Analysis

  • max time kernel
    148s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 15:19

General

  • Target
    2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
  • Size 27.9MB
  • Sample261113-sqlx5ac16r
  • SHA256 7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 38 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 25 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe"
    1⤵
    • Checks computer location settings
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4764
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4764.4100.13060921102652300604
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:1780
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffeda3bb078,0x7ffeda3bb084,0x7ffeda3bb090
        3⤵
          PID:1696
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
          3⤵
            PID:2980
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
            3⤵
              PID:3792
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
              3⤵
                PID:5936
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3588,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                3⤵
                  PID:1388
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3636,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
                  3⤵
                    PID:5204
                • C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe" /S /UPDATE /R /ARGS
                  2⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  PID:1264
                  • C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe
                    "C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe"
                    3⤵
                    • Executes dropped EXE
                    • Checks whether UAC is enabled
                    • Reads the TCP/IP host and domain name from the registry
                    • Modifies registry class
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of WriteProcessMemory
                    PID:5568
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5568.4920.7895229045094391355
                      4⤵
                      • Drops file in Program Files directory
                      • Enumerates system info in registry
                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                      • Suspicious use of WriteProcessMemory
                      PID:3824
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x108,0x7ffeda3bb078,0x7ffeda3bb084,0x7ffeda3bb090
                        5⤵
                          PID:4880
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1848,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1844 /prefetch:2
                          5⤵
                            PID:2016
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1816,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:3
                            5⤵
                              PID:3820
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2360,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
                              5⤵
                                PID:5548
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3556,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
                                5⤵
                                  PID:2300
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4172,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
                                  5⤵
                                    PID:1616
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4720,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
                                    5⤵
                                      PID:5812
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4828,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
                                      5⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:6100
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4732,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
                                      5⤵
                                        PID:4856

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    Advertising

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Advertising
                                    • Size 19KB
                                    • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Analytics

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Analytics
                                    • Size 3KB
                                    • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                    • MD5 SHA1 SHA512 TLSH

                                    CompatExceptions

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\CompatExceptions
                                    • Size 689B
                                    • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                    • MD5 SHA1 SHA512 TLSH

                                    Content

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Content
                                    • Size 4KB
                                    • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Cryptomining

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Cryptomining
                                    • Size 552B
                                    • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                    • MD5 SHA1 SHA512 TLSH

                                    Entities

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Entities
                                    • Size 68KB
                                    • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Fingerprinting

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Fingerprinting
                                    • Size 1KB
                                    • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                    • MD5 SHA1 SHA512 TLSH

                                    LICENSE

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\LICENSE
                                    • Size 34KB
                                    • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Social

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Social
                                    • Size 754B
                                    • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                    • MD5 SHA1 SHA512 TLSH

                                    Staging

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Staging
                                    • Size 36B
                                    • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                    • MD5 SHA1 SHA512

                                    TransparentAdvertisers

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\TransparentAdvertisers
                                    • Size 105B
                                    • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                    • MD5 SHA1 SHA512 TLSH

                                    Advertising

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Advertising
                                    • Size 21KB
                                    • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Analytics

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Analytics
                                    • Size 3KB
                                    • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                    • MD5 SHA1 SHA512 TLSH

                                    Content

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Content
                                    • Size 5KB
                                    • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Cryptomining

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Cryptomining
                                    • Size 32B
                                    • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                    • MD5 SHA1 SHA512

                                    Entities

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Entities
                                    • Size 128KB
                                    • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Fingerprinting

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Fingerprinting
                                    • Size 2KB
                                    • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                    • MD5 SHA1 SHA512 TLSH

                                    LICENSE

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\LICENSE
                                    • Size 66B
                                    • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                    • MD5 SHA1 SHA512 TLSH

                                    Social

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Social
                                    • Size 3KB
                                    • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                    • MD5 SHA1 SHA512 TLSH

                                    Staging

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Staging
                                    • Size 1KB
                                    • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                    • MD5 SHA1 SHA512 TLSH

                                    crl-set

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\crl-set
                                    • Size 13KB
                                    • SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    manifest.fingerprint

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\manifest.fingerprint
                                    • Size 66B
                                    • SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
                                    • MD5 SHA1 SHA512 TLSH

                                    english_wikipedia.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\english_wikipedia.txt
                                    • Size 269KB
                                    • SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    female_names.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\female_names.txt
                                    • Size 26KB
                                    • SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    male_names.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\male_names.txt
                                    • Size 6KB
                                    • SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    manifest.fingerprint

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\manifest.fingerprint
                                    • Size 66B
                                    • SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
                                    • MD5 SHA1 SHA512 TLSH

                                    model.markov

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\model.markov
                                    • Size 44KB
                                    • SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    passwords.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\passwords.txt
                                    • Size 233KB
                                    • SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ranked_dicts

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\ranked_dicts
                                    • Size 865KB
                                    • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    surnames.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\surnames.txt
                                    • Size 74KB
                                    • SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    test.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\test.txt
                                    • Size 15B
                                    • SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
                                    • MD5 SHA1 SHA512

                                    us_tv_and_film.txt

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\us_tv_and_film.txt
                                    • Size 159KB
                                    • SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ZeroLauncher-4.0.5-installer.exe

                                    • Path C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe
                                    • Size 28.2MB
                                    • SHA256 99c50be140ed0071a70aa97ac87620a4c05c7d73bc7ace87ccaf7f8770b873cb
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    System.dll

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsi3040.tmp\System.dll
                                    • Size 12KB
                                    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    nsis_tauri_utils.dll

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsi3040.tmp\nsis_tauri_utils.dll
                                    • Size 33KB
                                    • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ZeroLauncher.log

                                    • Path C:\Users\Admin\AppData\Local\ZeroLauncher\Logs\ZeroLauncher.log
                                    • Size 462B
                                    • SHA256 256c1e52bba8a46bc89b0cb9a4fa5f0dfd55d7ca12a2d04fd6811a047849e1f4
                                    • MD5 SHA1 SHA512 TLSH

                                    tauri-logs.initialized

                                    • Path C:\Users\Admin\AppData\Local\ZeroLauncher\Saved\tauri-logs.initialized
                                    • Size 9B
                                    • SHA256 194e7da6caff47cb8903aa9558035bef0a72f548777dc653aac4fee9cdd7decf
                                    • MD5 SHA1 SHA512

                                    zero-launcher.exe

                                    • Path C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe
                                    • Size 43.9MB
                                    • SHA256 66eabd4fcc52ec6a65830ed8322aaa86d9672b9ca75b280ea9c03cb8d7fa301e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    12a477ec-3eb4-4a21-8f8f-ec7628971bbc.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\12a477ec-3eb4-4a21-8f8f-ec7628971bbc.tmp
                                    • Size 3KB
                                    • SHA256 8ebc4866422abb9563e576c05b22785bc44ac2e23ed71330c42b2463b2ea22c9
                                    • MD5 SHA1 SHA512 TLSH

                                    27fd59b4-a0fc-47eb-baaf-16b8859127b6.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\27fd59b4-a0fc-47eb-baaf-16b8859127b6.tmp
                                    • Size 4KB
                                    • SHA256 637f49be4a7a08648b15950d7bba06c3376b4782f10154cf88c28dd34940955f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    64b2d25f-6332-43b3-9211-1173e46f2f97.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\64b2d25f-6332-43b3-9211-1173e46f2f97.tmp
                                    • Size 2KB
                                    • SHA256 c2e0f936cb6e769032535baa52ab1ec27cb9b1824c3339aec2de31a140152fd7
                                    • MD5 SHA1 SHA512 TLSH

                                    6fbf6aaf-de24-486e-b81b-deb65df761ff.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\6fbf6aaf-de24-486e-b81b-deb65df761ff.tmp
                                    • Size 4KB
                                    • SHA256 f3b6603d69571cba4bf242c4755acdb535f8d0266e76426d963f9ec632495f78
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    7dfda46d-4a46-4d88-a8b3-a9bf6e14a0d1.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\7dfda46d-4a46-4d88-a8b3-a9bf6e14a0d1.tmp
                                    • Size 16KB
                                    • SHA256 c160d33322b75d0f7ebbe79334f18e299c814f37fd60169837071662b82a2d76
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    87a94b98-1f6d-4b11-b182-2d084b92c2f2.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\87a94b98-1f6d-4b11-b182-2d084b92c2f2.tmp
                                    • Size 1KB
                                    • SHA256 14e171b5285090912558751ce88bc51864e44981fe773818f6ad2461e50431fa
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
                                    • Size 118B
                                    • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                    • MD5 SHA1 SHA512 TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 9f31492bc828f6c2fb8e7d1a2fe80d4ed5038d72e5b19b738ff313fc19942112
                                    • MD5 SHA1 SHA512

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 f56051206416d2d6c66fa1d161e7601f7dd47c26f210495f5bf92c8b6e604e68
                                    • MD5 SHA1 SHA512 TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 16a92e754880af055574bdfc25dec8d4cb35363e3ac3a86ef8aa0c4422ea602c
                                    • MD5 SHA1 SHA512 TLSH

                                    throttle_store.dat

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\throttle_store.dat
                                    • Size 20B
                                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                    • MD5 SHA1 SHA512

                                    107a7e47-32f9-4c95-9d74-5f36dd95c82e.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\107a7e47-32f9-4c95-9d74-5f36dd95c82e.tmp
                                    • Size 7KB
                                    • SHA256 141377d0fa594219447ca26fd141f5ceec67ef72f916cb4f3ad60b8c3ddc7555
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    data_1

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Cache\Cache_Data\data_1
                                    • Size 264KB
                                    • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                    • MD5 SHA1 SHA512 SSDEEP

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Cache\Cache_Data\index
                                    • Size 256KB
                                    • SHA256 7ae2e0100302cb6fb4e45e6ccd771281b9f2e09595a0a900d3893e7f6641430a
                                    • MD5 SHA1 SHA512 SSDEEP

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                    • Size 120B
                                    • SHA256 ad8e528cc86a304fa1f6beb45bdf3c31eabf2c0fa9923e39c037cad2183128d8
                                    • MD5 SHA1 SHA512 TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                    • Size 96B
                                    • SHA256 fea2eb75f67244895ea13abbeab84fb8789cc99d525f0b509ee9ba282e6c628b
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                    • Size 48B
                                    • SHA256 cb741ab8d63c331223872029a77f2644f446eacf37a20cd701cd956254643013
                                    • MD5 SHA1 SHA512

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\DawnWebGPUCache\index
                                    • Size 256KB
                                    • SHA256 cdf80ec973753544976c51329c767250736cf371f76deb9a3b3ba614c5080967
                                    • MD5 SHA1 SHA512 SSDEEP

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\DawnWebGPUCache\index
                                    • Size 256KB
                                    • SHA256 4255df717f9113cd8689939af7c6f58ca9a699ea3816d2db43fc7350d1cce1e7
                                    • MD5 SHA1 SHA512 SSDEEP

                                    LOG

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Extension State\LOG
                                    • Size 301B
                                    • SHA256 2f4dbd12b13e298d6b8076bc9c795d6118443145b49d9b5f982952a67507e116
                                    • MD5 SHA1 SHA512 TLSH

                                    Favicons

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Favicons
                                    • Size 20KB
                                    • SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    data_0

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_0
                                    • Size 8KB
                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_1

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_1
                                    • Size 264KB
                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_2

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_2
                                    • Size 8KB
                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_3

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_3
                                    • Size 8KB
                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                    • MD5 SHA1 SHA512 SSDEEP

                                    History

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\History
                                    • Size 184KB
                                    • SHA256 75940997a06061d025dd0abb9c87c300f8037fbaa86c851f44933d138cbd6783
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9987f2c7-a457-4196-99fa-f6f67ea7dfb3.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\9987f2c7-a457-4196-99fa-f6f67ea7dfb3.tmp
                                    • Size 188B
                                    • SHA256 776a6fa9bfc3e2434c115ab83b3dcf7137fd59af22610067b2e3bb1f8f46601f
                                    • MD5 SHA1 SHA512 TLSH

                                    Network Persistent State

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Network Persistent State
                                    • Size 111B
                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                    • MD5 SHA1 SHA512 TLSH

                                    Reporting and NEL

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Reporting and NEL
                                    • Size 36KB
                                    • SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    SCT Auditing Pending Reports

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\SCT Auditing Pending Reports
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    TransportSecurity

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\TransportSecurity
                                    • Size 188B
                                    • SHA256 6ad9301a0013bf5955174fa0e4752cc0069f25ab348ea15cfdafb995a42be9f5
                                    • MD5 SHA1 SHA512 TLSH

                                    Trust Tokens

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Trust Tokens
                                    • Size 36KB
                                    • SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Preferences

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Preferences
                                    • Size 6KB
                                    • SHA256 e1e7e15d449067a5c36fcd43102c8334e6557be6ed57fa69f126725ff58e2ff1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Safe Browsing Cookies

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
                                    • Size 20KB
                                    • SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Secure Preferences

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Secure Preferences
                                    • Size 6KB
                                    • SHA256 2af9414d75ed3dfeb087a5b7140250a393e014633fe602386b5c47b9aa1639f0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index
                                    • Size 24B
                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                    • MD5 SHA1 SHA512

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                                    • Size 48B
                                    • SHA256 1d243db4490d50a57609e16f84236f493387b503e4f7fd18c9b9cd1a592f7629
                                    • MD5 SHA1 SHA512

                                    db

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\db
                                    • Size 44KB
                                    • SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    SharedStorage

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\SharedStorage
                                    • Size 4KB
                                    • SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
                                    • MD5 SHA1 SHA512 TLSH

                                    000003.log

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\000003.log
                                    • Size 112B
                                    • SHA256 7fe8a40c2636db94161ca2c2a1af1b2cd1050548f6e2af6305a318433cd34c4a
                                    • MD5 SHA1 SHA512 TLSH

                                    LOG

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\LOG
                                    • Size 329B
                                    • SHA256 3f009fc634a8d64f44e38261f0d96b68c4c4fcdaee026830c96ad275b76c9389
                                    • MD5 SHA1 SHA512 TLSH

                                    MANIFEST-000001

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                                    • Size 41B
                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                    • MD5 SHA1 SHA512

                                    000003.log

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\000003.log
                                    • Size 46B
                                    • SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
                                    • MD5 SHA1 SHA512

                                    CURRENT

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                    • Size 16B
                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                    • MD5 SHA1 SHA512

                                    LOG

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\LOG
                                    • Size 307B
                                    • SHA256 e816e85f88eb4561ee942b10dbfda369b23bb04c18f4677d4f2bd895b8fd9009
                                    • MD5 SHA1 SHA512 TLSH

                                    Visited Links

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Visited Links
                                    • Size 128KB
                                    • SHA256 0767836148b4dbbd0f741dd0a2bb571df8d28269d0053ff8d0bff4b53d832415
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Web Data

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Web Data
                                    • Size 216KB
                                    • SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    b254024d-d219-4305-87f3-76b97c4892f2.tmp

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\b254024d-d219-4305-87f3-76b97c4892f2.tmp
                                    • Size 6KB
                                    • SHA256 e10439a7ec7be9e6576b05eb0b64d5b7b0a7b27eb43763a52e7e5c5b237da8d3
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\index
                                    • Size 256KB
                                    • SHA256 2dfd52b7a4d610cc22dccb4661a23ab82a1aae3cd163aae0380ac993ba8d5287
                                    • MD5 SHA1 SHA512 SSDEEP

                                    Last Version

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Last Version
                                    • Size 14B
                                    • SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
                                    • MD5 SHA1 SHA512

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Local State
                                    • Size 1KB
                                    • SHA256 c485dcf6bffc7d4890cf3ad321af31fa26aff20da9a9ca96e6d33de387625c47
                                    • MD5 SHA1 SHA512 TLSH

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ShaderCache\index
                                    • Size 256KB
                                    • SHA256 0782553df9f8a6bb96a6b181b540d2c8c7d0a1461e50b3c88300acbcacd6936d
                                    • MD5 SHA1 SHA512 SSDEEP

                                    Other

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
                                    • Size 34B
                                    • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                    • MD5 SHA1 SHA512

                                    manifest.fingerprint

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
                                    • Size 66B
                                    • SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\manifest.json
                                    • Size 132B
                                    • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                    • MD5 SHA1 SHA512 TLSH

                                    Variations

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Variations
                                    • Size 86B
                                    • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
                                    • Size 69B
                                    • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                    • MD5 SHA1 SHA512 TLSH

                                    memory/1388-139-0x00007FFEF4B00000-0x00007FFEF4B01000-memory.dmp

                                    memory/2980-27-0x00007FFEF4B00000-0x00007FFEF4B01000-memory.dmp

                                    memory/5936-83-0x00007FFEF5BD0000-0x00007FFEF5BD1000-memory.dmp

                                    memory/5936-84-0x00007FFEF61B0000-0x00007FFEF61B1000-memory.dmp

                                    memory/6100-795-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-789-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-791-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-792-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-793-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-794-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-790-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-783-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-785-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp

                                    memory/6100-784-0x000001A7CCAE0000-0x000001A7CCAE1000-memory.dmp