bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 01:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe
Size 3.9MB
Sample260702-bry6eaax5v
SHA256 bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803
MD5 0388207d9609e26500953aab2a670256
SHA1 56e3b8ac20f95dbd6459f2ca67d1381f0b1043a5
SHA512 4500a8afe05e9697577ebcfc5d64808f139f0ef845b451774a5de0c46187618dbb4fce4fd85706fd6488a6ce2ad9520cb515d553f82a97c281dac35072fa2793
SSDEEP 98304:WYl57HXHfKRp0anl0bosnlDMWHDNS+BxUcFWBXBnEgLu74bQV3n3QfY:Wa7H3fSRn5slYmg6iRnfCuA3n3Q
TLSH
T1E2163312C1E1F2A7FE80C476593650AAC7D9CA1E8294522F1F163BA1D833BD3EB4752D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence spyware stealer trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2668	daily-huddle.exe
2540	daily-huddle.exe

Loads dropped DLL 1 IoCs

pid	Process
4728	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\DailyTeamHuddle = "\"C:\\Program Files (x86)\\Daily Team Huddle\\daily-huddle.exe\" --tray"	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	daily-huddle.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe
File created	C:\Program Files (x86)\Daily Team Huddle\Uninstall.exe	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4784	taskkill.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2668	daily-huddle.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2540	daily-huddle.exe
2540	daily-huddle.exe
2540	daily-huddle.exe
2540	daily-huddle.exe
2892	msedgewebview2.exe
2892	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5520	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	4784	taskkill.exe
Token: SeDebugPrivilege	2540	daily-huddle.exe
Token: SeDebugPrivilege	2540	daily-huddle.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2668	daily-huddle.exe
2668	daily-huddle.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
2668	daily-huddle.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2668	daily-huddle.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4728 wrote to memory of 4784	4728	bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe	88
PID 2668 wrote to memory of 2540	2668	daily-huddle.exe	93
PID 2668 wrote to memory of 5520	2668	daily-huddle.exe	95
PID 5520 wrote to memory of 5884	5520	msedgewebview2.exe	96
PID 5520 wrote to memory of 3668	5520	msedgewebview2.exe	97
PID 5520 wrote to memory of 3668	5520	msedgewebview2.exe	97
PID 5520 wrote to memory of 3668	5520	msedgewebview2.exe	97
PID 5520 wrote to memory of 3668	5520	msedgewebview2.exe	97
PID 5520 wrote to memory of 4500	5520	msedgewebview2.exe	98
PID 5520 wrote to memory of 5424	5520	msedgewebview2.exe	99
PID 5520 wrote to memory of 5424	5520	msedgewebview2.exe	99
PID 5520 wrote to memory of 5424	5520	msedgewebview2.exe	99
PID 5520 wrote to memory of 3012	5520	msedgewebview2.exe	100
PID 5520 wrote to memory of 3012	5520	msedgewebview2.exe	100
PID 5520 wrote to memory of 3012	5520	msedgewebview2.exe	100
PID 5520 wrote to memory of 3012	5520	msedgewebview2.exe	100
PID 5520 wrote to memory of 3012	5520	msedgewebview2.exe	100
PID 5520 wrote to memory of 2892	5520	msedgewebview2.exe	104

C:\Users\Admin\AppData\Local\Temp\bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe
"C:\Users\Admin\AppData\Local\Temp\bff4f6a2564f2b1271d01c8dadc658785d56ec563f1450e16da032fccd6f2803.exe"
1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4728
- C:\Windows\SysWOW64\taskkill.exe
  "C:\Windows\system32\taskkill.exe" /F /T /IM daily-huddle.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:4784

C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe
"C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe" --tray
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe
  "C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2540
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2668.5212.16810953562831697013 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5520
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView /prefetch:4 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7fff8ed95fd8,0x7fff8ed95fe4,0x7fff8ed95ff0
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1776,i,8211953503202054876,17903726212789528480,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:3668
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1776,i,8211953503202054876,17903726212789528480,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:4500
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1932 --field-trial-handle=1776,i,8211953503202054876,17903726212789528480,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:5424
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3420 --field-trial-handle=1776,i,8211953503202054876,17903726212789528480,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c /prefetch:1
    3⤵
    PID:3012
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=daily-huddle.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4320 --field-trial-handle=1776,i,8211953503202054876,17903726212789528480,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

daily-huddle.exe

Path C:\Program Files (x86)\Daily Team Huddle\daily-huddle.exe
Size 7.6MB
SHA256 0c5609dc4e329372b8a08fff7d0a77762fbebc5ff15b17ee770cee6ebed54b88
MD5 46285269243b7083649bcf2c3ee46222
SHA1 14ab8afdb9c86fe474732b247e42a8dc333e9aa3
SHA512 e4029079f0776ff09e3d081d26c8e4392a3110023c0da0f6a5f743b6cc546cbab2749a95a5aecaa2f496d477d3574a0bc8c916ac9b741a5e68bb3cb1b3a772d5
SSDEEP 98304:g4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA46w1+n+I:3E8/5PCYkzq73ADGkX
TLSH
T143866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cache

Path C:\Users\Admin\AppData\Local\Daily Team Huddle\cache
Size 1KB
SHA256 2309f6144c3e34568db8b54adaad07e4f40629deb7b91c744fbb1bbf11ba4799
MD5 3d4ef166c820c36359e719ccc1ce040b
SHA1 8058320b2a946c69ef57322ba24fd1b32e88b4d1
SHA512 8afc144a75704203b68e7b0279ff362b9abbd8df14f9e4f50ac684893909e9c8a4790b99c3a401adcf12f1e549c895e06efd30db62f67fad40badba1b18745f3
TLSH
T16521D796532E5019F2CC31F0129BC8012DE28C252D2687CCC202F1B763581A65B75B00
MD5 SHA1 SHA512 TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl37E0.tmp\nsExec.dll
Size 7KB
SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
MD5 c953dd0aab774f1446fcd63fa7c5f613
SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
TLSH
T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 483836d33ce22f737d46cd0ff8ba1065908f7be3c642d453993e16bad3174b18
MD5 e784a73e68be3b1c0d6e88296cf3496c
SHA1 972d805685c8c78d45e948a8334fd018897c03ae
SHA512 d9a8cc54d68f954fdc83d14c5a414db39f3254ef8756035d7d94fcdf9cb7526b0d09f3e5997c367e8ee9d0f843a12517c489fd1e9a044df2969b20df84361f72
TLSH
T1FED0043D710D4014D071303741514D005705CCC014C505410510550454D040010C71D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6867f3514e585f5ca330fcc805d53b5a0351eac651d3da9778ec0c5ffd69bc1d
MD5 974945e886edeabb27b078505cbde1df
SHA1 aa7fe3ed03e9d0e16b2018562b87db04dcc171d4
SHA512 b04376ac6be1ad7cef73a948b3e0276727d1c0a3fe49a33204bd72163e3f6ee2f7bbc3d958e323ae25880d24e67f9707c33b45af9120199110827028cb0b6f82
TLSH
T1A1D0122F32064138C030303301436D081901C54B408940415828DA1D6A9445019474D2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

71d712e2-cdb0-42e4-8ce7-e113b4ea0a10.tmp

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\71d712e2-cdb0-42e4-8ce7-e113b4ea0a10.tmp
Size 6KB
SHA256 f56691a409318cdca8474a5b962db98ee36be6e32f391e0d69b38bfeafa8bc98
MD5 b1f12e45b60d48becaa4056a56bd512d
SHA1 335865dbf651f13680fd4f235994a966dc702d5f
SHA512 ba2f850d5537ca987d04829fb049c5ea2a7fd9cc95d023475f528f68b192a037b6e9f842f0e80656b8dc437343f8300084ce5b9513319724629e12ccbd059c06
SSDEEP 96:ri/deExGab9sktydo616Z0Ms7/x+6MhmuecJC51ejedK+gGhHvI28XM1C7K:r6YEc4Eo6MsV+FdC5QjzwAG6K
TLSH
T140D1A606AA2469BB4CCAE14CBA35BB07E2F5507165D11D58E7FC8B1C05DF6DC231780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 51f69388bb7b409944be11802199a900855a664dee6835b59ff41889ee4b437d
MD5 422237344d025013658712aa0dcdbadd
SHA1 d2c6266f76ac3a5134b25a0383ec0714ed91189d
SHA512 551cf22156f02033f50bda0ce735cfc4d1c0497e3f9adde2be779d669cc35ed71aa072e4d3df20864cd9cae2c130435618eeaf89ea0388bfcf9f701d1b326430
TLSH
T108B0121D631D0482CA40027045FF00C07430881112230905E1B2C03CDF4134B0604C00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59982f.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59982f.TMP
Size 48B
SHA256 837871f346cdb7c42bc22e28845d8bfdf121c98827aed9aaebc038adc79a8861
MD5 6b116523e17881d6b1b00a9a792a6f63
SHA1 29dc3fd06cb0f89202f5eb1db9839d7bd0298e8b
SHA512 20ced665aa6fd0925d097955550aa277ebeef6ca27119ac94af447c582c4ec868bf6e5c9f6b6d881796ea592d21bd0ee25e3c298b1cb5a1732b7adee01f4ab3e
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a72df.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State~RFe5a72df.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 1a4ac569861977c2fa4248d1bc4022b0f9992bfeb82a6c3d7cae39f7111f7978
MD5 6728e675c22680e90fa443070009c2d8
SHA1 330eba2ef48bfe3af3c6a2637206cb7036f551f0
SHA512 65b273dc798dc5f079c45942a81c38984ec6b28410e24c17ebc6dd2938cbac6a529456af999f922a87f95d25d5dd7a3a7f3bad598568bf1b36f43981022f6a37
SSDEEP 96:ri/deExGab9sktydo5h16Z0Ms7/x+6MhmuecJC51ejedK+gGQUHvt28XM1C7K:r6YEc4EonMsV+FdC5QjzyVG6K
TLSH
T111D1C6069A246DBB4CCAE508BA35BB07E2F5506265E11E48E7FC4B1C05DF6DC231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 b63dd64a18351c8c6ac0ec3857bf2191a92593a9d7abc069308fb7584cd05bda
MD5 bed0d68e3b55ebb64a2b61ff46be1f08
SHA1 90a9c312c8e785e968a3e7350401c83f09c99574
SHA512 31a3b8926b4fddda7d4c9b5eb26de1bb84a9026402cae2b7ccd21cf6fb2bd4fa6708174c33d0e0bade9d241f715bec8df534eef1e97643a795bd1e3eb5e69e84
SSDEEP 96:sti/deEx9Gab9sktydo5h16Z0Ms7/x+6MhmuecJC51ejedK+gGQUHvt28XM1C7K:st6YE+4EonMsV+FdC5QjzyVG6K
TLSH
T12BD1B5069E246DBB4CCAE118BA35BB07E2F560A265E01E58E7FC4B1C05DF6DC231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 0d9be13bcf1cf0eb5de88570e399613d9c4e9d7182c20794fb6d5eec534a396a
MD5 1d5b0fe0f473970ec141257f2284ebae
SHA1 50360ee0ff93866f950f89d349c50dfbfa32e278
SHA512 525c18e8a830464b396c4232db0b4d0bc3648e1381ac775edeb2e02d254553fd3577b71a4b0b20dfb81733c9fe108384987606b5bb137ae3feea02c3e606354c
SSDEEP 96:sti/deExGab9sktydo5h16Z0Ms7/x+6MhmuecJC51ejedK+gGQUHvt28XM1C7K:st6YEc4EonMsV+FdC5QjzyVG6K
TLSH
T1B8D1C6069E246DBB4CCAE508BA35BB07E2F560A265E11E58E7FC4B1C05DF6DC231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 4KB
SHA256 d416809e5272ae99928b733384517256ecb631f7a7a8b47c9060dbd2d13107d5
MD5 ef95eed2562f2c907c867426b6d218c7
SHA1 abc9af3d27f09ad3b9614aef1a6f26486ce49d94
SHA512 010c0d827e5f76569ac2b54c2c8d3bdaf6be7127b112616d9f8c12a4a7d5b9e36ae9c11e9bf96f478c53da5b6e4ee793cb7ab77f71b4f56fadb3523a2e994ae0
SSDEEP 96:fYNkGSC+fkg6fjCj98kh/cI9URoDoto+5frBfZC6+gSZivTRJka:fYNBSSg6OeoDUh9fZ+GL/
TLSH
T105818427A8A4BD7749B7C9487D862F46ABA04067D6963F99D5EC0F0C02DB38D2347817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 5KB
SHA256 9bf0b12628dd6e912a29f9390c59cf19b2cdce819ede7b493060c725e39e1b4e
MD5 62f31964483d1719783a17439c439c88
SHA1 7157ecd4fe3e4c94f3c5912fab1a7f0604f1e723
SHA512 c97165054d665dadc89bcc5a38c1d3b7559412a0aca545a0ccbca76dc7dc4f121c1b5b9ad2a3f1b8d7836e774e2deffc82b1d9072f4f8428389dde8caad78146
SSDEEP 96:fYNkGSC+fkg6fjCj98kh/cI9URoDoto+5frBfPC6+g5y+nRueZ5ZvTRJka:fYNBSSg6OeoDUh9fP+WyI3L/
TLSH
T12AB17236E8A0EA375CF7D6857A467F86EBA0415296C96FD4C8EC0F0C42CB69E1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 16KB
SHA256 46a35b95f7c8de46f3b716decbb680e011e2e870fa1a973f73b45635dd04557f
MD5 61d7eccac1cf264cc3afca1754f6e528
SHA1 0a15f51ef7bc8bf2cc78ef63b10afb4f1fbd8689
SHA512 1fd364ad43f9cd5166cba0b876e5b36cc42d8d6e07fb93c76f6410c458df337ed48fc74361c0e1c7299bf0713461aba8fa35bc9c1c26c4c87d010b73df06ed53
SSDEEP 384:ysrv+89zHqlDNP9oidgNBSSgNkHyIb4isdHZNR:9rv+4UNbdKNBb4isjNR
TLSH
T188728E33E878EB379CF79685B5877A477BB4519256C24AE0C8D81F8C428B4DE2307D02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 2KB
SHA256 ede06f4b25d6c02a8f006030ff7092f262501af74f8bbcc1d1152d411645470e
MD5 ceb4df194d24502b07f889978e3fc35a
SHA1 d04391d32432b228455443cdd7007f3e85377071
SHA512 c03ca6752b139707d1168b1d6ec1d9b5c4f416a8a35d914c26845f924df0f3611dd8242cb85192ee312eb90fc62f0bcde55235bb15b10acdeffa2322a47b4218
TLSH
T166516233A854AF7795E7D6447D8A6F53DF6540A19B622F10A9DC0B0802DF61D2347C3A
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 3KB
SHA256 4f940d26ace76634cecccd8e9f0af85aea4e56bb7a6df75075ae78e0a9b81f23
MD5 cc7deb9d098fe8fb2f05686d49c0665f
SHA1 85819a40c62cb932c872db4ec58e08835c8e07f1
SHA512 5926f6b6b7cb7773dbe89d6fab3cf52a9fd5238d3315fc38c85945f5cf3e02581231fb1b73dec959426da6270ac3db93c005c7b747d4a4196a7aa1f5dc094226
TLSH
T14771963BA860AD7749E7DA44BC8A2F46ABA14037D6963F54D5EC0F0C02DB2482353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe594656.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State~RFe594656.TMP
Size 1KB
SHA256 529ea2778e18a4e854b052200b29704c12cbe7f1540921a8507b77c57cdd618d
MD5 f84fff4ed91d9dee897b000884f600f6
SHA1 fead4f36f0dac684432a6d5a97afef3666a7a3fd
SHA512 92b7258f55906a8dedbb6584c49153688b6d26d4cc2d75b91c2e19f73693a8e47df491d1dbe68a6a4c0861dbb2ff07f68472dada42b2d54c4376b919c8a19ed7
TLSH
T1413174B3E4906F7368879282754AAFC79F60007682426F04B4DD4B0802EF54DB62FC36
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2892-278-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-287-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-285-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-284-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-282-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-276-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-286-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/2892-283-0x000001B784600000-0x000001B784601000-memory.dmp

Download

memory/3012-116-0x00007FFFB0C30000-0x00007FFFB0C31000-memory.dmp

Download

memory/3668-74-0x00007FFFB0C30000-0x00007FFFB0C31000-memory.dmp

Download