EE7AF17844A345516F7311CAB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 14f173627488d19eaf48dc84f69fdead886ea4fc42b2df64350606fe0ab6adaa
MD5 16aa66655d336450d7a78380cff45fb2
SHA1 61f2ccd302b7532686a32ff7a2adf5d006d4fa81
SHA512 9f86de0668ca7cfdf8acab10fb2b1d7a326760659eca3dda772878290fddd1b767ab696ea91d87d5259dba90e10a71fd3b9a0e693a0561f006a202171e091fc0
SSDEEP 768:1UfDPLSgcRUv+D4WUfDPLSgcRUv+I4kUfDPLSgcRUv+140fDPLSgcRUv+N4Epz4F:TONCZz7zdCmzpz
TLSH
T194165CB74F68B946D781EFB0FBC9ED1C3CB022C6ED925892F112926949E0FC41B8561D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\f_000001
Size 37KB
SHA256 9192bac9982877ee24434c42bd0f0cf57b4ce9bf528b93375e547e6cd02eb265
MD5 dfe868e986bb9054a076f174d6b5303a
SHA1 656b950ab1f3c875dfffc84920845197d73ca1cd
SHA512 7f3f99bcc3a3f1e93c8f290684c908cfe4d289d7e51daf235f76056e43323d47fccf470e9bc4ac4149976f615246d0db13d81a46a8de2e2fc6eb059f7c651117
SSDEEP 768:JcQ8uAd9c3AkRjQh6ERKC1ntgXe1r/1GrTRehFXDMFaTY:3H3A2ERaXMrETszDMF3
TLSH
T15D03F1C2A32C66872742E7CA48CC5D79DD16C0993F456FEAB06E5325BB2A4CF25834DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\f_000002
Size 70KB
SHA256 202f6947db28f364478faf1adfb51acbf040157ef4a3e26404b8f1075a0c5d8f
MD5 1f5c87e7e976d26a5d082bfbbb43e5cf
SHA1 25f240f331ff78dc584b3fc047eb9df63034d1b9
SHA512 7d7d174dc67deb8730918f064638cf9cf1bbaf6f2e7d04215b5a6977f940acd9143e2a299afa594f98d1cf6b3dcc15d729b321eb0e77a331a14008fa4d2d91f5
SSDEEP 1536:DGgRo2P4EXELm9zQFG44t0kgAoSuEhsqjwKELAr4Nvoygkm1A7vWPmQ7P:DGg5P4GE8zQFGhYE/EcUNvo0v4D7P
TLSH
T1496302E1CCF31F1103EDD73516A1556CE09EEA7B28E750D7B111B658862B34F9C90E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Cache\Cache_Data\index
Size 256KB
SHA256 706ed9629b3424581ada971c0d3b107374a6cf9982e149c26ecf8f1835e15c64
MD5 cc625980eb3b74dd9b373dc75a775460
SHA1 3649fbf5977583ebe8793ddd76665d0f8c05e933
SHA512 ba2bd62f66f341012dd08532160a9a4e1df62b2b994d901eee1947bf8b580c484331346c88d814904728d9672b43a4457fefb5edb03eafb3a1dd26d372bf8f69
SSDEEP 3:LsLllFlklNllkll/lsyQ60lltSllLll/nN/JNtlmNtlYlXlglNlXlME/:LsRa3lEtsO0llA/RkNI7E
TLSH
T1CC44016E87994F1EC6C516FC8B978B617338D549DB9BC7430384262028C1B625E5F9A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba678a2fbd8c358c_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Code Cache\js\ba678a2fbd8c358c_0
Size 298B
SHA256 52f8ef76b053c8d810f393855784a8245ef623b947a0f91c31c684b5bceda026
MD5 5d3c905f652d2567db06b727f61a6c07
SHA1 50a0b44cc5dfc5d93cffd060b4b9f4d286d0a0f1
SHA512 403a8dc1ac99f88eb2ad96715fc9e7fa3637cda359066a1e66d2d05b369b8a60219ef19e49a2b7c4ecac447fbf70c7d6d73295c13c85facbb13bc056eec9e512
TLSH
T162E02B81C64C1F0DD33D96F7CDB603494A0A42D429BE3703A880C6C237168282258523
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 264a29548015db754e6c2623bea76fd271ffe2f155a84ce0af66d171112c3cd4
MD5 47e2f39ba41f68928857a1da57348f16
SHA1 1d750403b62b67b95bb1cefb30bc7a4f5b6dd1fa
SHA512 585987802b423444bc868927da397c6ab216e5959ac11a7e7dc2d37e187ed41d9e563daa0a8cd9c154792e1f44a089df024c7d76244571804cf3cffed2fb0950
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 de6ce847261fecbda2b652fbb2436998c324059017ea9b912c7ca88803bc6b04
MD5 db774c48efb2b9652299eff68f7966e2
SHA1 172755e07aace0f63aa05bc8e139896d78a893f4
SHA512 d5283f289120d89dbc30e622a9bcd578103c52ce18ae1cf2bc038421220c240c869dea6f43bf4f6459058c24d6388d7d10ff19e05266f402d1baea61dcb4e2e7
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\DawnGraphiteCache\index
Size 256KB
SHA256 e4ef0646b5bef34e206ac29e803d797332c2a2277070a496d6aad6177592c2b7
MD5 65263b66facbfa0a80c63c6073c28c38
SHA1 9001ed1a34c8df7d0a5868beacba8c6d6c41dff5
SHA512 8c5b1e68117bfcd4b378fbaa7455498b35e48d7bc3dac538833c9710946653642348a551d1099e692b73d3baf78422fb7f2ac8fc158ea16eea8afe12a789a197
SSDEEP 3:LstlNllklkXlxC:LsX3lP
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\DawnWebGPUCache\index
Size 256KB
SHA256 95a3e76de90b542f44a215aaf8987289f7f7c3d08d3551acaf509346605799ab
MD5 6aae88dec04c3d721c60b856e008e9f0
SHA1 0d083b2a4ebc658fc8638a28693d082b0a721655
SHA512 98e0d84f43f9d4ef43919a22ea72433189d934cb378cabf39b334efb31daface7e0bd406db4c15b63ac685d5c882383f4cfe40346bc9776d71a896491568a29a
SSDEEP 3:LstlNllklkXlA6lll:LsX3lP9
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension Rules\LOG
Size 285B
SHA256 8285f2112f7fa000d8f0387eb2ae9502faa5e9137dc49fa42df1eb006449654d
MD5 0ed3c2ad1f44750cf43ccc7e1be6a20f
SHA1 e76bff6339d2ea4f4061b39b7301771bdd2771e8
SHA512 9a66f458b03e2664a638795994b517698b3307b7eb160ee9bd0e60ebd5a689deee906113efc0075f21766ff68b546b5dfcf20886033d23aeaf1c2296da59c61c
TLSH
T173D0C21159BB85B91C98E4D7CEB6A31AC338290CE6843A254E5EC88C3007549A7D8B94
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension Scripts\000003.log
Size 76B
SHA256 cc5dacf370f324b77b50dddf5d995fd3c7b7a587cb2f55ac9f24c929d0cd531a
MD5 cc4a8cff19abf3dd35d63cff1503aa5f
SHA1 52af41b0d9c78afcc8e308db846c2b52a636be38
SHA512 0e9559cda992aa2174a7465745884f73b96755008384d21a0685941acf099c89c8203b13551de72a87b8e23cdaae3fa513bc700b38e1bf3b9026955d97920320
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension Scripts\LOG
Size 289B
SHA256 88a58f838540f26bd20d40320a8c813a31c7bc36e127e41840e4b7f64351e463
MD5 b8baa6bd6ea4aca4603c508adfb3659e
SHA1 617c00f5169d5dcc6730cdf67e9d57386f75f7d6
SHA512 5fb33f86e85420047d3084403e8fb1ea6fc125251f8f07d59d7f8900480d4360e3ef961dc419ff1b223d2a86e2c11f19b5bf624ce7c7394c7c2203729861760e
TLSH
T120D0C2144CBBC5F90C98D8D7CE76B31AC3782508F68476254F6ECC0C300A649A7D9E94
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension State\000003.log
Size 228B
SHA256 48d535bb330519c00d150578734c6cecb056c4b5cdd2a45c70590bc896d27d9f
MD5 af1d95e1f9eb485393273b25446e1ae5
SHA1 1d762c96b1c38ba6a849a5b76d12fac636b8d780
SHA512 826d207edd55401e1c13249350814adbb3ab00a135c46b8da8bb7267751c70580f183982cccbc1e47bf3e3f433f20ba1d2f2afd601fcb67b635c0e7429558165
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Extension State\LOG
Size 285B
SHA256 e8b1e56cb82bb8d00e1e6ae54f42169bf2854fa366d9a88e4e7ab62ba2e6eb98
MD5 8e9a9c51b81b348dfeb7de122f3cb105
SHA1 a4703dcb025442fe2fe13d67138ee1a88ce16dd8
SHA512 662b4807f204bfc08de3121b42122f0f4b206435fff059e9c0b0cd1d0e300f879e436a88a14168e014c8393d4bed5b48efdd2773002fb8d503a64332ff4797d0
TLSH
T1F7D0CD10447BC5B50C64D8D7CE3A7316C7743904F68436254F5ED40C301664A93DCB94
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\GPUCache\index
Size 256KB
SHA256 2b0fc158396eed69910680ebdb0c044be34188cc5666352420a40df25f080599
MD5 5a023e6eb436378aad1de8ba4ac7633f
SHA1 284fe0e4ed60377b58b10d7c8692ea75b99af726
SHA512 a9a4cb538b395038acb45055a877475e862b9f25394296d965ec37ccea17ce62d47996bbe7fafcce1a2c93a42a43aea78f1b02cbdce0f96cfb4efccd381eb1e1
SSDEEP 3:LstlNllklkXl/aGKt:LsX3lP/6
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Local Storage\leveldb\LOG
Size 297B
SHA256 31f04a783b4a08e5216fe4fe0d89f1d9933b6324e2d430446ab76b2d56c4d253
MD5 d506a7494e0ee93581ee5c4c1b251473
SHA1 d11fce19d9d19ab4ec9134622efcc8847d44187d
SHA512 b597310ecb6c971c82380b79db36a5d8608f713c995776b3619b171db7e174b67426299cc7517de2b45d165c8a7ec926754430b6eb2b635b2b429350671412f0
TLSH
T169E07D70847FC2B90E84C0DF8A3AF31AC7342508E5C827154D51E50C7007048D7C4AD3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-1209282867\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download