7c2f165407dcec0f3d63d6d16a7e1fdcf21333a29361c4120b60278b5d057d43

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe
Size 10.7MB
Sample260820-akcs6aae53
SHA256 7c2f165407dcec0f3d63d6d16a7e1fdcf21333a29361c4120b60278b5d057d43
MD5 70323686b01f76f4c00cfbc58fb2e92e
SHA1 a4758dc6a9f34f95e46276b06d6e3c7f9323358a
SHA512 d5291f8cd8bff7283e7a194642ea4b38326663a25f8bd5eecc38767bc6792c79bb115e3db71cef171675667f571ad154ebf6403353fa724cfa9732f39427d4d3
SSDEEP 98304:xIb+DHLpabiNpLlzqu1pB/kRm1mv8eozyXHpTqUzdPNNC0jYuPJKh1e12M0RTN5L:e+DHmu3cSmv8eyyXJTqe4cALXPDZSU
TLSH
T1A8B6C003F9A5C4ECC06BC076C3569233F732B48D4A25B6AF17E41A212EA5F522F1D799
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
6000	javaw.exe
972	java.exe

Loads dropped DLL 64 IoCs

pid	Process
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
6000	javaw.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe
972	java.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1997325919\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1997325919\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1997325919\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1728275151\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1728275151\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3404_1728275151\manifest.fingerprint	msedgewebview2.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1980	msedgewebview2.exe
1980	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3404	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5392	2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
972	java.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5392 wrote to memory of 3404	5392	2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe	89
PID 3404 wrote to memory of 4904	3404	msedgewebview2.exe	90
PID 3404 wrote to memory of 2360	3404	msedgewebview2.exe	91
PID 3404 wrote to memory of 2360	3404	msedgewebview2.exe	91
PID 3404 wrote to memory of 2360	3404	msedgewebview2.exe	91
PID 3404 wrote to memory of 2360	3404	msedgewebview2.exe	91
PID 3404 wrote to memory of 4796	3404	msedgewebview2.exe	92
PID 3404 wrote to memory of 2732	3404	msedgewebview2.exe	93
PID 3404 wrote to memory of 2732	3404	msedgewebview2.exe	93
PID 3404 wrote to memory of 2732	3404	msedgewebview2.exe	93
PID 3404 wrote to memory of 1272	3404	msedgewebview2.exe	94
PID 3404 wrote to memory of 1272	3404	msedgewebview2.exe	94
PID 3404 wrote to memory of 1272	3404	msedgewebview2.exe	94
PID 3404 wrote to memory of 1272	3404	msedgewebview2.exe	94
PID 3404 wrote to memory of 1272	3404	msedgewebview2.exe	94
PID 3404 wrote to memory of 4728	3404	msedgewebview2.exe	98
PID 3404 wrote to memory of 4728	3404	msedgewebview2.exe	98
PID 3404 wrote to memory of 4728	3404	msedgewebview2.exe	98
PID 3404 wrote to memory of 5792	3404	msedgewebview2.exe	99
PID 3404 wrote to memory of 5792	3404	msedgewebview2.exe	99
PID 3404 wrote to memory of 5792	3404	msedgewebview2.exe	99
PID 3404 wrote to memory of 1980	3404	msedgewebview2.exe	100
PID 5392 wrote to memory of 6000	5392	2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe	101
PID 6000 wrote to memory of 972	6000	javaw.exe	102

C:\Users\Admin\AppData\Local\Temp\2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5392
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5392.4916.1175316693928459479 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3404
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView /prefetch:4 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x160,0x16c,0x7ffc480b5fd8,0x7ffc480b5fe4,0x7ffc480b5ff0
    3⤵
    PID:4904
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1856 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    PID:2360
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1920 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-databases --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3500 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec /prefetch:1
    3⤵
    PID:1272
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2168 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    PID:4728
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4400 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    PID:5792
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView" --webview-exe-name=2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4604 --field-trial-handle=1860,i,9353001677113390561,3472365456425511790,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c269087d5c212e293806036c6e2b63a1d0a9acec
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1980
- C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin/javaw.exe" -Dlauncher.noJavaCheck=true -jar C:\Users\Admin\AppData\Local\Temp\2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious use of WriteProcessMemory
  PID:6000
- - C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\java.exe
    C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\java.exe -Djdk.attach.allowAttachSelf -XX:+DisableAttachMechanism -Dlauncher.wrappedLaunch=true -Xmx256M -Dfile.encoding=UTF-8 -cp C:\Users\Admin\AppData\Local\Temp\2026-08-19_70323686b01f76f4c00cfbc58fb2e92e_akira_glassworm_rusty-stealer.exe pro.gravit.launcher.runtime.LauncherEngineWrapper
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    - Suspicious use of SetWindowsHookEx
    PID:972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

+JXF10285293913941281726.tmp

Path C:\Users\Admin\AppData\Local\Temp\+JXF10285293913941281726.tmp
Size 108KB
SHA256 6bebcf9adcdbcb063954a41eb5751ac782b30110888ec9658066e786995fac8f
MD5 53f695dbfc6f703f86ed88bddde527b6
SHA1 fb5a258452921a7f710d1913777ae6f48a0b6089
SHA512 594c67612e7188423165a907797e490b735683e62757257089c77a853daa71314239ce6a048bd11ba4a2da8531917ed439c89eff37d5b3dcbd3bd83f5b47e45c
SSDEEP 1536:J3GmydXDNYa60lLhLvzrfuQnP7GXGlRHxCiQ7U:J3GoaplVbzrfRP3lRHqg
TLSH
T1EBB33856E382CBD9DE4A9DFC7231E7501FB97E38583CD24AA8B2B97BE65F5410C20205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

+JXF15798689012103526071.tmp

Path C:\Users\Admin\AppData\Local\Temp\+JXF15798689012103526071.tmp
Size 108KB
SHA256 91a58fc70179ec6243c958f67042b0e2a4e447ca89afbc29ba1e270f1047a3b1
MD5 281df342e6f73c20ebc6526f130e00b3
SHA1 160e0e5a1010cd45ea124f08a894156e02236551
SHA512 5bbda3d2240f15c9eb53a42b0fb73b8938c946b454ce8c93ac557a568e4f18d5fa284f76f31b4b75be33f2d6c84f8d251e7644efe99d269d8a06bc8c26092867
SSDEEP 1536:GdUXZs3Yaa8X0lLhLSZB/HBrhBOYhCRwzPP7ODiBsqShNpCqu5f:GdebaVklVqB/HBrhBOx+n7O2Bw/gquV
TLSH
T1A2B33A57E392C7C6CE0B5CF95261D3A41FF97C38993DC15FA8B3A8BAE8AB5410C21508
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 10786dc67599edfcbb13ac64a42dcd2b1205f3c9b515edbc32dd1e88b27e48b3
MD5 bec905615d5aabf04f55bfc58b738c90
SHA1 423f101ae066c2218b0365c4f3780c29a0ea2075
SHA512 6024fad7a87f0dce8e7da4c03a20408e085d665736a79c5d9d26e9b46c2acb06f6f5b4ad28f64894cb542a638be43ccdf4d32dbd3500f6ac6097cb22aeb609ff
TLSH
T1BCD0122277010174D521367300A3A1080900D10FD10541405829852D5F140540D13581
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 ea89d2c675012e42b612abb056728d64bfe6fab1b403aeaeada12eef7c3ed7e8
MD5 8b836011aeeb2aa9256e479a5c81a12d
SHA1 ff87af7b9bc93a4b233e449776e871368a7aea84
SHA512 5d5bcfaff5656abf8f07f742596582f3e9350072a8076df243cb4ac7b37315150ca6fa684a63a18d84f3fa98ae15009394a30b6ccdd0500723e6815f79f52d58
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Cache\Cache_Data\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 6a658686e4b9455cb41eed6df1641bb0496650ae159e4fda1e81f7d8ea368c38
MD5 1aec3cb4d4bf470d52e1f298a0c4256c
SHA1 05753520b6523297df848e871ce97f666b0342f0
SHA512 9df1c6e37c94cbc286c75704b1726b0023bcd901ae5091df3af5d40579d9889d19c3c8b0ba823bb14521994bad0f12f2c74c2c28c668eda23dd9c2967f8c4c54
SSDEEP 3:MsEllllkEthXllkl2zExllsgYl:/M/xT02z
TLSH
T15E440404FFC04707C54010314033C3540370D4100535574334D114737CCDF400C00D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Extension Scripts\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a300a.TMP

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Network\Network Persistent State~RFe5a300a.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\Preferences
Size 5KB
SHA256 5f9837f827e90f0aaf2fbe26b1bc00484edfbf2d51abc0a25d7e369c8d8134bb
MD5 da7c60091bff64d7cae0d128a6468575
SHA1 bada4eaf23343e4677b1656d799219e5c2186ecb
SHA512 515cd0930281865cf64521c9ed88c3abe7e761901328090a0aa6a89d509b57f867c4a5b01cf49c9ddcbc922e1de773b19119f63baa23ea946c9923ff0e45d496
SSDEEP 96:sti5WUbG8Ll35h16ZZs7/x+6Mhmuecmje0K+gp0E2A+28XMZCB:stiscR3+sV+FijYr+G8
TLSH
T19DB194026F24797B8CC7E1597E357F53E2F5216275D51E98EBF8961C08AAACC1213C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6636e3b-fde6-4dd6-aca5-ba75bad8349e.tmp

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Default\a6636e3b-fde6-4dd6-aca5-ba75bad8349e.tmp
Size 4KB
SHA256 eebc3321b3872b0cb073103393531134969c46deb2388717e41a155070602bf5
MD5 feaca451d87bc2a0bfc8d363282258af
SHA1 946577077c16ec2fd4def76c5140b369a3afa57f
SHA512 ad3628590443059168e40e5774fe5c62f1c4bc7271d41ad72a17b29e6b7aee52d430952a0a97f22d4799b6b407f0441f05759a563ae69bb2144a69d417bb6926
SSDEEP 96:sti5WUU8Ll35h16ZZs7/x+6Mhmuecmje0K+gpUA+28XMZCB:stisyR3+sV+FijYT+G8
TLSH
T1A9A195026F24797B4CC7E1597E357B53E2F5116275D51E98EBF8961C089A6CC2213C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Local State
Size 17KB
SHA256 b47d5d8f0d84951724af20c241c8d5d5f707bbfeedef5c6d08d9bac5bef0c217
MD5 6488142848d2450ba2b23531bc93d9ba
SHA1 6233a0e18e2775b2c954a43d04b04ee6113508d7
SHA512 de8163f2db8f1c5ba2f46b5463a1601c40351a127e39502ccdd3dd5e596a4ae7398568d67c247427722cab71833e1655868d783a4f0de1822231eb2025aa9500
SSDEEP 384:u+aQikB+z/xvxjg/qhE/3NlNqbGx3RC1HmqMJM8dhAi9zg:5/UxvxjgC+/V3vqP0SiFg
TLSH
T168829E3AD969BE27E8F7D6413A4A674BCBF8956291C16EE44CEC6F0D068738D0306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Local State
Size 15KB
SHA256 6208527600158d3f438ea05031241f5fc6739eb845489bb94da919a50fb47a7a
MD5 bccdda6183810c750fcec7cb24c6f8c5
SHA1 e815ac015c22593ecd149940e9390c07770d3eb2
SHA512 d7011558342fd4cf75d01b96c8e5ce839dda8e0e2674be0edbce85d926536201e26262a161de80152e1e55f63ec37de913675342e2ebc31ad31fa85a7afeefba
SSDEEP 384:N+aQikB+z/xvxjg/qhE8NBSNqbG33RqModhAi9zg:Y/UxvxjgC+L3zASiFg
TLSH
T17972AF2B96797D2795F7E5053D4E174BCBB898A2D1C26E744DED6F0D06873881302C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Local State
Size 2KB
SHA256 c0fab5ad9c823723fb726cf557e1f3d347a0c012a567b5474a28af01bf8cd4b1
MD5 7e591cd11147b516b0eadccabb9d1bcb
SHA1 2df9f67da0d4fb4e9828692c58ed50b8c6e0fb8a
SHA512 337b2c7260f92a9907182c789670ba883093eef4052f90c8891ed1e5a6efe3f07900d8761f3002fadca2658f87772522611f46155be0979e097fbb8239721ac5
TLSH
T148517533AE14AA778DB296457D4B3B13CB75A161EA522F509EDC0B1C41C775C2302C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Local State
Size 3KB
SHA256 d65a2e8a65bd505a4c39947247b1cf9d9dfa89b2b25b756bbe26e01e59a994b6
MD5 2ae5366295f67ed962f9e2d34582447c
SHA1 225b70adc6747b89d7321e2db68781c5551f6458
SHA512 a384421cb25341523c57d19cad6ba97429ce09b334538e71b5121620e361aad2fb8cdebd52dd4f2bd90e7f241cb48fa2ef0197140567279bc76cc0936275e639
TLSH
T1B8618637AA64A97B8DB2DA057C863B13A7A55023E9913F64CEEC0F1D41D738C2342C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59094d.TMP

Path C:\Users\Admin\AppData\Local\com.gravitlauncher.prestarter\EBWebView\Local State~RFe59094d.TMP
Size 1KB
SHA256 cdff8197f387522958cb60911133d5904f7f036572d356bfa621d7f6b1f069f5
MD5 8ea3881554493b0324c22f2657cf9a94
SHA1 30ca0777e6b879291912b040f077e8d00e42148d
SHA512 5eef11f83e077adb55be64a6a54c6b88d91326578f691c5632e3010855539ae271b2d13d17ce63b20a0e17dce507f8fb93e88d9ca5197398e0a0a9f43b9bc26c
TLSH
T1DD216273EAA86A73ED61A24639877B434F716066C2118F00ADCC472D62D734CA72BC33
MD5 SHA1 SHA512 TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\VCRUNTIME140.dll
Size 121KB
SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
TLSH
T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extnet.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\extnet.dll
Size 25KB
SHA256 0961de4410f94ef6e61f6d5371e780e180a5b10fd257026e69a0cbddb5da47cd
MD5 ed170ed678b22ff1b0eef77cbcca8569
SHA1 6cd3f51284c9c4c3410e2b3dfd0889a986bd9ca2
SHA512 90f552f5bf0b96d2ac448c9b8e23dd2965a76d56346fcbb2a749de3c508f5e2d7f3e76a8258d6ea63cc6c0695445c202706e7f3a508f0ec8542eeec700c59210
SSDEEP 384:ND7lUW5nryGr+g5jdKVAHFpwKNslBeoWAy8RbmL4nNyNb:Tln5jcO6lBevA5ALD
TLSH
T168C25E4FAB6009C6E8A78970D0951E23AD72F620276291EB1374C00D4FB63917F6E75B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\java.dll
Size 122KB
SHA256 10847dc080d813f3e1d3531b1cb2cc2dae1aee3ac51549e21760ea2e8349b6cf
MD5 f9da8127758b519795ece7ecf56e62e7
SHA1 ae5acc642803dfbc5a771651a219994dbfe9cd34
SHA512 510e6c13eed07d052c85a58da5eb2fd817efa61117980a82567d65c894f792258cb17c2b5a83c75c6031602d7f3e92911042ba1f4253c9c6fb5988655690466b
SSDEEP 3072:anbfBOFHnob3CyT+LMfVkhAT7yNGB/kfUNrPqzNQfw:YbfBOxnoTYY2aAubfw
TLSH
T1DCC35A1BA6504082F82BB5BCC413094ED775B4320195D74F036AD68E9FEFB713D1ABA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.exe

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\java.exe
Size 50KB
SHA256 99c0115d9498eea588e7276c8771769b5c3a87d4b6151704d58fb950d28dd1f1
MD5 abf217d93b42baed93bdeee101bc750d
SHA1 f31c171360eb9e2e418932b98c2da7071a591a29
SHA512 5b8873f76a0b29e3f0bd8d9f178a9ff6c50bc9d48103e5eafffdbf6ec97cf418c64741246f124b960ab5723f0b5df05168ad6ab9e8cd3da5aa8eeced521043dd
SSDEEP 768:MYeFbM5R2TyJ5R3s8D/bkt5Ruz3Vb3EQ5llBeI5AL0:mM5RdJ5R3sozkt5RA3EQ5lfl
TLSH
T1BF336B47AA182C82F41B84F198A7396755B0BD132BD162EB7DC5B20E4C71391A8176DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\javaw.exe
Size 50KB
SHA256 55ea76f7c5db7faa626ad3ea211ded2b256c97c1626fd0725b8556a52880eed3
MD5 33b6dcaaf0d47b0eaca09fbb058bc17b
SHA1 40870b31e699d4aa314b33546cab40b03aa1cac6
SHA512 fd817b93b794fc6074adc2845d5683730d0f2da0915a3e58a43a639ad4776a05f369a07f116543ecb10ef68ba54ae53a1288ab653d73bde98d238487d2a05dd2
SSDEEP 768:Yf/mKAG2hM5R2TyJ5R3s8D/bkt5Ruz3Vb3Zk53lBewW15AL:WmPM5RdJ5R3sozkt5RA3Zk53f9
TLSH
T19B337C47AA143C82F45FC4F188A7392755B4BD132BD162E7BDD6B21E0C703A1A81769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\jimage.dll
Size 34KB
SHA256 c76658e72a7e387f1c391f2d6088a74683cb8901d33e22b38aacd44d35f5194e
MD5 7973b600febf218a75f1e134640796e8
SHA1 a5372801889bdfc359c16256c02f0ec55fa7ddfc
SHA512 6bb9a12159eef7bd42d52baadda486e40342bf17ad0534d38d86986a996ca9b41a0b9a5c1d7efcb37a625ea9dc9b4971ab935b544e6f6dd4434cfcbbd809afe1
SSDEEP 768:FeOLfMSXU6Z9jk8JmvhRweaNzVlBeIx5ALu:FDFZ9w8s5NwzVfN
TLSH
T1BDF27C47FB600885E9ABD938D4AB1A2BE6B1F6615F5283CB1760025E0F733D03A2D747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\jli.dll
Size 89KB
SHA256 93dae1b328bbc7acc86c37207db5debb606673d892fe0c012b68741ff8506d4c
MD5 f533560b7ea70ec9afe65417ec159547
SHA1 f851c8637558897a2b8c97259b3e9b4da06494fc
SHA512 2c1c146283b8e1930c3449e1deff77335e4784cc17734bf702d8ba290c65f640a2c8caf2c49ebd8568a8531a01189f267e3af4f883c3c0ef14705d7f6e938612
SSDEEP 1536:PMPTV2uks3rpM34J4qcaiJkBNgIOPQQ7tW3jf0:PETV2uks3rRpcpkBNWPQQ7g3jf0
TLSH
T1C9938E4653D021E1DEB7D4B9D9B4460BD3F2B056272193CF0378859A0FA3B623E18BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\jsvml.dll
Size 850KB
SHA256 d85e8c65df1ae59330248cbd371c977e5c430dc728093af49c265bccda701812
MD5 ef978a142856559923b0a20b9c83bc11
SHA1 cadb7ca499ef8a3ec8f6409fbe1802147bf43532
SHA512 7528b1cbc75cfd4e33af8dd9c362946f04f419d26435f215f39dab3fe44403d8b00b62f322c8996f579ddcf893e59c334f2c0cba70e0015972455e1a1ae9be8f
SSDEEP 12288:RRybOUKnvJNeCs5wHuvfP/V71AVNV+Ssc3ES:RobO7JN3qwHGfPN7wj+9OE
TLSH
T19B05BF82F81284CDC03534B024FFBD95A92A1CE9417C0EB32772AE9D2AFD7467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

management.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\management.dll
Size 30KB
SHA256 fae2acf529a9314440896160cea1f1d53cb129b7c03760ae76b048e7bddb9d90
MD5 ffbaddbc95c100222e9217a40f0f17ba
SHA1 ddfdc7fbd9ac00f82435627631c4b89eb6cfd4d4
SHA512 0048f798b0141385f0c2756cfa2bf5a835d918d4c8b4542cc6766e302c95cbfb099512b629a9b22120eead097713c2dbc39da1e820c44666f31470f48292ebf2
SSDEEP 384:JVGlIHVxCcV4xXz2Vjc0+ge/zypwKNslBec4DV9y8RbmL4nNy0qw:NC1DStWTlBe595ALyl
TLSH
T1FFD23905B66C2086E4CFB435B4D1163AA6B3B6D52F8127870274C6385ABBBE6363C177
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

management_ext.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\management_ext.dll
Size 37KB
SHA256 b59963dd82e7522b0f34c29e01bf85d5930462f39e59bff7440fddf388971c05
MD5 90b45b2435b8b4468d15b582bc2f56ed
SHA1 f240a1ec3e1375ceb5aaff843b7a046b2fff61fb
SHA512 ac190abaeda654f70a7841d356e9657c9f963b85413ed982e0465016b16a8f72b89311043190edbd88ce9b30b56b5a6444a7e42b8ab7525024a09fe3ecf52229
SSDEEP 384:G8U95QETxARTdysqUJAnisnMRBSiikM+1VB+emb0CO8YOOJng6VpwKNslBeyh9H9:G8I5QEUhysqvizMmVkvMpKlBeyvH5AL0
TLSH
T187036C1B62685583FC4BC87490511A27E6B2B46127A1D2CF8370C55E4FB77A27A2C71F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\msvcp140.dll
Size 544KB
SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
MD5 bc88b387cafa556068b5c5d6ff3ccc8f
SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
TLSH
T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\net.dll
Size 60KB
SHA256 bba990b795a036e2955620b2f51936241deedf2ce2b4cc11e1bbd485d6afee66
MD5 c1b68e83648dd005638b7111fb638067
SHA1 f1e097bcf974efa0e0c86b859a048440029aa893
SHA512 49219f6ff032095acece5f1ce274895cc7b40a5a25549594b82e95983ef54a8572577067063ce1a3440e76a5b05330d5751818c7cfab00187f393671fa5d4330
SSDEEP 1536:WS7j0hCsdBJgEAIqhQQ3AdyFeSFzPLZmoBwafsK:vP0QhpoueaZmoBwafsK
TLSH
T1E4536D05A7D41480ED2789B8C953151FEBB17830625087CF83BAC69E9FF37B16E19792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\nio.dll
Size 80KB
SHA256 61f946edaae16148d826269263b83ffd5f9dab9d6848e82177a3b6815eaaaa23
MD5 cd6e1de8815324409e9cb81392af679d
SHA1 abf56ef17640a2f1440f0162283f0d52e74d93f6
SHA512 65032d5b65ac2a1f85aa80dd2524e61270b27de960b05548d15771b83d34b2b0feb09f26cfd6e2ca1b208bd9295dc109915cfe2297b7b0c743fde79d3e3cf2b9
SSDEEP 1536:SD8HXpzx49OkkWvRgqIA4hKabRoCEg4fs:ScTkkHqIHZbRoCEg4fs
TLSH
T165833BA293B0849BE87AB138855B175BF772BC105510974F9328C75A9F2F2B23D3D683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\server\classes.jsa
Size 11.9MB
SHA256 93c58f986ba17e41d0f55299aac9aec2128a884c1ec94cdd1f458927a6003860
MD5 7029e6758a49f1c7205e3785af7bcb96
SHA1 a638409f5179d52a81ef77f61f00e3626e354122
SHA512 99a5a1e9a95b9395cbbccfa489b2509ab0b35b78ee043372846ba0f0cb9f4f75db5517f33a6ffd36c91daaeca11cecf53fd75bbc1db20b5766e7f04bb98521d7
SSDEEP 49152:vAtO/6aHKRaPQr8hWUn5F+nXQQabAI50skB8FikLGlv:44/6xiDhWUn3k9K5U8FM
TLSH
T145C6D71BF98096AFE13D963588DA03902333F865AB068B03269763BDDDC35D18E579CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\server\jvm.dll
Size 13.4MB
SHA256 31f748c2a91fcd2e67987165c69549611e2fc962616a097d52859bddc0ea8050
MD5 d0f073c0d9a8bf9557c6c5961eaef55e
SHA1 88e2930a91e3836cf6cc47e33e0eb52596a38969
SHA512 d202a236d3f8409dbe0ecd9263e424abf324bdc9d3e9527dbae072105791d8d15a6784bf373fb5d3790cda3a6638d57a7a27d4c48426816aea940dab7298f935
SSDEEP 393216:22Hviw/zMxoYG1sULD5VOoxKheN8KA1LmCshwaJaGW1+xJbHp3XJvWx4jK6W5hjw:XX8je
TLSH
T13AE66C5AB76480D5C12BC1788A1B8D17D7F2F89447329BCF51A016AF6F23BE1663E321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunmscapi.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\sunmscapi.dll
Size 49KB
SHA256 5bf15db67820de6f3b8a588d63d6afc1e792d3ab256a8f9ee011994055a02aba
MD5 a370aaded3be72a5f4bff03908d0088e
SHA1 b5cf40574e82300a5927fc8038700e1e890faadc
SHA512 57f74fd2ca147ba663d8c94bc98ced01a459f90ae4edaffe48996c234d8c4b7ba64d40ae9278ae815bd3a7df7860ff2204f65998d4ac72a6f4a9ebe12b270b1b
SSDEEP 768:h1Wqu5RqH087NM3WNxmRkcRs0mm/rfAi7yIq7blBecD5ALK:XWqcKNX+Rs0mSrHyIcbfT
TLSH
T1A5333A06D7A104D5F8A3C8BCC026162BFA70B4552272DB8F0391C64D9F6BBB1B67CB56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\vcruntime140_1.dll
Size 48KB
SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
MD5 cd1b08f4930b276ad78853580b76b5c6
SHA1 a0330279d3d0d47f19ed984726e25260b547a228
SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
TLSH
T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\bin\zip.dll
Size 86KB
SHA256 d49aa70b3d26936dffadcf7af9de9e605596727575c3a8ebe78f772d2854ca32
MD5 44d9808c1017503d8acfecc9dc65432c
SHA1 2c90a0f9eb92e55e8e3f9c702c2fd1e2c35a8a1a
SHA512 071784c6e72a84a6cd9c3b5ef84da03cd7e261189eb777d7a81c28b71a66aa1006e013ea46507ada772e1973f93a6337713b20415a5e530672973d46ca0d9779
SSDEEP 1536:v1pZwyX/obudT6wU9VUUKwtJIOxg1d3jfg:v1pKyXAbudT/Mlztxg1d3jfg
TLSH
T1A2938C51AD602052DAF789B4D8E64B2FD3B5B02257A157CF5358839A2F437622F0C3EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.properties

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\conf\net.properties
Size 7KB
SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
MD5 0c091bb338f924911db463aec454ba8b
SHA1 69e86a02207c1126a0d9faf9362a8d1798b140ad
SHA512 d0d257c7b0fc6059faef88603c07a9e1cfe6692359eb634b3436a02723ff015d36d523e1c2a252649db7cd4d0e24be114c042e3e209ce027ee07b7816466109c
SSDEEP 192:/LVGG4f4z346et5m27SnCgTe93hf7k9SrnF:ZGxYCUCgY3hzk9+F
TLSH
T1DAF17283BF46B7354399C291E21EA7EEE32C913C5C3375B831AC850D2619C76427F4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.security

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\conf\security\java.security
Size 71KB
SHA256 7eff0eef66774d0c6a07f6c69fae02d8a7dff9b2ef3d7751af9af87a4dda33e6
MD5 20ffb7871b57243e82d798b265a429f9
SHA1 f6582cd24bc26c2f0cc85cfa9dd03ba5c308287e
SHA512 20c251ba71f0ee417131150100df3eae06f861f02a08f442770a6a742a8152337ad2a96da892a47f137b584ec195b280e683afd80d0d95a00fe41ff7b329e456
SSDEEP 1536:r+My8Si8MRjJPFp5/jTNHu1UoQ2k/gl0ugzYilNndOc98:v8MfPFD/jTNO1UoQDciDndOcm
TLSH
T14663D422BB896B7206F211A363AEF1D9F76DA12A22325154748D420C7326F71C3776E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_US_export.policy

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\conf\security\policy\unlimited\default_US_export.policy
Size 146B
SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
MD5 1a08ffdf0bc871296c8d698fb22f542a
SHA1 f3f974d3f6245c50804dcc47173aa29d4d7f0e2c
SHA512 4cfca5b10cd7addcff887c8f3621d2fbec1b5632436326377b0ce5af1ae3e8b68ac5a743ca6082fc79991b8eec703a6e1dfd5b896153407ad72327753222fdb3
TLSH
T178C02B07BB17D0F800D0EF4617B57916B1701E89B0A1121CFA00C2A41EDC6108330394
MD5 SHA1 SHA512 TLSH

Submit Download

default_local.policy

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\conf\security\policy\unlimited\default_local.policy
Size 193B
SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
MD5 2a0f330c51aff13a96af8bd5082c84a8
SHA1 ad2509631ed743c882999ac1200fd5fb8a593639
SHA512 2b0385417a3fc2af58b1cbb186dd3e0b0875e42923884153deee0efcb390ca00b326ed5b266b3892d31bf7d40e10969a0b51daa6d0b4ca3183770786925d3cde
TLSH
T14EC0C02DFF9BE2BD44F0AF4623B15485703912473092031CF24583C43EDC580C2306A8
MD5 SHA1 SHA512 TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\legal\java.logging\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\legal\java.logging\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\legal\java.logging\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\lib\jvm.cfg
Size 28B
SHA256 54ac5bb838f64585085f6c04b73431a96b9246cc0090943c48b067ab05086180
MD5 4006564666795c838eed8b7fd958b0af
SHA1 cd6d4f2868725ef7541485719c6ea88d05e43724
SHA512 87643b6f1da35a9a60869ef1f68141b3e4225fc65b256f31f7289c854d0e929e587ab572d4f67f2802aea89958b3a45a23c83bcc60c6b30613c87021ef537b03
MD5 SHA1 SHA512

Submit Download

cacerts

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\lib\security\cacerts
Size 190KB
SHA256 96eee621cc8775aab65a9609e1b310b0912b203fd1b9213a9185444440bdcfc0
MD5 1b0d52026f1854ec17b6646fb7e21feb
SHA1 bae5ea28d5dd4f792baf0d775a3fbd44dc77d0f7
SHA512 711723d3817049e729f54361c5646419007a703aa3cb1b4f62783103577bd4ebdc112f58083646bb42b098db4e7a29cd790ed4e4da92576aa59d05ab23f6bf0a
SSDEEP 3072:FW50keopPrPXMvfrSuZaZbVs6hhPJ2ybF8WtZGlMG0SkAXA7BTMly8Jg969:C7pP0uucZbVs6hhPJ2jM3SRXAlTMl44
TLSH
T134144A4B1F3D74057FF2DE48A688DB277DB6F3E42E969927102180E41992FA07C8D52E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzdb.dat

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\lib\tzdb.dat
Size 100KB
SHA256 5906b44e25a8a730131d7ba1beb5d15af27043f6536f1a169ca8a5d8b8bed8f8
MD5 1c666dde9e9c6fe77715e29d61960af2
SHA1 b6df03d1b9231bdce9ee6f5a3eeac881994f5f1a
SHA512 2a015071df1b3eaf6f5ce1c15989c874c48ca1f4818e3a24b650151292945e70b07b43baf0dad72828621a5748b8276b3ac7c17dbf0768b1881a30dd140daf2c
SSDEEP 1536:y0ExeF88hPdr92L674jAGubqn0Lg/////UzJbPdJPNL0mIT/M4Z3jyxU:yPeq8hPdrcWzbqn0hJzdxuT/5ToU
TLSH
T16AA3C4B57F7150B7B2CB8122262B5B93097DAC816FC3084675B4BD4E8A76AD7203335E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzmappings

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\lib\tzmappings
Size 21KB
SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
MD5 4c30d7867505379a18a27d0e8f03198c
SHA1 0cc871d5bd91e061d676a861749af68bbc0ca9c6
SHA512 873d329682ce67267f438b88eee0fc25cecbbcc1f7d694118417ad12756ec2b6ae7502ec4eea0cc9b4ae8b9e68f5f8877762fa13dea89c4a6dcd54fd8bf82c56
SSDEEP 192:3nqW46ARn1+RQ7wbNQQSaapvQZglEcCDqvOCJqGic3yzA6bbAdOFmYXKhJmBW:3nqW46ARnGQqN2KhcQ+qAa9W
TLSH
T1CDA25386B06662D4C073EC0D7B527AD3F886F3C899C69A4D2943C366BD019B767E1837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

release

Path C:\Users\Admin\AppData\Roaming\GravitLauncherStore\JRE-21\release
Size 1KB
SHA256 069f8e2ab57e123bd19b25b36e709eee5e48453294544b3ec3e35a20b728d836
MD5 a1735f547c7aa153e58e711175895a02
SHA1 cd50c51ef7777c382b291a49f429096d37c21c1e
SHA512 7f28bdffe18d41c455cf0ad2df38d46b063db45e24546af519792e2a14c3b9bedf1f60d999f391c9cb156e5551138fca7ad0d714568ffd13c5a7477e277440c6
TLSH
T17711D02F600F88F55BA901C379748D1FF4EC983146829C98FE8F9844F1B3B529AB011E
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1272-161-0x00000219D9AF0000-0x00000219D9C06000-memory.dmp

Download

memory/1272-88-0x00007FFC68FC0000-0x00007FFC68FC1000-memory.dmp

Download

memory/1980-267-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-266-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-265-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-261-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-270-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-259-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-268-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/1980-269-0x00000231B4510000-0x00000231B4511000-memory.dmp

Download

memory/2360-160-0x0000016A20C20000-0x0000016A20D36000-memory.dmp

Download

memory/2360-778-0x0000016A20C20000-0x0000016A20D36000-memory.dmp

Download

memory/2360-176-0x0000016A20C20000-0x0000016A20D36000-memory.dmp

Download

memory/2360-26-0x00007FFC68FC0000-0x00007FFC68FC1000-memory.dmp

Download

memory/2360-198-0x0000016A20C20000-0x0000016A20D36000-memory.dmp

Download

memory/4728-212-0x00007FFC69390000-0x00007FFC69391000-memory.dmp

Download

memory/4728-211-0x00007FFC6A990000-0x00007FFC6A991000-memory.dmp

Download