3e8cf1c05d1461580f5ea09341cf6a4ac2cd87389b7ae952cef5419a51f1d162

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Size 11.9MB
Sample260905-afmskasgqa
SHA256 3e8cf1c05d1461580f5ea09341cf6a4ac2cd87389b7ae952cef5419a51f1d162
MD5 b0456bdae72919ef85f1532ae95dc436
SHA1 45bfaacc84ad3a3a278aba9c5e4971c72c970f80
SHA512 0df6864f62d60ae92acfcfaa6c9415c969c3d3142cb1c19edc9477b38cbb834812af1120c6443aa073ae4432af7917079754043dd071f316852c8970dbae71c5
SSDEEP 196608:1rF4Dq00X3CHcBdKBq5h47094yvBBSzkYkZji5mW0x2slH0CGKRsMXzFNGYsF4yW:1yD23uBq52709xyBk9/W0x22HlGKRnXH
TLSH
T126C61241FECB82FAD84B0C71941EB33B9B396D064524C7E7DBD47E11A8717904CAB1AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 3 IoCs

pid	Process
5416	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe
5936	Hybrid-Talk.exe
4144	Hybrid-Talk.exe

Loads dropped DLL 10 IoCs

pid	Process
5936	Hybrid-Talk.exe
5936	Hybrid-Talk.exe
5936	Hybrid-Talk.exe
5936	Hybrid-Talk.exe
5936	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Hybrid-Talk.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\ = "URL:onesttalk Protocol"	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\DefaultIcon	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\HybridTalk\\current\\Hybrid-Talk.exe,0"	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\shell\open\command	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\shell	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\shell\open	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\HybridTalk\\current\\Hybrid-Talk.exe\" \"%1\""	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\onesttalk\URL Protocol	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5416	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe
5416	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe
3924	msedgewebview2.exe
3924	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5944	msedgewebview2.exe
5944	msedgewebview2.exe
5944	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
5936	Hybrid-Talk.exe
4144	Hybrid-Talk.exe
4144	Hybrid-Talk.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 4708 wrote to memory of 5416	4708	2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe	89
PID 5416 wrote to memory of 5936	5416	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe	90
PID 5416 wrote to memory of 4144	5416	HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe	91
PID 4144 wrote to memory of 5944	4144	Hybrid-Talk.exe	93
PID 5944 wrote to memory of 1648	5944	msedgewebview2.exe	94
PID 5944 wrote to memory of 4812	5944	msedgewebview2.exe	95
PID 5944 wrote to memory of 4812	5944	msedgewebview2.exe	95
PID 5944 wrote to memory of 4812	5944	msedgewebview2.exe	95
PID 5944 wrote to memory of 4812	5944	msedgewebview2.exe	95
PID 5944 wrote to memory of 1552	5944	msedgewebview2.exe	96
PID 5944 wrote to memory of 3792	5944	msedgewebview2.exe	97
PID 5944 wrote to memory of 3792	5944	msedgewebview2.exe	97
PID 5944 wrote to memory of 3792	5944	msedgewebview2.exe	97
PID 5944 wrote to memory of 1776	5944	msedgewebview2.exe	98
PID 5944 wrote to memory of 1776	5944	msedgewebview2.exe	98
PID 5944 wrote to memory of 1776	5944	msedgewebview2.exe	98
PID 5944 wrote to memory of 1776	5944	msedgewebview2.exe	98
PID 5944 wrote to memory of 1776	5944	msedgewebview2.exe	98
PID 5944 wrote to memory of 944	5944	msedgewebview2.exe	100
PID 5944 wrote to memory of 944	5944	msedgewebview2.exe	100
PID 5944 wrote to memory of 944	5944	msedgewebview2.exe	100
PID 5944 wrote to memory of 944	5944	msedgewebview2.exe	100
PID 5944 wrote to memory of 944	5944	msedgewebview2.exe	100
PID 5944 wrote to memory of 3164	5944	msedgewebview2.exe	101
PID 5944 wrote to memory of 3164	5944	msedgewebview2.exe	101
PID 5944 wrote to memory of 3164	5944	msedgewebview2.exe	101
PID 5944 wrote to memory of 3164	5944	msedgewebview2.exe	101
PID 5944 wrote to memory of 3164	5944	msedgewebview2.exe	101
PID 5944 wrote to memory of 3924	5944	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-04_b0456bdae72919ef85f1532ae95dc436_akira_amadey_blankgrabber_cobalt-strike_glassworm_icedid.exe"
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4708
- C:\Users\Admin\AppData\Local\Temp\HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe
  "C:\Users\Admin\AppData\Local\Temp\HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5416
- - C:\Users\Admin\AppData\Local\HybridTalk\current\Hybrid-Talk.exe
    "C:\Users\Admin\AppData\Local\HybridTalk\current\Hybrid-Talk.exe" --veloapp-install 1.0.10
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    PID:5936
- - C:\Users\Admin\AppData\Local\HybridTalk\current\Hybrid-Talk.exe
    "C:\Users\Admin\AppData\Local\HybridTalk\current\Hybrid-Talk.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4144
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --disable-background-networking --disable-component-update --disable-default-apps --disable-extensions --disable-features=msSmartScreenProtection,msEdgeOnRampFRE --disable-sync --enable-features=MojoIpcz --no-first-run --mojo-named-platform-channel-pipe=4144.5200.7654851103058586436 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5944
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView /prefetch:4 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd602a5fd8,0x7ffd602a5fe4,0x7ffd602a5ff0
        5⤵
        
        PID:1648
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1724 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b
        5⤵
        
        PID:4812
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --mojo-platform-channel-handle=2176 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b
        5⤵
        
        PID:1552
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b
        5⤵
        
        PID:3792
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3436 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b /prefetch:1
        5⤵
        
        PID:1776
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3924 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b /prefetch:1
        5⤵
        
        PID:944
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3540 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b /prefetch:1
        5⤵
        
        PID:3164
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView" --webview-exe-name=Hybrid-Talk.exe --webview-exe-version=1.0.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2064 --field-trial-handle=1700,i,12776099108486818220,10505303302767303320,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:c6fd078f439fe14db155caa47a6c98ec3afb360b
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Update.exe

Path C:\Users\Admin\AppData\Local\HybridTalk\Update.exe
Size 2.8MB
SHA256 3c4ac1f4e3e46163a839ef81c38148693ea5604c2462e08a01266dade2e8ae01
MD5 f319c0902d7ed2a5ac51a5a85ad16ded
SHA1 72298254aaf2fdc1b536c6d559b51f497ceaddee
SHA512 9be8c968faac1c9738178fb39cfa36f694fccc25d62d129f141c605d139bd5f8656683c0ce948e52cff8ee5d5834c9ad6c3de4e9ad72557121ed43ebaba6a225
SSDEEP 49152:Gl4gaDleSQ4edhOQpz31sv7ti7CBIQ/ixlQwT4X1v1Y2Sx4q/b:GWDoSwHFOtwsoCwT+v1Y2SxV
TLSH
T128D59D41FEC782FAD48F0CB1602EB33B9F396D064528C7A7DBE47E01E87535059AA15A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f7514f883c2a375621daa31d8c81bfb3b3eec0e3dc8941aa112de0cfd5934f80
MD5 81a0cfb0aab4a0e195dbecd0212690b5
SHA1 495056993ae40dbd514ee0c9d18d0db0e49c695b
SHA512 3a240600a41a1c2f4d2b14467ddc4c4b9f6794fc09c43fd0ebbec990c1dc20784350d43f0f7305d4f8062e175ff577976efd347d2a7eb3e6fbe1e6bd384451f0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 db7dc70aa6140d2db67784cc76a0bbbc4dc71fff474c9ecf9acd1174c7056ffd
MD5 e8137fceb4f40a8c35f46a5e06139486
SHA1 fe88b452bdbec21d84da16cf221ed7385a6979e4
SHA512 bcff6837cc0c6abf266ec5b9b6506a078e011ebae13ffdad831ff7ae42a7114d5c7ecaaeb8f41650274294c424ad68ab0e271808276a3bbe41ff51cea8817695
TLSH
T130D01212324101B8C09024730C4362585440D60BC0068804542CC56D1A544A01E27492
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5aec36.TMP

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5aec36.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e82a9279014a4b41d213c9d47d2c5925a1d9d63a3bf2ecd344407bb619ff9d24
MD5 efd36fcf1f737a6827006847ccf5df50
SHA1 f703db86385e9e807158b6c761af80f59a549776
SHA512 36509163d827c728c36e5172f0abf419a75dae6d27cd97f618b6527ee49818d89d6c7209b1d0c8a51c3a2d332cd0b3861c257b83cb308725257c0894fe29e64f
SSDEEP 96:stP/dUj3eb9Dkeo5h16ZdEvs7/x+6Mhmuecjcb1eje0K+gG+28XM1C7K:stXis1ooEvsV+F3cbQjoU+G6K
TLSH
T17DD185416E2879BB4CC6F219BA29BB17E2F9502164D61E58E7FC462C08DB6DC7307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a19a4.TMP

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\Preferences~RFe5a19a4.TMP
Size 5KB
SHA256 9451e01bbc0f37b49665ff2e68abd52aac964596b1fba6a22e5ebf7512a0ca77
MD5 af4d508a8417af4ab5c6e203b6fc72e3
SHA1 2ff754f4b400a2dfe5574d72c153ae099215a8ae
SHA512 881d7788873b0992393b6bdfb2db2b50e48488b5f25e67a06b7c324950184b4f5bd19dee8a4e5a24f7b802ac82a4c4114b3c6a1f2fc6f84eaa7878460122f593
SSDEEP 96:rP/dUj3eb9Dkpdo616ZZs7/x+6Mhmuecmje0K+gu+28XM1C7K:rXisQojsV+Fijow+G6K
TLSH
T10DC185415E28797B4CC6F109BA397B02D2F9502275D52D58E7F8462C09DB5CC7317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\shared_proto_db\metadata\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State
Size 3KB
SHA256 1c7e10651a2dadb38529142b5abfc2a5e48a94582df8d26353a833d6e96eb7eb
MD5 b779c3ae255336fbfa7c79b5fe2960b7
SHA1 1c4482d547520316be14e4e93964b1fdcc1fe8eb
SHA512 2101b8418909058fe131f35c7f77e801e23ec92b253328968d615dc98eaa8258887d1cc21a342165935fb3d2c87b61dc614880be2f7cf4c33aec61ad2a8b73d6
TLSH
T18E71A5726974A9774EE3EA04B5863B17AB685133E5813F54CAEC0F0D02C72883342D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State
Size 3KB
SHA256 b7ac75f850812273f033f18304efd8fff15bed4437ed7bc53b7f7a27495c0ade
MD5 328556e31e7344fee887b239c2904217
SHA1 c8473d60cc9ebc955f8c1a796a5c394a4c0bbe8a
SHA512 605086c9491d35d6896daba18e031add5b640865c088d429e127f77693e27c91157e7e4b4e5e04946a2551070927bda3424b837d49f6d74e4040ff29319bfc18
TLSH
T1317175776974A9774EE3DA05B5863B17AB695033E5823F94DAEC0F0D02D72C82382D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State
Size 2KB
SHA256 c3f914e169bb1bb040c03fa169f91f782a7ff946bd044e44154d89a7a630b4ed
MD5 13bee916dbfc50d08b16f54817dc2a81
SHA1 fb8598e6c6fa4246855e6ecd01805d6a556ef964
SHA512 6cf5fe7abb4e0fa99fd84f798b55507427ca2306c8a48fa691d25205b637e700e5a49b76a7d79816e6361d3b4f226336b2383055cc45b6988b2070789ea9b158
TLSH
T1F85163736934AA778AE29644B64A3F37DF395162AA422F10DBED0B0902D719D3342C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State
Size 3KB
SHA256 b199480daf891bd2b29ee3f9f7c98dd39135a8932ae8b2bf65a052da862813b1
MD5 9a7c6dbfeb8b0770e5e3d4bbd482bffe
SHA1 5ac733425dacebda6bbdced60d29715fd38ad2be
SHA512 7ff6c371488eb1e0376be7f41457395ce972c3867a79b023eeeb83ce11c1b49da7141bf28622a867d19f7c9fcd020b7057d39753f9562ba747aef595a3aeacd3
TLSH
T1D96166776974A9774EE3DA05B5863B26ABA95123E5813F54DAEC0F0D02D72C83341C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State
Size 3KB
SHA256 44d11e3f08ac0be143d8bf5c594ac81cf90067108043140f05f88258e937401c
MD5 900e071ec66f53f17bc0830dfb1cdaa1
SHA1 70b84c5d3fafabb80c59885e6e0ada30aaabf62e
SHA512 558f7789c6813bf82e567ab2b9c8480e25b0f4cf501cee204db8cd00f7e4b4c77d92d91241dcfc519c94f5f11c77c4cdee884212cbae128fcc41cb03a982f8e3
TLSH
T1657184726974A9774EE3EA05B5863B16AB695133E5853F54CAEC0F0D02C72882341D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59c4ec.TMP

Path C:\Users\Admin\AppData\Local\HybridTalk\WebView2\EBWebView\Local State~RFe59c4ec.TMP
Size 1KB
SHA256 0269e2c6baefe8700bc376e3d250024a2e250833c8f125a2e886575d51f4cad7
MD5 084fe282ff3092043f1c7d0420e4692c
SHA1 7465bb3223865c9762f42f8a7614e3405c63e7f7
SHA512 6780ab546e1c036e13a5b28ddba35617886fe63c5d8e6414d8de24dd2745daa51fecae7468f202c88d583b5ffe918db8daa256f246ce32f3f11d8a4cc28d64c1
TLSH
T12A2142B3D6755B73AE82664572123E2B9F35106752014F00EAEE0B1903E618D766AD33
MD5 SHA1 SHA512 TLSH

Submit Download

Hybrid-Talk.exe

Path C:\Users\Admin\AppData\Local\HybridTalk\current\Hybrid-Talk.exe
Size 7.5MB
SHA256 dbfe615ea9211d7b039fc6b11326897e8f6642727cc454172f0ee75bb2dba26a
MD5 b988f5b17b6fb48195129df842e9f9f7
SHA1 eb1cdf01ac1552510573e4d2de742468a1719558
SHA512 1329b1cdab2232c5182a849820dccfa5f953fa36c9619a23ae4f61db249d2f74e5e45056960a1c04e63ec33ab17252a0d8a20b3447df83093b7e3c5f93fbecbb
SSDEEP 49152:YhtYcmjvL2oySfD64ZeLUlSRBnoQ3+H2yZMaycbYDffHmvCChYifvIJYjjp6rbL4:ISc+2oyPRq5MTcjtjn+A+Sv1Y2p
TLSH
T1DF861A0BEBAA50E4D0BAD438C657A63BFD7138A6833063E756915A071F36BE0D93D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\HybridTalk\current\VCRUNTIME140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\HybridTalk\current\WebView2Loader.dll
Size 157KB
SHA256 86545b66cdb0603bc26b626fb9ad610cb6e71f28d468f5ea66df23b03dda96d5
MD5 ff3ab627947e2c1c58f13694a8651c7f
SHA1 280e4cb1c735b3ee7cfedc82a5bfe7c134a89d90
SHA512 45a167e90716a08abf79f76fba42681cc8bc76f0087f62d028350c5d28e79b922dc1bc799b0dd0a086e7add20c17b9bd6a355674d7f1b0854f217432e4c7d555
SSDEEP 3072:lKpb6T599mlMpgeMiqa5agdTl0RflJGhaTcZYEtJomT+JJg7yl:uGf9m9XkagdTlMvEtJKJg8
TLSH
T10BF35C57B3E510B7E07BC27485A34A42E772B81157609AEF0364467A1F23BD0EE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.ini

Path C:\Users\Admin\AppData\Local\HybridTalk\current\app.ini
Size 326B
SHA256 1d27bf4ed62ea32f775b3cc1eadfc7677550d8a190517466605da2d2aaeb1653
MD5 bd7af2de3f612e1b58839b0599741952
SHA1 3f58f9ad1bb2a57fccee42823bec7ee94aa197ef
SHA512 4e7f53c2e6ee80f5f99f73a9cff116f2477bbcb9b028c1c44f831ab75ad387f27ca79308f46ed0661b4ef6621efabdb4d257a63173b745af232037b1384f27ce
TLSH
T109E0EC5427F70018B4727F9AFDF59097672A79112D15D95D11C2130E04F9B41E9B3B3A
MD5 SHA1 SHA512 TLSH

Submit Download

offline-notice.html

Path C:\Users\Admin\AppData\Local\HybridTalk\current\html\offline-notice.html
Size 7KB
SHA256 1737281dff2b2087060837710583a131c06d23e9cff42b481f7175514d2ff17a
MD5 8af8ae318c83a631ec53f1af0f012db8
SHA1 cc2567736dc3d8fb8dd1dbbee6024f8b8aa73bbe
SHA512 713592a4cd032177b7f4744c11eb2c35fb5167ab4e30d648c95ec9d49c8bc25a49bebc43e551937d44e32be7c874483b13be0b929f70a77d3ce147f4b2fafdab
SSDEEP 96:GPQPjWYRFus7FeagjNtBL0F53QRFHfM8zLBlyQ58fHtiI5SWrBsNltHEQMrLxyYF:PjDchjNt2YJfM8zLBVOHtghqym0A
TLSH
T148F1E8A22344511D6077C3B4AB99B308B2256027E7470AB97D5D9722CF7A05188FFFD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfc140u.dll

Path C:\Users\Admin\AppData\Local\HybridTalk\current\mfc140u.dll
Size 5.4MB
SHA256 4a37ea84d748058c763c5600757d143bf5354bc466048643eda048f9b6e0c214
MD5 c9c85a6cf9cef217a56d558afae0312e
SHA1 107384e434447c5b7ba6154bfafcdd91bed3dac9
SHA512 6dcee2af27f3db1f876b5882d4e1a8a1bb12c2faaef2671c4b6f9aa873d70ab2e96fc9741b83635b8b1fe611972edf7c9e779734f99590e522de0a913872751c
SSDEEP 98304:0Uon/oeUxcmSmfdqkFLOAkGkzdnEVomFHKnPD:jon/7yBFf5FLOyomFHKnPD
TLSH
T183468D867AAD0494D569D07AC7678E5BD7B3FC50136183CF0162679EAF337D20A3A322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\HybridTalk\current\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\HybridTalk\current\sq.version
Size 528B
SHA256 6dc1373bc308ace569df8515ab165602e514775a227ce4554d6c9d0a5619b654
MD5 346dad170f324fa4a4b732804c1c135f
SHA1 838b8d8a91801d4566d6829056b70c4f594c95be
SHA512 4b07f248be4bfc6a67617c80cfd7e4f23606553ab8b9d85ca85e02a982e6b87173c9c548f125a80f5c3c5aa6c1adbeb733181220ce3a9937f27178be61e4911c
TLSH
T152F0C085E500C61387425309A8C8430493FF7FAD60D18541EDE4DC2926453DA8A7F9D1
MD5 SHA1 SHA512 TLSH

Submit Download

update.json

Path C:\Users\Admin\AppData\Local\HybridTalk\current\update.json
Size 138B
SHA256 eddf78bd06c89f9048d8e5c8eddb02063fda44b26855b316bcb3cbb34de520f8
MD5 cdef1080719f29c206b2ffac5139701d
SHA1 6ff9592254f7e45f96b64698df546a1c0edd5344
SHA512 882729853ab6bd177ec9a0765e97b3e52b7218e03cdb4e57fabf9532d381f6abbf29d5a0a5861489518c789533eda7a73d9ae85609b63bc09628dbe684f85d03
TLSH
T131C04C9AA948C8B61DEC9DC94182E768F7834E39ECF0166581930A94515C171565C58D
MD5 SHA1 SHA512 TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\HybridTalk\current\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HybridTalk-1.0.10-full.nupkg

Path C:\Users\Admin\AppData\Local\HybridTalk\packages\HybridTalk-1.0.10-full.nupkg
Size 8.8MB
SHA256 cf9bc4481741e7c14b299386f2094c7790f270397fd2ea16cd29c15ef2988c82
MD5 3718aeb81b435af52c2c75a546d60f01
SHA1 96e03c4991b1796b3ded1d0bc2ea1f330cdda281
SHA512 6c4534abc512692d71cea1511349308ed83051674d37e633c6e8f7cbf707b1ca4d10386ddbf4832fc0000bd6e8bef33162cb29ee774f2e81cde7788f2076e77d
SSDEEP 196608:8BdKBq5h47094yvBBSzkYkZji5mW0x2slH0CGKRsMXzFNGYsF4yxfFb++hA:5Bq52709xyBk9/W0x22HlGKRnXzBsFfG
TLSH
T103963392A8F1EB78C6E79F89680C4D19E69870BC0D13808204CC7F59FE651E9DF97786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe

Path C:\Users\Admin\AppData\Local\Temp\HybridTalk-Setup-{11C19514-9130-49EE-AAFA-5547C63F1627}.exe
Size 11.5MB
SHA256 31d8c3b17a01f7ca19739df48cef479e76c7301bcac70646b1df1412e5c2af19
MD5 7b58892bf5c80ecdd3ff00b3f7081d5e
SHA1 c5c17892a824cf4a63056dc9af15ed695fbb67de
SHA512 2e1e314ebff1bccaeb7193ab313c4f1862e89270e2b232eaa894d46dd5d1b75a8993fb215a850b096d5853e265d471b9972babbb7a45f474ae3b6bb4d6c7a7ff
SSDEEP 196608:K4Dq00X3CHcBdKBq5h47094yvBBSzkYkZji5mW0x2slH0CGKRsMXzFNGYsF4yxfl:1D23uBq52709xyBk9/W0x22HlGKRnXzO
TLSH
T16CC61241FECB82F9C88B0C71602EB33B9B356D064528C797EBE47E15EC7535049AB16A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_HybridTalk.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_HybridTalk.log
Size 1KB
SHA256 1d755b9a6cd4fc10b04decff4e0d9dd3593aedf1184e99450216942b64c4f8b9
MD5 a3141865a8ec2a0cfcd464a63634187f
SHA1 f70aa27f387d3cadd169f6501d21050e0231cdc2
SHA512 925b966635d63235d10d68d37ae075028dca989f78a1b5b368b51e10fa9c53f308338fea0eb0d1a6a99e15001d87345b2b93e987466837313346a99b33817379
TLSH
T12811C508B14676ACFA0B1E15A9281F4744880A233EEA9D5692118B4C3E7790978BF23B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1776-171-0x00007FFD82E20000-0x00007FFD82E21000-memory.dmp

Download

memory/3924-306-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-308-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-312-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-313-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-316-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-315-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-314-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/3924-317-0x000001FE6D5D0000-0x000001FE6D5D1000-memory.dmp

Download

memory/4812-89-0x00007FFD82E20000-0x00007FFD82E21000-memory.dmp

Download