f5b9a652da527a12841973ef415cb7f1bf0f818373d25567769dc1f22da73e31

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 06:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 10.3MB
Sample260804-gxbj7aeb76
SHA256 f5b9a652da527a12841973ef415cb7f1bf0f818373d25567769dc1f22da73e31
MD5 9905d478417dfdeb7909f539fff3b704
SHA1 2fe7d2a21de3d9d6882ff53d754be114c3625420
SHA512 9c54a33e51a3df86790458abb8c751ab860fa47b98ab6e6bca4a8dae4f9ad84cc406c4360c4c22260cac1e5ab34948ece9f0e214128e8b4fb3b4abdcb0799ede
SSDEEP 98304:O/Ozwr82q4n/PWUl+QwkxUgY+ficLv/smmOrfvfvUvhvkv+vpvkv3vE2yx+vux0M:O8GclensdZgWx0M
TLSH
T1F1B62847E8A546E5C0AEC535C66695137B713C898F3063E76B50FA242F33BE0AEB9704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4360	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
932	chrome.exe
932	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe
932	chrome.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe
Token: SeShutdownPrivilege	932	chrome.exe
Token: SeCreatePagefilePrivilege	932	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
932	chrome.exe
932	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 5076 wrote to memory of 932	5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	90
PID 5076 wrote to memory of 932	5076	2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	90
PID 932 wrote to memory of 4684	932	chrome.exe	91
PID 932 wrote to memory of 3288	932	chrome.exe	92
PID 932 wrote to memory of 4360	932	chrome.exe	93
PID 932 wrote to memory of 3288	932	chrome.exe	92
PID 932 wrote to memory of 4796	932	chrome.exe	95
PID 932 wrote to memory of 4796	932	chrome.exe	95
PID 932 wrote to memory of 852	932	chrome.exe	96
PID 932 wrote to memory of 852	932	chrome.exe	96
PID 932 wrote to memory of 4784	932	chrome.exe	97
PID 932 wrote to memory of 4784	932	chrome.exe	97
PID 932 wrote to memory of 5860	932	chrome.exe	99
PID 932 wrote to memory of 1028	932	chrome.exe	98
PID 932 wrote to memory of 5860	932	chrome.exe	99
PID 932 wrote to memory of 1028	932	chrome.exe	98
PID 932 wrote to memory of 4420	932	chrome.exe	100
PID 932 wrote to memory of 4420	932	chrome.exe	100
PID 932 wrote to memory of 628	932	chrome.exe	101
PID 932 wrote to memory of 628	932	chrome.exe	101
PID 932 wrote to memory of 4924	932	chrome.exe	102
PID 932 wrote to memory of 4924	932	chrome.exe	102

C:\Users\Admin\AppData\Local\Temp\2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_9905d478417dfdeb7909f539fff3b704_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570"
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:932
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ffd18d5c728,0x7ffd18d5c734,0x7ffd18d5c740
    3⤵
    PID:4684
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,15701476932286455218,7853374595949976233,262144 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:2
    3⤵
    PID:3288
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --force-high-res-timeticks=disabled --metrics-shmem-handle=2040,i,11222196717908037190,3081739476538455078,524288 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4360
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,11700445291383018125,3937874411940148884,524288 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:13
    3⤵
    PID:4796
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,14810303740137606566,17012906806987156558,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:1
    3⤵
    PID:852
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,7317807190084603848,232430962496636739,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:1
    3⤵
    PID:4784
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3852,i,6486650757660345910,1937545823412753986,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:1
    3⤵
    PID:1028
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3864,i,4810646826119615839,10575813303723212047,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:9
    3⤵
    PID:5860
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4664,i,15030240927415108439,7427011391126816311,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:9
    3⤵
    PID:4420
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5076,i,1251470962408791030,10237395183143230634,2097152 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
    3⤵
    PID:628
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570" --force-high-res-timeticks=disabled --metrics-shmem-handle=5212,i,6094389469371704640,17129262252232608550,524288 --field-trial-handle=1932,i,6894715706119956871,8284713067200763793,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
    3⤵
    PID:4924

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4216

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cookie-shm

Path C:\Users\Admin\AppData\Local\Temp\hbd-3526461919\cookie-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Crashpad\settings.dat
Size 40B
SHA256 3c9e0bf625f6914697d3ca3e5def809ed3600d94b760b9bbfdeed517d8b5bafd
MD5 746febb5cb320d2710768e9ad49e6c8f
SHA1 61da6b3e3f3f0f69de03a36feea441f974236089
SHA512 4a649a941953ac19b2670dbcf7742b981c1d670b1e1437d0f2605596e632df85d86ac092ce4f20e7f3d9778e173db5668220153a35802fe45a5bc817740c41d6
MD5 SHA1 SHA512

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 69d2985d8cdf7fdd42e126bb3f0413f321fc56d398c00983d8f83f04549fae8d
MD5 6a84bdf57a5b4de9c06ca428dee2970b
SHA1 b16cc2acec2e34b2e50eddfcd0f688a3ce9bc015
SHA512 c26c099ec515bf8549258ec9198ee0ceb0bf1a3f3011856c673c7417e7c135f1aa9150170130e7293d59bcced9164c8e01d294580c2331d5281105952831d4f1
SSDEEP 6:/FoEXEI0KkNEs0NsIpT+hrpNIv5AlwkEXrqbcIlHukllZGbQ:d7Xf0/NEzN4DIxhkErq/N/ZG
TLSH
T14B13527CD6A42C07CAA0403C2987EB75A3B49404FA628AB35AA87221F80A70028CF028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1226797e1b41901d60fafe3a171f0696cdb1549d715311ee3ed1b7fa7ad40ad1
MD5 84521b92ce5c22be050b11b19ee4cd59
SHA1 cf0dfad97e6d538999990e6abd9b90b960bc5d07
SHA512 6a4b9aecea890753d8132758fba468f74499a379bc532fd773e078120688c822d83c56ffb81a8478a6c389dd54d5a7ca4df8b134ccdccc37f71a4462290ead1c
SSDEEP 48:8olKzqr2/YK1tP3zlblQGKJ3SM1Xg4XJjXr7MmX4IedVEPLVBKWwtl:TFK1lhblQNSug4JjXr7jiVOLHKWol
TLSH
T11244D8F71D05DEC2EB18CAF85C41923C8F3246123D6AFEB9F23944A215506E332289B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 79ccdb61b29377211078afd706c5b1234e3e9f3285c406613d0b509ca1cf98f3
MD5 5f5276dfac7033fc30df2fbcb612d2be
SHA1 e3edde9525c5bfd9864f4c24557d8e9548d5021b
SHA512 ecaff7224491c6d8adff04a734de4954d532f4d072604766347aed18eda8499c76919f16829cd4721d3ab1adae3583c932b395cb9011ecd3a3185a131b356043
SSDEEP 768:3UfDPLSgcRUv+H4EUfDPLSgcRUv+c4TfDPLSgcRUv+R4akUfDPLSgcRUv+p4p7z0:9Qhcaz7zdC2znz
TLSH
T110165DB74F687946E781EFB0BBC9DD1C3DB022C6ECD35892E112926949E1FC41B8511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\f_000001
Size 37KB
SHA256 e023408dd02e5a904043577c3b803ba90a0fcf1de7193f64204889fcbe706e49
MD5 4508f01cc17f93d91dd105c66c6b8a2e
SHA1 8bb5a90adf7a2977c693657015a426868da1f110
SHA512 2a7857362a5e70a39f0b1b1f122380c834bd1a6da9edfa77d0535e16cccbf637203cb441add13091bc02793ed60e36c9e829ab83df9bda8404518392beb3245c
SSDEEP 768:e5p1upFHtMsAIQkDSE0EqJBVoBzCxJFATJ2mLllgzhi++:+p1ufNNQkzoVooxJ8Yzhi++
TLSH
T12103F12E4643445D3DDCCCA33A920A857DB1D5F376CD4B8CB099C2AB09EBB719271B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\f_000002
Size 70KB
SHA256 202f6947db28f364478faf1adfb51acbf040157ef4a3e26404b8f1075a0c5d8f
MD5 1f5c87e7e976d26a5d082bfbbb43e5cf
SHA1 25f240f331ff78dc584b3fc047eb9df63034d1b9
SHA512 7d7d174dc67deb8730918f064638cf9cf1bbaf6f2e7d04215b5a6977f940acd9143e2a299afa594f98d1cf6b3dcc15d729b321eb0e77a331a14008fa4d2d91f5
SSDEEP 1536:DGgRo2P4EXELm9zQFG44t0kgAoSuEhsqjwKELAr4Nvoygkm1A7vWPmQ7P:DGg5P4GE8zQFGhYE/EcUNvo0v4D7P
TLSH
T1496302E1CCF31F1103EDD73516A1556CE09EEA7B28E750D7B111B658862B34F9C90E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Cache\Cache_Data\index
Size 256KB
SHA256 a69ef57e50375e351b6f5ce14891355de940a732c9d6f03d2d4c9ab9468d981a
MD5 4a472f01f5a6a7eb986742f447022ee3
SHA1 970ae870451754b08d81b07d5a0c7208ae09e711
SHA512 3645be8d552a8d52fe72ef64c05190bcae7e1d2cad714ab081c6a0f1aa72dffe5da83e99de39c72f072f8803f123bfab79a735a7b0630c834b452309264fa15b
SSDEEP 3:LsLllFlklNllkll/lgY9et/SllLll/nnllll/JNtlmNtl3Nl/lglNlXlell//:LsRa3lEtgY9eI/lllRkNHplt
TLSH
T11144016ED7966F56CAC452FD84478BA46378C849EFAF8747170426203AC17642E0F164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba678a2fbd8c358c_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Code Cache\js\ba678a2fbd8c358c_0
Size 298B
SHA256 ee7dd8e1f07a7e23db50dda38ea88d98d943e762cd5b8201c5b7124353d19a6f
MD5 8e6885457fbd05bbc8d63bf3df390a7e
SHA1 37678cb088918a72366fc037057ed1dce393fc18
SHA512 4cd3b35937fd28e02864b80dbea55cb472f90e4c09b938ec32c27dfe8ca940d3a40c71e8d097fa04071e810279d67be79d263b06ed731dc2975154f3fa128492
TLSH
T14AE02B91864D1F1DD32D96F7CDA743098A0B82C42ABE3603A980C2C233128241248123
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 3ab676c6b4ed32202e7171bf0fc9720d163da5e584463fbdb7532f3a025367c1
MD5 6899d1432e55e9b9ee053d585bc01ff6
SHA1 65de95eefb0753d3da59ae764b6906799e701e98
SHA512 83dc9d5eb589d1c150bd709381009003599007bcfd11210326098060e8efd6fc6e6f9b5c871118f6f42b19e66e7f9cd8605ce18a8988d2748d12c8a8a23c509f
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 3573a6b49e907927d682b5048a90967eff166064b64f039d299cfc6d96ed195b
MD5 9232a8a3aae8a8c9536bd6eeb4b332e6
SHA1 048d945834e647fe6713add8b3288c6036280e9a
SHA512 41273603bfbeec01c3ebc21ce405a88b6638951a256026daca84c5c66aaa5762abfaa59e621f4fb483687c0025b18f854780cebddd2521ef61c03436edad9027
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\DawnGraphiteCache\index
Size 256KB
SHA256 c8211c06ed67708252fa000d556805d1b808c59fa6a64756db5e87655c391e16
MD5 0cf1e756891a0c59389387cc1885ef7a
SHA1 40ff386621e266a4808cec3f41e0c1d78d1df163
SHA512 a71930a5594f070f47a36d1bdf54eb7ced2212ee152631734fe75157cc677cf1da464b7d8418352407500297d7b3be766ebf0b1828770e7a35878f88729e22cb
SSDEEP 3:LstlNllklkXlR:LsX3lP
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\DawnWebGPUCache\index
Size 256KB
SHA256 21e5bb448c585c1411aa2be64d40e3bbddbef94a6ed7c58bb2ff0acee8dcbb34
MD5 480d6c2333d7379a27c333869826e9ef
SHA1 741f1adfae4450e242dce6ac2350b57282326112
SHA512 3bf256e94db68b3f08866a878c86ccfa12695bea714286235305b8aa5757e2c18c80eda30d483405b7b5081a072cb773735d722aeab51d72fdab7bbd26422152
SSDEEP 3:LstlNllklkXl9Tq:LsX3lP9T
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension Rules\LOG
Size 287B
SHA256 2b387c986634092b7525d106e04f5b33a10400d095b352d653eb8690b764615d
MD5 475b2a490f036d311523d579ed4cd88a
SHA1 9073ff01486310c93475d8e277ef1c85272ad705
SHA512 4b9c34482c1183fbb1887dce74079f5b98e97703c146ca35860540b7d1ccace7e0aa7daebeb66dff664cd67ae1358fde5d44b0ffc2975d99609872eec1d04ee7
TLSH
T1B7D0CD03544685A90D5891AFDD76D35BCBA03A0CBF4436644E79E98C3003D0AB3D5651
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension Scripts\000003.log
Size 76B
SHA256 cc5dacf370f324b77b50dddf5d995fd3c7b7a587cb2f55ac9f24c929d0cd531a
MD5 cc4a8cff19abf3dd35d63cff1503aa5f
SHA1 52af41b0d9c78afcc8e308db846c2b52a636be38
SHA512 0e9559cda992aa2174a7465745884f73b96755008384d21a0685941acf099c89c8203b13551de72a87b8e23cdaae3fa513bc700b38e1bf3b9026955d97920320
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension Scripts\LOG
Size 289B
SHA256 5abfd67ccee96e7f049b4d8da5ecfceb1101bd4a3c5a3213afcfd385195e29ff
MD5 c2a2fe29e5c3b6025b4322a20ce79954
SHA1 815267cf371e63d892ec0fe66fadf607f11f29a5
SHA512 46ea8de33e5a01f2c746b1a7eaeacd4b58c7a1086dd9bab966326b453593baba551df803120422927883b57afa392e3cb769046dd3d52809e933a6e5c520c037
TLSH
T1A0D08605548A95E50A5885AB8D76F35AC6A03A0C6E447A540E79DD8C300760AA7D0A81
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension State\000003.log
Size 228B
SHA256 48d535bb330519c00d150578734c6cecb056c4b5cdd2a45c70590bc896d27d9f
MD5 af1d95e1f9eb485393273b25446e1ae5
SHA1 1d762c96b1c38ba6a849a5b76d12fac636b8d780
SHA512 826d207edd55401e1c13249350814adbb3ab00a135c46b8da8bb7267751c70580f183982cccbc1e47bf3e3f433f20ba1d2f2afd601fcb67b635c0e7429558165
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Extension State\LOG
Size 285B
SHA256 8ecda9e29c82a2418d7fad951375bf66b25b1599faa73446bddf3a0733ca5efe
MD5 f023a5a17a5e1b9f9be2c1650d322b1b
SHA1 6b0bca50d6c89f41a42371803f82811c521ac011
SHA512 72f02414b97c2d7a4207319257749873b62df090ea8e65a0ca5b294fc0465f736bb14f5b9ecffdf5e92d3e95d625f1eb38ad86d97cfdc3e682506bc10c7a842d
TLSH
T16ED0CD01844AC5D50E5885EFCE3AE357CBE03A4C7E4437681E76D98C300364BA3D5755
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\GPUCache\index
Size 256KB
SHA256 5d29febe253dbcfc583d61323fe8cb9862ae71657005e63757558c8ab81aeeb7
MD5 b7a6a6c371875e6753198eb713a63e78
SHA1 1d3312dacef5a9d2fadf37b465df97f43be657da
SHA512 c9bb84272eaa13e9d20a4507e4f0936609e8087bfbdaf1cfc9109d5292313cdb42128c52243b45832767c6106702b7d85086c55e0fc48bb284e7dd4adeb5ab71
SSDEEP 3:LstlNllklkXl0tT+l/:LsX3lPK+l
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Local Storage\leveldb\LOG
Size 297B
SHA256 3fa9724ab9ce4c3b70454ccfc7ba5a8a50adf423b6f8fe274fc160610791281c
MD5 bb8edb4e140a08929b2a3e6259792e88
SHA1 e776145e7a32cfa191745ef5a30eae2e4c1f381a
SHA512 12955c2b601234af23584274e60e0e1089e78de789c6f99a9fa95e197af37573ff921cee5f52bb2580753437a463da4a9fb5437687718975152b290c927dbe7d
TLSH
T19FE0CD51848B85950B88517F9D3AF70BCBB02A0DFE482B645EB1EA8C704744DE7D47C3
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-2208369570\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download