b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Size 7.6MB
Sample260702-e2kybabx5y
SHA256 b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19
MD5 7a596f6c146b700e1718433e143f915d
SHA1 62063c13c00ae0061dedf8e106634bf16a2821c3
SHA512 1e13c909c253dc81afb7e6d8158e1ca4f20655b37bf4e9fcd3281a4aad78d44693d3c760b731a2e818fb9834e645340625a929ae86c628e4e513e36abb22e540
SSDEEP 98304:r4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA4Bw1+n+:EE8/5PCYkzq73AcGk
TLSH
T130866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware stealer trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4276_1127563817\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4276_1127563817\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4276_1127563817\manifest.fingerprint	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274400482492457"	msedgewebview2.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4748	msedgewebview2.exe
4748	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4276	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Token: SeDebugPrivilege	4328	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 4328	4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe	86
PID 4124 wrote to memory of 4276	4124	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe	88
PID 4276 wrote to memory of 4320	4276	msedgewebview2.exe	89
PID 4276 wrote to memory of 2868	4276	msedgewebview2.exe	90
PID 4276 wrote to memory of 2868	4276	msedgewebview2.exe	90
PID 4276 wrote to memory of 2868	4276	msedgewebview2.exe	90
PID 4276 wrote to memory of 4876	4276	msedgewebview2.exe	91
PID 4276 wrote to memory of 412	4276	msedgewebview2.exe	92
PID 4276 wrote to memory of 412	4276	msedgewebview2.exe	92
PID 4276 wrote to memory of 4620	4276	msedgewebview2.exe	93
PID 4276 wrote to memory of 4620	4276	msedgewebview2.exe	93
PID 4276 wrote to memory of 4620	4276	msedgewebview2.exe	93
PID 4276 wrote to memory of 896	4276	msedgewebview2.exe	108
PID 4276 wrote to memory of 896	4276	msedgewebview2.exe	108
PID 4276 wrote to memory of 4748	4276	msedgewebview2.exe	110

C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
"C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe"
1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
  "C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4328
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4124.3096.16291475815801659802
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff8ba2ab078,0x7ff8ba2ab084,0x7ff8ba2ab090
    3⤵
    PID:4320
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1720,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2
    3⤵
    PID:2868
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2040,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
    3⤵
    PID:4876
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2364,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:8
    3⤵
    PID:412
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3608,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
    3⤵
    PID:4620
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4164,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
    3⤵
    PID:896
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4140,i,14358926035663674902,13493613217186818718,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4276_1127563817\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4276_1127563817\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

cache

Path C:\Users\Admin\AppData\Local\Daily Team Huddle\cache
Size 1KB
SHA256 2e59cb4b283801af2a14560fc759fa10a40ec3f255a4bc0f1704af67fa9c54be
MD5 907ec7709531ed759d68b4a7a7e59687
SHA1 523f17bda845509f73ed7c999b6d9477fb7f01d7
SHA512 c9f63f46469b9baf8cb1a0f1d6f9b9c3b56402aa23bcc4b6bf3625a60b5979f50750844cfba6c899e10ef025c83abad1bff5689b05005256234250e116a5a6c1
TLSH
T18221C64E0D158009E2441F3EFDAB1DBBABF867102DE64A016D53899FC72499BA85461F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0c00cf8d8b7d180ca058b84401a6568eaa160a832b082fecb18f94cbaae22e5c
MD5 de8ca073e54591c6d1e441425c4bf4e5
SHA1 be5c7022db75e66e8364236087fa4191e3e34952
SHA512 956177cf745d674bfdaedd15b3dc9aa2a55f8076ea295cade171f2c10c80fe0332aeb48eaaa6c0b43b7b7651cfcb3db05cd26c06e4648277b2778b147cdb0d26
TLSH
T1DBD0123772110175C02021334443664C0400C11B504580049C3CD66D2A040705D02851
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1e03337a01196d0a779634d04ebf466019d18b5ae8c388cc8436d09d7284ac2a
MD5 be378c7f82fad3f565edb8745a8e3167
SHA1 cf299409bc4a6ad475e3f92089cc71a5bdf91988
SHA512 ea20f864b34bf94a3dc58338e1f27b2663033a5f033f8a6c7cec1ae47da2c0daf102e9c65eeb256969ad2719db746fd168fbc0eee09b1bae0df96beac0bc38b9
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 8523d7afe03a6adbb21fa955d0e0e7657b6fbe1da413048fd2a7793068d08b2a
MD5 4058924993dac46187e83bdb815eee74
SHA1 3cbc45ac1d295ef4bef404f894f9b799fd45b586
SHA512 e4040ba46691e380c9aa8f9ee38392d3d0d0e91c98635de092ce0536e14921576f836534aab7d3fb57cfc6c38414e0e37ca2db9d66b8201060968ca9f2c679d8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 f6e9fc7cc90f78b0ca0223ab88ddaf7c1c7ccd06674f248ba3b4a6f1772ea3ec
MD5 1ef5c029c094be1c9a7ece7cdd19697a
SHA1 10d56ca51590027a39fb3817847cb10b8e369425
SHA512 65a0a649611294da8c807eb48d9a9a6ac0696a37ee23c1e14863d237b058e106a566f4b01f970e39eb595b59fed07aaba41f70603309d4a5b6087376a1db61a5
TLSH
T113B012032FC305A1CF80417571C6004078310C351C330EF101734038FD4475F0000800
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 85474df3f965eba472e96afd2aca0e1f684bb3a0737be3f9b82f2d26eda46996
MD5 455bcae89b223e9f896759e00d070c4a
SHA1 2cb8d63ff035bd990da1d58fb85725037ef2a967
SHA512 dfb6475ff7f35a12c3c2db63c80e787acf00a3e56faf66d24b352b10f8058d03d2e0598fb06bd432188e07ba0ddec88430257c195b5b51e645a8f1e5fb53a06e
SSDEEP 3:LstlNllkll/lvsX:LsX3lEtvs
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59ca1c.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State~RFe59ca1c.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 ff005ce559bac7c31c4f7fab48e7b1dc6565423027267f59dbb999f1b89a4d3e
MD5 818e8e360d4aaf089f5a927cf166aaf9
SHA1 0157ce828b2e4d08617d7c846e24cbac235a0fa6
SHA512 0da5ff8a6a32fdd095b207d47dcaa2c86cd3054632fa890908425ac365c46498201736c4c5736f3b3fefcb259a64d71cc33346b458b2a56d6ce0ec5273d06af1
SSDEEP 96:stD05coHcb9rcff7dZ8i0oEoNkt3m/7qx+WVHMSm+uecJyG41idQjX+gd78MEB:stD0WMfJZ8pFbW/S+WiTyJwd2f8M8
TLSH
T172D1B8035E7869774CC7E2197A35BB16E2FA503266D50E58E7FCC71C09DA6CC620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 c40dcc2c05f830464b6f008bc039b00662a5eec9562c0d9a31615f74a06c10f2
MD5 d1fe567b75c0fb31f1cedc04eff6ee27
SHA1 c26b3a28304dff63b0738eb862e53f45e6086c4b
SHA512 499942bac4afd5d2b7408a850ca47eca0b336838911e0f04a2ec9eac0665b44d422aac2164f8d5b9d45383b283f03bf324aa4625a4a499ee0d4cbee4c7d2d8b1
SSDEEP 96:stD05coHcb9rcff7dZ8i0vhEoNkt3m/7qx+WVHMSm+uecJyG41idQjX+g8k+8MOB:stD0WMfJZ8pabW/S+WiTyJwd208MC
TLSH
T1C8E1B7035E6869774CC7F6197A35BB16E2F9507266D50E58EBFCC70C09EA6CC620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe592cf2.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences~RFe592cf2.TMP
Size 6KB
SHA256 8cd0bc7599d6ecb96c40921e8370b8bb2b55cd38feddca39ee8380b875c608e7
MD5 e2cf5921002c6aefd33eb6746fdafa92
SHA1 86aeb86b35d9b11cf33f8ce5328fdb6121ec40d2
SHA512 b2fb0073eeef811bb7b909197e33a8817d33c4af4c34d5a9d20403caaacf215d609523e5481072787438eee540214e42290e7104de014f92df4ae8080dcca9b6
SSDEEP 96:stD05coHcb9Hcff7dZ8i0oEoNkt3m/7qx+WVHMSm+uecJyG41idQjX+gt8MEB:stD0W4fJZ8pFbW/S+WiTyJwd2L8M8
TLSH
T15BD1C7035E78A9774CC7E21D7A35BB06D2FA507266D50D98EBFCC61C09DA6CC620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 2KB
SHA256 32fd2a878c80160a6797c903bf400c3f5ef525f8ce734b60525ad78dfcea9bdc
MD5 08b795df56a1aa1317289870e1492fb2
SHA1 5db2fc1d8f82cebd4907f6a366cd4ec288ed700e
SHA512 8ebd28de5d98babcc82acf057bbaad7f67b1748fc5bbede803d10884f279874f0b8556ee2dcb91364d6536ad62b20d1e7ce2375a8022c7a77ba01943fc4b6bc4
TLSH
T1A451A733B854AB3689D39A48B9893F0BEE7690719A612F5099DD0B0C07DF29C2346D37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 3KB
SHA256 ebb086ff60ccdb8f65da68e9a21cd73ad049f24b229e6e66bc8340d12cbb9479
MD5 d5db60391886a7ef29da26a130f75510
SHA1 5f9b2e03f466d1ae2ae10ab8bf3eeceb7a579fe6
SHA512 a7d9c0651ab6a0baf7e5e4cedd227bcf6cf7ebfaf34921bbfbaa7a8706b0f708f08216800560c21270a9505b74b809d4b331ceb1193f216caa567cf9dc91c25f
TLSH
T150719727A8A4E9378DE3AA05B9C52B0ABBA15133D5953F98D9ED0F0D06DB3C81341D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 4KB
SHA256 f13e296c0afc280c1b389932f00b4f331e3d5951e7699a8893306eaed6a1a870
MD5 7087396457ec0b3a1a25c841727baeb6
SHA1 de7a3c699c7e5267b923a1dd7e6333087ff5e3f9
SHA512 f44cb7648a8f8154276e1ebb212dfc0f3481c7895729adb2f98c5841c6577c4c43ae7be77a0fcaef45c983f4f3ed627dbac6ed50ca9800f71544b163cf1c9f36
SSDEEP 96:zu+bNkCExzfr/8V8Frh/cInURoDoto+5nQD+BABZE6FyZQolTWlza:z5bNbEn/nooDUhm+ABZpoRV
TLSH
T1B0919723A4B49A378DF2D909B9853F07AAA15033D5957F98D9ED0F0D06DB2CC1345D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 4KB
SHA256 ec85789621ca6dc700e37665fa48849010ffd5ae23b0f88868615f6c1b1b759a
MD5 7a66cb471de39eb3bf5295d1bd435ae7
SHA1 c12b57b001b3c6daaf66fce4c2f83d4aab35ebd2
SHA512 ab19bd68b17ee927fe9608e62546d7c351720ef0aa89ce0115a466a4340de25bf07d48bdbebc1239bf39b6713b854cd348dba60f04b47923843a76aa687b074e
SSDEEP 96:zu+bNkCb1xzfr/8V8Frh/cInURoDoto+5nQD+BABZE6FyZQolTWlza:z5bNbTn/nooDUhm+ABZpoRV
TLSH
T1BD91A623A4A49A378DE2E909B9853F07BAA19027D5953F98D9ED0F0C06DB3CC1345D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 17KB
SHA256 3480f708ecdc6b0e5476dca48c392cb8cfa8daac442bd861e6c5ddcde0be5e19
MD5 ece24a56d2837c874a0b8fa4dd82cf7a
SHA1 f3f4664eb0cefad3b82c21c816e9779c4fb46ce4
SHA512 00865c806fe280841bffdcccd84d7c7a858477741fff9f4b52da7012a1870ddc905f46f0405fabc7b7ffe5097d53e845a8f2b50aa3619647a6fdad82522c5c77
SSDEEP 384:zHsrv+89zHqlDNP9oid6NbT/N+A9WtX8nczkwyiO5tNK:Arv+4UNbdY/EF8nYkwyiO5tNK
TLSH
T14A828C32E468D7339DF29685F58ABA077BB4616256C50AE4C8D90F8D468F4CE230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe588da5.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State~RFe588da5.TMP
Size 1KB
SHA256 cbf190e93ce4bb0d9033dec36157b1419f09a917c333e1ba4f0126168179c7a8
MD5 75d507803d39785d18a77d4b9f8a615d
SHA1 0ea4d6c67149bda489ac02cc946f27caa523b124
SHA512 007afe33d7d57637b5649350c940a18bbe092d89c6d0f6fd2b26933f45b2c0e28662d2ee2e9c59309eea72e2a7af7438452fe504fb2e50bc945b66d50e41379d
TLSH
T188216233D4D5AE75E9826949B241BB4F2E60907681245E18E5DE47090BDF2CC4B6ED32
MD5 SHA1 SHA512 TLSH

Submit Download

cc4a4e53-72a2-4d06-8a68-729384d3ff2f.tmp

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\cc4a4e53-72a2-4d06-8a68-729384d3ff2f.tmp
Size 1KB
SHA256 b4a146d0c53ac6333a134c8bfedaf08d90be923982354c0b3e54c80172661413
MD5 3c7a23d2c2edc9cc92551f34183d90b0
SHA1 eb3b9e1c524185b19c3763d74ecafe72a4bd5728
SHA512 dbeefae985ab1d42684ff8b4e4ca3edb1931d307751f2b6ddb7198d4d6740cb7c894859e6c61cff0c832d0115b8fb7d98b2f664158f24d839228c53ee4f0bc19
TLSH
T1CF318573E4D06F71D8826645B2457B0F6E215036C1604E48A5EE4B080BEF2CC566EE32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/412-78-0x00007FF8D65D0000-0x00007FF8D65D1000-memory.dmp

Download

memory/412-79-0x00007FF8D6300000-0x00007FF8D6301000-memory.dmp

Download

memory/2868-28-0x00007FF8D5700000-0x00007FF8D5701000-memory.dmp

Download

memory/4620-149-0x00007FF8D5700000-0x00007FF8D5701000-memory.dmp

Download

memory/4748-318-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-308-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-317-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-316-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-315-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-314-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-313-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-312-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-307-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download

memory/4748-306-0x0000018BB1F50000-0x0000018BB1F51000-memory.dmp

Download