6143fb78ed089bdfcf972ae3cc967ea0ff279ba337ef93624fa4f7d7c50b63af

Analysis

max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 03:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
Size 3.0MB
Sample260808-dn7pgsyfre
SHA256 6143fb78ed089bdfcf972ae3cc967ea0ff279ba337ef93624fa4f7d7c50b63af
MD5 8f1622b1f9a6b5148d94a45b280a9166
SHA1 d11195ac7431b0d7565d77361ae8d946318244d6
SHA512 489e7268a0b8f8b2da6e6ade02daa1bdc0d2d26293c4d43e3ea529157a55e622da23cf87e0694e45b2af3c37e4c1111628e3341ebfd74b65c26a0e0ccafb0d79
SSDEEP 49152:9+FGBQJhuzGtU8apl10QOSkQ5dFphz+A2Ifp8RIK/HPeauCbYfZsdCEFFqk8Duc/:M6QJw6O8MEQL+eGIKHztSZ2//pcAt
TLSH
T1EBE533E7BF15BDA8E912423B1BD6744D9713C28052D207A2B27E6C75EF6C1E1FA5E400
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery spyware stealer upx

Malware Config

Signatures

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
behavioral1/memory/5032-311-0x0000000000800000-0x00000000011F6000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

UPX dump on OEP (original entry point) 2 IoCs

resource	yara_rule
behavioral1/memory/5032-0-0x0000000000800000-0x00000000011F6000-memory.dmp	UPX
behavioral1/memory/5032-311-0x0000000000800000-0x00000000011F6000-memory.dmp	UPX

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/5032-0-0x0000000000800000-0x00000000011F6000-memory.dmp	upx
behavioral1/memory/5032-311-0x0000000000800000-0x00000000011F6000-memory.dmp	upx

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2392	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
2636	chrome.exe
2636	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe
2636	chrome.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2636	chrome.exe
Token: SeCreatePagefilePrivilege	2636	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2636	chrome.exe
2636	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 5032 wrote to memory of 2636	5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe	86
PID 5032 wrote to memory of 2636	5032	2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe	86
PID 2636 wrote to memory of 2768	2636	chrome.exe	87
PID 2636 wrote to memory of 3104	2636	chrome.exe	88
PID 2636 wrote to memory of 3104	2636	chrome.exe	88
PID 2636 wrote to memory of 2392	2636	chrome.exe	89
PID 2636 wrote to memory of 3824	2636	chrome.exe	90
PID 2636 wrote to memory of 3824	2636	chrome.exe	90
PID 2636 wrote to memory of 3400	2636	chrome.exe	91
PID 2636 wrote to memory of 4336	2636	chrome.exe	92
PID 2636 wrote to memory of 3400	2636	chrome.exe	91
PID 2636 wrote to memory of 4336	2636	chrome.exe	92
PID 2636 wrote to memory of 1788	2636	chrome.exe	93
PID 2636 wrote to memory of 1788	2636	chrome.exe	93
PID 2636 wrote to memory of 4944	2636	chrome.exe	94
PID 2636 wrote to memory of 4944	2636	chrome.exe	94
PID 2636 wrote to memory of 4912	2636	chrome.exe	95
PID 2636 wrote to memory of 4912	2636	chrome.exe	95
PID 2636 wrote to memory of 1720	2636	chrome.exe	98
PID 2636 wrote to memory of 1720	2636	chrome.exe	98

C:\Users\Admin\AppData\Local\Temp\2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_8f1622b1f9a6b5148d94a45b280a9166_hive.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636"
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2636
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8232ec728,0x7ff8232ec734,0x7ff8232ec740
    3⤵
    PID:2768
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,3073051731090633045,7818837938141055004,262144 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:2
    3⤵
    PID:3104
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,7484117943849333571,16965001103588535670,524288 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2392
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,4302783466139684088,12515943637489257779,524288 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
    3⤵
    PID:3824
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,9169384217324414887,2634118960331277972,2097152 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:1
    3⤵
    PID:3400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,7513680363825995821,2838805939871161101,2097152 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:1
    3⤵
    PID:4336
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3932,i,3106279246930655238,12293147144958573935,2097152 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:1
    3⤵
    PID:1788
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3980,i,5801145273080526540,6560076364465312802,2097152 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=4076 /prefetch:2
    3⤵
    PID:4944
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4632,i,6955817425384861031,6767327654385339856,2097152 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:2
    3⤵
    PID:4912
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636" --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,9314881812167722833,16479517464205655747,524288 --field-trial-handle=1904,i,11273844447896903142,8306270470573758472,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
    3⤵
    PID:1720

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3408

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cookie-shm

Path C:\Users\Admin\AppData\Local\Temp\hbd-1612060286\cookie-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

download

Path C:\Users\Admin\AppData\Local\Temp\hbd-2459887265\download
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Crashpad\settings.dat
Size 40B
SHA256 17fd77a4d45ce66fea65b80319b3e15b5e0a26b755badc59641b4c90fedbe454
MD5 962e8955790cfa75d6c57ceeec34d1fc
SHA1 05ceaa968aee63a705f59d344fd65997d26263af
SHA512 09752b8d2c68faf38593c2017e546936dbe2a8e801a3fb0c0e3d2ade36527ab75468770fb252f47d99de3318bfcb746c4954b0b41f0ac584ecf60ec6facaa3f9
MD5 SHA1 SHA512

Submit Download

Account Web Data

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Account Web Data
Size 76KB
SHA256 4f3e18eea355690c25b4de99b18e90f0c81cbb088228ffca12c84a53c6dff98f
MD5 b89fd902b32528a846212c73a9bfbe73
SHA1 b2bc3a06c5bf56df8b8245e2947e7f78fb6a416d
SHA512 ae387b21b2d3801abe3543f23d1705b51982e4f076c923cfee764f3ea525ce276d8360623be00d402ed7c804f801e36ba42b68d32a5f6e856e153d6b96ea750b
SSDEEP 96:pv+kOyOFXmT7i04MDDPtg3IM8n0ys5bSAoFLoeqclNz58rx2n:pln06Ca
TLSH
T15A73224A7A342505EDE28A362CF090F75D7C722D8F01A9412DA73028CDA5897F23A4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Affiliation Database

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Affiliation Database
Size 52KB
SHA256 4cb381b1a653296a38381f16bfd94dd09b9c900c0ed24eb532d372d647bcb96e
MD5 142456354ac4a1d7e89f037c2ebda0a2
SHA1 60b5e6036da7c3c1e4e10dc04c319e55cd125152
SHA512 cad919e47513bfbc050db3a996811643f5381ecbe3224c5ed34bf7dcfdec993d7a5e0af674f36625648866b4fad55578ab7427be38c17f6d9eb74403da02960d
SSDEEP 24:TL9VAlZGUWEKdPq9XUeS0z8jNvN2HhKroyr0d8D4BmhltoVOq6Uwccm5fBGQww:TbBzdPqJZSm86Uu8baVOlU1cWB
TLSH
T18F33DF061B685434C9ADD23498D90EE279B4126FD9D1E9A42DFC1D190FE04546CFD46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 a2fab9dd741c97c2a3f1a327b6010e247a4ab5540476697e8dfeb9d377222218
MD5 9ab5ebdf9770b117ab185a50874301ff
SHA1 55d9e9cd05b52ed63e791c8bb5777f27717b1df6
SHA512 80e5d1830b31a27f08a229a574d4afd5d37d657a778728a7bb29e930147d1711696858711d3c70b06ec3a8f7ed66fd49a99ee0fcdd7a03f947125c9ce2d8aee5
SSDEEP 3:MsFlTlrllkl2PdibzzvikellmOz5lBq+Kl/v1MECH/:/F02Pd4zzvikerNGv
TLSH
T1E11312EE76C14C07C130013430CA43715635D44049BF074F60642F662D517A10D2000B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 52dd56319a5596a125832b64ba728eea22364d7cc84b3038f695e386fae21773
MD5 58fa8186db50196057991caf3127299e
SHA1 9d5b1bfbe03298139b77c829ee9226fc9ba5a3ac
SHA512 54bf8dc7a04617494d6e192a8b721db27fac711ef51423883b271bf5f6f89e9ecf4dca656793f3642e8d9eadf827cf665fdb5083646f1c40dfdca1a9ab3f47fa
SSDEEP 6:/M/LlE3Uad92zuSezuSeGLIiv8i/ySvzuSezuSeGLIivB/:U/295pqp9iki6Sipqp9i
TLSH
T1554412E33980914BC750D3F50142627C9D7B92182CDD9EDE911409721594F6668648A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Cache\Cache_Data\index
Size 256KB
SHA256 34d693c304330a2b18b16b3db89379a7603685bff77d8d5c299a6f755cef3b7c
MD5 b99885d4a3c9624c00a1c30075500de8
SHA1 a38a2573b5b1e292618af98b49fdcbf8fb4952bf
SHA512 30b7d0cda6cd75d4daddb9eda6d844e25df8e16a8a6af5f29af02763db2a8bbf2a6a6cf8e50c31a15d48bb7c9008c55106d2e69b50e58e202ad04f4cfe08cf16
SSDEEP 3:LsOlElNllklkXlP5Dll/NlUltnMNtldlXl:LsKM3lPP5DllUGN
TLSH
T1DC44023B03C14D17C181037C5492C3246734C000870F8357032451311C99B910E49040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba678a2fbd8c358c_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Code Cache\js\ba678a2fbd8c358c_0
Size 298B
SHA256 6b360ae217dbfd06cad158d845c5c97ee27ca2ea8ea0d03e6379384b1ff88c56
MD5 57e5ebd35c9d475732c32528368da979
SHA1 357a164255afeae21e21725f9b157051710ca4da
SHA512 2054c4a7df539c98d6e8f2d134bba9c5c04153a36567fc00bf5a05f0fa065bbeb37a458f1a8f957cc821e53147d261cdbcb3867a392ef059a578626ec5aba150
TLSH
T10CE02B81824D0F0DE33D96F7CDF703058A0A42C42ABE3603AC80C2C137124241258122
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 5d415a217cbcf16bd049571c2ed639f75be586ef6220b66738f4ca71d5309637
MD5 bfcf7b68727eea8973870b6568ea4a28
SHA1 f682c1df6b4d53af812e7d8fa5e4f2442acecc72
SHA512 6461cdaa1264281de89fb04e0af71c98c24a1061921a9d5d86c68d369ea2cfc7566966e9317dfdbe3b9a177968f17765f4933a17c59fff7ed5a1075565dd3a56
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 197108ea5979628f574b912c254c58ed2f1b7b728efcedcf36afb676c5a79d5e
MD5 f886c30b07c84b96a4a268be93369411
SHA1 0574eb6167cf6af20f28fa254ab8c253598df9ae
SHA512 f7f9cedff02ce9fb5f044dcd1be3afb2f2fc31f15e19cecbe220b3f74ceb0291086e36dfd7c91de323b2e618dd6c48eb49f9e7a033562c7b37c5c26903825f84
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\DawnGraphiteCache\index
Size 256KB
SHA256 8763c63b60006b7eeb35d477197fad52bef310f5b0ec918f47245cdaa98e9dc3
MD5 ebf10fcd70558b5985cc7855467f1d7c
SHA1 c2674ff407a71d96f735671cf5d9dd7f395622a0
SHA512 a4618f63148206f310c5f6e8fc18529894392c3d9f4641f8bfa5a5dd0835598b2595145a3ded88f2ff45cc5b03efb7f14081a4234f16fbc982690fd10089568f
SSDEEP 3:LstlNllklkXlv15/l/:LsX3lP95/l/
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\DawnWebGPUCache\index
Size 256KB
SHA256 0776b7d948fc96253b02442c651777acc2e6e5141063fb0100ed04fa3d901819
MD5 959ab1fd3b44a9cb3a4d4eb843f9dee7
SHA1 b5f97cc9e2973be5bf7564917a4ae4afd7fb1014
SHA512 be53bc0532d2b92a493534dd4b2ef48019f080e9aeac343172ff8a6254e62b96045f714fcb5b40437464269e2b26206425c615f68de04c7a4fc012bb2e0b32f3
SSDEEP 3:LstlNllklkXlF/l/:LsX3lPF/l/
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension Rules\LOG
Size 287B
SHA256 5e90646f24a276b157cbde4aa787d01c0040f3095f25f384b521865c281b28de
MD5 fd812488722105d42feddbdd61b996f0
SHA1 439b8cc393eae0239e0b1d75504aba62f1294e28
SHA512 5d6251ef8ccb304a57e46900d6c41f436fa2d023787ad665436cd7ba3ead4bdf6e379b75d605bc5450ba2dbd847d565703ea909d2081b95008561eff1b1f26bb
TLSH
T1C1D07D0260C6C364091DC0DBDEF6430FC731650CBE563E510E2CC84C300F50D53C2A65
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension Scripts\000003.log
Size 76B
SHA256 cc5dacf370f324b77b50dddf5d995fd3c7b7a587cb2f55ac9f24c929d0cd531a
MD5 cc4a8cff19abf3dd35d63cff1503aa5f
SHA1 52af41b0d9c78afcc8e308db846c2b52a636be38
SHA512 0e9559cda992aa2174a7465745884f73b96755008384d21a0685941acf099c89c8203b13551de72a87b8e23cdaae3fa513bc700b38e1bf3b9026955d97920320
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension Scripts\LOG
Size 289B
SHA256 24e4d5cb3db4eede49dd3a2a83a369872330a987715a302540d912ee15e31558
MD5 49eb063cdb5e678afee471ba5aa07cf0
SHA1 d33340fdc426a7e5bb121ecf8de1b62088f12502
SHA512 c83332114dc6ddf825ab56d323b99a3433402e2da4e1b1503e900914d4f5a593226857d5d6bbce5c3eea611f336421579fdbff3fb009578e8ef783c607e73d46
TLSH
T12FD0CD0454D6C7650A1C45DB9E77634EC7A0750CB945B9954F28CC4C704B60947D1A65
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension State\000003.log
Size 228B
SHA256 48d535bb330519c00d150578734c6cecb056c4b5cdd2a45c70590bc896d27d9f
MD5 af1d95e1f9eb485393273b25446e1ae5
SHA1 1d762c96b1c38ba6a849a5b76d12fac636b8d780
SHA512 826d207edd55401e1c13249350814adbb3ab00a135c46b8da8bb7267751c70580f183982cccbc1e47bf3e3f433f20ba1d2f2afd601fcb67b635c0e7429558165
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Extension State\LOG
Size 287B
SHA256 40003cecdb34c9dae5f98c0c3ac0e54b0bfa3a29b6955bd97993ff6a66b6a63e
MD5 3aad34cc3a4aad52ad695eb827887569
SHA1 406685c301f44f81dd317ab17734ca2596926277
SHA512 397e5b5274c16ce881d5251ff9efc33d8624d099bd69fe625cb23b65bfbfcf5e225e57565b0403e6fed19b722e10fcbd707347f48bbfb601929f4973bfa8687e
TLSH
T15DD0C20440DAC7950E1C89EB9E7B130ECBA0764DBE453B991E28C80C304BA4A97D4B68
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Favicons
Size 20KB
SHA256 02f23cca3ede27fcacdde46682238216ef51d66ca1a1da9dab48d9b0e9163f15
MD5 198e1617955c70ad9263e5ae041f3c36
SHA1 623233da85a56e3b75fbd55f5159d83f764db270
SHA512 ca7a586adc01389778c75ac85b1968f8604f39138362db57684b0ff7099be46653f8f98706b0f9aec9059d437a604b82021bc7be8c18dff6a7e60df89c40d2f0
SSDEEP 24:LLiwExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:NeBmw6P1U1kmBmI
TLSH
T1F592AA075E387407EBA11E7D266A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\GPUCache\index
Size 256KB
SHA256 7d2248050bbc6a382cea8b8a188ef78a6ee5c6cc9da8dda2413b09258d18af3d
MD5 d12e59ce5b9d115803171039c8f0abd1
SHA1 c62710e92e1f02415185d7b4899855281ee4de0b
SHA512 f039f91f4fac1a82e844c49cef893b2ea36c5c1c9525ba819873469605f91ee0d393f86ddbada2834a3c7a3bc0e92d8badcab7f1f8ff56988f7574b18f14203d
SSDEEP 3:LstlNllklkXl1K/l/:LsX3lPAl/
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Local Storage\leveldb\LOG
Size 295B
SHA256 a54714cd8322bf3a95fbf7787dac29badf3f9cbb2a4507cca424e14bf0568541
MD5 2703786d8ab3119f64f5e13339ba04f2
SHA1 b30d7537c1b6ef93bc9a43206987f4c67be4cb43
SHA512 420cd8343cc7835843eb6963c4c2c51879661e822444e03ff3b29463885db4ecb7092965d4ad47dafc0aca71bcf783038257d703d392cbeab39a2f811c62f74b
TLSH
T168E07D6180D7835A0B0C419F5E37330ECB30250CBD5A2B890D20D40CB48F40CC7C06A6
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Login Data For Account
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Network\Trust Tokens
Size 36KB
SHA256 61747eae344a1ed6b1bea06522e094eba6879049db5f918e55423dbd8981a881
MD5 f2a84020dd3bf7c981b9b69dc6b8951e
SHA1 362b54cbf3c0ad6473ca595d4b72930ad9268890
SHA512 75ef07c38033b51286eb208d494d3856e7238bf0b1e928c8c35b5ececa05e8b591fc908ff83f89a1695ba74ed2bd155e49d35222a8cfdf8dbe936daeed7ae1f9
SSDEEP 24:TLn3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T731DtX5nDOvyKDhU1cSB
TLSH
T1A5F2469BA93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Preferences
Size 3KB
SHA256 1416953291c598b10371bf2f93fc3c242176d92ac627352f6bd284a3ef7bf26c
MD5 020164be0c6a0963df6f9985a767a83f
SHA1 c6497b589c2a01000c78c89ec490484370aa9347
SHA512 cb8baf498ee8eb30a1bc8a259d477b4c8b86c39cf6f255f1d33fb95d0f285d88852d95f4819d2a4e966551fced8afc15b7163a45a6b97341ff3e00089cda84b8
TLSH
T18261346DD5A04CA31DF2A77AB83A5F82FE15467B0140285639FE298C0F729674182F6A
MD5 SHA1 SHA512 TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\hbd-inj-udd-3154992636\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/5032-0-0x0000000000800000-0x00000000011F6000-memory.dmp

Download

memory/5032-311-0x0000000000800000-0x00000000011F6000-memory.dmp

Download