67cea7efd52dd067f0968f3c66bace0da756ab6a4d95f320573401ad2df5002e

Analysis

max time kernel
299s
max time network
288s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
antigravity_tools.exe
Size 47.4MB
Sample261020-t5ctfacd37
SHA256 67cea7efd52dd067f0968f3c66bace0da756ab6a4d95f320573401ad2df5002e
MD5 9a223762e8819045bdc428c28980a7a2
SHA1 f7a80e826d47d24fe14e837b89eee211e597666c
SHA512 0c88d637a90978b2e43aff1b2e093ef18251fbe7f78c5655958877917bc140dd24c699050389a26e68289d204e2c2f7bc86dbf44df72b60b68ebec35774751e7
SSDEEP 393216:1dHRFgGfs2ETWrfnK1BaIKY/fQDOASSsgwQZdG9ge1LcHkhwW:1dHRFgGfs2EKri1Bac6OhgbQ1Lq2f
TLSH
T187B71721BB9A596DD19AC474834B4A725A7130CB0B35BAFF44C486393F79BF46E38318
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	antigravity_tools.exe

Executes dropped EXE 2 IoCs

pid	Process
4660	Antigravity Tools-4.9.8-installer.exe
5864	antigravity-tools.exe

Loads dropped DLL 6 IoCs

pid	Process
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	antigravity_tools.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	antigravity-tools.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-ES	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\model.markov	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\test.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-DE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Fingerprinting	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Advertising	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Fingerprinting	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\surnames.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Advertising	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Other	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Social	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_621517495\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\keys.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\TransparentAdvertisers	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Other	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\male_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\crs.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-NL	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\ranked_dicts	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_592722149\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_592722149\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\adblock_snippet.js	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Entities	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\female_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_418304944\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\ct_config.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_592722149\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-RU	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-ZH	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Content	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Cryptomining	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_621517495\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_418304944\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\passwords.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Content	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Social	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-FR	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Analytics	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	antigravity_tools.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	antigravity_tools.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	antigravity_tools.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Antigravity Tools-4.9.8-installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
2156	taskkill.exe

Modifies system certificate store 2 TTPs 6 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 040000000100000010000000fa68bcd9b57fadfdc91d068328cc24c10f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0b00000001000000180000005300650063007400690067006f00200045004300430000001400000001000000140000003ae10986d4cf19c29676744976dce035c663639a1d0000000100000010000000280cf6042c30a2646644ba7286a3aa97030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df019000000010000001000000076935b5c5a037216daaf8aac76df42c12000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	antigravity_tools.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	antigravity_tools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	antigravity_tools.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
4660	Antigravity Tools-4.9.8-installer.exe
4660	Antigravity Tools-4.9.8-installer.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
3208	msedgewebview2.exe
220	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	2156	taskkill.exe
Token: SeImpersonatePrivilege	4660	Antigravity Tools-4.9.8-installer.exe
Token: SeImpersonatePrivilege	4660	Antigravity Tools-4.9.8-installer.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
2128	antigravity_tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe
5864	antigravity-tools.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 3208	2128	antigravity_tools.exe	87
PID 3208 wrote to memory of 1928	3208	msedgewebview2.exe	88
PID 3208 wrote to memory of 6136	3208	msedgewebview2.exe	89
PID 3208 wrote to memory of 6136	3208	msedgewebview2.exe	89
PID 3208 wrote to memory of 6136	3208	msedgewebview2.exe	89
PID 3208 wrote to memory of 6140	3208	msedgewebview2.exe	90
PID 3208 wrote to memory of 4736	3208	msedgewebview2.exe	91
PID 3208 wrote to memory of 4736	3208	msedgewebview2.exe	91
PID 3208 wrote to memory of 6108	3208	msedgewebview2.exe	92
PID 3208 wrote to memory of 6108	3208	msedgewebview2.exe	92
PID 3208 wrote to memory of 6108	3208	msedgewebview2.exe	92
PID 2128 wrote to memory of 4660	2128	antigravity_tools.exe	102
PID 4660 wrote to memory of 2156	4660	Antigravity Tools-4.9.8-installer.exe	104
PID 5864 wrote to memory of 220	5864	antigravity-tools.exe	108
PID 220 wrote to memory of 4676	220	msedgewebview2.exe	109
PID 220 wrote to memory of 5796	220	msedgewebview2.exe	110
PID 220 wrote to memory of 5796	220	msedgewebview2.exe	110
PID 220 wrote to memory of 5796	220	msedgewebview2.exe	110
PID 220 wrote to memory of 4120	220	msedgewebview2.exe	111
PID 220 wrote to memory of 6032	220	msedgewebview2.exe	112
PID 220 wrote to memory of 6032	220	msedgewebview2.exe	112
PID 220 wrote to memory of 4312	220	msedgewebview2.exe	113
PID 220 wrote to memory of 4312	220	msedgewebview2.exe	113
PID 220 wrote to memory of 4312	220	msedgewebview2.exe	113
PID 220 wrote to memory of 1608	220	msedgewebview2.exe	118
PID 220 wrote to memory of 1608	220	msedgewebview2.exe	118
PID 220 wrote to memory of 4220	220	msedgewebview2.exe	119
PID 220 wrote to memory of 4220	220	msedgewebview2.exe	119
PID 220 wrote to memory of 1376	220	msedgewebview2.exe	120
PID 220 wrote to memory of 1376	220	msedgewebview2.exe	120
PID 220 wrote to memory of 5304	220	msedgewebview2.exe	121
PID 220 wrote to memory of 5304	220	msedgewebview2.exe	121
PID 220 wrote to memory of 2512	220	msedgewebview2.exe	122
PID 220 wrote to memory of 1596	220	msedgewebview2.exe	123
PID 220 wrote to memory of 1596	220	msedgewebview2.exe	123
PID 220 wrote to memory of 5596	220	msedgewebview2.exe	124
PID 220 wrote to memory of 5596	220	msedgewebview2.exe	124
PID 220 wrote to memory of 6008	220	msedgewebview2.exe	125
PID 220 wrote to memory of 6008	220	msedgewebview2.exe	125
PID 220 wrote to memory of 3304	220	msedgewebview2.exe	126
PID 220 wrote to memory of 3304	220	msedgewebview2.exe	126
PID 220 wrote to memory of 4188	220	msedgewebview2.exe	127
PID 220 wrote to memory of 4188	220	msedgewebview2.exe	127

C:\Users\Admin\AppData\Local\Temp\antigravity_tools.exe
"C:\Users\Admin\AppData\Local\Temp\antigravity_tools.exe"
1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- Modifies trusted root certificate store through registry
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2128.1260.17657329798465886906
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3208
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff96446b078,0x7ff96446b084,0x7ff96446b090
    3⤵
    PID:1928
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1724,i,1866416491856518378,1892653437368692743,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
    3⤵
    PID:6136
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,1866416491856518378,1892653437368692743,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
    3⤵
    PID:6140
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,1866416491856518378,1892653437368692743,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity_tools.exe --webview-exe-version=4.1.28 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3648,i,1866416491856518378,1892653437368692743,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:6108
- C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-WdSx8Q\Antigravity Tools-4.9.8-installer.exe
  "C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-WdSx8Q\Antigravity Tools-4.9.8-installer.exe" /P /R /UPDATE /ARGS
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4660
- - C:\Windows\SysWOW64\taskkill.exe
    "C:\Windows\system32\taskkill.exe" /F /T /IM "antigravity-tools.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:2156
- - C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity-tools.exe
    "C:\Users\Admin\AppData\Local\Antigravity Tools\antigravity-tools.exe"
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:5864
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5864.1176.11666389854207685991
      4⤵
      Drops file in Program Files directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:220
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x174,0x7ff96446b078,0x7ff96446b084,0x7ff96446b090
        5⤵
        
        PID:4676
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1880,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
        5⤵
        
        PID:5796
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2076,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1652 /prefetch:3
        5⤵
        
        PID:4120
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2308,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:8
        5⤵
        
        PID:6032
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3448,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
        5⤵
        
        PID:4312
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2892,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
        5⤵
        
        PID:1608
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4872,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
        5⤵
        
        PID:4220
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4840,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
        5⤵
        
        PID:1376
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4904,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
        5⤵
        
        PID:5304
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4916,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
        5⤵
        
        PID:2512
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4892,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
        5⤵
        
        PID:1596
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4416,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
        5⤵
        
        PID:5596
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4384,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
        5⤵
        
        PID:6008
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4824,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
        5⤵
        
        PID:3304
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView" --webview-exe-name=antigravity-tools.exe --webview-exe-version=4.9.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4928,i,11466151816159197045,17139249132918036896,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
        5⤵
        
        PID:4188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Filtering Rules

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules-AA

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules-AA
Size 2.3MB
SHA256 95beb1f39b4cd5b29f5ebaced4a33753fb0bb876f078ed3de041f12be16cec5c
MD5 b91a6cf79bedefedcb5603d3477cc3ed
SHA1 b3512a426a6a613f8cdf7f9ae3a0d02b700d1843
SHA512 9d85945f7f963fd9277adc20a0af459e8bb5904ef7038584e510ebd041b3029bf24ecae2047b24ecfa853154beef7e2bc5bd34ff8d90aeda000fbcdde741341d
SSDEEP 12288:DUoPNPlfiCBGkqNEWymqMD2N3FRgVfFRg3oFRgHsFRg/sFRg7dFRgImFRgJ1FRgs:JNhiSGkqdT5+9
TLSH
T189B51BF69947509145B9631938ADB2C82B14A28147ECCBF2EBB4C4AA2791DC737C05FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules-CA

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Filtering Rules-CA
Size 11KB
SHA256 65aa171487dca70aad69973d0459c6a4b0882fcc6223bdfb53cd9ab711c5b125
MD5 40b3ba01a09be340fdf879f97b31c867
SHA1 b6ac58d1653c1b76e0e9898b17cfea3e6b56de94
SHA512 97f82f162588a761a13a2efd38d2c9518954400c7898cdd12923ce26e90818d94310b4a9f2a2cb2f55f5101c9a2e177dc1b14de8c9486eafc910271e2991dea9
SSDEEP 96:MKSlCviF3P2DoTc+cTKSlCviF3P2Do3lTKSlCviF3P2DoT:MaviVucryaviVualTaviVuC
TLSH
T17C3275333E488D6792A4C1A0DC92752C9E3087D98C9CBEC31235B9776BD1E6A508B5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-DE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-DE
Size 305KB
SHA256 367ad4a5699a69499d13e8bf9ed5e8bab3573e3731ff8127178e539735ba46a8
MD5 fa08e85d713ad46803e924d443e4bf7e
SHA1 bbcce20f5ce73be4b34cf5c43d6f71bb4ae2c5ff
SHA512 884314e04cab57c9907f90525a4fea7710fdff5e47db4500c03d4dc6c5491a3f4df4868620a2a1817444ee75bfc913e79f9a414e3a68108deb7abab700ae9f85
SSDEEP 6144:7FjHKfRBie5M0SPtVRY7od0x6qNgKWIescUHVTl1dKcJEtmmt4l843NWKOb2P5+S:5T41N/IuscpL1Kxa
TLSH
T10264C693296AFAB12A320E7D600A1C4C5322F111C2C7DDD9F775C98DD1E468BBAC16F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ES

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-ES
Size 137KB
SHA256 55e005c8aea4180093fcb56f4ddeb9fc763892d8cf1fcc840f612a7531b7ed18
MD5 6e8f660d075254a08948dc3517304256
SHA1 bc8abaa82d6d555ee9482c568a1d661453fbc956
SHA512 cc3484fe628e4242eeec2ce969c51e817ec9ab3feecec8d8097f43a319c9dc226771eefe63316d8ec2ad895f23ed4603c4836faa49369db785580455ecf21f37
SSDEEP 3072:NiZ3EhHST197h/6Jl06bBeS1G56asSnGpFrUboki9a8jRU+Zw1:/RxbR1EnYpLv/Vy
TLSH
T166D30D55AADCA8B55A73102C64D9254C911772D082CECDE4FB6686CECAE05CF3BA03FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-FR

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-FR
Size 528KB
SHA256 56e80041432156be4f08bac11e3494f2f06f65b61a60b7dcb61d15debb7b318c
MD5 6804859c589fa0ce46529c3a53b882d6
SHA1 70ffd62bb826e29500d36bbdd7c8d9c6895e2d1d
SHA512 3a659c284f55d203fded7f2754673e55a43d2c131b4790fcfe374af138158a690b5a330d4e720348c03aabb561b0aee7d818dcc111698c05ecd99c239d07735c
SSDEEP 6144:zfi0kH6u1I6c2Qiw934vv8gxK2SzX6rDVu9cBwZp0CiEksn7p0heBB6pHIgnb3hc:aT43+R5I7p0ABaIgne
TLSH
T114B45D136619F9F11FB31E3D640B5C088235B2A183E3EDD5EA67C14DD4E468FB9A02B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-IT

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-IT
Size 216KB
SHA256 e1552312fc16e0f279e72f7eb4189a47e0beb36733220b0ef605f66defcc5fa7
MD5 268f6a3c0990d434175268cf09cfa6ad
SHA1 464e10c57c536e6bb55a326a48469246a9241505
SHA512 5154048a794227c45b950ec2d2ca378f9e7a9542b9fc79c1fef1f1615e97a263168927d883967b06f8b52227a47e3ac75ac7061b25400ebaa63e4536a368d50a
SSDEEP 6144:1quRAGty7QiWYIeezuu2CGiXTyRl+XPWRq14T/KfY:HRZtQl+XPWRS4T/5
TLSH
T16524E9176A54EDBE4E22156CA09F5E0C7225758182C7CED4F3D5C08DE5F827A2BA03EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-NL

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-NL
Size 79KB
SHA256 935465fc40adbb4ae89ba37542ed37609014666c67fdf5115927809d69144b41
MD5 65126d1e76de4f0872e6cfa96609beba
SHA1 95268d3b2134894040afd0530d062a3b836f63c7
SHA512 0c6dd17cf622ad1a1a4ddc43fdc6f36567a98309e145e16d95edf38e9b21905867b28865bee591b52eecaa371138ac436eee6d18ff8d78f4c8f7031ba4e7ad84
SSDEEP 1536:x3ACbKFpRTfKGy7Dpj+u9huKCe/MELfmoRyQpnokj:x3ACbYpxfKGy7Dpj++hu8/L7moRyQpnv
TLSH
T14A83D70AAD68F8754A331D2FA4990D1C9625B600C7CAFDC4E725908EC9F52DF2AD07ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-RU

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-RU
Size 1.2MB
SHA256 f8abf856660805e271d9d2033accf4f8cc43b19b7662fc2b96f56739229a90fe
MD5 e946014ae78f059f0698731a745a3f00
SHA1 afeb8dc2d86d2763b69f97717e454a7c6b8a267a
SHA512 3c699d3205c3a000c13d20411a0e958f2107f62d813591652cfc573f9a29647badfb1703e499a8896644f1485ecc19cdcaca0c6bd5ec1e5e328339c95784cfa3
SSDEEP 12288:4o9g8Q9u1Xku8Uc24wpDs2zGFtyKnVgLxB7rsvAyLuQCdj9/CwYJWj0Ek0ozM/vQ:4Oe9u1Xn1KFtyKnKq1CvH0Ra3Rnkd
TLSH
T1F44560137254F9F04F734E7E549A9C089275B1A083D7EDC5CA29C19C98F2A9FFA402B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ZH

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\Part-ZH
Size 686KB
SHA256 9645edd48b978354345b657bacb3f30be1f450300856a82ba4d5dbf1236c7c9e
MD5 3e8cbee42dcb97db0df88cb96643e3fc
SHA1 94cd9e2bc876e04bfd2f311cdc160b6ae1d3c9f3
SHA512 319c69fcba623a0fea9ba4e1dcfabe3e9bd47f31dce7146e317835331217730fb61d0449abe7e66b1bc6f06a50c12269f7f09dbb633c85b4fd8dcc7b21c95304
SSDEEP 12288:g3gaBN1zyZzxT04duSeYXzhW+svzgAfk+XTAdXUd84nT4x09/xSE8Y:CgaBN1zyZzxT0N9YVW+sv8Afk+XTAdXy
TLSH
T114E491132168FCF51EB21E7D284B6D48813A76A047E3ECC6D62BD54ED6F025F39A01B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock_snippet.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\adblock_snippet.js
Size 2KB
SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
MD5 f5c93c471485f4b9ab45260518c30267
SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
TLSH
T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_2062495312\manifest.fingerprint
Size 66B
SHA256 b1c8d3a1e8d3d85433eaa60a50001e5d1599809fb03a7b31bc19f963058a0d54
MD5 58d2918fbd8bfa6cecc58ecb48dd0723
SHA1 1c6f36fa1434000e97d6f32f32edf02772bb40ad
SHA512 31a3a6d71ec58392f3330df1cb23088c437d72c8709da71598fd626af76b45f26091daa1ae3d49ef15929b6b518a3fac0a911d09cf79ef67bc823d52db4580a5
TLSH
T18FA0220C20C82AA088BE0A0302082803832000A0AC383380A30CA3C8BC0C80820C00FA
MD5 SHA1 SHA512 TLSH

Submit Download

female_names.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\female_names.txt
Size 26KB
SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
MD5 65c6b77a97ccdb4f09402295c75cd151
SHA1 48d9de4e0c6ef8f29db7e3b69008d1e25423f333
SHA512 59608916ece278c8d6b518b9ac19f38b071acac1e8698be851a5e357b97a2e4c4dea4d122321f61e937fd2480e6041e78e97e01648098da194890895d7ea0dc4
SSDEEP 768:QLAlqUDcjeadVlvbnevUtIaBY30lzpoTTC:Jlq4Ceahn2HQqC
TLSH
T150C2EAF7EAA8097F748F890DC5893B604C58FA332C3658A59E698FDD42056D0DDA4F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

male_names.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\male_names.txt
Size 6KB
SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
MD5 ed2a7be8d1007adf88defbba6a30fb18
SHA1 f00e2d8892ff2808a81f50d360edc960bd8d51ef
SHA512 1577919e4654086ae6d673ecbb5e436ca2fdcefb30bb4f839fdcb545f3b3b102bb47e78ce6c4ba451bfd9cf6099eba35c765dcbdadbac80aeac3083dc095017d
SSDEEP 192:+qi/Dd0Ms6tPdSiuDvtnNdqfkKY1kqPgxC4Hb64:+vbLu5Nc8UqPu1b64
TLSH
T14BD1E8BAD2E43975AC9F058588CF2F41994C36337F321676E6B90AC94252A805ED0D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\manifest.fingerprint
Size 66B
SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
MD5 a346573314757c677ba7b22bf474c77a
SHA1 aec9bbc033bc1c11aa690a8c5ceab69324ec42e5
SHA512 8bfad9d06097a6571bf855b189d645a3f4913798fd6ff66fba00c90673f891901d03571ab57dddab2982591b60a8e6c27fc47f05a69f33da0e92ec49ef5fa43e
TLSH
T17DA022B02C230A0000C802002BF08C3308F8C2008C30232302CC38C0003C0C0F88CCC0
MD5 SHA1 SHA512 TLSH

Submit Download

model.markov

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\model.markov
Size 44KB
SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
MD5 2bb4fc702c8b59a0b518482f60a082c1
SHA1 ffdc0a063cdd51e4913df4e4917495abf7e486c9
SHA512 f6b113084bd43a1f1844102ca860efd8bcd363de3eebc8acf23f5744d74b191fdc92a601630eb8e602e93005a63b73a9cb3bf5de115e157a2b72eab4dd891c5f
SSDEEP 768:aRuG/TuKUqwxhRH6t9O4v2uoDO+L1kO5qNlFpIpJmfaLtk+Yg6qFw11/aeMgE3Uf:aRuG/SKoLH4vC9L1kO5qLAbJkE2/aeMy
TLSH
T15923F1B3D385DE3992E317B0E67D22A74BD21AA47ACEBB23492BDC4215F1C504254DBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

passwords.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\passwords.txt
Size 233KB
SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
MD5 13c1efee289d7ecc8a7e7bcc7ce47df8
SHA1 c2864b21ab8130e8cae66f1f19ac38723a7cf42b
SHA512 08df4c520a896ee26ef9b8f093b2e14b6e4af67f910f12d70270917df2d78a4666458386fc6e83258d84d24b03e517e39d7799225b41a6687278dbe9610ae537
SSDEEP 6144:EY19QF6DI5luckZEjoQKe8rbbIptoWfEYixiRG+GpAcBN:EY19QKI3HkZ1QKe8rYf3fEp0RDIAsN
TLSH
T164348EB5F6A03176E6CF464E580A3F058A9D37335D11589FE7B80788120BBD885BBE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

surnames.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\surnames.txt
Size 74KB
SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
MD5 64ffd4d0d29a84dbf99bddf1afe7e068
SHA1 f1c3703c60fa8ceb538a851acbeb2cc48e78243c
SHA512 d447a251bbc6b5da76b9327dca62d3a40d6e2ae5c59c35f9e7615be15e1e5eedcb7ec6d20ec48df33904851002c823501f9f3347dcd0e279f3fa86b00d050d28
SSDEEP 1536:HZQFhD0AAQnaaq6NE1f+oNh2MGfAoocKAPvY02+dhQ:5y5/LaZmoCJeoxbdK
TLSH
T169731A76E2B4383AE95F1B8D48953FC1C904D6338D10A1A5F7B906CAA047BC58DB5F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\test.txt
Size 15B
SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
MD5 29b933a8d9a0fcef0af75f1713f4940e
SHA1 9fbc3fafddca353898269a2f4069e4653083bcdb
SHA512 9751ea443fd632e147831566ccb822482220188993cd1269edbe98d2e2d69beb5fb4b631c5001f47491dfe7550cb68035267fae518f1ff119e465b54379389fb
MD5 SHA1 SHA512

Submit Download

us_tv_and_film.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_363012464\us_tv_and_film.txt
Size 159KB
SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
MD5 206a438724efc16dc8afa5a8984f05d1
SHA1 57225b5fb5cb51333fa9d79865f2393ec4445e42
SHA512 6a653e259d4f15c88145c820d1e3062194370459da34cb2cc49fbdc681e1bf3176501129640fdc1b635ea805c03ab85c8bc5169e23ef099975fe559bf284bbab
SSDEEP 3072:CwawB3H2+8PW7D0Nr45Wn9TkOijxjTBUCbws5d0hKS4D/ODGRtenXpMFU2c92C7/:fawBXbD0NEc9yxjt3bws5d9S4D2CnKXn
TLSH
T1FEF31930DB64353ED79B2BCEC8642F52415445321E3570B9FAAE0149180BF9E8B7AE3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_384499511\manifest.fingerprint
Size 66B
SHA256 923e1b9403d60f9819e125f96db6bff959afb44b142852f16b8a2dbf3f445115
MD5 7bdde4012594a290c402bc856509c0f8
SHA1 2d5c3900129ad5dff87179382b244414ba78be62
SHA512 8edc868bc97c659c318bacea8ffd3fc2c4efbe0e5f7c2c47b010179834c8858d06f5c1a4c70fed8a41b942467565d267f7844be58eba291635a23aa4c6726a37
TLSH
T1D6A00206154855DC43D28B195ED8174899D0CF59B25665404C5D4DF1846B92D5709758
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_418304944\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.CognitiveServices.Speech.core.dll

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_621517495\Microsoft.CognitiveServices.Speech.core.dll
Size 2.6MB
SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
MD5 0ee2b50c85a110689352fccfa77b5b18
SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
TLSH
T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_621517495\manifest.fingerprint
Size 66B
SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
MD5 5bbd09242392aacbb5fac763f9e3bd4e
SHA1 14bb7b23b459ce30193742ed1901a17b4dcf9645
SHA512 541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670
TLSH
T1CEA0026342648D9FBC1C042BD478A69DCD9115B088492445A925C75BB14203389F49A1
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_metadata\verified_contents.json
Size 1KB
SHA256 a6ce8c1d0d27c54034e67a83270bf3fd2bdfcc45ffc4b9084357169c00c90f77
MD5 42b331a107b7320d16f115eb7872b3c5
SHA1 3438a81f13c76becc7eb8bf0a7881088e5ad358b
SHA512 afc9393c7a63ec8d95c708eab601ab76887e4600a03b10f3c8c6e6c78c1c48d8b8bc6f059f8f38e66f1e54c5040656b75b6d46b91a795f76dbb5d3c6ac59b333
TLSH
T12F31B7414DD5369EA14E42245AB873AB9F0E71B372C8A51DA9C5900CF4F914ACBD308F
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_platform_specific\win_x64\widevinecdm.dll
Size 21.9MB
SHA256 e1f9ad648017e2cb0f0cd798d815dc51012b279ba32571e7b6eb5120b0ed2c05
MD5 046fdd0c07bbac0c160b03a2cea5ad4b
SHA1 fbe9107b962ff2c77070579a8769ce7188c4b473
SHA512 0a3e385a3d27883e6495e4cb4fd20bd5dd0c61176e04df2762fca9d13847c9ae88de7ac57648732ce6d6cce27f2eb9da4dbf9c54d1953504de784c4cb35c8fd2
SSDEEP 393216:DKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHk:MWCmz0dwJIkpqCw
TLSH
T15A37E14AE35350E9E81ECDF0866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 868171d91275d1e180a452621f66428afec0a9288ab96344ce92fc904ac1f70d
MD5 c7bf17a2f118fdb4a4344196706b6393
SHA1 d07695b35bf2f4bd746586fe56ce2ae9d7c99f69
SHA512 11abb5b2ea4120df63216ac38aa85c8deaa7d96b9e0a8867b8f281b0652211f4600bd4107d182f3ea0c657d8a1675ff56d0279837a7c33410a7968f2c5a9a754
TLSH
T1742108F4A215A94A7F50C142053DE827CF3E8AC12C6188B644BFC23628EE7C00F8457C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_628036297\manifest.fingerprint
Size 66B
SHA256 56d1fe98928ebd4be664fc103e35673a15c2dfa98ff241478bbd39beb15a0754
MD5 bef72178d2d9f61006676a8323ac4a20
SHA1 281541cc22aaab5d71703791192ef66ee2e831ba
SHA512 ee3664c72ee9a894249799b642ed8c1f10b7a7a422d1277d7097f43b4f892d7b267200d323f861bb90b0436262da13dd3c674c4425dfdc264c1cce3755a593a3
TLSH
T154A022CE0CC208BC30008300FC8C8B222000282823280022F8A023CA32EF30AB000C02
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\_metadata\verified_contents.json
Size 1KB
SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
MD5 243afa1f565d5789d05d9762162cfa32
SHA1 7c7b6757be9b6ae391a59b940ddfb646cf6ce732
SHA512 671b53dd21e4566df6fb4ef811fb95382447f57a82d497de029ce1528aaaa47f26277615f6ca91ffe4834598b2a0b5b78ec2f2dabed2ef704581cbb990ad67a2
TLSH
T11F3119B8380E324F90A7E30425BB9D33534570BE13E0A517B1C26A4E5598A40B2732FA
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\keys.json
Size 3KB
SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
MD5 a86e3ddeb60db5984686f5bd89a95646
SHA1 e5f417a8f70c34b293ee20bb9f54a423a07982ec
SHA512 f3df95b51940a12ffd2d58648c302fbd649dc3097e0961a86da65e324690488d1b3d80c6267a6a0685f220a89c279ba54cb56fc02f19860e99ffcd6448cf0db5
TLSH
T19971D6BF14A40082CF3BD16A8F0735A78FB23C0623C67AC3965FE94A04425AC276F475
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_806607419\manifest.fingerprint
Size 66B
SHA256 9136f7c8a30419dc70fbe015784d1e8590a197ba88b564ca26b5a1e918e1b850
MD5 b740181eff7f7b568c83ad9d00213b13
SHA1 b3dcc9b0dc397aca84ca76c9fce3d0b37c7e37f8
SHA512 1d5c62a473a4e07c9e3d3d3900992eb6bf504b014763f7c9b7b0ce7e4b05648a9d69bb30a94b139eee88116767ed8d713f42ac49b8bfb4fcb9a1ffeff516397c
TLSH
T1F2A022C082A000F8C8080002C008008ACA00C00208003F00F080F200030CEA008FB800
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Advertising
Size 19KB
SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
MD5 897eefe311c18078a34e06f3cf624a6a
SHA1 98246e769fb513b8aead588024d1ceadc65422d9
SHA512 0fad93ec06d6cadb4c2e72b3355b509d5b9995706d6b7e9e69df21d9907dd3d4156eaba62a6c64ed34a6747046ffff841cc79020aff0a29690258ab487bbd6cd
SSDEEP 384:/j+Vafk2xyJEYoAYiQZU8rYvepdFhQXVVRwjSTV2quzxmVUiKF4EysZ4y5:zfEHoAYiQHriepdFWlVmjSTV2qwFOs1
TLSH
T16A926151887035622F2F50CDE0583F8E1199667540AEE6DE9FE48666F28C0F37894EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Analytics
Size 3KB
SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
MD5 b55f84fa839160086b8b337b59f80ded
SHA1 0fde6cb65ef56264517aab0eb5ea93667f5985c2
SHA512 6750626e0efca608abafe63926229887a68c9f3e657cb78921daf9c6b3ce11d6bfe1ba83fac775a8d1b6b69cbc00dc193fcb818c70ded3ea159b6241fd2823ce
TLSH
T1CF815415A4A014433E2E5668E03C76B912E8253880E9FBD9EFB19965F30C0D778E597E
MD5 SHA1 SHA512 TLSH

Submit Download

CompatExceptions

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Content
Size 4KB
SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
MD5 0e3ce75aaf5e674dcd7508251bb839c5
SHA1 35d4a84a8d946263e6b1d06fadc31c5753a946f0
SHA512 80d49bfdbcce2ac21c5c39c6c538135a9768b5fadd73137f6b5916fe6740827fda06c154508c0f9810723c397a22f3d93542f3e972ed3b736f7478ea2e6dc0a9
SSDEEP 48:lAHJBLfUUIAPMsb2zIEcySe00woiyKIdw5uZWhDNB+jS+3NrSA6CdM+3+1oH:lApdOAP7bercySB/1ylw5usB+WB8x+yH
TLSH
T13991B7037E4409276E95D105C0ED209E2C71ABB0C85DEDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Cryptomining
Size 552B
SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
MD5 39461c6ea4ff09d663a65d133eb47c98
SHA1 c41f5b5ac9a202ec7dd12122e64b858379a9a815
SHA512 a8e195fb9bfa68dbb064a0f8a41cd86aef5fca43349388294d364b5fd556f0a01674bffcbb5eb2a36e3fea9c64bf575b5e7ed674661dcb7544ed7a961686d4f8
TLSH
T14AF0C0E5C82197766FD544A1E05E7389F4844BB26094F3D50B56321996E8A432684DEC
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Fingerprinting
Size 1KB
SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
MD5 f665b35df3c2a7b4efd9dc396f2af9bf
SHA1 2833c37d7d92a4cd1e413eba0d6717e90e69f973
SHA512 e7930341af55bae220962d79ce9aa056bbd1c9fe3cfaf0fd4181d9aa4257b5679648e4aa19561c2f9b5c8fcc6e6757d3616726eb28e77a2b899fa25f7d1b6706
TLSH
T1DF211F8295D038716E6E1488D55C3F9C129A2B7001E6F5DCCEF486A1B61489F7180C67
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

TransparentAdvertisers

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Advertising
Size 21KB
SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
MD5 452f3e9d40539cd65cafbd008308b5b8
SHA1 34203b4a803009ff56bb28d3a14305348082990f
SHA512 08504c06b603db3cb12f0ed6e30e733c2a2c830cad1124771c64b0e7b8480113383440325c56116fb57bde458b393ce182a3af75f0cef146ad6a8872ab9a964b
SSDEEP 384:oQh4q3kwr8CPLo3AptN7NoTn5LTDq3ZXmRHAez/GRQMKWxV1R:wqRr82LKAptNJoTNT2JXm1AezO2MKWx5
TLSH
T16CA2B361996025513E6F009DF1993FCD5AA8233080E9FAE9CFA0C676B35D4D335948FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Analytics
Size 3KB
SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
MD5 c4c782264f4a6a6ba84801c8c148afdd
SHA1 f138b8f526133c5dd612f79825f4706569fd18b2
SHA512 e1d3b123a7eabfe72d4df981e1015ca616c51fe7d94de91223e9c7f4eb98ed7d3ebcf7b5c7e08579db502c7b3529e095d314dc71b8cf5e79081c678e73aa646e
TLSH
T1F261C814312434212E1A126ED55E3E8E6AF8223904FCF7E14FF18A71B2194DB38E873B
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Content
Size 5KB
SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
MD5 7c5f5e42e885211f783a06b1317ba145
SHA1 079ab890b012120b89f776e4bfe67f3789f67096
SHA512 ec581f41917ee010d71a021cf16648fa757327198113dc3daff3adb33ee739da3f40d87a6f3e49004106770ea705e6b800fe263d21eccd33d7883fd1ed8c82eb
SSDEEP 96:02KCCvwLR/tE1LYSeyTPXD7fOiCrC400uvuJEjchVEy8Upy4uILrqNaRq3:02KCMwtWLYSe8miZHvui68kRBg3
TLSH
T169C183B2495079522F3E01C6F9E6265488E483715CBEEBC787E0C62CDD0E9E335A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Entities
Size 128KB
SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
MD5 87b4b75312dedc7106ac746153153c1a
SHA1 54fd4b67eb16620ce0dafe8eb641f6a256dfc4f0
SHA512 f594a5039c73db236f97dd50c3eb007f2fa2ff44d558222cf983dcd703d89f9b1e832bd3c249a20bfa592656e9c2e61a41f90df1b927fdd8f490d36734f92d30
SSDEEP 1536:e9nKLDxqghS81HcmcgqPvD2E/FwoqtK1Gmbpq6CXkkqGqnuP7Sr:GnANN1Pt3/oqtKAWvCJqGqnuPK
TLSH
T1A8D30938FE60C8185CEB041B91296DDC5B801BDA5AA6FDC9EF7F78190242DDD33285B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Fingerprinting
Size 2KB
SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
MD5 427724f72baa3d5c91671853a89245e5
SHA1 a33deaa88143c298e0732ecb233663c372cb0e2b
SHA512 bd0027e9bd25fa3426dfe85f67bac14bc3124bbbd6493c1d1aafc33343dcb008a8a418134deda235b71377ff970fcdc45ce4e6b1eae79fd3adf1bc3ba2e2103e
TLSH
T19441552354202051BEBD498CF59A3F4D29E5623984DDF6D5DFE08936721A8E734908A7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Social
Size 3KB
SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
MD5 af4c6f2598c45087a32c4f410f242553
SHA1 cad2a50e20ee6f699e21e78c58991a6a25a55ec0
SHA512 7d378b90e3cb7feac3580bc7858b6d8a4967c77196be5b7d94ef076a7e1e8166156e62954998fa6931593db5c8a8dcaacdfe3421bd39e6517f6c6094caf4f4a1
TLSH
T17B61DC32C550A9932E5D0C81EDC55E704DD8067ECCA6F4E287B082F8F0AD8977D90BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\Sigma\Staging
Size 1KB
SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
MD5 5d7f5a0c242d9d1290c8ad0bd57be3e7
SHA1 d454811443284aeaa0294d30caf65e624182b150
SHA512 5d36ffb2ec4d162c49e5dd1207bee8b51f36d91ab38d23ff85d4467ced3a7e0f4f639b230623804260d8b03e49ef124e6ae9714f63c896c024215bfbd13dbc88
TLSH
T1A621E2194E908CB11E596745D20A535ABDEA617D38E7F4CB8EA8DE7FC2CE85702344A0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping220_814430391\manifest.fingerprint
Size 66B
SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
MD5 bd493e5a161e6d66c7253da476ecb4b6
SHA1 4ce1686e9532aa7190f90457cc648bd55e1a8bf5
SHA512 ae673a5aaf2d5c73eb3a0331cd9dc6b7d8d481aff6afb3015c745079debe10a73c089026c2c614bd847d3d364bcac6e6910f896e785225d88ef81a98ac24c15b
TLSH
T186A022E2E8F3B8802CA0200C08CB32C0A022B3E300800EF8C0000E8C02A2C2CF020AA2
MD5 SHA1 SHA512 TLSH

Submit Download

accounts.json

Path C:\Users\Admin\.antigravity_tools\accounts.json
Size 70B
SHA256 ddc683b936827752701e0aa4d2c830ac43dd830d6f8cad3fe70d024734940e76
MD5 d31803f7911ba63d0c6b6268e5ebbb2d
SHA1 2f5bc899eb30f03e1f7af02f8ebe75af8b1d0235
SHA512 6c887a6c763f8d699868452e7b3759fa2727866dd34db91c611e8593e4b9e6eab30d18ef7187ff98bb7008ca242a4321ca91129b8f7d297bee5c8c7952589cb9
TLSH
T155A0025099325473F8D15F14215693EE87B14D572240720C06EF1819179D5A96372605
MD5 SHA1 SHA512 TLSH

Submit Download

gui_config.json

Path C:\Users\Admin\.antigravity_tools\gui_config.json
Size 4KB
SHA256 e09599323f634bd8fcb790447e7d1222fede627f03697d7b9fd99aaa12a30631
MD5 ed485c2e10a078e492a36f06681378af
SHA1 87d5196b739af9703dfed3008748fbf85e1ab2ef
SHA512 1b7a78bf8f06262d4c6f565505a6e208f39223b8dea0367240f9797e232e270f0b5516e0c4bcd6becc456840c8c32d296856e10567316b325d5ce52931904aa0
SSDEEP 96:UgMpkuWZVx7Gifb9Ix4hZjb/Mb/zgA/9kdd:nKkbdSuhZjb/Mb/Uxdd
TLSH
T168A1BE29C9790CB701C8A53AA47D928357B0C9175F163C38B28D492C1F4E73E27F6ADA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gui_config.json

Path C:\Users\Admin\.antigravity_tools\gui_config.json
Size 3KB
SHA256 27b26079355831192cb32f11c29d7e8c356ddf19805b68ac0acab7d723eb3236
MD5 ded75f7eae5b9c8a057657347598b520
SHA1 a7612597ae2d2318ded9aa490a4d916a9b4b3be0
SHA512 ca69c643691edac8923bc6770d90cb178de7358dd0374ebdae2fe2e0be84ee1686d743a884c24fc802ba9e4716e7e6beb51c51e983e980e15c7d339fc498e180
TLSH
T1FC518C29D8790CF701D8D029E87D92936260C9970F167C38B68C952C1F4E73E1AFABD9
MD5 SHA1 SHA512 TLSH

Submit Download

app.log.2026-10-20

Path C:\Users\Admin\.antigravity_tools\logs\app.log.2026-10-20
Size 4KB
SHA256 6e3dee141d56a93166142c2a6a0fb33b2bf632d94d0eb58f7595967360cb7847
MD5 5872d5ebbf6d602388f1f1c15bc6aba7
SHA1 a2dd74bd8d7096f705d9f803648b9de25b188dc7
SHA512 87d263090799a435170c0a89f1c2e26a0da9d89f0a61bf3c2ec6c195753fa84ef7ee347d7f05663e61c083e4aa80dbc93fc28afbe09dff110ae6a2fd8c81d578
SSDEEP 48:Dszyv+SaTh05UjX5L95OTMT5ZASv5Vpt95hi5C35XyR/U3Lf1HG5/IOtCVjkDX/:AI5U1DddpnYctXmV96C
TLSH
T14C8147145DF6D013EE5B9A92F10EF78979BDF86BF70C40AC2398ABE501490302BB9602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

proxy_logs.db

Path C:\Users\Admin\.antigravity_tools\proxy_logs.db
Size 68KB
SHA256 b2d75a608bff60d1d25ab9dd85f550917d273086ecaa3489674593d5df047fd5
MD5 02b825bb0d5b8ac5f359b82146622f52
SHA1 91ebd0bebbd4157575b60872da31943e028f53e0
SHA512 4a00e44ddf04f308c5b31ae17bc6f06f2d433f3799ff23d1a28e2c22cd1bea16f46191bea664454320927fb8c07f022280406ffeedf50205b1c0f2913f216f6e
SSDEEP 48:Ta5zRzpTQbMCm1y64Ycb/oM0YzR8RndZfEElMsJfA9sQGGn2JqkQilU:GNOm1zndZf/A9
TLSH
T105635DDAC6F82921E94E22366C513BA0177CE54D58D66FB3309C439E0FC6441ED392BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

security.db

Path C:\Users\Admin\.antigravity_tools\security.db
Size 52KB
SHA256 33d7d54b9d7894aae09a9c45d27377099fd8fa95278e8c5e23a9704de62e0528
MD5 339eb94985a676331dbd5b0b5df27f6c
SHA1 58d7d5fdb0e35e066366e658f762fd497ee710b6
SHA512 233cd7fa205ac0ae58f8474bac4182fd7ae370e92052ca1ec7626d7af4370a313413a29cfbd92408229439b493a239db01a6aa38a9ce000747ff950e84ce40e4
SSDEEP 48:Tb/ZVGZIB8mBKS4WszKZX2BIbDs/VscjmmZt2:XZVGZnmBBszKZmB0Y/ycjmmZ
TLSH
T1AF334CC64B683660D2D54273985206717229C85F9E633BC1B8AC51A92F8F08DD638BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

token_stats.db

Path C:\Users\Admin\.antigravity_tools\token_stats.db
Size 28KB
SHA256 19a3459924542f957947952b8883b65a12d98acfa15946986711627490f549c7
MD5 db579f008ef7c2fe5e2dfa710dacace7
SHA1 1c51cd533120f8e5bc875cae3dc4f485ab694b3d
SHA512 347b3a5728bf1af11cb59f6456bcbaae83281399b6bebbd5b38386847902cecf42038754d1e82596f1255171ade584d3df08b8de2dd406eef67fca2d974fcec0
SSDEEP 24:TTd4JTf6w+4b2l6sV1e4NsqJq3gI2BkQBkYhLi6wxsw:TTGJTf6wbb2l6MRtI2BJkYNi6wx
TLSH
T1B3D2064E1A142769D9FD1C71BCA4097B3A7CA10F4F437D5479EC03E2CFA851658372AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user_tokens.db

Path C:\Users\Admin\.antigravity_tools\user_tokens.db
Size 48KB
SHA256 f9c391492fea3f7e541aaf607ec541268cea5f0f4c84eddb14d4fa42cdaa8250
MD5 0adacb2db6dd99f69075f20d7b3a1baa
SHA1 d935c4cf90b85c0407e9cac29b9b0fd5c19c75ba
SHA512 513019d058082b4997922cc47fe18ffdc4c6087c3ebb494f3829c07cfb3eec9013f5800eb97b66966382bf7dd948f86bb5e244dfbfecbe0ba52f0aaf4ff2a096
SSDEEP 24:TLRXl2sakdkcp7pRgFnEOc+cZRg84bfZgFpr8TFPMS1BGvzH6mwDM//2eww:TNTBycGbeDsPM2BG7H6mQ6/
TLSH
T138234C991A245918CCFC4E32FC624D352938531F8EA73E5178AC43E19F5A016E8774AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Antigravity Tools-4.9.8-installer.exe

Path C:\Users\Admin\AppData\Local\Temp\Antigravity Tools-4.9.8-updater-WdSx8Q\Antigravity Tools-4.9.8-installer.exe
Size 15.7MB
SHA256 37dc2e6fe722b4ee97d6f2de52aee1dbcbcb9d2a2648e7acc94bafd4fd241c38
MD5 dc8decbed58587a7d21ea96bf1ec63aa
SHA1 75a500ec8d40c8cdd440465e0d703906ec0778ce
SHA512 6b67aad7a3eb69249543f388307dadef932ccdbd7c48da2d911ea6bf064a30f29498bc5227c0efcfd4cc7c711d4e8777310263c95fcb2679b771d1dc89788622
SSDEEP 393216:9ZTurtvGNRONaPNk4TDbTvA+hWzNyBnD08Ha/9PP4Dn:9itvGLEuNk4TDHvRhWJyBnD08H0Yr
TLSH
T10EF6339A7E584D56EF0C0C31CEE7A407EAF1C5B22490CD0F6B22234AF966556D366BC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy17D6.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsy17D6.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy17D6.tmp\nsExec.dll
Size 7KB
SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
MD5 8fe362ffdfa66269b8a64e3a87f68e52
SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
TLSH
T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy17D6.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

485648cc-2c77-4776-b8a3-512385e5729f.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\485648cc-2c77-4776-b8a3-512385e5729f.tmp
Size 16KB
SHA256 207b9a6f0a7ec9d385b765ec063ae932290236c4c3b379367f00a817d8e3009f
MD5 b1e88dd1a8b6ea2016968e21b9830152
SHA1 e7bdffb49caee183ddf3c08e73f9698c0c8b89f9
SHA512 d392840c6af30efbf2dc410f3616ca7c2f7865aa8200ee2d9348f97ffa5c6440082fd8c8227076260552ca194525a38945e11c2023e91ee9164ca8945ed65ca9
SSDEEP 384:zp+OBqImmJvGBLx3NaFMJF4Nbz6R4KrrBg6r1:gcvGtlNcCrDB
TLSH
T169729D7A18256F632CE3C94AFECD274BD76152A3C0906BE8CDEC9F0E015B0D41262C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49163994-64ed-44e1-8035-437cd3950719.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\49163994-64ed-44e1-8035-437cd3950719.tmp
Size 17KB
SHA256 a9812fe8eba90e1078826580667c10dba5fcba5a6e3bf8e2432c7ea4596d58db
MD5 53dd8e5bfc5e83181ba3e2896ac7ebd4
SHA1 a73cd1e0fc647088310e30f78bbc67f0789abca8
SHA512 46a921ac9976f18ba0bd2b2f4841c6a42cd0645c761080219688cd22ecff4c0176fa6f5e79aa4c4b0f9889543b9288f45c3ff27a0d5267623d0bdaf084d3c3a5
SSDEEP 384:zI+OBqImmJvGBLx3NaFMJFa3NbQ6XK6MvukDzAg6rq:1cvGtlNalzMQW
TLSH
T1E5729E7A2825AF632CE3C949FACD1B4BA7A55263C0946BE8CDFC9F0E115B0D41763C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56e40337-6f9e-4dac-9698-b0ed865aa522.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\56e40337-6f9e-4dac-9698-b0ed865aa522.tmp
Size 2KB
SHA256 27fd7c552ec0a1f52a38056244dcac6191f3723456f494539030f6f583ef459d
MD5 762affe5551e97932e23cbb8f91d85d9
SHA1 a7c5ced27225e724c5d5cb84740f6c0dd19c39eb
SHA512 d98365c62b284ff249e37ecb9e1c5ddea9e61e2c658ac90e62dd8771fe092cf085b6762ec95d95b0835dbb16599d3d1bbc8dfa68656db13f4d798b5364cef235
TLSH
T19D51C673A8087B7789E29A45BDCA2F57EA3190B5E5212F9095ED0B2C01D76AC2312C37
MD5 SHA1 SHA512 TLSH

Submit Download

65de7608-82c5-40a8-b2bc-eaf37d52b857.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\65de7608-82c5-40a8-b2bc-eaf37d52b857.tmp
Size 16KB
SHA256 83dad78ad6097854d0e4e8f15d1b8898b60b92cbf783b941ac1728e9fef63498
MD5 930dcef009fe7ab4c1e820c7af415d57
SHA1 9acd5b7815455b3d379eaabd4d9ceed769ae3172
SHA512 39d6513e102b1bad8d54f13f15f1c231ddb1c7c7f19c700baee2b7f77f74071b0292d4f60584fce904839d9d7c3f309089e3e7bcf350a688f58bbbff2da391a5
SSDEEP 384:zi+OBqImmJvGBLx3NaFMJF83NbzpzKrkBg6r1:LcvGtlN8PCkDB
TLSH
T1D1729D7A18256F232CA7C94ABACE274BD7655263C1946BE8CDFC9F0E015B0D81362D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

703d19c7-dc6d-435a-a5d3-369dc84800ae.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\703d19c7-dc6d-435a-a5d3-369dc84800ae.tmp
Size 3KB
SHA256 a639abd599ce71d36010892fa14488bae7afba3eabc995f2eafa83f4137c7cef
MD5 fe9e42d524edc45dbeca71efa3499206
SHA1 72159ca4bdf39a9ff45c3a670012bb61abbd7073
SHA512 ee2bce675266cc4e03db9ac7954237d669afe2b492ff2314a3f25b6dfbc0c66afa19e1ed827ebfb4b582953c9588d7f01b47c3c0eabe8a05749e2b11fc548e2b
TLSH
T1FD71A6326868BA674DE2DE45BDCA2B0AB7615136E4903F94D9FC0F1C01D73D81352C27
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c571df61d10722871603384311bccd3e5bdd4d5717af08bf8882e99504c1b832
MD5 b75d1001facf4747f5574f1a7f18998b
SHA1 fc74ea1395b9f26e05ee19897b4bd998fe8e4893
SHA512 ea7a2bba631f964329d6fe06390a744a5cd2ae20b8de6cda51044578d9db3a453bb24d3f8c9324deea54f4f43096890b4f5be4397fd8b8472ce1a8237f65c012
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 145c6b43f09ae89289c76bff5a5b64d422c72b62ce02080753155010c1633412
MD5 83d345d1378ce2d0c85bcce5d0c491cf
SHA1 2a3f9300944ab20f0c21e5e7f519e74a31fac00a
SHA512 879711a892de334133361596303a0c551918121af69a25741916c71a74c49ab00bf3301f0355ca86fe0796ace0bf46d510bd0a9e0a2ec13cbe7504e685df2481
TLSH
T15ED09B1173414A74D5315B73128BD5061991F11B8105D158E41DCD6D1E184F40E558D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 aa06e4eb3f0e5e667bd343ae48121e72e9c9e4fc1e2208e4eb433d0884cfed66
MD5 48e0447a745e6b98f71cfca386940f04
SHA1 69e3fc430e0f6e5f27191ac72d14d47d0af1cb44
SHA512 84b604b89c9428c95ac2eac2c0f0f0e5933188432ad3fc6468b82927c028cc2aaf26a421183688d34f4d82cbba1a9b257aad04c09fb5efe06c2c459de8388a48
TLSH
T185D0806533014F74D2311E3311C6D5062BC1A1075045C17DF828CD7C1D7C8971E7D4D5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f84e2c7dfd2d9ac064dd996f70d787e4e1c378b73a5cc5a2556d77ce2dc34c50
MD5 57e711984e7d3e68afc077f655c7ed89
SHA1 31084496b78b1c57c33c8415e20029920475d68c
SHA512 4083e6c5983b8992160e5af5245b8938f7960f50f3c2b79fb43b1e94c38f5a57b15cde26fb4245783fc6ae16aed8f397bc3db62968e08b5effe508549d8e7f4c
TLSH
T196D0806537015B74D2311F321185D5062BC1A1075145C27DF828CD7C1D7C8971EBD4D5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0191db8ff2975bd4e7b101c1cbc997af9b8b31f09d5a4403f1eb610c3cacc623
MD5 ffe40bef066b911ffb9c3a87a71dce28
SHA1 54d91d6ea20f321fc2b4327328f7886ed2f96340
SHA512 d6da12b7121295205be0b2d58d0738ccb19c3ee41aae7d003ef0a4136e4605b844312e6e69bc0be821efa397b3657fd82a96b1e8823ce01036a1303da76deb9b
TLSH
T1C4D01212B3414134C0302373004BA5090401C10B4005C040942C8D5D1B1807009168C1
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 e46eb72f32d127605fc7722a1fae3b480e99d60fa6230351f39bf11925a0d0d9
MD5 fe16ec1aa475d80bce1cf25bc82db1a0
SHA1 49384138682d24cbb8a0fae680c5d267a015cb99
SHA512 0bb2d3b0074de02630cd15080a1593f712a8f32271c6e3e17d6a3bcf7038fffa52c04ae553daa291ad315121e2a21428fe5c9dd301f73a529b70f84a29907a1c
SSDEEP 3:LstlNllkll/lm//:LsX3lEtW/
MD5 SHA1 SHA512 SSDEEP

Submit Download

eb7e47c3b295f2b3_0

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\eb7e47c3b295f2b3_0
Size 256B
SHA256 2d6de3789008e12be8a919b4df767eb9dcb4e0bee96217b9d9fa03de4f0feea6
MD5 0cabcf9eb1f2318aabd317a734ae1ed4
SHA1 3d8f910635a8bdf8f04932193489e9051ebaa0fc
SHA512 84d07c7cee3c04638c98f085304da38cf153662b25849d20b95e051fc3fb0c54fbdab3add01eeb03a139d10a884e2770d5e6b203903b0fbcca7f1d33eada9f4a
TLSH
T1C5D097CF06262B04E2BB58F0DFAAC61E831184E00C2FE00FC000CE5424C0969780CA29
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 38be07566b90770aca9565c0d82302ccd14042487b468c9b72dad58221c2f7db
MD5 a637751242d099e3b3d9c95ded373d37
SHA1 0b705c53dd1774cd577e53fd7e48b86b5914d528
SHA512 267c6e004f7bffe411e0f3cf66ab5e48124a90a9bc142be4063842fbbed3406fb440452066368d9bcfd4eb745957459faa76a5d9c447139e38eb80d73d2ce49a
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 60bf6471f20e4606e3c9971b8e97a27c433d40a891b6ec988b1d9cdde35164a0
MD5 9150cfb97139ceea49bfe2d7fed7faaa
SHA1 e0981427ed81cc31edfffeb0700705ac0c7099a2
SHA512 6f573d60f4953714d87e9f516512d007fe5b1a7925b8d492830937f45656eecd22fbb5aa364e6eb5f3edeecdb93737ed7d1b823b1414eca3c854f32e2b0f7610
TLSH
T16CA0025641504102C5B777711981438133A6AC5501122B1680A15379BAB52A149A7D00
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 943eda586756a555bab45f6785f91e31e992cf287b28c9f0655a699b0142a541
MD5 1ded3fc1f5c88baa3aab2a0cb923a30e
SHA1 14e5cfb47b88aff6c9328edb5c1ad770aa2163aa
SHA512 c2cd4dab844f23437f53a58a72842d510851e2270b475255ab7bc7bc61f74dacba74f7ead5c5fd071d0bf1d739e89bed861565e93309b32a48b5cc47609342b1
TLSH
T159B002D970208057DA7737B664C60B5036312E162B1B6A27D5E4A575F82E7864E72C48
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 c40e957ed2991584dbfe67c5c4492920961f4f9f71d5b8b1034d02b0bb3838e1
MD5 e4c520272af07db4558bdb834eb89f78
SHA1 760ccd8d3efe525411959d6d1d271b943c693d77
SHA512 2a2c4b387c830fec933a7a6f575afe6c6aea7436490c7eb009a6ea0a926fea03d12c2238d3c75e146c3f03b1ba9e8716c3fc1017384600b4d1edfa76d3bd2402
SSDEEP 3:LstlNllkll/lHoIl//:LsX3lEtIY//
MD5 SHA1 SHA512 SSDEEP

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Favicons
Size 22KB
SHA256 0393b0d29508695eb814e494127774d5e144473745e8f90c9369acf8ee698ba1
MD5 ae5dd1f2b797e161539e1db3c0fcd844
SHA1 89ff8193d91494535786f01bf651e1c6e8e99c52
SHA512 1b570db844f43e17eb2d540ad67e7b220f41bf842d947c1f4d78df2b09518b0879c52c98c10e508d960179881ed9a7c2f357c6e86e62c15b0f74c9a190da5aa3
SSDEEP 96:BBCyu2XJTX5MgH/xYpUQ5tiL2kTczD/UkdI83JIEVKPGYn:3Nu2XdJMpz5gLfTkM8ZDVK+Yn
TLSH
T15AA21A6F2B353403DFC21E7E66AA5876CEBB926D9FE15D04705948118CF864EE0381AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\History
Size 184KB
SHA256 f199a905c2b92b1dacab8493bee86c64da5215fafb84096191659f910933f5ce
MD5 1ec402b9ec91579f9559594446c461c5
SHA1 dfbcd29c5560da66da88d5710e4238562d3cb2e7
SHA512 832379b6edfa01245ca6a37c5e7b4d7dd48895c5e3611cc1949060d0c943eb19572f9ee6d885f412d0c8a92316ece89a385ce7e5526786b1c7609e1ed3f4c821
SSDEEP 192:HBO6PH+bF+UI3iWGVmWN3qL/NhVgZQW3/V:hjPIkUI3ijVmWN3qL/vWvV
TLSH
T15904FB1E5F243612CDBD913668E745A35D7DF02F8B236AC62C6108B1CEE2656A02C5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

02488ac9-8823-40de-ab5a-6c41a550a543.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\02488ac9-8823-40de-ab5a-6c41a550a543.tmp
Size 188B
SHA256 68b43cef42e0bf5c16c83f1436bf8df262c4acb054b4dd54c205b965c852e66d
MD5 8226c8f6681cb6d806eb4e1cb8b0090f
SHA1 15907c5b64998a73fc9d3ed91351ee7e2dae06e8
SHA512 cca986447681d19f4146ca5258c1124dd73630be9f722eb49515294d0a15fab7e151db56515199484cd72b70f7cb5f11f0367487bc90b6875daab9aacb375929
TLSH
T15CC0C0B1003FE476107C072119C0FD495F7FF030114150ECCD43823E60401BB958B023
MD5 SHA1 SHA512 TLSH

Submit Download

2a351495-c6bd-4494-a2b8-8e2692cb3f28.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\2a351495-c6bd-4494-a2b8-8e2692cb3f28.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
MD5 fa739570350b78ef09e5d8ca61d0d71f
SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
TLSH
T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Preferences
Size 6KB
SHA256 73481402e6fcbb3e24ece42efd06860911f77743e9906f2338d8ec903526a435
MD5 0ed913da2db2ff3734effb94757f62a4
SHA1 f83a3f5ba9501b805638260626bd6f623bcb5234
SHA512 99f00e38bcc47a1fa56ab3e1519bc12a3afdabee8899976572e3fcd9a89663a7c4848fcdb0396340f46224bcb54dc7fec96254eba104f8105c94b89626d0a397
SSDEEP 96:st105axffZVb9MffmZ8i0vhEnktSm/7qx+WVHMSm+uecJAA1idQjs+gbFMEB:st10WZcfeZ8paKP/S+WiTAAwd11FM8
TLSH
T185D1C7525E2879774CC7E2197E39BB46D2FA607261D40E98EBFCC51C08D62DC2207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 59ef13e4e54fff1c23394eba67fee4bf1f43e308f75fb4ef0a340b60a3db390b
MD5 509e4cb6b6fda1b0a92e55f7b0a697ec
SHA1 e4e28f4382274751c58dcc8ca2948ae6310a679f
SHA512 7f3707d3147e69fe203ffb047a346da430cc00b8ea2853f0b8e3b4bee375ad333938efba8b2151e3ca7e53e7dfebe1b5e5274621097c41302a4a399eebf9835b
SSDEEP 96:HlJirPlf/ROoKOpkF5d1Jim7sMaTEv9V5h5pg5+eeM1OZ2UrHSI51gbY:HCDWG5u9llZRryIbgbY
TLSH
T1E5D1C5A70569C538AF448AEBDC2D3ACBD9B6419F98DA4C199BE2C04807C1FFC21DE4C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 00b856b6934f38800795ae59d23b7d8ce0bddbf33fafbb03b44a5494da4a5a21
MD5 83e8ea3b8906ac834e870a566f1469f0
SHA1 e9dacc1e6e644205f0707bd5d78ce62912a834fe
SHA512 c30bcee494f38a649cec8d7f786c3776eee6225bb4c6d6a08bc06ea14d3bf9927a217b49ec972c9cf8af280a80ba229ef7987045d8ac5fb21e72d06bd946ae68
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 696168fd1f2dd755ff0a0e2ff0fa85fbd1bea088eb22a9ee40b69c611ff7232b
MD5 ed3d0bb83caa8456c245d8bcb1dd0899
SHA1 5d566e483041dcbb7171ce3f2a032b2dc64d5e1f
SHA512 697a412dc96a88bd1b158612e136ed0cfaeee01964c12bb7340fbada3638e4abf205d229b5ea31740c80404b46ba6e7a75e29a77473f8c174e971a71754bb4ed
TLSH
T1B1B012C47F549137C0DC0E3D0284C7F06322F2036500680348448F720EB63E42F008F4
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Site Characteristics Database\LOG
Size 337B
SHA256 9c91d29ba3274726b7672f781a928f889a7c6049c072cd1d84c61d6b3892b508
MD5 7e517ad6c1997cd0ff6a80debed97242
SHA1 baad3a09fb4fea756de8514f28f63453552ecadb
SHA512 4933e54082d4cda80282c880e2ff0e20253e071f30b6acbfbcbc42dc6072d407d6b9c815e08c1015d3b4eb54f083334428bf248bfeb6a243a7888f01a0915d1b
TLSH
T190E0D83069CAC13B098D19DB163AE349CB72B415EBDA25350F14FBC0554B4487102600
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Sync Data\LevelDB\LOG
Size 313B
SHA256 b4aa59b95742716caeed4bae1a13ac593d7ccda6ff9b974d958f1a6d02b8f571
MD5 2c6cac6e7148032efbe36e03b9aa43b2
SHA1 93e681cd0f76b7278c8bcf2d549fa83dce0cc469
SHA512 b7f92f84a2a38ac9c9aa50222a9b77c759c795a717f718e591a8f9c41d05cdf6daf9fb0c62eda97923eb35b30977fdcc4a10347774e9ca0efc6496de41efc49b
TLSH
T17CE0CD31A4CAC1760CCD8DD7597DE74EC7B0B85ABFCA36594B04DF8439470097111641
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Visited Links
Size 128KB
SHA256 85afcc820af2b4503fb4dcd643484f512555b2496b4e8753082105b28c379c36
MD5 696e6bdcebb3c4bdbe3ebd23062385f3
SHA1 224ff485f4411cfeccd43f1df1777f0855218af7
SHA512 a1993f55461e3fcfc16bbf75aa9e9bf336e503161636690c14254f24777ad087b04de8a42b929a31f4524a6aa3bacde3fbaccffabd068ea3c704a9d4ccedec10
SSDEEP 3:ImtVui2rvlluV/:IiVui2Sd
TLSH
T1D9D304D51301140CD01D0430DDDD55D51130D04074574017033544134CD1C07415FD0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9c4652f-3dfe-4739-8f22-22f0ad82057b.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\d9c4652f-3dfe-4739-8f22-22f0ad82057b.tmp
Size 6KB
SHA256 5158d60207e2c8d92f6bf9d2eb90ede20a991b4081c2f567fd417f54e252a524
MD5 ae199e3268142984083d9cd3c955c5d7
SHA1 20d2757d5cb6e01eefd61f5cd5a21fd155e4c8b5
SHA512 0a88858eb56ddc4ba1ab737eee5aebeee4fd49a516f2187d6710342c8606470d124984af69eb2c87ef3a2aaf21197fa5e0701901fbe3212b87c66e491ebfe2ad
SSDEEP 96:st105axffnbDMffq/Z8i0vhE8kt/m/7qx+WVHMSm+uecJiyMk8dQjs+glT8MEB:st10WMfSZ8pa/e/S+WiTiyQd1H8M8
TLSH
T118E1D8129E28BA3B4CC7E2197E79BB56D2F9502275D00E58EBFC851C08D66DC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f447867e-2b96-44ad-bff8-ac19c5221f44.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\f447867e-2b96-44ad-bff8-ac19c5221f44.tmp
Size 7KB
SHA256 a42c92e6c7931d6653135b707ab2cb461bb013778a449c7bfcf5a7ada1fc0045
MD5 f9cdf4aefc80f66195aefb500160ae38
SHA1 9e6e5ae446dd071f1d3ff3921532000a4028625f
SHA512 67f31c7d5cbed678dfc2765fff7bf07592e52a5b62165212b8bcec0f2bedb65d0600c75cc3c6060d93bc24c2c71a25f9db32aed878a6a1065fe3c69af6e93139
SSDEEP 96:st105axffnbDeffq/Z8i0vhE8kt/m/7qx+WVHMSm+uecJiyMk8dQjs+gMT8MOB:st10WefSZ8pa/e/S+WiTiyQd188MC
TLSH
T1BFE1C7526E287A3B4CC7E6197E79BB56E2F5502275C00E58EBFCC51C04E66DC6207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc499904-abf3-4ed2-863a-7cd503416c7b.tmp

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Default\fc499904-abf3-4ed2-863a-7cd503416c7b.tmp
Size 6KB
SHA256 51b71544d837309d7d5eca614387cee244b75cbc9739f57e1ab353d86c598e7e
MD5 c385656f4cca8f8ec660444ae39ce8f6
SHA1 411b8dce7731b48f2b7d4371d60a3669195837ec
SHA512 62d6c2586cf37d18d482d26952dffdbb8e6d7de6629086c2ca6944112c2eb27341c21787ffb4eb32835fd9d82d8ca8d3d8d4193fe03790097294df307bb9c0b6
SSDEEP 96:st105axffZVb9Mffq/Z8i0vhEnktSm/7qx+WVHMSm+uecJAA1idQjs+gfTgKEB:st10WZcfSZ8paKP/S+WiTAAwd1hgK8
TLSH
T104E1C7125E28B93B4CC7E2197E79BB46E2F9106271D00E88EBFC851C09D62DC6207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Local State
Size 1KB
SHA256 e8bfb6ce49d8b695e4326ae487be481e7b8c4518ffff1b299214ab3b90811c08
MD5 4c93c839b6060bf75fbaf47931317949
SHA1 f40b0546bae574dde3f1ba45cc2b8962ad525698
SHA512 1edda538241b030a447f69b49dffcfbaae2844af158e0c554a4b21c68cf54a369027ab9e9c8a30d035c2559d4cc512df21358b211ec8d19b960b9287dabecd87
TLSH
T19B211233C4587FB398509D86B6C66B8F2E1090AA91145F48A2ED872D12D79DDD636C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Local State
Size 1KB
SHA256 8bce67decdb7c31c716b8e9640867fe9246b5ad4be279f9e9602083b394533e2
MD5 abb675ddd3d983f62052d3c86ceac624
SHA1 ccb158426b163412256cba2411620080060c6aa2
SHA512 01bd73af001f33e36ff45b27aa4d0e51860a18be66304d78a80083d06f9ca499b5c29f99b1f2fb5102f5057b0d96464d3fc1e93b00297e74bd4619b71d37f0fd
TLSH
T122316572D4583FB39C81AA86B6C66B8B6E21506AD0105F84A2FD872C12D65DCD535D33
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\PKIMetadata\46.0.0.0\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\ShaderCache\index
Size 256KB
SHA256 b3e52a7c1fb30c8d35cbba22cc38a7d8f8e1cc44e2cfe49b8342108c1cbcc221
MD5 72af06bffe7742d1f21b66ada1e853d3
SHA1 59632493c60a554a5ba269ca8db8c7f6bb86d618
SHA512 dd389cee8b553c124d2669600cb9b7664f8767673d02d15372c3a0373571c91578df40c6fe00dc475e02556a4aeae929e39b10eba04515d5dc7f48bb70f77b6d
SSDEEP 3:LsOllllklkXluFl//:LsUlPY//
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Speech Recognition\1.15.0.1\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Trust Protection Lists\1.0.0.38\manifest.json
Size 132B
SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
MD5 c9209ab189a035569ba3c65d7375d220
SHA1 1987aaec8f436325415fe36c168c9a37829523f9
SHA512 60495e096f78de05c6025a9d7b69aef9dce0d08ec1abbd4ccba206827a8c25d8449f54f93637599649762ec09a034d32fc8afc06199b1b57cd010ff1a0c850c0
TLSH
T17FC092615802797A14DEB7F00D29CB926AB3CB2E18A4650546F5C228ED2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
Size 80B
SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
MD5 3790d9257ba14f8be2ba08acf259a57f
SHA1 c54ab2e79d0ac9dc27425c7450e01ad593f02d60
SHA512 9568fef732369f06aafd8270638a38531a26f6f40a1c7c65fb7254eed36807789756e1c6efabaec86017b3decead2773de9ef5814650dbb334e6000ebd44a467
TLSH
T1A8A012605811E13310C403700260438243E01C112015240405461140218823713A3129
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\WidevineCdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

english_wikipedia.txt

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\ZxcvbnData\3.2.0.0\english_wikipedia.txt
Size 269KB
SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
MD5 c5b5e739e99f368b294af5d6341d79ab
SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
TLSH
T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.lbjlaq.antigravity-tools\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

memory/220-825-0x0000013C6C110000-0x0000013C6D110000-memory.dmp

Download

memory/2512-1630-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1633-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1632-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1634-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1624-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1623-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1622-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1628-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1631-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/2512-1629-0x000001BB6D7D0000-0x000001BB6D7D1000-memory.dmp

Download

memory/3208-286-0x00000190AFD00000-0x00000190B0D00000-memory.dmp

Download

memory/4736-96-0x00007FF973E30000-0x00007FF973E31000-memory.dmp

Download

memory/4736-94-0x00007FF973BD0000-0x00007FF973BD1000-memory.dmp

Download

memory/6108-155-0x00007FF972820000-0x00007FF972821000-memory.dmp

Download

memory/6136-38-0x00007FF972820000-0x00007FF972821000-memory.dmp

Download