c515fa88b7af074f1535160faf7aa469c5e291380bdb1166a176e6f6937e0ccb

Analysis

user interaction
yes
max time kernel
298s
max time network
280s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Antigravity.Tools_4.1.28_x64-setup.exe
Size 13.5MB
Sample261020-t5ctfacd37
SHA256 c515fa88b7af074f1535160faf7aa469c5e291380bdb1166a176e6f6937e0ccb
MD5 e47c227ee9e5a66722f23571416643c6
SHA1 16c1b735d71969a5001d6a0b634c25f704e6a399
SHA512 7dfeb3dcc906510aee0919056b146ce19c9b8984b6fa32b2a36f8e32b3618ec20ace2b04835a4fedd11f9e757f6352960ecd6ec38fed35586163b6758d17053e
SSDEEP 393216:tcSoA+ozKtdFnlZc7jSxxX+LuQIdzMm1Zi1Unsj:tz75adFc7jkxupIdzMqZiCsj
TLSH
T1A9E633A393D8E017E7D75F330A4343B69A92F58B9478FF1613EE2D993C63460A0095D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\Control Panel\International\Geo\Nation	antigravity_tools.exe

Executes dropped EXE 3 IoCs

pid	Process
1676	antigravity_tools.exe
3136	Antigravity Tools-4.9.8-installer.exe
1524	antigravity-tools.exe

Loads dropped DLL 14 IoCs

pid	Process
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	antigravity_tools.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	antigravity-tools.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\ranked_dicts	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\crs.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\ct_config.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\keys.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\model.markov	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_704752108\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-et.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\test.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\male_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\passwords.txt	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	antigravity_tools.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	antigravity_tools.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	antigravity_tools.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Antigravity.Tools_4.1.28_x64-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Antigravity Tools-4.9.8-installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4640	taskkill.exe

Modifies system certificate store 2 TTPs 6 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2452	Antigravity.Tools_4.1.28_x64-setup.exe
2452	Antigravity.Tools_4.1.28_x64-setup.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
3136	Antigravity Tools-4.9.8-installer.exe
3136	Antigravity Tools-4.9.8-installer.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4684	msedgewebview2.exe
1848	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	2452	Antigravity.Tools_4.1.28_x64-setup.exe
Token: SeImpersonatePrivilege	2452	Antigravity.Tools_4.1.28_x64-setup.exe
Token: SeDebugPrivilege	4640	taskkill.exe
Token: SeImpersonatePrivilege	3136	Antigravity Tools-4.9.8-installer.exe
Token: SeImpersonatePrivilege	3136	Antigravity Tools-4.9.8-installer.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1676	antigravity_tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe
1524	antigravity-tools.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1676 wrote to memory of 4684	1676	antigravity_tools.exe	96
PID 4684 wrote to memory of 468	4684	msedgewebview2.exe	97
PID 4684 wrote to memory of 5020	4684	msedgewebview2.exe	99
PID 4684 wrote to memory of 5020	4684	msedgewebview2.exe	99
PID 4684 wrote to memory of 5020	4684	msedgewebview2.exe	99
PID 4684 wrote to memory of 3128	4684	msedgewebview2.exe	100
PID 4684 wrote to memory of 828	4684	msedgewebview2.exe	101
PID 4684 wrote to memory of 828	4684	msedgewebview2.exe	101
PID 4684 wrote to memory of 4212	4684	msedgewebview2.exe	102
PID 4684 wrote to memory of 4212	4684	msedgewebview2.exe	102
PID 4684 wrote to memory of 4212	4684	msedgewebview2.exe	102
PID 1676 wrote to memory of 3136	1676	antigravity_tools.exe	106
PID 3136 wrote to memory of 4640	3136	Antigravity Tools-4.9.8-installer.exe	107
PID 1524 wrote to memory of 1848	1524	antigravity-tools.exe	110
PID 1848 wrote to memory of 3920	1848	msedgewebview2.exe	111
PID 1848 wrote to memory of 5032	1848	msedgewebview2.exe	113
PID 1848 wrote to memory of 5032	1848	msedgewebview2.exe	113
PID 1848 wrote to memory of 5032	1848	msedgewebview2.exe	113
PID 1848 wrote to memory of 3128	1848	msedgewebview2.exe	114
PID 1848 wrote to memory of 3368	1848	msedgewebview2.exe	115
PID 1848 wrote to memory of 3368	1848	msedgewebview2.exe	115
PID 1848 wrote to memory of 2244	1848	msedgewebview2.exe	116
PID 1848 wrote to memory of 2244	1848	msedgewebview2.exe	116
PID 1848 wrote to memory of 2244	1848	msedgewebview2.exe	116
PID 1848 wrote to memory of 1032	1848	msedgewebview2.exe	118
PID 1848 wrote to memory of 1032	1848	msedgewebview2.exe	118
PID 1848 wrote to memory of 4512	1848	msedgewebview2.exe	119
PID 1848 wrote to memory of 4512	1848	msedgewebview2.exe	119
PID 1848 wrote to memory of 948	1848	msedgewebview2.exe	120
PID 1848 wrote to memory of 4380	1848	msedgewebview2.exe	121
PID 1848 wrote to memory of 4380	1848	msedgewebview2.exe	121
PID 1848 wrote to memory of 4356	1848	msedgewebview2.exe	122
PID 1848 wrote to memory of 4356	1848	msedgewebview2.exe	122
PID 1848 wrote to memory of 768	1848	msedgewebview2.exe	123
PID 1848 wrote to memory of 768	1848	msedgewebview2.exe	123

C:\Users\Admin\AppData\Local\Temp\Antigravity.Tools_4.1.28_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Antigravity.Tools_4.1.28_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2452
- C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity_tools.exe
  "C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity_tools.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Modifies trusted root certificate store through registry
  - Reads the TCP/IP host and domain name from the registry
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:1676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1676.4764.5610544147047851811
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4684
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffade31b078,0x7ffade31b084,0x7ffade31b090
      4⤵
      PID:468
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,16101119935689750843,16854171914946441989,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
      4⤵
      PID:5020
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2036,i,16101119935689750843,16854171914946441989,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:3
      4⤵
      PID:3128
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2384,i,16101119935689750843,16854171914946441989,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
      4⤵
      PID:828
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3644,i,16101119935689750843,16854171914946441989,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
      4⤵
      PID:4212
- - C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-QdAXz4\Antigravity Tools-4.9.8-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-QdAXz4\Antigravity Tools-4.9.8-installer.exe" /P /R /UPDATE /ARGS
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:3136
  - - C:\Windows\SysWOW64\taskkill.exe
      "C:\Windows\system32\taskkill.exe" /F /T /IM "antigravity-tools.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:4640
  - - C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity-tools.exe
      "C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity-tools.exe"
      4⤵
      Executes dropped EXE
      Checks whether UAC is enabled
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:1524
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1524.4976.5129776347504396536
        5⤵
        Drops file in Program Files directory
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of WriteProcessMemory
        
        PID:1848
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffade31b078,0x7ffade31b084,0x7ffade31b090
        6⤵
        
        PID:3920
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1832,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:2
        6⤵
        
        PID:5032
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2076,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:3
        6⤵
        
        PID:3128
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2324,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:8
        6⤵
        
        PID:3368
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3524,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
        6⤵
        
        PID:2244
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2228,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
        6⤵
        
        PID:1032
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4708,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:8
        6⤵
        
        PID:4512
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4932,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
        6⤵
        
        PID:948
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4544,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        6⤵
        
        PID:4380
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4928,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
        6⤵
        
        PID:4356
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4384,i,3933284855190756052,8956477985145792250,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:8
        6⤵
        
        PID:768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

english_wikipedia.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\english_wikipedia.txt
Size 269KB
SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
MD5 c5b5e739e99f368b294af5d6341d79ab
SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
TLSH
T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

female_names.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\female_names.txt
Size 26KB
SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
MD5 65c6b77a97ccdb4f09402295c75cd151
SHA1 48d9de4e0c6ef8f29db7e3b69008d1e25423f333
SHA512 59608916ece278c8d6b518b9ac19f38b071acac1e8698be851a5e357b97a2e4c4dea4d122321f61e937fd2480e6041e78e97e01648098da194890895d7ea0dc4
SSDEEP 768:QLAlqUDcjeadVlvbnevUtIaBY30lzpoTTC:Jlq4Ceahn2HQqC
TLSH
T150C2EAF7EAA8097F748F890DC5893B604C58FA332C3658A59E698FDD42056D0DDA4F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

male_names.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\male_names.txt
Size 6KB
SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
MD5 ed2a7be8d1007adf88defbba6a30fb18
SHA1 f00e2d8892ff2808a81f50d360edc960bd8d51ef
SHA512 1577919e4654086ae6d673ecbb5e436ca2fdcefb30bb4f839fdcb545f3b3b102bb47e78ce6c4ba451bfd9cf6099eba35c765dcbdadbac80aeac3083dc095017d
SSDEEP 192:+qi/Dd0Ms6tPdSiuDvtnNdqfkKY1kqPgxC4Hb64:+vbLu5Nc8UqPu1b64
TLSH
T14BD1E8BAD2E43975AC9F058588CF2F41994C36337F321676E6B90AC94252A805ED0D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\manifest.fingerprint
Size 66B
SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
MD5 a346573314757c677ba7b22bf474c77a
SHA1 aec9bbc033bc1c11aa690a8c5ceab69324ec42e5
SHA512 8bfad9d06097a6571bf855b189d645a3f4913798fd6ff66fba00c90673f891901d03571ab57dddab2982591b60a8e6c27fc47f05a69f33da0e92ec49ef5fa43e
TLSH
T17DA022B02C230A0000C802002BF08C3308F8C2008C30232302CC38C0003C0C0F88CCC0
MD5 SHA1 SHA512 TLSH

Submit Download

model.markov

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\model.markov
Size 44KB
SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
MD5 2bb4fc702c8b59a0b518482f60a082c1
SHA1 ffdc0a063cdd51e4913df4e4917495abf7e486c9
SHA512 f6b113084bd43a1f1844102ca860efd8bcd363de3eebc8acf23f5744d74b191fdc92a601630eb8e602e93005a63b73a9cb3bf5de115e157a2b72eab4dd891c5f
SSDEEP 768:aRuG/TuKUqwxhRH6t9O4v2uoDO+L1kO5qNlFpIpJmfaLtk+Yg6qFw11/aeMgE3Uf:aRuG/SKoLH4vC9L1kO5qLAbJkE2/aeMy
TLSH
T15923F1B3D385DE3992E317B0E67D22A74BD21AA47ACEBB23492BDC4215F1C504254DBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

passwords.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\passwords.txt
Size 233KB
SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
MD5 13c1efee289d7ecc8a7e7bcc7ce47df8
SHA1 c2864b21ab8130e8cae66f1f19ac38723a7cf42b
SHA512 08df4c520a896ee26ef9b8f093b2e14b6e4af67f910f12d70270917df2d78a4666458386fc6e83258d84d24b03e517e39d7799225b41a6687278dbe9610ae537
SSDEEP 6144:EY19QF6DI5luckZEjoQKe8rbbIptoWfEYixiRG+GpAcBN:EY19QKI3HkZ1QKe8rYf3fEp0RDIAsN
TLSH
T164348EB5F6A03176E6CF464E580A3F058A9D37335D11589FE7B80788120BBD885BBE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

surnames.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\surnames.txt
Size 74KB
SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
MD5 64ffd4d0d29a84dbf99bddf1afe7e068
SHA1 f1c3703c60fa8ceb538a851acbeb2cc48e78243c
SHA512 d447a251bbc6b5da76b9327dca62d3a40d6e2ae5c59c35f9e7615be15e1e5eedcb7ec6d20ec48df33904851002c823501f9f3347dcd0e279f3fa86b00d050d28
SSDEEP 1536:HZQFhD0AAQnaaq6NE1f+oNh2MGfAoocKAPvY02+dhQ:5y5/LaZmoCJeoxbdK
TLSH
T169731A76E2B4383AE95F1B8D48953FC1C904D6338D10A1A5F7B906CAA047BC58DB5F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\test.txt
Size 15B
SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
MD5 29b933a8d9a0fcef0af75f1713f4940e
SHA1 9fbc3fafddca353898269a2f4069e4653083bcdb
SHA512 9751ea443fd632e147831566ccb822482220188993cd1269edbe98d2e2d69beb5fb4b631c5001f47491dfe7550cb68035267fae518f1ff119e465b54379389fb
MD5 SHA1 SHA512

Submit Download

us_tv_and_film.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1317875217\us_tv_and_film.txt
Size 159KB
SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
MD5 206a438724efc16dc8afa5a8984f05d1
SHA1 57225b5fb5cb51333fa9d79865f2393ec4445e42
SHA512 6a653e259d4f15c88145c820d1e3062194370459da34cb2cc49fbdc681e1bf3176501129640fdc1b635ea805c03ab85c8bc5169e23ef099975fe559bf284bbab
SSDEEP 3072:CwawB3H2+8PW7D0Nr45Wn9TkOijxjTBUCbws5d0hKS4D/ODGRtenXpMFU2c92C7/:fawBXbD0NEc9yxjt3bws5d9S4D2CnKXn
TLSH
T1FEF31930DB64353ED79B2BCEC8642F52415445321E3570B9FAAE0149180BF9E8B7AE3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_1891373062\manifest.fingerprint
Size 66B
SHA256 923e1b9403d60f9819e125f96db6bff959afb44b142852f16b8a2dbf3f445115
MD5 7bdde4012594a290c402bc856509c0f8
SHA1 2d5c3900129ad5dff87179382b244414ba78be62
SHA512 8edc868bc97c659c318bacea8ffd3fc2c4efbe0e5f7c2c47b010179834c8858d06f5c1a4c70fed8a41b942467565d267f7844be58eba291635a23aa4c6726a37
TLSH
T1D6A00206154855DC43D28B195ED8174899D0CF59B25665404C5D4DF1846B92D5709758
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_704752108\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\_metadata\verified_contents.json
Size 7KB
SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
MD5 117d173e82b282deca740475e35c8ecd
SHA1 912b12b993507ebd9af6bdc937559b4d4b58a0d8
SHA512 e455c0bb68e9056c6242058fcba954bc1d5ea4a864e99be008b2745c51209b477bd7bdba57006be4a02a09bda49c0cdc17e8f870c81c7771864640950f5f9a93
SSDEEP 96:RhZIpt7VgtFD3F8CMXuuzaRFJrb7ghNglFjPu3ljl7arVSQi6E/swokYglZ:Ryt7VgtFD3FaeTrgCtP0dyCDsoYgn
TLSH
T121E185F21E79744D5CC52736077EA95B9AB4A298C2513EB646D00C99B0F7F0A80BB4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-be.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-be.hyb
Size 5KB
SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
MD5 087de134f3b23a9944afd711a9667a0b
SHA1 1b67d0a65ef91295207d66e62b682803aa74ef00
SHA512 42c0b51e0e28109a7058d3fc03fa7bef8b25c9b3c8bb74933574fad06c061fd1636b53eeeacf652e438d4df08002db449681be9e6e6821ec23d32a8be1778998
SSDEEP 96:mmfvnESaDPq1iYM7N8gyurprJr/P5FwBlh/RT95vtEUnbpwROaQPP/KV2L+HCdYV:XfYPq1iYyNk5p50OwQPP/KV2L+HCinCO
TLSH
T129C120C2DED52F91F8E428307076356E94C0ECD80B81DF27EEA5682DDE9EA045648AD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bg.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-bg.hyb
Size 3KB
SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
MD5 e8a4f8f5238f9a0ff6968ad8dba2755f
SHA1 abf002ff28b3aa2a59948225e5e600096348caa7
SHA512 b54811e1be6e63bf19e408ac4ae9da86e1473e4e8f1e9d517d907e025be20fa6979517339ec6defd0ec30613ed42a97d88111d39297214afa7606597cba5ea86
TLSH
T1AF61E86A840D1C89DC3258BF71F7FB890D00A6BB162DD05617462E61EB33D48AE04B77
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-cs.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-cs.hyb
Size 62KB
SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
MD5 e8b1509f86508e807d61216614b3dd58
SHA1 b2334509e9d1589ad2e8b80c187018eadb15872b
SHA512 fb340fef9d0dba342fd85b8b18c0090391aed717fe92a8da7c5d939dc9c0aa5235d4423b590e52b0decddd4f4ad8bd4652361161c193617601ff490dd1be97fe
SSDEEP 1536:sonSvAX9Cf306OFe4Q/irU+bvWDdF3EeFWPA:rSvEchf41oKv4dBEbY
TLSH
T1D6533A43FC650FA9DC7D50FAACE40EA955153ACA1F51682EFC281095BC22D293FE0B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cu.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-cu.hyb
Size 51KB
SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
MD5 b4e5921b1df85ba9f2ebe6ce578915f6
SHA1 b5f2e813667aae32e65cab9c9a0dd291421ada0b
SHA512 41696a9e25ca004acdc8def265766392ce3568747560ff73cd08ac9fa4a99e4c4654fb84dc602845b3e444a8312fb099c72932471f7e830874cd7cfa184b63b7
SSDEEP 1536:a5OMYzUXoeoZA7SmEUbxucj5DTKZ2oVXEyb:a5JYzUXoeCA7SmEU9ucjBKZxJEyb
TLSH
T17533E8D77029CF7DC0DD35F6AE993EDCA358689B3E462A7A521B91D32DE2D4230001E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cy.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-cy.hyb
Size 35KB
SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
MD5 b0f32ed7b4b8a068a962d820627b7229
SHA1 76734e58bd33c4d1450228bf05e53cfe169a02e6
SHA512 8f20253985c217401627e0c7d31aa1bf213fa220bb498869e11e1e532c3c82dbc2abe6ffa27c69243913243af1aeb35806175511d77d730c914b1cadd71aa7a0
SSDEEP 768:s022NAK9/8ei2v0BJlYZqNCII2vfP+DzEKd8mPBFDpvH5aWg6:c25X/MBPjNCIISkTPB3RN
TLSH
T1A1F2F81B75D0CF23C017863EC1AC5612932F9B19A744CA9B668E49BBB14B534BFA734C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-da.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-da.hyb
Size 6KB
SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
MD5 d0e160dca547eda390d6cc7c4a1f7ac6
SHA1 7eb71819675e82b1bb92428e07fa6b05cd1854d8
SHA512 9be5f673962c6049ed1c796a81aa7be72a1c7715fc2d4610cf6565541c7bb145d068b94b5fdadd30bdb5f5287ccc2055ec1dc9e11e4c5b8965d59ef73ab145c4
SSDEEP 96:op8RuPmWKvTES4MDmKQS3mAdi1flBiLwHR08fiCkUNGrvYe4KiGn1BUBkQH:op8ImWKEGS87diLBiLUfoUNGrln1BUBL
TLSH
T1C4E1B30AED968743C41AD9B9CF07C98B84B9E089B791713AF38C8641308A33C67E735D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1901.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-1901.hyb
Size 118KB
SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
MD5 dd9d0a81d897f88f76c1f6d69fb7483e
SHA1 520bf6111f902196591ea358fa8ab4ae89ee0acc
SHA512 8c0a339d353cac1c66542bcfb7d41e7241a59a1886fe8a189aa155aafdf3bd23274f956d3d8a49be5b23cceafb516648a0e0b44f67e6f5ca60e216fb3f362ccc
SSDEEP 1536:4S0havr6N41g38Gnzvueua0+Az+u3tnQrI9LKyQh9HzSWwwwKYf+wBuLxfrHmu:5cae4TyzvqaQzjQMuSWwwU+RpT
TLSH
T132C3D5AFC20E4E45B2B6FA0CC108767EC15C7E6ADFE045A7909F1424A4374A8AE547DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1996.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-1996.hyb
Size 117KB
SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
MD5 e7a9906b316d478b55bf8ebcbbb1d1c5
SHA1 5688453de9afb7405960980dc93adf9296aa2f4a
SHA512 36e6beaba33a16203f996d6e8fd987347028d590a4b4bcd4d2a129876c486e03b9ba13f279f301e91aec1e0f8e91bf109a27f2b464f15a3e1a2b56d03473b69c
SSDEEP 3072:+GQAdd4u8VlGiVdYQvi792ovhcxX9iEaAGGceTUjnnfxXElEg:7Q+UfN3RiEaZGceTUjnJXih
TLSH
T164C3E89BC11A3A44BA70BD5CC5C8326ED1547FB69EC0D1AE598E15A024738EC3B887DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-ch-1901.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-de-ch-1901.hyb
Size 117KB
SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
MD5 c6773229845710633d3a4d6dd9800fc5
SHA1 1d4c2e5f3ddf5627164edb471e8a8177993449f4
SHA512 ea69926520429cd934d52d84a7fcad6bc9bb654085d8d1de813e73f191ebd7b310e2e68b4bb43fecbd88cfd15ead7fe295405c01b7fdc225914b0477c08d4e01
SSDEEP 3072:iDCOweCoHgtKmiQaf6ZCM1BKstDcqZnSmEBQBkXmhHB71:CCZeLHgtlG6dzhcqZnSmjkXmJ
TLSH
T19FC3E5F3C5038E49A9B2A80CD588335E65147B7E9DC849B780AD5830A5B70BCFE8479F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-el.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-el.hyb
Size 4KB
SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
MD5 746a59e9f9dda15c0f17c1b72921c85f
SHA1 eb7f671af76eac40787d9227d41453b5117889bf
SHA512 8894b754377285e2f3071fa5bcd714f249f3dc85bf3690641c6576b070113c1e72caa61e7e2c97d35a7f79b08c2969bc4a2fe46bc4bffc4ed58069387dfa7834
SSDEEP 96:mMgP7nbvtENatA/JKab1QaRAwdRsCaRANaM2ahrvmG7VnaxEaP3/SJADfY:Wjpk+O5b1zRAcRshRA0KhrvZ7QJPvSJd
TLSH
T13391CC84FF865ED5C52C203325AA06261B1CDC9195E2977BBB70CC34BD5987CFC5A08E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-gb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-en-gb.hyb
Size 45KB
SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
MD5 fa3dcb77293a058277cb148a0ff491fa
SHA1 3335315b13cd82075da2adbebe32759c01833e8d
SHA512 c83a8c4eb29c3171fefe983c3e342b6af1bc1add7288c75c5a782dc14f12d2af83043c2b43c9ab3e5db61c91de6d7cb473746517debcff7ac2c0f05bb8b0971c
SSDEEP 768:8CPGXSlQXvRVYVL0xpPuB5YBBaEiQD6m8eft0Sr+uh0d3TPwHh8fJVVoxUb:8bXQMZQ0xwB5Y7aEiQD6mPf2S6uoTPwg
TLSH
T1DC237BEFF8039C8F4623A667C55627152E9C6B9D2F53CFAB448D03F1322252CB0B595A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-us.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-en-us.hyb
Size 58KB
SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
MD5 b2693233d14890c81d322bec948549e7
SHA1 7ea8e42e319305010d3e6568fb4983171583dd06
SHA512 1bcb5a9c3db408fba6a6d02162a294c5c7264d4b202eb332da8d02c0c662cb070cf1534d5aa0754788d35abc88273f3337ca5f302ada95bcad077eaa52804915
SSDEEP 1536:h5tXyt+U07SAFarfxlLXSwk1cI3P05j23Kqo74TKAqs:JCtYuPrfxZE1c0o26aT9qs
TLSH
T13F43282BE574CE6A8D53177CC6A6225A08DFD789CFE4CACF452C81777056128AB3630B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-es.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-es.hyb
Size 14KB
SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
MD5 f6bd0377237fca3c4b7c6a6cb244298b
SHA1 b8df975889cfb06fc97db3d63a7820b7cf621f40
SHA512 0a36860580e295122f5e49091127386edc762eedba80a2d7ad958ab33307aabcd420173e08ae797a19664bc830800d92c548f3e434bf19bfd7791e50e0c45c2a
SSDEEP 192:j6aP1LZOFTlMa6Xb05w4rsv6SHyg8jNIcG3VTCkde7QpCKBz1iBOJGPJ3IDIHmz:hP9er5wKGhSfhIc4yyC+z1iM0PtIDIHQ
TLSH
T1B462084AF5455FE5C5A721B085530F9E0241E6980B90C36B98BC1D7ABD2AD3C7EC33AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-et.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-et.hyb
Size 20KB
SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
MD5 2ae42ab807286f6ec0ff1876d9536b0b
SHA1 cf3bbe7348eaf2cb3d93c5cc10964bb8d1ba07c1
SHA512 13c193571a7374bb169f6f0f06a9af7f8251cfcbf60825a85396c907d40f7837c8efd0a7bc8b6c4deed2bfca7b8508f132932d7860c2c9a4fb568d8ba2acaea9
SSDEEP 384:1HSUqMAZs9xsrscHJvMC0rWxMabdxhDPWSZuVyVm44/DasJVwLf3:1YanasivMaMaZxFPWSZ+EaZVwT3
TLSH
T1CEA2F99BB6818B61E23F0AF18AF93FAEC04541562F10578DF404D7B2B12A794AD93F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-eu.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-eu.hyb
Size 665B
SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
MD5 e90ea97070cfcfa795fbd807ac300d34
SHA1 8c83b4cd54d394aeff31b14a219f2a3562132908
SHA512 210dd857f7799f1a926c7aa73f26912ad60723e099acf1566bc39efd445a1b194be4dc557d5da6874e7d75a37115aead9389b8009eec1422764e6648fe4cf8f1
TLSH
T1E8014F4AE4C04EAFC8D34EFF4017C6AD9681465BE4918B2E271CC8D5330556F679DB84
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-fr.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-fr.hyb
Size 7KB
SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
MD5 092e0a95d6dada26ca56d2ed558749a3
SHA1 40bd8296e5e852fe725c7119083a8d5614037cf9
SHA512 c04ba62f4a0336e9b25bd2f6a8c3cb82c8b6127c1c04fc173abc9bf03767a9ffe18c9241b301d6f71f79f3377bc990f25f099d7660880c097a9cf4bb1e4bd48f
SSDEEP 192:Yq67m0o5PsoVQ5rT1+Eqy2G0Xy7i6uccc/J66POIY2:YHmkeQ/1v2Gay7Bupcx3vh
TLSH
T129F1B7C77A020EF5E86A3874D1D802950470AE242E602F56F3687C3DB5578652EE37EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ga.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ga.hyb
Size 34KB
SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
MD5 768032a419e0ae3bd870d591e2173715
SHA1 58fd709a1dc40176fb72189c20567ac1950b9db7
SHA512 4a4ca1f735b82f625002b0292f623179f2a6ce736f633cbfd6868e3db0709eb06eb462bd9da3ffa8365c3c38fdacba735ad32266cb3ec33d3e583ed073d0e3aa
SSDEEP 768:eZAG7bymjpz7qBZWBHn7xbeGhs0fCJRc3uQz3sfLsCPI2th4k/:iAGfJjpn2UbxbHhJaLc3pcfLFP/4S
TLSH
T1C3F24CC7FD09DF3FC6DF2436C078260643AE8B15AB45EB8B48466172B9471272E7692C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gl.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-gl.hyb
Size 9KB
SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
MD5 1b08fb098d29c30488b8fc3f19dcf8b9
SHA1 df6e03da66a7a5ae4927334808c8c20752733667
SHA512 de1de90bd44d8977a4a69d6c64bc90f421f5e099396d06fc2466de6ee62a59f5a59ac1ba0ea96e69dfcf744f12165a8a9e9fda73afe5d38704a7b3b0488a369b
SSDEEP 192:ivHsKFShtcb9Gn03kfkyrU3N3k65tk5kX9yI:GSh+xGn0UfkLNF5tikXt
TLSH
T11812084AFF44CF03E82256BB8511E47A404195017736EBA9664AA2F42F0BBB85DDB7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gu.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-gu.hyb
Size 655B
SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
MD5 f6dc4e0fb974869d3d9457c582a38690
SHA1 e6708afa342639eb96cb97d1f541a421b2626d00
SHA512 a778236fa8c5f28e747214d0ba0417aca1c9a95e4c013fbc21e6defe39d0421a2b27ccb27e6f248404a9f6b5cd1014574d0478078f36af2a0181872ac8173d72
TLSH
T193F0752A72011F4FC5213AFC1D6D05781034C01043AD0323C22534B24164B7DB4088C9
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hr.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-hr.hyb
Size 2KB
SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
MD5 1864e47e724bb7f9c052a2840eee21d9
SHA1 9749136107913d6570c0c46ae2b52e66d8284c38
SHA512 2d6e76aed93652510f5864dde1e1923c67e7413e895abfa8fc7e8c9177e228e4d153afb7099b86697d1662ca3124ff2173f4aab2c978d52583a8e2dbc70c0842
TLSH
T10351A1EADF108571CBFB09B12D9E249D0274C6D92347374770B6B061A6A0FA26D604FC
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hu.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-hu.hyb
Size 309KB
SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
MD5 37b1f197e8dfbafdac4597edcf673e63
SHA1 e672c6870417c71acdcda6c16a7185d7a868eb68
SHA512 69ee820439633b348bf8efdd3c498a30270753e53ff78d022bd1b295c6c95e0501955009f610a12fc55c786a563b0af40d2b69a7584b47662b943acbac2d3634
SSDEEP 6144:wxOMr0dBjIg2U0RT7c25PkvQoc6yzRcOmpTeIrDh2ky5khBh13kwTbqgT3Gfhh4D:wvkufNkzFtuWlAh36
TLSH
T18E641A9D9633A637CBF4258ADE7909DFC0543B43E943325F308960E89916E252DD23FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-hy.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-hy.hyb
Size 605B
SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
MD5 70ea4451c3a26fd7197a3d2188be4152
SHA1 e0c1390d94876bf2a3cbdecaabb0e335bd86355d
SHA512 ac957947c51ea23a9b7ca482db08f0ca3332b8048025a96acb01a4486c1a87c3f3d08898e94cc8e0b20721c56ce708fb37e1bd81bee1fedba60a7f370d5ddaa4
TLSH
T112F0728CCB54CFD7C8AA05F8067858AC89C24AAE2180143233200CC8968B9008AA322C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-it.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-it.hyb
Size 2KB
SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
MD5 a4d5ec24d4c5ee745cdcdc019018074f
SHA1 15dcd0305508afe357eee16a543f4ce547ed500c
SHA512 e9022473816f2ecf4b5b06bd6b28d75ec64fdff974a991aa522eb105e3aa8d23dda0a45e11040af4db32e1f2e8cfffc058bf29fea1403af5a724831c730719fe
TLSH
T1D851EFAB9FC87E37D11BE038D0AE063AB331C49597B30127E6858B3B25D53354EA2083
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ka.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ka.hyb
Size 9KB
SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
MD5 aa6c771083158380b2631f01e3f64f20
SHA1 1b41cd8e7585dcde57fc0b40502328845e524457
SHA512 f8cd93862ca2f76d769721bbf858955fc007bcf2e1892ae3e50846e28c6027208869f580479d3888610820ad5348a21a8709984aed844669fcaaa3f14199addc
SSDEEP 192:BykbapajL7tio65gkERH0b4/HXQDPPCOqyKrQhuqDr5fpMEgKh:BBNjSgk4H0kHX0XrKrQXrv/g4
TLSH
T1402232C3398617C3E0FB6831E17B3A498600EA827F52572BB3144339F652F661F82769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-kn.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-kn.hyb
Size 711B
SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
MD5 d986ac2e7c75cf3ef929a7a269ae0d5a
SHA1 de8bf2ee2b8a77102337c45e5fec924c6c02355b
SHA512 5475c82fd5074334bc5f0f89edab62e94bc5865da0432c6f830b50db3045afda12bb698659951f6d0f76c55a43e1add8d47ad7fd03597bbe92d8178ad4783c71
TLSH
T10D0120F4B9493AABC4B4AC762A2282B841B8D5AA122D243FB05177869F18B0C664109F
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-la.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-la.hyb
Size 1KB
SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
MD5 9aaa47272099a013a4389bc314b7d2ed
SHA1 20b5bf65fa2023e67ea0687f643b52eab3fc68e9
SHA512 318b17b2e2b16ec73f231455d633c69fd44b32868c215053b3ccca54472e775d4589cbb4daad2fe37a40f79b6cde497f654654be009d485a84327e0f560fc843
TLSH
T10B31A60FB9859AA7F92E73701D250C48027EC2150F6B7B8753E4DAF7A546B026E3D64C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-lt.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-lt.hyb
Size 7KB
SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
MD5 970c2671eac4fff6d840dc122e43b7c6
SHA1 d849f8b0950dea8c45e60296f6c8a7ae2e0f3f95
SHA512 c6b799aaaa714650ca39f8728bef6989e7e801508366caf1b384f021ee443bf21b3f59d28c2d9123a1f59b4abd3a27522cba830e431940e6ef9dccb5a319d581
SSDEEP 192:EzpJxnGZRt2XF1iG2TPY89i3k4OikTky2mKx:E5ORsmLjH4OikTk2Kx
TLSH
T13AF1514FFC188E52D82178B8E619156E249E538A1ED4632B72BC5479F023E786FF438D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-lv.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-lv.hyb
Size 37KB
SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
MD5 05dfdb7f1ee5744573ccd62ae565b2c7
SHA1 754991bdb092e363b8d884246f4ca780cc9ab2f3
SHA512 11675bc30f19161666f0d7b5ae001cd2682989465dd3f4973c455ba50eb1250e56fd1782d9589af2f8b3d6843a611d75d38e4ccc03a529a7b42cf403c482f2e8
SSDEEP 768:91xhOugI3cO0VLN2o2zmetRffK359CG02:9FtM9c/D4x02
TLSH
T13A031119D7719FDBF59438B92C0701C4A06CFA84BB42AB172285622776215FE3EB325F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ml.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ml.hyb
Size 776B
SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
MD5 84a0a36ea2c5b3209a3cd40d1043230f
SHA1 a98436b640a8cfb9cffa26e89fee768dce6f0747
SHA512 845ab7b075d3ec490c477af3b1f6d28cdc83289d206d079730f69ffd32a0fadb04eb3c9539e4dee6dac080489aea9f3365a20810b4bbb229c2aea3558bcfa1f5
TLSH
T1DE010260BD850B0BC4778E761253DA7642A0C9BC937A291B1398F00A294DF25526658B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mn-cyrl.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-mn-cyrl.hyb
Size 5KB
SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
MD5 07cda8332b62726883b29290ca35fc89
SHA1 2e3e1a7e4484225d8e25a59695e86eea9f516ec6
SHA512 a55a5a7ad3e6b084bb15d360a732f344eeb59e0ecdb8a431dc9379653d3cd828131daf18dd91b6b45001aaeecbaa87e1afd6eab4a795373dca1c4e68c7e0cc85
SSDEEP 96:l/PxIafuSv0YHQYYrJ8XFY+qT4uPnjHcMymaH0:lnu7SorJ0FaT4Onjc1pU
TLSH
T1F1B165CD6ED14FF2DB787471942D16A67280FB8835E0126BD279902CD716C387D9328E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-mul-ethi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-mul-ethi.hyb
Size 3KB
SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
MD5 b42317960e5da868a8120cb79a440abf
SHA1 5bc583fe2bcf8d9ef971c66a5f57821aad1458cc
SHA512 c26c686f7a1ae785a6d5b5856670cf9b7bc48e4a388d2e2922b21fd6c0124357acfeb73b370ab617c5ed4b033d945fb3c7cc235a661baaa7fb976dd6edec66c0
TLSH
T1AF711AB4DE80190FCFA5BCB446FF0EDD9AFC905A96290A53B1DC640BCAC5C7066C0698
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nl.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-nl.hyb
Size 75KB
SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
MD5 d3bb05944de3d0d7186e7e9383805e2c
SHA1 1b1ea734d900f8d766e7226fee09ee14fe606a7b
SHA512 5fd9c6e5e4f060d1b37b7e80f162ab10c1efb24258a5bb26c89469004191ec5517e4cf4c1c7724c838c62b5358d3c95d515c1ee4a5b001c42c3325ce1d11a928
SSDEEP 1536:2jJm3BkOrDrNWS+9cyF85YT0Bl3aGmsRlSq7wb/lFFQ6B:29m3DXgpeFl3ssRJ7m/lFlB
TLSH
T16F737D69F60B1F41B878A465C69CC76D86443BC628E00B5F9A9F16B8706786D3FC036F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-or.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-or.hyb
Size 647B
SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
MD5 7e265a294303f69aa66c243f5f474463
SHA1 4d382ab4bed3dbe481710f0c651ca87b2394661d
SHA512 d347d422249945c9a664be3c48e1ec07becaf03bd3525869f06c9aa328b4fe2884ac963cb97949d97e5ab41617b0fc6f2a2171f06007bf94cce88d55a15da922
TLSH
T1C7F00E9DF601C74BC0311EB00DB407B92339C729F29B075B926BF121CE8879E988A0C8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pa.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-pa.hyb
Size 607B
SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
MD5 0f27e5bccc1cd9ddf3eac020da27da57
SHA1 bd3c83300aad3e79287c1e806e864f7644240911
SHA512 141da09a4a1a3b9e581751a1b2c70cbe981e1a915ea538a8015c7614d11be059cd3a03b4f2420f963e5657a4417b3cc5c3a22e0028132a21363219e27751ccfb
TLSH
T151F0542D92232CDFF33500F8116A53D402E0C93D8BCF2213E0545A1791FA06A500DAC3
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pt.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-pt.hyb
Size 1KB
SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
MD5 564ff32ded64c6bfc693f2758a53d68e
SHA1 3965f963d36bee1598683e72c857a3bff196b295
SHA512 e9e574ba07703295aa8b7fd4603ef079816ea44394bd62750e08e523b9a7b408fd979552d90d04f825242ccada7ad66003fba76c9c8469541b5c6d2fb85c41e8
TLSH
T1A12149C8FB639B77DD6E1F77508AB60C03D4C2F247C90B1F819C56AF6EA128A0D62551
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ru.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ru.hyb
Size 19KB
SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
MD5 4d132ab42e0c8abd3ba93d8b34bdbeb3
SHA1 f3ce82f2dbdead517d5faa4490e1975ef8fafa6e
SHA512 eb8e27ab070db7407f1ede29751aab4a88f4182e878e956cc51d0ed9ef2c9afdec208f2f4700551374c5a7f69c176ed7d6cb771ac17c3eae77323a5709a85fcc
SSDEEP 384:hRsmaIUzHCX1GgFJwKSw4foB7zM1xnXg3JIcDn4VOzfr7K8lxf4:hR8IUzIRQw4foPM1xn6lDn1TFA
TLSH
T15792A48FEE2E7FB5C4671A73C65E22E4400B27200791EA5E8074047AF1EA46E1F9473B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sk.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sk.hyb
Size 62KB
SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
MD5 cea295e8b4b99f95738727905a9184e2
SHA1 31db6c826fd7830bc76f0ac1b9d21c2ef67f8b1f
SHA512 b20f651c74a070a4d26b58bd8462e553077b7333a2c854f7974a7e67bc442c3a6feba52c3a537fd9f1579d5de0126bbe1da4be99aabee79b7987b2edfdd8ed67
SSDEEP 1536:tIAzVJ7EgiDEY0ZcznEDEo5JWJ4pgY5AW/N+:dhJRiDEfMaEw24auAv
TLSH
T1F2532A46DC298FA9DC3D50FA98E40CA929105ACB5F416C3FBC7C0199BE22D192FE175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sl.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sl.hyb
Size 6KB
SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
MD5 a21358dd4506643486f72f7d80d60a5b
SHA1 fb7ee02adc970f4d71c84d18777a59508fa1a46c
SHA512 7dc9e18050b3df4288aacaaffdb17668f0b5d8b5e103305070d2ef83dab2f5dbe3b071b05ca69340d86a53d47d4cf8197ecc1bdd086a320bf81f9df8c0d3ccb8
SSDEEP 96:LbHqR1cAky2TFP+HQ1QpHPZtCjUtKapFxx8mLJO/5n0PatE08YyM9eW3svUaf5lk:P21cPFPAHPGjpEr85/NVtEjoeW88af5m
TLSH
T162D1D746B6ED8B27E51998BFC347646E817BC10AEB46D242734CC31594C136C9363389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sq.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sq.hyb
Size 1KB
SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
MD5 a22d0f39cd83f3a8e251f95c5b12dd31
SHA1 24915151b31525a0a9ea0ef7faf8ddb8b3faf11e
SHA512 ad319fc85aa612bedad8289a20fcf42d4336c4b3ed704ce74c6c0ed68e3e18d62c18549f8a5efe5bd481d8def514f2c6b083803485e04bd5919bc600501c0e00
TLSH
T149416ECA57D48F2BE42B1A3109137228922CCF2553A4C34FD0B8915FAF823E9EC00320
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-sv.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-sv.hyb
Size 70KB
SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
MD5 892598dc59ce71e68ed337ed9ff3abc1
SHA1 c89af0d28b8b769150981539ec2318e34df29cce
SHA512 eb13a68ff5cdd0edd73ce4c109984b3e58763812c31755bd55c0a324048873f610e36d1c41b3f642a64f7fe0945ee872a02fde744d5821aab03a2288851d984d
SSDEEP 1536:KC2kHtGIlaNlgMMjmhkFQ0+9FRGv8L38CNf7k2k1rJ:KCDcIlt5mhweMEX42k1l
TLSH
T1BF634A93F60B0F529C7834E5DE591BFE936E6AC61A80452A7A8C6134B13BC6873D035F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ta.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-ta.hyb
Size 554B
SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
MD5 ab2f6f9696fc7d699356244725e7c778
SHA1 2026841da77dd77715b521ec73bf819d1d098b60
SHA512 88a4c2117102bdb60d482448c36dd79a8da1130a4636513c8ed56eb282da6c638d27eabc9799eab8bc1a7234a0aa6690c55408500608387912fe283f13bcc328
TLSH
T1FCF02BA0FA00480BF4B80034B0994248C388C9202A0F0F0F0194BA6F7B9B2B45E020CA
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-te.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-te.hyb
Size 703B
SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
MD5 bf9df63b3c97de3bff99e24ee4bc5f2e
SHA1 774659cf1d58bcfc69900315281e99e038cd2a97
SHA512 52f40a2c38cc62aa6b0e081c90b9dfcd6d3ed03a4a90e596e11ac85bfda96eaa74d465cd7168b803c0d59a53df878b0ea1ca657c5caf3de49c8758cbd527bee2
TLSH
T1AF01E1F8B5008E8FC57F48B0106A569D07B4C11E626E151E8675B856C5CCE1AAD0E88B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-tk.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-tk.hyb
Size 2KB
SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
MD5 ed60185b6f455b6f8ed27eaeb73334a9
SHA1 11e53bda5e2a0acd000692ad8af45611b57277ad
SHA512 3ef211a330efe9e34468c9c460dfcda1b8da80d113317a177205c76ffcb916ff25ffcb4485703fd01ee248d356a67e5bb18df8e5ea40b2aab3999121083b7e30
TLSH
T19751FD838A2E2D4DEF60C5B600F57AAE52FB667031D461944C20BAFADD31EC20DC35E6
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-uk.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-uk.hyb
Size 18KB
SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
MD5 0ec028755f0cd9ebba41fb7273de8baf
SHA1 a8a784454269a2769710fb3725730f06cdd7b242
SHA512 024c611ebabb0a84b5a887d808e24884ccbb4550f222e651728451cddb9a941d7d9a39786ddfe4a57d049dc82780c6bcf376d3e98547ecc4808fc7ed32ed47a9
SSDEEP 384:+uuckg5iXANOMyv3qTtbfRhn8da+dzk29L5zA:1FviXA4MuofRhn81zk291A
TLSH
T1DE92D76677260FDFE9E75A7B84D800C9A9DEEA9003A5C126D1106736B00EF6C6FC1369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-und-ethi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\hyph-und-ethi.hyb
Size 3KB
SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
MD5 4aa9b2c0c9ccde5140d01dc6502242bb
SHA1 d1759e8a62a42a72529adf9bc73820bf32f2a37b
SHA512 1b456301d814810e857e8a0c426e703a802febb5c3dfd8d0e5c58aeefc6c2d6f55c95830024c243d2bfbb8322ef72e9ff959cdc7f92ae51bebe8b053d9cda1e5
TLSH
T1EB710AB4DE80190FCFA5BCB446FF4EDC5AFC9018A6250A57B2DC640BCEC5C706AC02A8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_80166286\manifest.fingerprint
Size 66B
SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
MD5 1d09a9a5e62b846125cd7b929cccbe44
SHA1 5271237c4d13f7735689a5acc52e48c491669aa3
SHA512 cd2a2acc126ac6a7dcc81088047c894a427a44c5caa96003c1f3521beac3b46c117f0794e564838de14a18a3f65cb7988ba86b404e690ec77a57518247c03fbb
TLSH
T175A02288B00088830A00E2CAC202C88EA080020032002E2C3F200C8BB8C8220AC82CC0
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\_metadata\verified_contents.json
Size 1KB
SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
MD5 243afa1f565d5789d05d9762162cfa32
SHA1 7c7b6757be9b6ae391a59b940ddfb646cf6ce732
SHA512 671b53dd21e4566df6fb4ef811fb95382447f57a82d497de029ce1528aaaa47f26277615f6ca91ffe4834598b2a0b5b78ec2f2dabed2ef704581cbb990ad67a2
TLSH
T11F3119B8380E324F90A7E30425BB9D33534570BE13E0A517B1C26A4E5598A40B2732FA
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\keys.json
Size 3KB
SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
MD5 a86e3ddeb60db5984686f5bd89a95646
SHA1 e5f417a8f70c34b293ee20bb9f54a423a07982ec
SHA512 f3df95b51940a12ffd2d58648c302fbd649dc3097e0961a86da65e324690488d1b3d80c6267a6a0685f220a89c279ba54cb56fc02f19860e99ffcd6448cf0db5
TLSH
T19971D6BF14A40082CF3BD16A8F0735A78FB23C0623C67AC3965FE94A04425AC276F475
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1848_983396285\manifest.fingerprint
Size 66B
SHA256 9136f7c8a30419dc70fbe015784d1e8590a197ba88b564ca26b5a1e918e1b850
MD5 b740181eff7f7b568c83ad9d00213b13
SHA1 b3dcc9b0dc397aca84ca76c9fce3d0b37c7e37f8
SHA512 1d5c62a473a4e07c9e3d3d3900992eb6bf504b014763f7c9b7b0ce7e4b05648a9d69bb30a94b139eee88116767ed8d713f42ac49b8bfb4fcb9a1ffeff516397c
TLSH
T1F2A022C082A000F8C8080002C008008ACA00C00208003F00F080F200030CEA008FB800
MD5 SHA1 SHA512 TLSH

Submit Download

accounts.json

Path C:\Users\Admin\.antigravity_tools\accounts.json
Size 70B
SHA256 ddc683b936827752701e0aa4d2c830ac43dd830d6f8cad3fe70d024734940e76
MD5 d31803f7911ba63d0c6b6268e5ebbb2d
SHA1 2f5bc899eb30f03e1f7af02f8ebe75af8b1d0235
SHA512 6c887a6c763f8d699868452e7b3759fa2727866dd34db91c611e8593e4b9e6eab30d18ef7187ff98bb7008ca242a4321ca91129b8f7d297bee5c8c7952589cb9
TLSH
T155A0025099325473F8D15F14215693EE87B14D572240720C06EF1819179D5A96372605
MD5 SHA1 SHA512 TLSH

Submit Download

gui_config.json

Path C:\Users\Admin\.antigravity_tools\gui_config.json
Size 4KB
SHA256 fb38e90fafdb003ea6947066a85fbee06aec30d7ff641607ffcc41b59834acce
MD5 73d3d0029ccca593dd7b49d545430aa2
SHA1 b87210caa28591e63f7f2607c793f963c3708b55
SHA512 27136b1c7d874475c2f53117b03bdbebf32cfa2f35add8d4be3e76a6df343d29d32950d6fbf17eb683667baf0e0a788f8e76a0f921bad486a08442a3741859e8
SSDEEP 96:UgKpkuWZVx7Gifb9Ix4hZjb/Mb/zgA/9kdd:nAkbdSuhZjb/Mb/Uxdd
TLSH
T1B8A1CE29C9790CB701C8A53AA47D928357B0C9575F163C38B28D492C1F4E73E27F6ADA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gui_config.json

Path C:\Users\Admin\.antigravity_tools\gui_config.json
Size 3KB
SHA256 56ce849e618b9526e6a58951d3f912c6e37ca1c86d434c30052370465b32d8ef
MD5 96bdc0680d2e3b4ed6df9d6f2c9770c9
SHA1 0dd5359bb2c3638ab551c78db1bfaf3295bb5946
SHA512 ce33bbecbb2c24aeac877761dbc78027a70bee4f9fb480635dca04ac16d08bc54da5e3efefdf191f98bca36f743a780102b915b33772b65f99ca9a3fa2407b4e
TLSH
T1FF518D28D8790CF701D8D429E87D92936260C9970F167C38B68C956C1F4E73E1AF9BD9
MD5 SHA1 SHA512 TLSH

Submit Download

app.log.2026-10-20

Path C:\Users\Admin\.antigravity_tools\logs\app.log.2026-10-20
Size 4KB
SHA256 406a10d14b20db4dd86828ce40c24b53a15f108f2689ff22233b9b1f7d889326
MD5 9a83221ca00350617df4b7ac6d668366
SHA1 5211650a62396bda2bc03a5d63546188f3b3e1c9
SHA512 d9443412427a3507e2748ca1db3eb0942eea3375543e7cc730aff86ce60b8d0e094aba0e3005647775754a0947ad65e4a6a12eea78d5d6017041acba5d45ea6e
SSDEEP 48:lr2vb8zT7w55UUL51p5//an53AGT5ogwg5e95+34kmXj8R/t43kxf1DgGA8/lOto:6IqU0N+bLQw4kmjq1bDJAcQJK
TLSH
T18881581459F6D152EF1B6A92F14EF78939AEF86BF70C44AC23C86EE4114A0306BF9601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

proxy_logs.db

Path C:\Users\Admin\.antigravity_tools\proxy_logs.db
Size 68KB
SHA256 b2d75a608bff60d1d25ab9dd85f550917d273086ecaa3489674593d5df047fd5
MD5 02b825bb0d5b8ac5f359b82146622f52
SHA1 91ebd0bebbd4157575b60872da31943e028f53e0
SHA512 4a00e44ddf04f308c5b31ae17bc6f06f2d433f3799ff23d1a28e2c22cd1bea16f46191bea664454320927fb8c07f022280406ffeedf50205b1c0f2913f216f6e
SSDEEP 48:Ta5zRzpTQbMCm1y64Ycb/oM0YzR8RndZfEElMsJfA9sQGGn2JqkQilU:GNOm1zndZf/A9
TLSH
T105635DDAC6F82921E94E22366C513BA0177CE54D58D66FB3309C439E0FC6441ED392BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

security.db

Path C:\Users\Admin\.antigravity_tools\security.db
Size 52KB
SHA256 33d7d54b9d7894aae09a9c45d27377099fd8fa95278e8c5e23a9704de62e0528
MD5 339eb94985a676331dbd5b0b5df27f6c
SHA1 58d7d5fdb0e35e066366e658f762fd497ee710b6
SHA512 233cd7fa205ac0ae58f8474bac4182fd7ae370e92052ca1ec7626d7af4370a313413a29cfbd92408229439b493a239db01a6aa38a9ce000747ff950e84ce40e4
SSDEEP 48:Tb/ZVGZIB8mBKS4WszKZX2BIbDs/VscjmmZt2:XZVGZnmBBszKZmB0Y/ycjmmZ
TLSH
T1AF334CC64B683660D2D54273985206717229C85F9E633BC1B8AC51A92F8F08DD638BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

token_stats.db

Path C:\Users\Admin\.antigravity_tools\token_stats.db
Size 40KB
SHA256 d6c64a7863b269e705514d04e883e19d9829cd8d4bdc984b77066815ac218ff2
MD5 32c3cf15bad8b6ee46711768836d4d34
SHA1 8474aa872ee43f60f3c5d3a8f7c65d9bf49bf229
SHA512 697c2a1eccb40c87eb7a527744bdc496e7bc515abf67fa5326648a7a7fcd7817cb410c229965d3aa6f4231e75cd003dca807fb6d82fcf400a2f0f37914000f0a
SSDEEP 48:TZXJTf6wbbMAX2ZNYNi6wxzZXK3ryDJTf6wbb2l69/tI2KkYNi6wx:95C8DGCQFIC5C8L/QXQ
TLSH
T129030F4E2B542B65D9FD1CB27DA5067A3A3CA10F4F137D4438AC02F28F6981369332A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user_tokens.db

Path C:\Users\Admin\.antigravity_tools\user_tokens.db
Size 48KB
SHA256 f9c391492fea3f7e541aaf607ec541268cea5f0f4c84eddb14d4fa42cdaa8250
MD5 0adacb2db6dd99f69075f20d7b3a1baa
SHA1 d935c4cf90b85c0407e9cac29b9b0fd5c19c75ba
SHA512 513019d058082b4997922cc47fe18ffdc4c6087c3ebb494f3829c07cfb3eec9013f5800eb97b66966382bf7dd948f86bb5e244dfbfecbe0ba52f0aaf4ff2a096
SSDEEP 24:TLRXl2sakdkcp7pRgFnEOc+cZRg84bfZgFpr8TFPMS1BGvzH6mwDM//2eww:TNTBycGbeDsPM2BG7H6mQ6/
TLSH
T138234C991A245918CCFC4E32FC624D352938531F8EA73E5178AC43E19F5A016E8774AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

antigravity_tools.exe

Path C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity_tools.exe
Size 47.4MB
SHA256 67cea7efd52dd067f0968f3c66bace0da756ab6a4d95f320573401ad2df5002e
MD5 9a223762e8819045bdc428c28980a7a2
SHA1 f7a80e826d47d24fe14e837b89eee211e597666c
SHA512 0c88d637a90978b2e43aff1b2e093ef18251fbe7f78c5655958877917bc140dd24c699050389a26e68289d204e2c2f7bc86dbf44df72b60b68ebec35774751e7
SSDEEP 393216:1dHRFgGfs2ETWrfnK1BaIKY/fQDOASSsgwQZdG9ge1LcHkhwW:1dHRFgGfs2EKri1Bac6OhgbQ1Lq2f
TLSH
T187B71721BB9A596DD19AC474834B4A725A7130CB0B35BAFF44C486393F79BF46E38318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Antigravity Tools-4.9.8-installer.exe

Path C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-QdAXz4\Antigravity Tools-4.9.8-installer.exe
Size 15.7MB
SHA256 37dc2e6fe722b4ee97d6f2de52aee1dbcbcb9d2a2648e7acc94bafd4fd241c38
MD5 dc8decbed58587a7d21ea96bf1ec63aa
SHA1 75a500ec8d40c8cdd440465e0d703906ec0778ce
SHA512 6b67aad7a3eb69249543f388307dadef932ccdbd7c48da2d911ea6bf064a30f29498bc5227c0efcfd4cc7c711d4e8777310263c95fcb2679b771d1dc89788622
SSDEEP 393216:9ZTurtvGNRONaPNk4TDbTvA+hWzNyBnD08Ha/9PP4Dn:9itvGLEuNk4TDHvRhWJyBnD08H0Yr
TLSH
T10EF6339A7E584D56EF0C0C31CEE7A407EAF1C5B22490CD0F6B22234AF966556D366BC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbECAF.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsbECAF.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbECAF.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbECAF.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu9B3E.tmp\nsExec.dll
Size 7KB
SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
MD5 8fe362ffdfa66269b8a64e3a87f68e52
SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
TLSH
T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1420f842-779a-45fc-89bc-6fba5119e682.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\1420f842-779a-45fc-89bc-6fba5119e682.tmp
Size 1KB
SHA256 0ddcc6a20b634ee8ade1a055c8a73190f838766bc342892fc3758fcad682fa8b
MD5 e7749209074a53792f72d276191a4cd0
SHA1 5ce3bad5d6e9e341b4b7a2af6e2c5f310043c93f
SHA512 f86cbcaf029680d7e1dfae365c8571dbf3078c1f47e7209bed6f0cf99bf26c6b618eba534516c6ff9ab6e271436bf0ab740cafb9cbfd5968d8564213f05d864c
TLSH
T1B33162B2E4A83B365C92A945B6962BD77F60007AD1418F8861DE462802E31EC563BC36
MD5 SHA1 SHA512 TLSH

Submit Download

23896758-c747-4df2-856f-dd494c90cf15.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\23896758-c747-4df2-856f-dd494c90cf15.tmp
Size 17KB
SHA256 529ed5acaa3f86b564d53adc94b9ae9b1ce3fb40134c13f27ef73f2a060db951
MD5 ee554e8c46bf36699bd1a9ea1fc0bd00
SHA1 514b78e7d1d5918ffff5f0f1a54332c97a61d061
SHA512 4a8bb69ac47e577dcbe44772a48fd050032a35e6875ab6146c74f5633e89126abafeff7b43a2dffa02006123cd6fd3d8fd85d3dae24a525d79a632d9616d3fe4
SSDEEP 384:zxI+OBqImmJvGBLx3NaFMJFs3NbmjvFCyLNRukDzYg6ry:TcvGtlNs6NCINK+
TLSH
T10A729D7A28296B372CE3C949FB8E2B4BA7B51253C1946BE8CDED5F0F112B0941353C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36fffe24-0cca-4a10-a79d-9f39a7ccea5a.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\36fffe24-0cca-4a10-a79d-9f39a7ccea5a.tmp
Size 3KB
SHA256 89ced275a55e7d42670286ad3614d270bac0e408a0b005f3b7068db76b0fce5d
MD5 1d3b2d7c1e439e9855759f25f8c38a6a
SHA1 0c0d7cd290582492222e9a6a240c6ac3a05f5e9e
SHA512 2ad54961bee6ece1b2ef247bb8a74994fbe86eefcdd8c145d791bcfc01105c40135a78bef6a6c781b7ed9ac884fad708450780f083cf42f04da9cf3e11f9b868
TLSH
T16F719436A878BA3B4DE2AD04BDCA2B56B7A14037E5952FA8D5ED0F1C01D72E81342C17
MD5 SHA1 SHA512 TLSH

Submit Download

8757b28b-a1a4-4876-a07d-13e1b49172c0.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\8757b28b-a1a4-4876-a07d-13e1b49172c0.tmp
Size 16KB
SHA256 78959cf846a47705d62459468e46254ba6836243a74caf7457bc47c5a4e268ff
MD5 8008542945e54885a625b0a75979301f
SHA1 59285dfc1a25ba9599924b97d69268c5bef8b32d
SHA512 955c06559fea9540fed95463eb87aee71bc9df18e5364745d79dd6d67078c4c9ab1cefc51448d749ecd576d03065acacf4ce4180dde881d1c1ad751ecb65435b
SSDEEP 384:zxg+OBqImmJvGBLx3NaFMJFa3NbmjgwCya1Hg6rt:PcvGtlNa6DC51V5
TLSH
T1D6729D7A28396B372CF7C909FACE274BD7611257C1956BE8CDED9F0E026B0941352C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4f9636e25c2ced1605e236e8ab95843d871ded71a69fbdbce5916b068194cbd6
MD5 a32fc09a69a0d2c380db625f23e91142
SHA1 e54202d465a92bc7448eff91c9185489bfcf7a6d
SHA512 027456b73bff541a7655130d62af1a52e8f112ae7cc4309064ced393af2dd5adb4ea936b4889721d4b2d8c5be752d2b85e31f331c7ab8b1c81e0c4ee927c1e2b
TLSH
T10AD0121632210138C0212133035361091800D10B80098046643A863E5A044510912471
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a347f7cc2a85f058ee1b0753d2b99e4d15a18a0990f71e07fd1fed182214fe2e
MD5 ec62f2ec134555fe357e0a70f8711328
SHA1 b134adc94fabe0cf610326faacf6b188abf0708e
SHA512 6cf71ea39ae2df64785a1a0f400df8a5e6c74f20b59064b3c56de25d81354a3dd0d30595cdab1cd2252a73da7d644d6ef17835e77e47248fd4593d14fbc5e8d4
TLSH
T17AD02B1133100A78D13219330383D1062D80F10BC005C06DB43AC53D1D044D10E114F2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 35bc438685fb9613269c4cb6899913769db1cddc9d8b8ca081db870e37b92a4f
MD5 4bc47debde8d2fdb725129f52a6a6cd4
SHA1 f6592d55090184cb8b009405179de8c977b86295
SHA512 4ab306c830461ccbcfffb4e0c128743e62e661cc87c039206659474c5cbe99a9cc16863d6573cdb413f0240159a66694b298e9f1edf28b755fafc2feb8876d92
TLSH
T10ED0126533154A79C2311932138395062AC0A1075045C17EA875867D1D788961E794E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9fc9b5f3e3d391152ff5d258e4b94c2d9caec2bc70669007c10ea35828a3a420
MD5 32a06fad1ae6e220b273cb6651475918
SHA1 111044f99fee31c0d9a4d79bbf55d2cbd9be10ba
SHA512 b86a9d2e1895979ecaa86a49d553a03eb970304da3798c02edb0eda383a6e2f88aec4655dc5ca61a9bbc1e8855489abb73201c45b095c9baad60a545b9b9578d
TLSH
T178D0126537155A79C2311932138295062AC0A1065145C27EA875867D1D788961E794E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 abd9c66e15728a17754561a2e40f935b530e0046a2a8df1f84cc8a958d79335e
MD5 e553dea20fc9cb1ef8d9eaef362cb17d
SHA1 363643a48b4d0af853c3fb8dc9e867647e429616
SHA512 da366d61ba8c1936ef72f11abefb3bb0509f722f104150c25d95d08b054e5f54f4418954ae89f4a6de1ec25ebccc0e8d778a31701a16467bf9fc2807b04d88b6
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

888b2f2a-9e88-4749-aedc-766ecdc1cd7b.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\888b2f2a-9e88-4749-aedc-766ecdc1cd7b.tmp
Size 7KB
SHA256 22de287fc0678833a5d49cf90eee31fb1c995ebda64226f359f546bf2c1d6f87
MD5 fa48f8e7d33619dc0e30f5977ad80211
SHA1 3cacdde552d4ee09f598404bd870c29db87d5998
SHA512 cb8138c51a34044735dab1e30a86a63f41b8e483e51c22c0dd137b3e71b9460c90e39b6e0a24f660803844c8eefae66f24695537d2952f6d77c12c7d79f99206
SSDEEP 96:stw05axpsQbDSffqIZ8i0vhECktBm/7qx+WVHMSm+uecJtqjUdQj7+gmtg8MOB:stw0Wgf9Z8pahE/S+WiTtq4dCog8MC
TLSH
T1B6E1B7025E287A7B4CC7E61DBE79BB56E2F5506276D04E48ABFCC92C04D66CC5207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 09e7053f51612215ac500a07a1a5d758bbce461f975245cd9ec36fe7249b3bf1
MD5 51692fdefca961a0876cb3845b889aff
SHA1 0724c34fd00c72d003bc49f98888da92cbd36465
SHA512 cccb43f24ae7ed70dbf90bd8d0410b79b4623cc4b3a5b6f80a524129c55c3c8699741253ddda26d143e26e8de2081754aa2949f2ae471cc4debb39cc01de8e83
SSDEEP 3:LstlNllkll/ldZe:LsX3lEtK
MD5 SHA1 SHA512 SSDEEP

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 06e95716d096c17eb3ed39e1db4a45b5262e42c02f0fe1d65fed769338f01cec
MD5 ffda0d0db1090bb436f63bd541cb3fe6
SHA1 69862fd61ecfb1d6c2172e0270dc3328b3a42a53
SHA512 1e04ba7633e661a593f825dbcf01a2cd93211da43cd2469e4c9584038fabc196ebda77dd38fe518855033fdd674e41d9d4a0ad24ddaaf52d3e7295b640ded226
TLSH
T155A0021201D40602D1D1327460C5025433315C210103069244A59476A9712A15D7BC40
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 c6eebcf86451e9b79a5947a447b943583b2f191cf7315d13151c172211c3df05
MD5 6ed1e893a4a8b8ce2f783d001f4a2718
SHA1 525b820fe42b78d5a6aacbb209d647dc39720106
SHA512 e507a0975f53a00b44ab45a146340577fb456c1c2202475afd5fa93d049b31b0bf4fb8bc5355772a26f7196431952cd2df86a3298a117b444cd0273ad9ee199f
TLSH
T197B0011290540692DA9466B279C616553A322E2A120B896264B9E0BAB4297A2AE76C8C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 931d15d89b1397d8408a91b1cc95c85ad30de6111a91dfcf10f441a3a63b2b11
MD5 d44b60063ec81b8549a323f95699c34b
SHA1 1ca002c0a887e81cd15462147fafadd2a9d94359
SHA512 7d7d1f2d1734eebbc65436458141ec9b47de834877180fed74ab1cecc1a1d2941f38aaf178c8101a53af499468e857ed41c477cc137eaea8c6b9abb3c4624c85
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 a01d59d052d8e88c9ba2b27702ad62e2129f9e8e8f4a744dcce5b01258ea9f38
MD5 bb233a77f4ba1fb469507d90c9cc40ba
SHA1 072f773a59bd31f790866914d999912668449b70
SHA512 7df1f41dacd7f05c33b00e05249483b9e39506c5fce4b16775e123ed5da565be345f856e30662af6d8e805cfc336312bed97f26cea0dc9b8894a47a8b7a3274c
SSDEEP 3:LstlNllkll/ltq7cX:LsX3lEtY7cX
MD5 SHA1 SHA512 SSDEEP

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\History
Size 184KB
SHA256 80ad71a37eb227aae69ec3fba9c90dcb2bcc8de0d719d51221fbd9d7c14004ce
MD5 186f2bbbd778e8d86659d34afc195dbd
SHA1 1074aedebdb3411349341dd8d4fe7f6aa3f8c119
SHA512 b4a826507c7b76c061ebcda8fc7b3b53997207702aded62b70680ad943c96215f93fcb6f9d9518e99c2f219b74002938f1ebf639d24dd113b5b07218a040d8f9
SSDEEP 192:HBObPH+bF+UI3iWGVmWN3qL/jVgZQW3/V:hCPIkUI3ijVmWN3qL/7WvV
TLSH
T1B0041C1E5F643212CDBD923668E745B3587DF03F8B136AC66C6108B1CEE2656B02C5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a080f5f-a769-455c-8802-8425b4861ecf.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\3a080f5f-a769-455c-8802-8425b4861ecf.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

66aaffdb-5664-4564-a59e-d67509f221ee.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\66aaffdb-5664-4564-a59e-d67509f221ee.tmp
Size 188B
SHA256 bbefb0e84bfa4e0cba6593ca4f1b45d477ad9084f99099bc94210191ddc79b95
MD5 11357422a63ca7fe80c83984cb216efb
SHA1 c3339d44da0db18b5a50a7062deedc84fe5d3098
SHA512 e66d5e0c125ea4f1ed11677cd4d32a74273cbb02cfbcce11923893bb0f06caf7eeeae4da5bd101f1b4577fed4e776beb12848285a90a842a29356a463250d0e0
TLSH
T1D6C022A10469A036107806211D94BE416E3AB0310681A4F8825382B962540AE8A13413
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Preferences
Size 6KB
SHA256 2ca20ee68685d43d668fbac97eb596660f2ea88a4b2f0591f0b9f1b55eced340
MD5 ab0d150ae63fe8ce5e2cebc7b2e7997c
SHA1 6c29c7d6ed0bf8a57b582adb5ff1b3165e01d4ce
SHA512 f19fc7af5f197c6864a2eb74b2cfef3787917cf711bcfb3c940fe011e606a6de460eaad648c191bc7ba6fac8f6b22bd463e4d7c8a388f0f6a14d254453514ab5
SSDEEP 96:stw05axpsNKb9TffqIZ8i0vhEFktmm/7qx+WVHMSm+uecJDo1idQj7+gQ5guKEB:stw0Wc6f9Z8pakT/S+WiTDowdCAguK8
TLSH
T1B3E1C8025E38B97B4CC7E6197E76BB56E2F9106271D40E88EBFC851C04D66DC620BC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 75b05fd1dcca469ca04fba8df6a03043f1ccff24d8d136e4ec6bd0491739d5ef
MD5 b759ea17de94ee93b0f250dd567ac547
SHA1 8cf3b5c16e35ae1ad829f4d8f392d6805571e395
SHA512 65d8fb5b70c87eb9cafdc036a3f41b4bf5ad379828882c4068727fe25c1c2279d06ce64eab80961869f04baa1e9e6c254557cfba9610d591479fce2f301f6486
SSDEEP 96:HlaViz2Plf/ROoKOpkF5d1aVizb7sMaTEv9V5h5pg5+eeyiM00KD09lHTnNMMN:HBeWGqj9lYdFlHTGMN
TLSH
T1B5D1F7A74529D534AF444AEEDC393ECBEDA6408F98D58C1A92D2C48807C2FFC10DE895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 2c9176296cb73dd0e8dfd7c431939354024c92ee6fde5925a8b958daf1530bd6
MD5 4db0f3e2e582c8bc4c802a805423d347
SHA1 7c36bdd87d24df4c282da385e18e29c404548858
SHA512 4b4f963e6ee5554d88ccb659c7cca3dd074de5bfdba3b29f90611d1c87268a1273904084069f524eddd9b1cbfa2d4507ed71a1db810df8e4b65526c27fa5a54e
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Site Characteristics Database\LOG
Size 337B
SHA256 7c989e3d8c4b2b425b14c59dc0d06af5d5b9536e78dc31b9e0a373b2f56a68f2
MD5 5a5470dff9a4beb33dcd34181849a528
SHA1 0db091d8d5f3d9d7ea81deb07bf139043f16f3e7
SHA512 8c042b5d2cbf010588a47dcd266a85b4adeca81c836163934b691b7dd9fce2f9469b72a16363edeef73e029e6de1939a9bd98e732432a93f1c3a81352db49bda
TLSH
T157E0DF3169CBC23B098E49EF15BAF34DC773B42AEBDA22290F14EB80264B044B102B00
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Sync Data\LevelDB\LOG
Size 311B
SHA256 afa5ffb3c44d39db1627b67e30a9d791964877ace757a7cf25b6ca31069e86a4
MD5 a26fa00fd0121850a199bd72026dd10d
SHA1 6003af9f084921eba2cacfbcc47dfe9c9aa2c4fd
SHA512 3e912f5e0d6e7662e6984ef72690b72c05f883fbe78abfb8cb554c288a179b649bf1ead3443908121b69ebcb0eda812161cdf61971af8f949ee610731f0d908e
TLSH
T188E0CD34A4C6C1370C8D89EB05BDE35EC7B0BC56ABCB371D8B08DF447947004B162A41
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Visited Links
Size 128KB
SHA256 c925cfad7ef62a3bf03cb4c1352fd7de718ca9e8ec3f69bebafd7cc97d6b023e
MD5 4ababdea8bf6b61679825048d26fb283
SHA1 686da5d7ef722abb26e610d1728e50c9ae5d77ab
SHA512 e4b6e886ab856f4b117b1bb36d35d8d7617e81f1100928eaa31d5c8291c87c99456bbca5394ddcefe8b49a677e3f7c91ee860086eba42833c02ca8ed02b2a87c
SSDEEP 3:ImtVuQ+TlXh/:IiVuQYR/
TLSH
T12FD304154101C471D575C43C471405075574C00411734D7503340501D47441F0317C40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afb66b34-dcbe-4b16-89f7-04342f5487b6.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\afb66b34-dcbe-4b16-89f7-04342f5487b6.tmp
Size 6KB
SHA256 c9f58387294d7b6870888c92f688a56649a842344ce667026a91e472725a228c
MD5 3a2a6c7063bf09f1c6170f2f5684b60a
SHA1 c2f54d865e53c32b0a644ce5c999a61092fa4802
SHA512 f686c76ac4ae5986d162f44e90948b9535fcc15cf5bb9b9e8e66ed334f72c8b6ba940a204f3f3ae36c52b473c30653d1f9462a2ebde639cc3bd9376d03538fa6
SSDEEP 96:stw05axpsQbDTffqIZ8i0vhECktBm/7qx+WVHMSm+uecJVCMk8dQj7+gy5g8MEB:stw0WJf9Z8pahE/S+WiTVCQdCOg8M8
TLSH
T147E1B7029E28BA3B4CC7E619BE79FB56D2F9506275D04E48EBF8891C04D66DC5307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\GrShaderCache\index
Size 256KB
SHA256 c11b0e7af18602d2359179d2c9747cdc04e4932e34151ff63d2e6be4baf68d5e
MD5 da54df5ff8e793eb0be61222fc7e5e18
SHA1 f2a0dfe02bee469dfa065f1171dee642f886829c
SHA512 2268fd1771225294ea38986a3cda2974db6f14d8af564e3b10ce778d188e673ab9c6aeb04191fbf61a33419c9891bb16bb47adae2732c3ffa0e439315b986712
SSDEEP 3:LstlNllkll/lNd+X:LsX3lEtNYX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Local State
Size 1KB
SHA256 2d4cdffb47e34ffd335b481010b26f760b0bccf91aa3bd8292cd196186340d13
MD5 4e12fbe00dc799927019d98eddb8f623
SHA1 d150c11a0585d9088b4d29e632d500465d21659c
SHA512 66f9eb5f13e26493d27d6a4fc26e79ec10ff08bd178225dca724c4c4843f466911110964808448d52d491ce8adbcbc109fd5df4b0e77314bfae0522a698243cb
TLSH
T1EA218472D0AC3B766C91A850B2932BC73FA0007AD1448F5CB0CE022902A30FC4637C32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Local State
Size 16KB
SHA256 8ccbb928dface85f7227c589d975b44932c06ac08ae4d2a5e7f5929d19c97a69
MD5 ef9e1a3f26392618ee65f0c644452a63
SHA1 66170b91fe309c72c7388fa7f4c6a724bbbee328
SHA512 a6aae3d59f05f3d1676b27964b2dcac6627297c8f3add3195cc8da239277acb0f1ac08dafe370708b7c17d6d7ed191f01cce995498a8bd8765a2cd219a97eb8e
SSDEEP 384:zxg+OBqImmJvGBLx3NaFMJFa3NbmjgwCyaPHg6rt:PcvGtlNa6DC5PV5
TLSH
T174729D7A28396B372CB7C909FACE278BD7611253C1916FE8C9ED9F0E026B0D41352C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\PKIMetadata\46.0.0.0\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\ShaderCache\index
Size 256KB
SHA256 edfe10d0ea6d4cb0678079babdb204791ca4e3a369e2f13873632d404122b408
MD5 fbba041b66b7935f5f4b903ed32cecbd
SHA1 2c51741a8685a5f2413c5cb75137c1c7bdb4cbfe
SHA512 30752a8b33c65e513798fe9ad0f5f5ff61412c7564265ad0aa9445a145beeaaee9e40fc8fc233853a77ed866c310304f839f713456a370d68e326eee12bf7942
SSDEEP 3:LsOllllklkXlV8e:LsUlPX
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
Size 80B
SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
MD5 3790d9257ba14f8be2ba08acf259a57f
SHA1 c54ab2e79d0ac9dc27425c7450e01ad593f02d60
SHA512 9568fef732369f06aafd8270638a38531a26f6f40a1c7c65fb7254eed36807789756e1c6efabaec86017b3decead2773de9ef5814650dbb334e6000ebd44a467
TLSH
T1A8A012605811E13310C403700260438243E01C112015240405461140218823713A3129
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

bf402d2a-3a2a-40d6-8590-2aa12db219d7.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\bf402d2a-3a2a-40d6-8590-2aa12db219d7.tmp
Size 2KB
SHA256 0f8c9679420c1ef0969c8aa7a16295dbacfbbfcb0a3ea8dec58b08b1b0153186
MD5 4c6bec8941cb690231d11ac65d585254
SHA1 828fdb9cb798a00ca2d1ad7d2b22b54c9bef9e8f
SHA512 180214e4eab6f13bff9e5b7365b34f5c07d176e57c7b8f55952baad3efa44bc7f3003b3d842a93532ae3a920b0f8753b05d595b7252dfa0b25cb32c4a150ac8f
TLSH
T1A9519572B828BB374DE39954BD8A3F53AB754065D6911FA4A5DE0B1C01D71EC2312C3B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-af.hyb

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\hyphen-data\120.0.6050.0\hyph-af.hyb
Size 70KB
SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
MD5 ffa9db945f0f0c15b8bba75a6e064880
SHA1 49217a9d5bb7a868464403b4e3c82e80df53456c
SHA512 cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0
SSDEEP 1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
TLSH
T1D56329C3C62BDF90CC6419F4594D0AA811D816C6E7C039BE9B6C54797A27CB82BC13EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-as.hyb

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\hyphen-data\120.0.6050.0\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

Antigravity Tools.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antigravity Tools.lnk
Size 1KB
SHA256 f66f36534c6138637fa84d0eddcee0dac04f40019618a731e9e546ef4ccbaf1c
MD5 1dcd914f45289e0718c342184310fe2f
SHA1 08c4ec83d5d951d2edf76df646256d799f8efea5
SHA512 96aa9b13f3e23816f5d03dfc30614b21ec1578005efaaabe7afdc20d46057eece8affe6de480399c699b30b28a636a047128f689a4f5900b32e12093c40d7e6a
TLSH
T12621600116EE0729FBF7993129832217D232DCDAF217CF68120445CE1C65E0599C5F2F
MD5 SHA1 SHA512 TLSH

Submit Download

Antigravity Tools.lnk

Path C:\Users\Admin\Desktop\Antigravity Tools.lnk
Size 1KB
SHA256 1be0e357a65a73057cda8805013a0cf0cf456dab7bc0d4f118212263999733c3
MD5 995c17a8f1b0e42822c1b5cdf1c90b07
SHA1 eea99dcde6ca9ab258e76835c0665602ec1ef862
SHA512 fc83e0fbcb242db55eb622c36d98ad6f6fe1e7acc23db3598854b39a1881e0fc14ac0ea8215543b4672e10146068540b7642c2720e7f0de858fb817c0fc9a6b6
TLSH
T19B21300017ED072AFAFB98357AC32206D330CCDA571BCE484244854E0DB2D065AC9F1F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/828-150-0x00007FFAF9F10000-0x00007FFAF9F11000-memory.dmp

Download

memory/828-155-0x00007FFAFB670000-0x00007FFAFB671000-memory.dmp

Download

memory/948-1757-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1762-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1763-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1759-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1760-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1753-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1752-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1751-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1761-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/948-1758-0x000001BBAD100000-0x000001BBAD101000-memory.dmp

Download

memory/4212-214-0x00007FFAFB2F0000-0x00007FFAFB2F1000-memory.dmp

Download

memory/5020-87-0x00007FFAFB2F0000-0x00007FFAFB2F1000-memory.dmp

Download