6f5ee5155651432aae180545f627b19ecf0cfc11c614a9518cd8a52705b33253

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 16:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Fiddle Chat App.exe
Size 8.2MB
Sample260813-tf3csssyct
SHA256 6f5ee5155651432aae180545f627b19ecf0cfc11c614a9518cd8a52705b33253
MD5 1a6bfab5ea804a2aa003bf5a344e1c5f
SHA1 0f4b99d1771edce812491d823569d19eb157aecf
SHA512 c515377aeb90c44fd6ca46130b7474a07b1fd1d524f6e5bcee84b5e82fd9cba24ef95f345d14aeff337ee41508f04ae6516fac9f5abf5c2d71914bfd96d3208b
SSDEEP 98304:Mx6vW03PUAmyqPn2hPkjZ/YWkhHU8+BL2fRLisNJe:MYvHmCU8A+RD+
TLSH
T1C1863A207F4A9AADC19AC47092474A765A3134CB0F35BAFF44C496783E6AAF41F3D25C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Fiddle Chat App.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 21 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_572937674\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_572937674\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_760312860\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_572937674\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_572937674\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_760312860\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1049661184\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1049661184\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1049661184\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_1013476361\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5108_572937674\manifest.json	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2684	msedgewebview2.exe
2684	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5108	msedgewebview2.exe
5108	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4116	Fiddle Chat App.exe
4116	Fiddle Chat App.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 5108	4116	Fiddle Chat App.exe	89
PID 5108 wrote to memory of 4256	5108	msedgewebview2.exe	90
PID 5108 wrote to memory of 3592	5108	msedgewebview2.exe	91
PID 5108 wrote to memory of 3592	5108	msedgewebview2.exe	91
PID 5108 wrote to memory of 3592	5108	msedgewebview2.exe	91
PID 5108 wrote to memory of 3592	5108	msedgewebview2.exe	91
PID 5108 wrote to memory of 800	5108	msedgewebview2.exe	92
PID 5108 wrote to memory of 2852	5108	msedgewebview2.exe	93
PID 5108 wrote to memory of 2852	5108	msedgewebview2.exe	93
PID 5108 wrote to memory of 2852	5108	msedgewebview2.exe	93
PID 5108 wrote to memory of 2028	5108	msedgewebview2.exe	94
PID 5108 wrote to memory of 2028	5108	msedgewebview2.exe	94
PID 5108 wrote to memory of 2028	5108	msedgewebview2.exe	94
PID 5108 wrote to memory of 2028	5108	msedgewebview2.exe	94
PID 5108 wrote to memory of 2028	5108	msedgewebview2.exe	94
PID 5108 wrote to memory of 6124	5108	msedgewebview2.exe	95
PID 5108 wrote to memory of 6124	5108	msedgewebview2.exe	95
PID 5108 wrote to memory of 6124	5108	msedgewebview2.exe	95
PID 5108 wrote to memory of 6124	5108	msedgewebview2.exe	95
PID 5108 wrote to memory of 6124	5108	msedgewebview2.exe	95
PID 5108 wrote to memory of 4260	5108	msedgewebview2.exe	99
PID 5108 wrote to memory of 4260	5108	msedgewebview2.exe	99
PID 5108 wrote to memory of 4260	5108	msedgewebview2.exe	99
PID 5108 wrote to memory of 2492	5108	msedgewebview2.exe	100
PID 5108 wrote to memory of 2492	5108	msedgewebview2.exe	100
PID 5108 wrote to memory of 2492	5108	msedgewebview2.exe	100
PID 5108 wrote to memory of 1952	5108	msedgewebview2.exe	101
PID 5108 wrote to memory of 1952	5108	msedgewebview2.exe	101
PID 5108 wrote to memory of 1952	5108	msedgewebview2.exe	101
PID 5108 wrote to memory of 2684	5108	msedgewebview2.exe	102
PID 5108 wrote to memory of 1152	5108	msedgewebview2.exe	103
PID 5108 wrote to memory of 1152	5108	msedgewebview2.exe	103
PID 5108 wrote to memory of 1152	5108	msedgewebview2.exe	103

C:\Users\Admin\AppData\Local\Temp\Fiddle Chat App.exe
"C:\Users\Admin\AppData\Local\Temp\Fiddle Chat App.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4116.4316.5032832437559539983 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5108
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView /prefetch:4 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x140,0x188,0x18c,0x16c,0x194,0x7ffeb9b55fd8,0x7ffeb9b55fe4,0x7ffeb9b55ff0
    3⤵
    PID:4256
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1648 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:3592
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2040 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:800
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2260 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:2852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3532 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66 /prefetch:1
    3⤵
    PID:2028
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4024 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66 /prefetch:1
    3⤵
    PID:6124
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=3540 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:4260
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4808 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:2492
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=3988 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:1952
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2100 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2684
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView" --webview-exe-name="Fiddle Chat App.exe" --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4676 --field-trial-handle=1644,i,11831295608407872144,3415652202336445304,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:a91ebcdcaae78a5380f8b733017454301455ae66
    3⤵
    PID:1152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 38128b5e18b0d8962d3d6e9c6fe83cf3de0b608920b9423de0c9a609c8afe092
MD5 fdf235ded8633015fd48a544972a628d
SHA1 643c549a611a59030275094fb6a077b669286e09
SHA512 91fe7faf23a00d70d7124c93370f5c860c589b01627eebd7792f4942bec110f8e3a29a1a6d6e9b1fa06d43e2eb2f78437c5254794af8592a528b54e6b56c2e7f
TLSH
T100D01226320201B4C41120331407AD091801F50B414940005438C52D1B044540A02452
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 ffd12da0ac6446c04e508a7b5dd607d7edb63bea9c7a656d51f991872ae3538d
MD5 8087869a424a620461a07d9522de0482
SHA1 a9d174731da249c10c9159fc91928631586a2a91
SHA512 5394e8b92a9f40e84194babbdabb86397aba43269a565f7348c1594a5adccf2cf8f317f177d8435c4d0c16c91ba675e45ea8561192c769d55b003142a6774fa7
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

08a5ff51-bb1b-4c1d-a1b6-eb3e62d4cb10.tmp

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\08a5ff51-bb1b-4c1d-a1b6-eb3e62d4cb10.tmp
Size 6KB
SHA256 2bdf7c6330d192a271d5fc7bb041205d753e56e942722aeee942998c3457ce7e
MD5 bf06497354fecc9552fd5f290c63615b
SHA1 5ba9e1982b7a8ee2245fb09c7b5d2835f72c2acf
SHA512 dd0bfcace054510328b8a38a6ff3c15e7af9cb0e94ac10b14d07b0df86800fa26715aff4b1d76b6bebac19d14d882612a629e3d6d15252327e09bcf252a43f3b
SSDEEP 96:stzk/d/V6ZFMb93k+mxo5h16ZPes7/x+6Mhmuecp1CMkkjeTK+gF28XM1C7K:stEVVxmo+esV+FN1CwjZnG6K
TLSH
T173D195025E28B9BB4CC6F119BF35BE17E2F5607265911E59EBF8451C05EB6DC220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 71bf21099c79da20d8e0dff2f23b588cb4e53801ea5ef91e7d44ca504f673f2a
MD5 9f833487627832483035c99d224adc78
SHA1 cf1764b3f7c36856e732ff8679b5782573d7e0a5
SHA512 1723a0a383e7a917e854850f8c840fc690ef94ddb80bae1b67fb32292926e441537a8e17313d095d7c26dbf0087e68e4fbe1b10f87dc02fd2b1d9df8fe8dbbe7
TLSH
T18AA0021003400506C15A0B7055C611963335BD1083937792D294847ACD70F485B81140
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59424f.TMP

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59424f.TMP
Size 48B
SHA256 4e9cb6eabbd3c81c2724e0afac87c0324695c6c18580e075dfd52ec2d8eb3f2a
MD5 d2912b2870fc88b52eba6f1d09483382
SHA1 b899bbc588dbc8780cf0aacf2a7b2937db538c4f
SHA512 f98736c890536a68b59a7293d15a3e3b704ba2a3d23f008a9deeceaf18ad35fcd101b410a1caa6421bb7d0422a4a084a5f9c62ef951bf9c2418b715ab066eeb4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 8f8eb2a66163079f09cb7290502649c8e02af65dde075b29d38d7e0424ba6938
MD5 b3969efcdc4ec0e3ab7573adfb3db6c5
SHA1 55aaa17db2360f370499d6442289ec8b6ccee8da
SHA512 3d345e1e5ae12cc9da0cd548717f45514f85715d28989c5570eebd98ad652a0cfba2b75d07ba732a2ebed9951688025d6136cb039ce469516ff38537253020f8
TLSH
T1E80144B786E4C5AD8A5116E82624281BCE1E081956B83D2AC9E4EBCB83E2430D204A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a0485.TMP

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Network\Network Persistent State~RFe5a0485.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Preferences
Size 6KB
SHA256 91315af6c462f60cdd521ec3b7d1ff7b8ff05066b5549c6770d10c6a8a2053f7
MD5 2b680658b810b93049916849b86da21d
SHA1 243ad9b689e4b0264ad4d1d6d2a1c6b8a1fcf369
SHA512 c584ab39cf7e4ae89fc5adcdb5663ba526e226532ff8e70820441b8a0b62face2e82f04f759f5871ca3f41ee1ca30e47e94e254b26c8c4dc20c88ebd50052aed
SSDEEP 96:stzk/d/V6wGFMb93k+mxo5h16ZPes7/x+6Mhmuecp1CMkkjeTK+gj28XM1C7K:stEVVXmo+esV+FN1CwjZBG6K
TLSH
T1CCD194025E28B9BB4CC6E519BF35BF17E2F5607265902E58EBF8451C05EB6DC220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Local State
Size 15KB
SHA256 9d280c00034e8cf1227de63427fb2b58dc30cec5dbb5313ce69460f9a1773c9e
MD5 00baac3988e41702eafdc3367242e98c
SHA1 6a0faec116d7ab4255cf45b0a411f0cc42e046e8
SHA512 8a0c653b1a47d85fa7764c3486f4056876d9de4250e05229357064a07279243c349241997002111efaaa9940439d1bba60284b5aae2b27095e76cf3276d278f1
SSDEEP 384:++aQikB+z/xvxjg/qhEQNBSiU8kvMBdVs9zH:J/UxvxjgC+lpMvaFH
TLSH
T114729D2B95797E33A5F7F60579590B4FDFB894F291C26EB80EAE1F0D06D32980302812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Local State
Size 2KB
SHA256 3a38e2009862110284406e3054a844b31c6280b90fd1592b8158a9c2d0944912
MD5 98cb40cae5f512f85074af6ebbb2ee1a
SHA1 cae47ccc31cea5d51af10e5eb5e88c242b9e64e5
SHA512 17131f2516a88342490e23573cd066285df7c1189433d93975d5163fa8e17c6b432ca773fbae9a9e3e2cdb40699bc10227ec68ba649f28827947e1de9783f876
TLSH
T17551A733A824677789E26605BD9A3B23DE7551A6DA521F50AEDD0B1C01D729C1302C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Local State
Size 3KB
SHA256 e7ef54cc7b4eafa4aa0776fc41a8951a6158681d853a3035614265885cfde07e
MD5 6d10ab825030dfcef200cbb27a41ff1c
SHA1 94d1d5ba88248f0069e5b99d933cd33d3c3e4dcd
SHA512 6929efa91468626a5e1ec773b930dd038c4b6aa1a9a75313552ed57417f2219d49d7ec69ac2753f19a84ae0ccaa7c1532e72dd21ae0d70d1145300f83f09c8a9
TLSH
T1D661A637A874A6774DF2A605B9863B16BBA15063E9853F94DAEC0F0C01D72C81341C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe58ee33.TMP

Path C:\Users\Admin\AppData\Local\com.fiddle-chat-app.dev\EBWebView\Local State~RFe58ee33.TMP
Size 1KB
SHA256 785229a38756995df286ec1962009ca13cc22cfb62edd764cf8b125498eed5e9
MD5 641709f1826655aacb020f9e86364ce1
SHA1 c692d592d39575f95bed95312ef8eba588e8effd
SHA512 3fecd106568d6da4629b742999ab0146e1bfc7edc4c1fe97d6aa2b3c98f08aef05cc76b93cffa7510c2c4af24e79242a3cc2ccc0ed61095227e0370c01336de9
TLSH
T1762162B3D4A55B73ACD5320A72A63A57AE6111B7C2518F407ADD0B2C13E71CD9A1AC33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2028-102-0x00007FFEDB3D0000-0x00007FFEDB3D1000-memory.dmp

Download

memory/2684-332-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-323-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-325-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-334-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-333-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-331-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-330-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/2684-329-0x0000019C16FC0000-0x0000019C16FC1000-memory.dmp

Download

memory/3592-195-0x000001FFDEF20000-0x000001FFDEF4A000-memory.dmp

Download

memory/3592-26-0x00007FFEDB3D0000-0x00007FFEDB3D1000-memory.dmp

Download

memory/4260-220-0x00007FFEDAB40000-0x00007FFEDAB41000-memory.dmp

Download

memory/4260-221-0x00007FFEDB400000-0x00007FFEDB401000-memory.dmp

Download