b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19

Analysis

max time kernel
85s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Size 7.6MB
Sample260702-e2kybabx5y
SHA256 b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19
MD5 7a596f6c146b700e1718433e143f915d
SHA1 62063c13c00ae0061dedf8e106634bf16a2821c3
SHA512 1e13c909c253dc81afb7e6d8158e1ca4f20655b37bf4e9fcd3281a4aad78d44693d3c760b731a2e818fb9834e645340625a929ae86c628e4e513e36abb22e540
SSDEEP 98304:r4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA4Bw1+n+:EE8/5PCYkzq73AcGk
TLSH
T130866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence spyware stealer trojan

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2639994890-966400312-4246138405-1000\{7A77A472-5085-4CD7-8DCD-485E0AC28343}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2639994890-966400312-4246138405-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2639994890-966400312-4246138405-1000\{D73650BE-3DA1-4E00-9DA9-125BDDB67151}	explorer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5712	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Token: SeDebugPrivilege	3248	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Token: SeShutdownPrivilege	2652	explorer.exe
Token: SeCreatePagefilePrivilege	2652	explorer.exe
Token: SeShutdownPrivilege	2652	explorer.exe
Token: SeCreatePagefilePrivilege	2652	explorer.exe
Token: SeShutdownPrivilege	2652	explorer.exe
Token: SeCreatePagefilePrivilege	2652	explorer.exe
Token: SeShutdownPrivilege	2652	explorer.exe
Token: SeCreatePagefilePrivilege	2652	explorer.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
4832	sihost.exe
2652	explorer.exe
2652	explorer.exe
2652	explorer.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
2652	explorer.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 5964 wrote to memory of 3248	5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe	88
PID 5964 wrote to memory of 5712	5964	b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe	89
PID 5712 wrote to memory of 5220	5712	msedgewebview2.exe	90
PID 5712 wrote to memory of 6096	5712	msedgewebview2.exe	91
PID 5712 wrote to memory of 6096	5712	msedgewebview2.exe	91
PID 5712 wrote to memory of 6096	5712	msedgewebview2.exe	91
PID 5712 wrote to memory of 6096	5712	msedgewebview2.exe	91
PID 5712 wrote to memory of 5876	5712	msedgewebview2.exe	92
PID 5712 wrote to memory of 1920	5712	msedgewebview2.exe	93
PID 5712 wrote to memory of 1920	5712	msedgewebview2.exe	93
PID 5712 wrote to memory of 1920	5712	msedgewebview2.exe	93
PID 5712 wrote to memory of 2208	5712	msedgewebview2.exe	94
PID 5712 wrote to memory of 2208	5712	msedgewebview2.exe	94
PID 5712 wrote to memory of 2208	5712	msedgewebview2.exe	94
PID 5712 wrote to memory of 2208	5712	msedgewebview2.exe	94
PID 5712 wrote to memory of 2208	5712	msedgewebview2.exe	94
PID 4832 wrote to memory of 2652	4832	sihost.exe	100

C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
"C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5964
- C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
  "C:\Users\Admin\AppData\Local\Temp\b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3248
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5964.2852.2874818326881661686 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5712
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView /prefetch:4 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffdaf965fd8,0x7ffdaf965fe4,0x7ffdaf965ff0
    3⤵
    PID:5220
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1796 --field-trial-handle=1800,i,6287383484815752540,12376353548633012925,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:6096
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2204 --field-trial-handle=1800,i,6287383484815752540,12376353548633012925,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:5876
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2312 --field-trial-handle=1800,i,6287383484815752540,12376353548633012925,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:1920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3380 --field-trial-handle=1800,i,6287383484815752540,12376353548633012925,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c /prefetch:1
    3⤵
    PID:2208
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView" --webview-exe-name=b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4480 --field-trial-handle=1800,i,6287383484815752540,12376353548633012925,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:5196483db7c538e9527f310c801242dc4971f44c
    3⤵
    PID:1960

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4832
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Boot or Logon Autostart Execution: Active Setup
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2652

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:4268

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:2060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cache

Path C:\Users\Admin\AppData\Local\Daily Team Huddle\cache
Size 1KB
SHA256 319cf72d7583eb6d9f4726e370f4f0b43d0181b56a83c79224b9412f5453b5a5
MD5 fadd532ad09f161da214f9009e854a11
SHA1 c0bd84771d79d44f2e6c8453002cb1f556acc87b
SHA512 b6f16d9080ca4f0d37468129dea281a3135917f60e908c7c1421cac16628d13783d2bc52312e87f05e1f1b93c19cfc2e88480a854367e1e2844c55c2bac5f88b
TLSH
T18D21CA816559A0C0D26B40F48759041E3D64EC5C92FBCD869BDE469EC262069C251EF7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b1a925b80bd2b2ee24659a77795e2e0dfa6201de543f8d00fc5d9ba7342dd48f
MD5 9a3369bdcf764a9bcfee9336bbb40436
SHA1 adfd56c3cd3ca78181da90b21ca91aff6de85c16
SHA512 67a0b21e79e3e11abc208e2c6b5ea388e8c1f6264bd8076153811ee931bfd7eb759e0819ae0bdff1f43b98752eb741524b7cdea7a8fe8f66deab5bff6ea5a750
TLSH
T1A2D02417771147FCC13031370013730C0540DD0FC445C400743CC51D1F040500D07443
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9d957e8a4b0955446a263dd5c05453c145870afa1ebcabb7f60bc799f79eeaea
MD5 03b675f1e1498bfb87175cf6fe54032a
SHA1 3f55041028189467652be6508d047e583fb31b5d
SHA512 93cf4b7f837a3a17e8c8ff47ff7e81267301d84fdd79f97e37e180b878b6ef0793bcb0a44ee447c6e03dd18792df0b748142a226fd955ad45fb2521e3a8679b6
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 5177a023cfdaa034f2f8807e6ff36405cb4e887a7eb983b3cda5e52af6b2ffd2
MD5 751fe59d8716ea4159ce5477c01756e2
SHA1 f06b96b17d6fdb4a989c26e58e96b7cc72c708c7
SHA512 ca29837c070ff9271cc41b3944fcb4db6d949b249ea5182fd9a95699f138934b0318677ba6331b8e4df44acc66dd479a70e93b525dde3bf67721c83049505503
TLSH
T1F9B012013FC30592CB4446BD71C608403C3208201C330AF501721038FFD435B0100800
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597296.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe597296.TMP
Size 48B
SHA256 372abcb647277ce14219392fd50349b3e4f4477ef1603da6bc4dce2d4abbd26b
MD5 9fb55f97a541119e357d7799bf21c98f
SHA1 ba0399cb28027cc90fde110945ccaf443f5e38e9
SHA512 8cdea448a9382e965d622ea59bb08a03f2b9538580a01bcc5f1f93e000836ab98a9343436e96902b4a1325cc7bfe2a4ec908ead486e5f6355430b0a7c9de9374
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a5e3e.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\Network Persistent State~RFe5a5e3e.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 2a905752bfca3a7091a2717cc32d434095eeb5cc94f221eeda6e06c51c547446
MD5 f44a426be04047c5e1d40f7a30e3f822
SHA1 e46eb4a3207b3e3640c953a85773366d459792f4
SHA512 1d4f85a5a8b98857d6469a587e9b0199723a67847fb4ee7712352fced6a0fce78db2aaa47b8ea84cdace279a48f6e1ea965b9f540c70fbf9a92936038b503aae
SSDEEP 96:rp/de/Jib9XkAdo5h16Z0ys7/x+6MhmuecJFq1ejeE0K+gPg6Q28XM1C7K:rNYyPonysV+FdFqQjtwG6K
TLSH
T12AD1B6026E24697B4CC7F109BA39BB56E2F9A03265D51E48E7FC861C05DB7CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 4d430ce1ec749fca24ed4def98f41d7be9d277e526acab05913da7f8d72b54e7
MD5 68a0a64b3a8e70f6225f4fca6681bd67
SHA1 0dc50301f1868702c4bbdbc92b16e3094f42cf30
SHA512 24019f62e1bd699dd1b691de71345faefc5b26e6171b9369354288a5164a341da361b973b8017c27ec56e3b18a01a0aae854ef7876c3703c2b72d9e57b10e145
SSDEEP 96:stp/de/Jib9Xkeo5h16Z0ys7/x+6MhmuecJFq1ejeE0K+gPg6Q28XM1C7K:stNYyJonysV+FdFqQjtwG6K
TLSH
T19BD1B5026E24697B4CC7E109BA39BB56E2F9A03265D51E48E7FC861C05DB6CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 b3a1403cfc2a45e8abcfe92682d88819e27b69017a2dae47376182cb136c2d8a
MD5 8bdfe248e42841935d607c628e43a349
SHA1 d7bfa1f91f6480cb7b0ed376d4c75748f2fa9323
SHA512 7fc877336308f057fd5dde07e2c44cd05299b1dffa3b848574870bdb54bfcc39953682d16f6c09f22b21914bf9f3d923246f1377979d8c061caeeda89f9a206c
SSDEEP 96:stp/de/AGib9Xkeo5h16Z0ys7/x+6MhmuecJFq1ejeE0K+gPg6Q28XM1C7K:stNYQJonysV+FdFqQjtwG6K
TLSH
T1F4D1B5026E24697B4CC7E109BA39BB57E2F9A03266D51E48E7FC861C04DB6CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Default\Preferences
Size 5KB
SHA256 b83673586a32f886fcdf390aa962170397b225b00bde1cb0f0a951a70d75111e
MD5 a9f4aac6890f46b22b17768199798c1c
SHA1 8f491c50fad916c07f4895dc5691cfe0c6f847b1
SHA512 ae7d7e9d90438a59a4d2483ffb07c15dce558a6b55639696f7b369031ec95c5f0cac954f2558d014f36bdb141543e4ea7651f38c16d4834959db55847ace19a3
SSDEEP 96:rp/de/Jib9XkAdo616Z0ys7/x+6MhmuecJFq1ejeE0K+gO5Q28XM1C7K:rNYyPo6ysV+FdFqQjt9G6K
TLSH
T10EC1B7026F24697B4CC6E109BA39BA57D2F9A03175D61D58E7FC861C05DB6CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 3KB
SHA256 6868eae50cdf80f03770c2b86040b65b3c0a928ce4bb98df637ec2f96cd257b2
MD5 f133a4a680d9f289de8d446622ec282b
SHA1 eaa62325208da2c71039a5db6693f197bf8451e0
SHA512 04a73ed6ee4e02f28e95cf4c6345a0b99e9b16093dd6d7696c89ad49b3f0d4e087353eabe80c3732f7c2d1d4d246443720d3f1900833a98bfeb6edd251ab2cf4
TLSH
T14C81943BA9A0A93749F2C90579863B03EBA580679A967F99E5EC0F0D01DB6C81343817
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 2KB
SHA256 147208ec042b974711e74551db682c7c8488d338470ee050f9f775655079122c
MD5 fcc18c977650d8924a65449714295fce
SHA1 ac248ed6f73fca50af4b9f2d2277d49767b0b9ba
SHA512 6aae42a8fd17781dc2df809cd858e335aedf924ec902b6fc037c688bc25f6d8b16de18fa035915960ec45c820122a41d353e814d5dbcabb7c76c569c5da7bc91
TLSH
T1C75195736D505A3785E2C60539877A13DFB980A59B932F58B5DC470D01DBA5C2703C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 3KB
SHA256 6a044978aa36afcfc2a491d2359e49486604870bbf9fd6476d680746cb2c170d
MD5 ec61ccf024133eb4ad01793ab041f06e
SHA1 6f3d4c0c02a90cdba1e0aaa9eeec57416054ae4d
SHA512 2263a18f35465afcadc0aeddd8196e0b1781289fb28fc6fb9cff3235d3afd131dd7369780513eb93fdf0eef260b239459797335e971b6ad0c5d8a87ffe53c70d
TLSH
T15F71967B6D60993749E2CA0579C62A06E7E58036DAD27F58E5EC0F0D01D76981343C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State
Size 5KB
SHA256 4dc2726072f4e127c554b834e0c41141eb06251b25b06d02916f7c290a897191
MD5 cd909982c75c60c6fa9b61a73aeac096
SHA1 f4e10d5622f8a5265d51ff5f62ebf48146046fc6
SHA512 16e9f35d7b6671f2d4cec9a937e907df8aeaffeb8e4ab56c0892b297bbddf5e506e11869a6b4917361ebee1de25b1b90dec0afab56a5e04296671d27a84a4605
SSDEEP 96:BNkGSCR/falBsX8kh/cI9URoDoto+5AoB/Zk6/+BMiqrZQI4vTUJva:BNBSC6aeoDUh//ZcBlFRLl
TLSH
T1FCB1633AE8A0DA375CF3C6857A87BA96E7E0416256C56FD8D8DC1E0C02C76DE1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe591ff2.TMP

Path C:\Users\Admin\AppData\Local\com.dailyhuddle.desktop\EBWebView\Local State~RFe591ff2.TMP
Size 1KB
SHA256 e61c7f7969d8d34ace25bbc7856ed20bf4cb5cf8c9539765d02feabcfcafcb03
MD5 faacc444dc3c7496a813f5b1f0f117f1
SHA1 b83b4e440dc07c8d11f615b83004b447a1a88ea7
SHA512 494d36f1c73f7ad05b09102632d95625105bbc1bd7d9d5505a0bbc8797e88e5c723f1284d35e169ccef29f109d8d0bbb666c8332da275074969a515887a6aa17
TLSH
T18C3154B7DD901A3258D6C6573297BA47EF7140A642928F08B0DD870E01EB88C6A1BC32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1960-309-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-304-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-300-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-298-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-306-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-307-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-308-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/1960-305-0x000002C516C40000-0x000002C516C41000-memory.dmp

Download

memory/2208-196-0x000002C6D87B0000-0x000002C6D8886000-memory.dmp

Download

memory/2208-86-0x00007FFDD1250000-0x00007FFDD1251000-memory.dmp

Download

memory/2652-294-0x000000000E1C0000-0x000000000EA3B000-memory.dmp

Download

memory/2652-292-0x000000000E1C0000-0x000000000EA3B000-memory.dmp

Download

memory/2652-326-0x000000000E1C0000-0x000000000EA3B000-memory.dmp

Download

memory/6096-195-0x00000141183F0000-0x00000141184C6000-memory.dmp

Download

memory/6096-29-0x00007FFDD1250000-0x00007FFDD1251000-memory.dmp

Download