Analysis
- max time kernel
148s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/11/2026, 15:19
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Resource
win11ltsc2024-20260911-en
General
- Target 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
- Size 27.9MB
- Sample261113-sqlx5ac16r
- SHA256 7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0
- MD5 29958aa35778d835adc2fd4e48a0d4b7
- SHA1 c0f5aef59c44f08cc11f11c4a133bd1cb3419db1
- SHA512 9ce1193c87a8d508768cc2f5b01c718e37efed4ad77deba5b4173eacdab4cc5f94e529a569a67357649cb5294066197d1bfc7a1df1ab71be9e74bb9ef5b023f2
- SSDEEP 393216:SpF3oRwYF6Z8u/vZNlbNlRmvN6Qjl5MmdTL+dhxbn:5R28EGNvjPtgDxb
- TLSH T172575B257A5B99ADC15AC4B0C38A46A31E6130DB0B35BAFF44C856383F79BF41F38259
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe - Executes dropped EXE 2 IoCs
pid Process 1264 ZeroLauncher-4.0.5-installer.exe 5568 zero-launcher.exe - Loads dropped DLL 5 IoCs
pid Process 1264 ZeroLauncher-4.0.5-installer.exe 1264 ZeroLauncher-4.0.5-installer.exe 1264 ZeroLauncher-4.0.5-installer.exe 1264 ZeroLauncher-4.0.5-installer.exe 1264 ZeroLauncher-4.0.5-installer.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA zero-launcher.exe - Drops file in Program Files directory 38 IoCs
description ioc Process File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Advertising msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\CompatExceptions msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Fingerprinting msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Staging msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\female_names.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Advertising msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Analytics msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Content msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\LICENSE msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\crl-set msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\male_names.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Content msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\LICENSE msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Other msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Cryptomining msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Staging msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\english_wikipedia.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Analytics msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Cryptomining msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Entities msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Entities msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\ranked_dicts msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\surnames.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\us_tv_and_film.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\TransparentAdvertisers msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Fingerprinting msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Other msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Social msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Social msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\passwords.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\test.txt msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\model.markov msedgewebview2.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain zero-launcher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname zero-launcher.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ZeroLauncher-4.0.5-installer.exe - Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe - Modifies registry class 25 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe,0" 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\shell\open\command 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\shell\open 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe\" \"%1\"" 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\URL Protocol zero-launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe,0" zero-launcher.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\shell 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero ZeroLauncher-4.0.5-installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\URL Protocol ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell\open ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\DefaultIcon zero-launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\" \"%1\"" zero-launcher.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\DefaultIcon ZeroLauncher-4.0.5-installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\" \"%1\"" ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero zero-launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\ = "URL:com.launcher.zerolauncher protocol" zero-launcher.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\DefaultIcon 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\ = "URL:com.launcher.zerolauncher protocol" ZeroLauncher-4.0.5-installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\",0" ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell\open\command ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell ZeroLauncher-4.0.5-installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\zero\shell\open\command zero-launcher.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\ = "URL:com.launcher.zerolauncher protocol" 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\com.launcher.zerolauncher\URL Protocol 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1264 ZeroLauncher-4.0.5-installer.exe 1264 ZeroLauncher-4.0.5-installer.exe 6100 msedgewebview2.exe 6100 msedgewebview2.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 1780 msedgewebview2.exe 1780 msedgewebview2.exe 3824 msedgewebview2.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeImpersonatePrivilege 1264 ZeroLauncher-4.0.5-installer.exe Token: SeImpersonatePrivilege 1264 ZeroLauncher-4.0.5-installer.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5568 zero-launcher.exe - Suspicious use of WriteProcessMemory 33 IoCs
description pid Process procid_target PID 4764 wrote to memory of 1780 4764 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe 85 PID 1780 wrote to memory of 1696 1780 msedgewebview2.exe 86 PID 1780 wrote to memory of 2980 1780 msedgewebview2.exe 87 PID 1780 wrote to memory of 2980 1780 msedgewebview2.exe 87 PID 1780 wrote to memory of 2980 1780 msedgewebview2.exe 87 PID 1780 wrote to memory of 3792 1780 msedgewebview2.exe 88 PID 1780 wrote to memory of 5936 1780 msedgewebview2.exe 89 PID 1780 wrote to memory of 5936 1780 msedgewebview2.exe 89 PID 1780 wrote to memory of 1388 1780 msedgewebview2.exe 90 PID 1780 wrote to memory of 1388 1780 msedgewebview2.exe 90 PID 1780 wrote to memory of 1388 1780 msedgewebview2.exe 90 PID 1780 wrote to memory of 5204 1780 msedgewebview2.exe 92 PID 1780 wrote to memory of 5204 1780 msedgewebview2.exe 92 PID 1780 wrote to memory of 5204 1780 msedgewebview2.exe 92 PID 4764 wrote to memory of 1264 4764 2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe 94 PID 5568 wrote to memory of 3824 5568 zero-launcher.exe 103 PID 3824 wrote to memory of 4880 3824 msedgewebview2.exe 104 PID 3824 wrote to memory of 2016 3824 msedgewebview2.exe 105 PID 3824 wrote to memory of 2016 3824 msedgewebview2.exe 105 PID 3824 wrote to memory of 2016 3824 msedgewebview2.exe 105 PID 3824 wrote to memory of 3820 3824 msedgewebview2.exe 106 PID 3824 wrote to memory of 5548 3824 msedgewebview2.exe 107 PID 3824 wrote to memory of 5548 3824 msedgewebview2.exe 107 PID 3824 wrote to memory of 2300 3824 msedgewebview2.exe 108 PID 3824 wrote to memory of 2300 3824 msedgewebview2.exe 108 PID 3824 wrote to memory of 2300 3824 msedgewebview2.exe 108 PID 3824 wrote to memory of 1616 3824 msedgewebview2.exe 119 PID 3824 wrote to memory of 1616 3824 msedgewebview2.exe 119 PID 3824 wrote to memory of 5812 3824 msedgewebview2.exe 120 PID 3824 wrote to memory of 5812 3824 msedgewebview2.exe 120 PID 3824 wrote to memory of 6100 3824 msedgewebview2.exe 121 PID 3824 wrote to memory of 4856 3824 msedgewebview2.exe 122 PID 3824 wrote to memory of 4856 3824 msedgewebview2.exe 122
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe"1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4764 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4764.4100.130609211026523006042⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:1780 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffeda3bb078,0x7ffeda3bb084,0x7ffeda3bb0903⤵PID:1696
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:23⤵PID:2980
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:33⤵PID:3792
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:83⤵PID:5936
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3588,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:13⤵PID:1388
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3636,i,16460258535232844300,327826295445334613,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:13⤵PID:5204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe"C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe" /S /UPDATE /R /ARGS2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1264 -
C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe"C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe"3⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5568 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5568.4920.78952290450943913554⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:3824 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x108,0x7ffeda3bb078,0x7ffeda3bb084,0x7ffeda3bb0905⤵PID:4880
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1848,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1844 /prefetch:25⤵PID:2016
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1816,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:35⤵PID:3820
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2360,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:85⤵PID:5548
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3556,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:15⤵PID:2300
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4172,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:85⤵PID:1616
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4720,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:85⤵PID:5812
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4828,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
PID:6100
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4732,i,10546966406408171330,4300996673070878528,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:85⤵PID:4856
-
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Advertising
- Size 19KB
- SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
- MD5 897eefe311c18078a34e06f3cf624a6a
- SHA1 98246e769fb513b8aead588024d1ceadc65422d9
- SHA512 0fad93ec06d6cadb4c2e72b3355b509d5b9995706d6b7e9e69df21d9907dd3d4156eaba62a6c64ed34a6747046ffff841cc79020aff0a29690258ab487bbd6cd
- SSDEEP 384:/j+Vafk2xyJEYoAYiQZU8rYvepdFhQXVVRwjSTV2quzxmVUiKF4EysZ4y5:zfEHoAYiQHriepdFWlVmjSTV2qwFOs1
- TLSH T16A926151887035622F2F50CDE0583F8E1199667540AEE6DE9FE48666F28C0F37894EFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Analytics
- Size 3KB
- SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
- MD5 b55f84fa839160086b8b337b59f80ded
- SHA1 0fde6cb65ef56264517aab0eb5ea93667f5985c2
- SHA512 6750626e0efca608abafe63926229887a68c9f3e657cb78921daf9c6b3ce11d6bfe1ba83fac775a8d1b6b69cbc00dc193fcb818c70ded3ea159b6241fd2823ce
- TLSH T1CF815415A4A014433E2E5668E03C76B912E8253880E9FBD9EFB19965F30C0D778E597E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\CompatExceptions
- Size 689B
- SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
- MD5 108de320dc5348d3b6af1f06a4374407
- SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
- SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
- TLSH T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Content
- Size 4KB
- SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
- MD5 0e3ce75aaf5e674dcd7508251bb839c5
- SHA1 35d4a84a8d946263e6b1d06fadc31c5753a946f0
- SHA512 80d49bfdbcce2ac21c5c39c6c538135a9768b5fadd73137f6b5916fe6740827fda06c154508c0f9810723c397a22f3d93542f3e972ed3b736f7478ea2e6dc0a9
- SSDEEP 48:lAHJBLfUUIAPMsb2zIEcySe00woiyKIdw5uZWhDNB+jS+3NrSA6CdM+3+1oH:lApdOAP7bercySB/1ylw5usB+WB8x+yH
- TLSH T13991B7037E4409276E95D105C0ED209E2C71ABB0C85DEDC99B964B7FBBC8C8BA4961FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Cryptomining
- Size 552B
- SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
- MD5 39461c6ea4ff09d663a65d133eb47c98
- SHA1 c41f5b5ac9a202ec7dd12122e64b858379a9a815
- SHA512 a8e195fb9bfa68dbb064a0f8a41cd86aef5fca43349388294d364b5fd556f0a01674bffcbb5eb2a36e3fea9c64bf575b5e7ed674661dcb7544ed7a961686d4f8
- TLSH T14AF0C0E5C82197766FD544A1E05E7389F4844BB26094F3D50B56321996E8A432684DEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Entities
- Size 68KB
- SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
- MD5 478a605d5578236f2d1ddc93c2f22456
- SHA1 917f05453d497b3e3de684a905e141972c34a267
- SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
- SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
- TLSH T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Fingerprinting
- Size 1KB
- SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
- MD5 f665b35df3c2a7b4efd9dc396f2af9bf
- SHA1 2833c37d7d92a4cd1e413eba0d6717e90e69f973
- SHA512 e7930341af55bae220962d79ce9aa056bbd1c9fe3cfaf0fd4181d9aa4257b5679648e4aa19561c2f9b5c8fcc6e6757d3616726eb28e77a2b899fa25f7d1b6706
- TLSH T1DF211F8295D038716E6E1488D55C3F9C129A2B7001E6F5DCCEF486A1B61489F7180C67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\LICENSE
- Size 34KB
- SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
- MD5 d32239bcb673463ab874e80d47fae504
- SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
- SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
- SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
- TLSH T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Social
- Size 754B
- SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
- MD5 1d06d58fe9131c14ba5ba5ff740b020f
- SHA1 e6ed812e23e201b20170e928686a5d612165df85
- SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
- TLSH T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\Staging
- Size 36B
- SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
- MD5 0163de1b14421d4eee3757ff76fd81e4
- SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
- SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
- MD5 SHA1 SHA512
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Mu\TransparentAdvertisers
- Size 105B
- SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
- MD5 57d5a3548911886de2f3bd3172e808ed
- SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
- SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
- TLSH T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Advertising
- Size 21KB
- SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
- MD5 452f3e9d40539cd65cafbd008308b5b8
- SHA1 34203b4a803009ff56bb28d3a14305348082990f
- SHA512 08504c06b603db3cb12f0ed6e30e733c2a2c830cad1124771c64b0e7b8480113383440325c56116fb57bde458b393ce182a3af75f0cef146ad6a8872ab9a964b
- SSDEEP 384:oQh4q3kwr8CPLo3AptN7NoTn5LTDq3ZXmRHAez/GRQMKWxV1R:wqRr82LKAptNJoTNT2JXm1AezO2MKWx5
- TLSH T16CA2B361996025513E6F009DF1993FCD5AA8233080E9FAE9CFA0C676B35D4D335948FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Analytics
- Size 3KB
- SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
- MD5 c4c782264f4a6a6ba84801c8c148afdd
- SHA1 f138b8f526133c5dd612f79825f4706569fd18b2
- SHA512 e1d3b123a7eabfe72d4df981e1015ca616c51fe7d94de91223e9c7f4eb98ed7d3ebcf7b5c7e08579db502c7b3529e095d314dc71b8cf5e79081c678e73aa646e
- TLSH T1F261C814312434212E1A126ED55E3E8E6AF8223904FCF7E14FF18A71B2194DB38E873B
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Content
- Size 5KB
- SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
- MD5 7c5f5e42e885211f783a06b1317ba145
- SHA1 079ab890b012120b89f776e4bfe67f3789f67096
- SHA512 ec581f41917ee010d71a021cf16648fa757327198113dc3daff3adb33ee739da3f40d87a6f3e49004106770ea705e6b800fe263d21eccd33d7883fd1ed8c82eb
- SSDEEP 96:02KCCvwLR/tE1LYSeyTPXD7fOiCrC400uvuJEjchVEy8Upy4uILrqNaRq3:02KCMwtWLYSe8miZHvui68kRBg3
- TLSH T169C183B2495079522F3E01C6F9E6265488E483715CBEEBC787E0C62CDD0E9E335A835B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Cryptomining
- Size 32B
- SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
- MD5 4ec1eda0e8a06238ff5bf88569964d59
- SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
- SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
- MD5 SHA1 SHA512
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Entities
- Size 128KB
- SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
- MD5 87b4b75312dedc7106ac746153153c1a
- SHA1 54fd4b67eb16620ce0dafe8eb641f6a256dfc4f0
- SHA512 f594a5039c73db236f97dd50c3eb007f2fa2ff44d558222cf983dcd703d89f9b1e832bd3c249a20bfa592656e9c2e61a41f90df1b927fdd8f490d36734f92d30
- SSDEEP 1536:e9nKLDxqghS81HcmcgqPvD2E/FwoqtK1Gmbpq6CXkkqGqnuP7Sr:GnANN1Pt3/oqtKAWvCJqGqnuPK
- TLSH T1A8D30938FE60C8185CEB041B91296DDC5B801BDA5AA6FDC9EF7F78190242DDD33285B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Fingerprinting
- Size 2KB
- SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
- MD5 427724f72baa3d5c91671853a89245e5
- SHA1 a33deaa88143c298e0732ecb233663c372cb0e2b
- SHA512 bd0027e9bd25fa3426dfe85f67bac14bc3124bbbd6493c1d1aafc33343dcb008a8a418134deda235b71377ff970fcdc45ce4e6b1eae79fd3adf1bc3ba2e2103e
- TLSH T19441552354202051BEBD498CF59A3F4D29E5623984DDF6D5DFE08936721A8E734908A7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\LICENSE
- Size 66B
- SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
- MD5 5b7baf861a48c045d997992424b5877b
- SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
- SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
- TLSH T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Social
- Size 3KB
- SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
- MD5 af4c6f2598c45087a32c4f410f242553
- SHA1 cad2a50e20ee6f699e21e78c58991a6a25a55ec0
- SHA512 7d378b90e3cb7feac3580bc7858b6d8a4967c77196be5b7d94ef076a7e1e8166156e62954998fa6931593db5c8a8dcaacdfe3421bd39e6517f6c6094caf4f4a1
- TLSH T17B61DC32C550A9932E5D0C81EDC55E704DD8067ECCA6F4E287B082F8F0AD8977D90BAB
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1381494153\Sigma\Staging
- Size 1KB
- SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
- MD5 5d7f5a0c242d9d1290c8ad0bd57be3e7
- SHA1 d454811443284aeaa0294d30caf65e624182b150
- SHA512 5d36ffb2ec4d162c49e5dd1207bee8b51f36d91ab38d23ff85d4467ced3a7e0f4f639b230623804260d8b03e49ef124e6ae9714f63c896c024215bfbd13dbc88
- TLSH T1A621E2194E908CB11E596745D20A535ABDEA617D38E7F4CB8EA8DE7FC2CE85702344A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\crl-set
- Size 13KB
- SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
- MD5 5111ab39b220749a299b5bb7cd25c730
- SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
- SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
- SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
- TLSH T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1802828247\manifest.fingerprint
- Size 66B
- SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
- MD5 fa32cf839f99432676ca9acccd8a0550
- SHA1 9a869d2475f9840495188509e12ce9ca5a9e7189
- SHA512 b1e901d92adecc46f96f52ac38954688f0a2514710041109785656ffe694766448cdbafcda397e9edb196763997d952537ebfefb4e5d128954576024f8856c04
- TLSH T1C5A00216AEA0E812F29486DEC4254B6A14372BF9AE76008979E8E4819C87260815B8D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\english_wikipedia.txt
- Size 269KB
- SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
- MD5 c5b5e739e99f368b294af5d6341d79ab
- SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
- SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
- SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
- TLSH T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\female_names.txt
- Size 26KB
- SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
- MD5 65c6b77a97ccdb4f09402295c75cd151
- SHA1 48d9de4e0c6ef8f29db7e3b69008d1e25423f333
- SHA512 59608916ece278c8d6b518b9ac19f38b071acac1e8698be851a5e357b97a2e4c4dea4d122321f61e937fd2480e6041e78e97e01648098da194890895d7ea0dc4
- SSDEEP 768:QLAlqUDcjeadVlvbnevUtIaBY30lzpoTTC:Jlq4Ceahn2HQqC
- TLSH T150C2EAF7EAA8097F748F890DC5893B604C58FA332C3658A59E698FDD42056D0DDA4F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\male_names.txt
- Size 6KB
- SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
- MD5 ed2a7be8d1007adf88defbba6a30fb18
- SHA1 f00e2d8892ff2808a81f50d360edc960bd8d51ef
- SHA512 1577919e4654086ae6d673ecbb5e436ca2fdcefb30bb4f839fdcb545f3b3b102bb47e78ce6c4ba451bfd9cf6099eba35c765dcbdadbac80aeac3083dc095017d
- SSDEEP 192:+qi/Dd0Ms6tPdSiuDvtnNdqfkKY1kqPgxC4Hb64:+vbLu5Nc8UqPu1b64
- TLSH T14BD1E8BAD2E43975AC9F058588CF2F41994C36337F321676E6B90AC94252A805ED0D3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\manifest.fingerprint
- Size 66B
- SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
- MD5 a346573314757c677ba7b22bf474c77a
- SHA1 aec9bbc033bc1c11aa690a8c5ceab69324ec42e5
- SHA512 8bfad9d06097a6571bf855b189d645a3f4913798fd6ff66fba00c90673f891901d03571ab57dddab2982591b60a8e6c27fc47f05a69f33da0e92ec49ef5fa43e
- TLSH T17DA022B02C230A0000C802002BF08C3308F8C2008C30232302CC38C0003C0C0F88CCC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\model.markov
- Size 44KB
- SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
- MD5 2bb4fc702c8b59a0b518482f60a082c1
- SHA1 ffdc0a063cdd51e4913df4e4917495abf7e486c9
- SHA512 f6b113084bd43a1f1844102ca860efd8bcd363de3eebc8acf23f5744d74b191fdc92a601630eb8e602e93005a63b73a9cb3bf5de115e157a2b72eab4dd891c5f
- SSDEEP 768:aRuG/TuKUqwxhRH6t9O4v2uoDO+L1kO5qNlFpIpJmfaLtk+Yg6qFw11/aeMgE3Uf:aRuG/SKoLH4vC9L1kO5qLAbJkE2/aeMy
- TLSH T15923F1B3D385DE3992E317B0E67D22A74BD21AA47ACEBB23492BDC4215F1C504254DBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\passwords.txt
- Size 233KB
- SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
- MD5 13c1efee289d7ecc8a7e7bcc7ce47df8
- SHA1 c2864b21ab8130e8cae66f1f19ac38723a7cf42b
- SHA512 08df4c520a896ee26ef9b8f093b2e14b6e4af67f910f12d70270917df2d78a4666458386fc6e83258d84d24b03e517e39d7799225b41a6687278dbe9610ae537
- SSDEEP 6144:EY19QF6DI5luckZEjoQKe8rbbIptoWfEYixiRG+GpAcBN:EY19QKI3HkZ1QKe8rYf3fEp0RDIAsN
- TLSH T164348EB5F6A03176E6CF464E580A3F058A9D37335D11589FE7B80788120BBD885BBE27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\ranked_dicts
- Size 865KB
- SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
- MD5 959460a18173908111523bbf4c39073e
- SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
- SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
- SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
- TLSH T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\surnames.txt
- Size 74KB
- SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
- MD5 64ffd4d0d29a84dbf99bddf1afe7e068
- SHA1 f1c3703c60fa8ceb538a851acbeb2cc48e78243c
- SHA512 d447a251bbc6b5da76b9327dca62d3a40d6e2ae5c59c35f9e7615be15e1e5eedcb7ec6d20ec48df33904851002c823501f9f3347dcd0e279f3fa86b00d050d28
- SSDEEP 1536:HZQFhD0AAQnaaq6NE1f+oNh2MGfAoocKAPvY02+dhQ:5y5/LaZmoCJeoxbdK
- TLSH T169731A76E2B4383AE95F1B8D48953FC1C904D6338D10A1A5F7B906CAA047BC58DB5F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\test.txt
- Size 15B
- SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
- MD5 29b933a8d9a0fcef0af75f1713f4940e
- SHA1 9fbc3fafddca353898269a2f4069e4653083bcdb
- SHA512 9751ea443fd632e147831566ccb822482220188993cd1269edbe98d2e2d69beb5fb4b631c5001f47491dfe7550cb68035267fae518f1ff119e465b54379389fb
- MD5 SHA1 SHA512
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3824_1851499460\us_tv_and_film.txt
- Size 159KB
- SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
- MD5 206a438724efc16dc8afa5a8984f05d1
- SHA1 57225b5fb5cb51333fa9d79865f2393ec4445e42
- SHA512 6a653e259d4f15c88145c820d1e3062194370459da34cb2cc49fbdc681e1bf3176501129640fdc1b635ea805c03ab85c8bc5169e23ef099975fe559bf284bbab
- SSDEEP 3072:CwawB3H2+8PW7D0Nr45Wn9TkOijxjTBUCbws5d0hKS4D/ODGRtenXpMFU2c92C7/:fawBXbD0NEc9yxjt3bws5d9S4D2CnKXn
- TLSH T1FEF31930DB64353ED79B2BCEC8642F52415445321E3570B9FAAE0149180BF9E8B7AE3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-QpeR25\ZeroLauncher-4.0.5-installer.exe
- Size 28.2MB
- SHA256 99c50be140ed0071a70aa97ac87620a4c05c7d73bc7ace87ccaf7f8770b873cb
- MD5 b3568ceda4f90e4a91e8671ba1c0e0db
- SHA1 ecc3c4ca1336fc4193687f093ecada0e0d5c96b1
- SHA512 b5c5fc531179947e4168dff26526d671f059f25886c0a503843aae6e786979a37db05480c2ff1d3fea92c0474aa335059e683bad9fd7515ca5260d863e5e9b47
- SSDEEP 786432:dMPFeAwOUMYaujop6eFQKFTvi1V2JNjQGYvzeGZoWpHZEMv:dfgdyGygTkVIMGSeGZ7H/
- TLSH T1AC573368D7F6625BE81A51F3476D6C383EDF0699DEB8E51A140EF62438EF0888350E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi3040.tmp\System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsi3040.tmp\nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\ZeroLauncher\Logs\ZeroLauncher.log
- Size 462B
- SHA256 256c1e52bba8a46bc89b0cb9a4fa5f0dfd55d7ca12a2d04fd6811a047849e1f4
- MD5 971213a1d55c86311467e9e93027c3a8
- SHA1 d420b92ad5940aa90cc4a0a4062db28a211b0cc3
- SHA512 5b53a382704b84ae965e6da7094d7d6f827665adfc024307bfbb4e6b5e97cbaa6c1b3843d5e5775544e1de7726c78b147359400f6ef147fe5b6b8d8f3ee3047a
- TLSH T17FF0275A00E1E4569DE07140852B3766E870F033B1CC96FC79D29B8C4456DAAECAF4BF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\ZeroLauncher\Saved\tauri-logs.initialized
- Size 9B
- SHA256 194e7da6caff47cb8903aa9558035bef0a72f548777dc653aac4fee9cdd7decf
- MD5 2381745ec30d6e71ee91b3e182800ed7
- SHA1 c676bb23f7c5e052bf667c0ee01c2cb7b9766fa7
- SHA512 03ed4eba6a5ac77380b84a066fcaf9f7ba0b44b521adfcad9cd3080333f4d14c7ed468bdfb6c668a56a7e26f07baa191661b7e62fd45ebcc0f586681475d9f03
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe
- Size 43.9MB
- SHA256 66eabd4fcc52ec6a65830ed8322aaa86d9672b9ca75b280ea9c03cb8d7fa301e
- MD5 36cdcea56646bf7511c7b66984dfdfa3
- SHA1 0820696f60e871804f7fc23be3c33fd8e18ec55f
- SHA512 c9c9390cfed8e57b00be87eddfcf44a6b8b81b44db7217cc5f7b1c63dc2ecad926df2c5305e35e149dbeaf645838d57bfe7f9d8130cf9c5de333c3ca689d1d01
- SSDEEP 786432:dqMwIDWqdajAm1QFLsmuM44Mu4jzK3Jrhq8jEZMmH2EmyccgdUMey:0XQKmhwu4cJrhhjEZmAsUM
- TLSH T1B2A79D257E5B99ACD19AC470834A8A631D6130DB0B35BAFF44C496383F79BF46F38258
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\12a477ec-3eb4-4a21-8f8f-ec7628971bbc.tmp
- Size 3KB
- SHA256 8ebc4866422abb9563e576c05b22785bc44ac2e23ed71330c42b2463b2ea22c9
- MD5 a13e8a707cff05b9346abf4938c76aae
- SHA1 e02b1cebe1e42af91c393b663c7a0e387a052508
- SHA512 f931609b1ec89eed7e5ab26ea400ae720cf06a9129514e796295dc3f2335ffcb1a1eb9452e96ab765641c35b4fda3e5adb529a31f26c1e68e690328c85a681a8
- TLSH T19F718476A8A4A93B4DF2AA44B8C93F06B6612137E5912FE9C5ED0F0C01DB7882342C16
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\27fd59b4-a0fc-47eb-baaf-16b8859127b6.tmp
- Size 4KB
- SHA256 637f49be4a7a08648b15950d7bba06c3376b4782f10154cf88c28dd34940955f
- MD5 35e255270c547065c448c5346594d4fa
- SHA1 6e8f62fb8dbbd329b6befbbc0561f91f5165c456
- SHA512 920f722554285d2155f71fe3f268e0be6765f5c3e72956621edbceb7091172f79711cde4f227472589ef32c4498b4c3f505727890ca2096d6145a5ed212b54d7
- SSDEEP 96:zuzal3NkCEBfSBBaUaM8Frh/cInURoDotoN5S6DBBdnHR6cBZH8T8yl8a:zWal3NbnBBujooDUab3dnHpE7
- TLSH T164918336A8B4A9374CF2D945B9863F87A7A16037A5912FE8C9ED0F0D01DB7992342C16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\64b2d25f-6332-43b3-9211-1173e46f2f97.tmp
- Size 2KB
- SHA256 c2e0f936cb6e769032535baa52ab1ec27cb9b1824c3339aec2de31a140152fd7
- MD5 20ddb2bdd8e6fb9d88bfff4e9482734d
- SHA1 9f63e1cf1ab02743c83348237373e252ce536531
- SHA512 751e771679098839c8ad873301383ccd5b3516c7f355a2fbc1f6ed8c1011596460262f2569e1e446ef93fb3a4975b3ba779c19ef93e56076a4b0e75d0c43fca8
- TLSH T1D051D873BC54AA778CE39A44788E3F53AA316172AA521FE495EE0F0C01DF64C2742C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\6fbf6aaf-de24-486e-b81b-deb65df761ff.tmp
- Size 4KB
- SHA256 f3b6603d69571cba4bf242c4755acdb535f8d0266e76426d963f9ec632495f78
- MD5 91234eb91d434278dbc94e3629a8dc34
- SHA1 59a83c6ce2244668fe18adea7c4c337ef3c0b7cb
- SHA512 2745a3c4ed7be9e68774f59b74409eaf16afde40770ac55ab8a53c0295b4a86cf9775e5b81ee62c8d09761bcd8cf7c0c439661367d00ff47f5e7b5880ec8b4fb
- SSDEEP 96:zuzal3NkCEBfSBBaUaM8Frh/cInURLl8DotoN5SuDBBdnHR6cBZH8ikl8a:zWal3NbnBBujoiDUaT3dnHplK
- TLSH T153918436A8B4A9374CF3E945B9463F87A7A16033A5952FE8C9ED0F0D01DB79D2342C16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\7dfda46d-4a46-4d88-a8b3-a9bf6e14a0d1.tmp
- Size 16KB
- SHA256 c160d33322b75d0f7ebbe79334f18e299c814f37fd60169837071662b82a2d76
- MD5 eb14a6ddcce7316a19d3f72beac8dc37
- SHA1 4ef4cc85e62b9563fbac85f0fbfd171fb66380af
- SHA512 73e525ecc1ac9f40b44a4cd817b5d48d0cc977dd008f60642750a0527c237f68eea51b14d5226ca2fa1d8a24fc959e658d0d2e9d3d341cd18eae01ec51f00164
- SSDEEP 384:zb+OBqImmJvGBLx3NaFMJFS3NbBaRdyCLSHg6rM:WcvGtlNSwdHL6Q
- TLSH T134729D7A2CB55A272CF3C849BA8A6B4787722267C0D17FE8CDED5F0E026F1442392D01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\87a94b98-1f6d-4b11-b182-2d084b92c2f2.tmp
- Size 1KB
- SHA256 14e171b5285090912558751ce88bc51864e44981fe773818f6ad2461e50431fa
- MD5 a6c2ef759a0adcd53b3e0e7debb34215
- SHA1 feb4b71ffc9e967446c6ffbb1a59626fd7facb8c
- SHA512 f25644991d309b9d1031e8476057569f91c7c4833002a9d1a1e65b739341777a3ff066b418b7dc70393c9a3d16dfeff52fe32c55afe2cdf926384efc7fdd3630
- TLSH T1AC3187B3F8E46B765CD1A54571867F832E21203791114F9851DE4B1D01EFA8C982AC22
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
- Size 118B
- SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
- MD5 acb0c12cc7e5345764763e37bcebbec8
- SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
- SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
- TLSH T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 9f31492bc828f6c2fb8e7d1a2fe80d4ed5038d72e5b19b738ff313fc19942112
- MD5 ce8d97a68b05a6edcc568673f66a6e86
- SHA1 6082f1046c755783824285c830f182ef91261294
- SHA512 d8b43fb1c22bdf5fa79c457321ab3c158b1118793563f6cbc984df2584034a11754660688c3c2b156dd60460ad8cee332de980fc4d27c324013898d27fbe3bf2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 f56051206416d2d6c66fa1d161e7601f7dd47c26f210495f5bf92c8b6e604e68
- MD5 f5f98840eda1c193c8013525782b489b
- SHA1 27ac76631ee1701f545ba2ba86e90987418810c3
- SHA512 2d016df3523c5f8f48e37dd5b7b5db02e72a468f9314e7e1a35c86209e4a43bdbc1cebf0473d6dc5ee7b0c536e7c267385e38b4d86b040f0566a933ccd81d5cc
- TLSH T192D012223B020238C4103133105262081E00D01B45458104783D872D9E140500A43C52
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 16a92e754880af055574bdfc25dec8d4cb35363e3ac3a86ef8aa0c4422ea602c
- MD5 dfafc5dfa74be44998ec1095e58a4fca
- SHA1 4cd55cec44e591b45209da5ba9cda788bceb2a94
- SHA512 3d813fe8d9eefd4f37761ba40dec82addeac6ced7796f958a3cba9434ab6411f87a1c12d6a79141bea73930980e9f84a903ab3bddaef069212ad6d4a1340b88b
- TLSH T160D0122237020638C4103033109362081D00D11B44458004783D871D9A140500A03C52
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\107a7e47-32f9-4c95-9d74-5f36dd95c82e.tmp
- Size 7KB
- SHA256 141377d0fa594219447ca26fd141f5ceec67ef72f916cb4f3ad60b8c3ddc7555
- MD5 09a1698312f27b1200249e25e8b337f5
- SHA1 b2cd5032d8fd1b12ba4bc77fce6594b5b1574c3f
- SHA512 f768c0192025807800dff885fa25259611864e7cd0246c0711f0534c3fbf1b874722b750889c753e96a07a471b97b252e07dc4554de9e4a1044955bdb88a92ca
- SSDEEP 96:st985IYXrbDW0ffqrdZ8i0vhExkt7Qm/7qx+WVHMSm+uecJx9OXdQjZ+gZ4zSMOB:st98SJ0fKZ8paY1/S+WiTx9qdo8WMC
- TLSH T15BE1B8175E68697B4CC7F5197A35BF52E3FA202235C51F98ABF98A2C04D66CC230790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Cache\Cache_Data\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Cache\Cache_Data\index
- Size 256KB
- SHA256 7ae2e0100302cb6fb4e45e6ccd771281b9f2e09595a0a900d3893e7f6641430a
- MD5 18da7f6f3b60c144d65f615dc2f15520
- SHA1 ea2c97113ddd530dd0280058e356cccf96bc851b
- SHA512 354526ba46c432dcb5221516be5af27bd348f0ef0fce1f092ca274d798cccd62e5878ae868c3234b052599e0a4836e6e2038b09a3815260f84c12ec2c4c89d43
- SSDEEP 3:LstlNllkll/lVOlb+/ll:LsX3lEty+//
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 120B
- SHA256 ad8e528cc86a304fa1f6beb45bdf3c31eabf2c0fa9923e39c037cad2183128d8
- MD5 efad7a7745a2ae5577198c9dcdb4ce75
- SHA1 2819fb411c07ecb22ed1943572591b1dd60f145b
- SHA512 7a71a8b33512b6f2fca249a191a8f69ad06cf64fab3e824d474044c09f004ef02f31bcf98269b27ecbf1b0b4be6ebdd8cb0eac41791dee41d6d144565fc8c99a
- TLSH T1ACB0125000C90933CF010E30AAE5780275370910513B1F0380D45273800ABF55293841
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 96B
- SHA256 fea2eb75f67244895ea13abbeab84fb8789cc99d525f0b509ee9ba282e6c628b
- MD5 0e26d906ae41cf1668917099de169c7e
- SHA1 4310fc6c2ed5c2e8620c73e7ba0c7a4ffaede036
- SHA512 53e406a570ec2bdaa5fd924934713e17c8494db61aa9c2363914a0b3a89546d7b5fecc777167a2e37f3cddfd99a08f1870b08c1198e0b9f1f55338f7923077c2
- TLSH T1D5B0125000940513CB811734509C140131260C1001110303D0E56260401EBB84327881
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 cb741ab8d63c331223872029a77f2644f446eacf37a20cd701cd956254643013
- MD5 5f924584250fe6dc82a1ed21538a7401
- SHA1 8dd5d4c9ea8bdd0d45b0c33ce681e254f3994e0d
- SHA512 e876ac1e79bab614bc748fa1a092dfe122c6e9cd2f707df7bcd5a3db2fcd3d4dc51d430923037df018f81dec4004be3bb58059a519a3fa1ee2656aca39042d05
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\DawnWebGPUCache\index
- Size 256KB
- SHA256 cdf80ec973753544976c51329c767250736cf371f76deb9a3b3ba614c5080967
- MD5 b81707365ef60fb3db86ff1103c47a88
- SHA1 94c0b2397f4583a126f78e81f725d7ed4b8407e6
- SHA512 607bb77b8d5b170201259e15e766841097a32c8faf8244f67ce7bdf24406bcdee26665eee10fba4238bf44f1146b8e267b6f229afbbf44bb24466be31430eb60
- SSDEEP 3:LstlNllkll/lxaB+/ll:LsX3lEtxaU/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\DawnWebGPUCache\index
- Size 256KB
- SHA256 4255df717f9113cd8689939af7c6f58ca9a699ea3816d2db43fc7350d1cce1e7
- MD5 5de0c419c4c49291553f9a1dafc81d80
- SHA1 abdd1a17642543a2064109928dc7cfbd0b59abfb
- SHA512 18fd848aa59ad167848971d1e1885683181ad7a468b311836f7f9fbb23cb20d6b98369c2f21679f4a84d279734ebc1aca58a3625580bee92978f171aa6894cf3
- SSDEEP 3:LsOllllkll/lxaB+/ll:LsUlEtxaU/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Extension State\LOG
- Size 301B
- SHA256 2f4dbd12b13e298d6b8076bc9c795d6118443145b49d9b5f982952a67507e116
- MD5 eaac6edade576a25d0f8ad5fcbb6979d
- SHA1 e6fe45d1cd403a3eb3ed4eaa039bc103683c935c
- SHA512 a0ac099a9d2f271449a37aa7d568fe1a799cb6f9bbd5df5f95bcd09c8ec1a6b7279acf7e56cf75419932d4a97c10f9a65865dfc5ff2bf365ccadde05ed076532
- TLSH T125E0CD0654D9C62645484DA74EBD132AC7766044B7943B5D1BFDE984304E08CBCA0700
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Favicons
- Size 20KB
- SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
- MD5 babd43551f1b29eb82e221460676126a
- SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
- SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
- SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
- TLSH T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\History
- Size 184KB
- SHA256 75940997a06061d025dd0abb9c87c300f8037fbaa86c851f44933d138cbd6783
- MD5 9d063ad003c7b19345309399bf33d7b3
- SHA1 15dad2935b5b80abbe5886f702352e94a302ce2c
- SHA512 6f081094f1aee8dda634360c7d03cef243bf912c875306ba811072741cb5f291fad2ce8a4cbdd07ea28429c7d9f58873f71e4de74c8c0b520a500476640d1adc
- SSDEEP 96:HB54pVZq5ejzH+bF+UIYysX0fxQp97vEHt/DfLjLqL/EbgI4VgNr2jWRk/E0Uy:HBupjH+bF+UI3iWGVvWN3qL/bVgZQW3W
- TLSH T185041C1E1F243202CDBD923669E749B3597DF03F8B136A856C6108B5CEE2656B02C5FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\9987f2c7-a457-4196-99fa-f6f67ea7dfb3.tmp
- Size 188B
- SHA256 776a6fa9bfc3e2434c115ab83b3dcf7137fd59af22610067b2e3bb1f8f46601f
- MD5 f5454d941eaa97c331a54672459360a3
- SHA1 b2975a4c1c455f38307fe7c853c8dd49ad7cf467
- SHA512 36031ad6cca4dd851d0a1b243f2ea6ae8ddb8097586ffb08e48aa673418700c220b6b1b5954175b12024339b8a4f0947d4f0ba6193834b315d6e6c8e2a69c4aa
- TLSH T14AC0226202ADA4B610380E210988AD80AF36A0340042E4EC8187022D60800765503062
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Reporting and NEL
- Size 36KB
- SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
- MD5 fa739570350b78ef09e5d8ca61d0d71f
- SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
- SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
- SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
- TLSH T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\TransportSecurity
- Size 188B
- SHA256 6ad9301a0013bf5955174fa0e4752cc0069f25ab348ea15cfdafb995a42be9f5
- MD5 2aba9433429b284b19a99ff07264d860
- SHA1 366e4420656160cb15360f753e2e39cfe0a350f0
- SHA512 61a55810b808d8b95f76f8a980fe9fb931f5177cddcfe6444fc0bfbf3ed6cbab33121805524cea368c25bed1db426e2f5661674b21a09c003db80aa5032be38b
- TLSH T185C022A1006DF1F210390E210A806D80AF36A038424254EEC183832C508007B6203062
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Trust Tokens
- Size 36KB
- SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
- MD5 4203aba60fd9de5b4232fc624db3f817
- SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
- SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
- SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
- TLSH T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Preferences
- Size 6KB
- SHA256 e1e7e15d449067a5c36fcd43102c8334e6557be6ed57fa69f126725ff58e2ff1
- MD5 cf9603ffd41c6e5ec364d83435c55dde
- SHA1 6f9ed02db926427426d92219ca56c3731ab9d2f6
- SHA512 e19e41ca3505383b7f00607a91a019c2642d1097161862aa92be390f019ee6cb577b9040ec1f49e6bf8ea9960ca281df26d6262b2f05431a8bf91fc9f78ee661
- SSDEEP 96:st905i+mYX/b9DffqrdZ8i0vhE0kthm/7qx+WVHMSm+uecJHDMk8dQjZ+gSAzQK8:st90UzyfKZ8paXk/S+WiTHDQdoXMK8
- TLSH T110E1B8166E68A93B4CC7F6197A35BF52D2FA206265C41F98EBFD891C04D66CC220790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
- Size 20KB
- SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
- MD5 a156bfab7f06800d5287d4616d6f8733
- SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
- SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
- SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
- TLSH T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Secure Preferences
- Size 6KB
- SHA256 2af9414d75ed3dfeb087a5b7140250a393e014633fe602386b5c47b9aa1639f0
- MD5 8bfec5493c2e26795c72e5cdb20cee20
- SHA1 0d3b6557d89feac6ffd19ce3e4d91bee7a38fc10
- SHA512 10c8ca77a243ca2c6803859327fe8840e10a0617f04b782606e305fddc8580295de88f02869fa99c877676ea604bf9ff4d2b0a87fa865995111dfeca6c3f3f8b
- SSDEEP 96:HlGiSPlf/ROoKOpkF5d1Gin7sMaTEv9V5h5pg5+eeM1OZpESI51gs:HB+WGKD9llZp/Ibgs
- TLSH T1BCD1E8AB05ACC9346F448EDADC393ECB99A640DF8CD54C1A97E2C04807C1EFC21DE485
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 48B
- SHA256 1d243db4490d50a57609e16f84236f493387b503e4f7fd18c9b9cd1a592f7629
- MD5 d8836c352b9cfa74acf68508c981046a
- SHA1 416a0e9e2f737127301f16ea7d581710c9eb12cb
- SHA512 ff26cd038e97cbf5168214e3b9480d62d102bc428194db59d6ae2fd433cfc473b621f5fef6fbc895408904caa404f4b706b0b46707f751b9a8d2aeeb1de683d3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\db
- Size 44KB
- SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
- MD5 b581f0ff8f8aa3371ae47b48c95329e8
- SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
- SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
- SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
- TLSH T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\SharedStorage
- Size 4KB
- SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
- MD5 b9263bbf24428aaca95d04d04f3aeb6f
- SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
- SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
- TLSH T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\000003.log
- Size 112B
- SHA256 7fe8a40c2636db94161ca2c2a1af1b2cd1050548f6e2af6305a318433cd34c4a
- MD5 80b0bc537f221e7998d2c694f6ce1a89
- SHA1 2e82cddabf364888b4a1018e61d75427cce5adc2
- SHA512 84a6133f86d120d5cd22738c42093b7fa2072c5946baf64a8260b86f02ecb2a2f40771f0cfdd7f0a247d377128e9efab0a5099e0918ff8561a4438d98cca727c
- TLSH T171B012887B40912BC0E80F3D0AD4C7A0A360E20379415D0348448F210EB63E4BE018E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\LOG
- Size 329B
- SHA256 3f009fc634a8d64f44e38261f0d96b68c4c4fcdaee026830c96ad275b76c9389
- MD5 8bdcff4a443519d232c47232f3738e60
- SHA1 7dd7a463d4ea2c7d50b4845adef02974a3c7d4af
- SHA512 0012075c2bbe8dd49d32959347cf4f8f17a3f1610bbf95eede9dc29c39e0d2e0e2a1a0aefae396e7e1021d3f3d32a36725c7e8b1f6f665faabf5332636e9ad7d
- TLSH T124E0201115C9C66F0185059F167DA31AC236E445F7E53A291F78F784310F44C7C91600
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\000003.log
- Size 46B
- SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
- MD5 90881c9c26f29fca29815a08ba858544
- SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
- SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\LOG
- Size 307B
- SHA256 e816e85f88eb4561ee942b10dbfda369b23bb04c18f4677d4f2bd895b8fd9009
- MD5 c0984c29035f9cfd67819ec1d658c45b
- SHA1 0f5634467ba3ea5c89f4f6a61e9a2ac87902ed90
- SHA512 049578b19d5eb250aed98421fbecdb5377a7c5888ac68fd6b2786a70eb9f6be06e6bc73b45d6b4c916e2d91f7cae1a878f0bd10b243dd88a7fd2224780c57268
- TLSH T1C3E0CD7A58C9C676494485D706BE633BC274D445F7D6375D4F78F5C4344E04C79B0541
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Visited Links
- Size 128KB
- SHA256 0767836148b4dbbd0f741dd0a2bb571df8d28269d0053ff8d0bff4b53d832415
- MD5 168fe8c68ca2bfe702649bbbb1856c42
- SHA1 8ec56e202c24e8594f87953f3420a908c41f8b21
- SHA512 7c91767d486f91f8584fe62e2b3cfab3a3ab0861113506e9bb418c3e9e04f29825a5ffc780f72f164ce27853cd582ff6a98d5ac28094224144818a7aace1c228
- SSDEEP 3:ImtVfuBQt/WRl1l//ll:IiVGBQ6D
- TLSH T1C5D3024159426554E089443C496255052475D98901269116076F2D02F1851D11D0BCA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Web Data
- Size 216KB
- SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
- MD5 4ebc7325aec489f53e4635ea414d14a5
- SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
- SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
- SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
- TLSH T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\b254024d-d219-4305-87f3-76b97c4892f2.tmp
- Size 6KB
- SHA256 e10439a7ec7be9e6576b05eb0b64d5b7b0a7b27eb43763a52e7e5c5b237da8d3
- MD5 f9a65aa4d84cf7fc82be564de84aa900
- SHA1 e3adf1916b4a03ce6a2540a028b1e83e605bff23
- SHA512 79c745e2e4d2b71655b6a1b565f3d64f57504032a408c5af75ae5b8b352c4915197e25a81e17c155a6a18c66627e3e53f5b11110450d07f9eef3b6ab5950ac99
- SSDEEP 96:st985IYXrbDDffqrdZ8i0vhExkt7Qm/7qx+WVHMSm+uecJx9OXdQjZ+goAzSMEB:st98S0fKZ8paY1/S+WiTx9qdodWM8
- TLSH T1F1E1C9179E68A93B4CC7F6197A35BF52D2FA206235C51F98EBF9891C04D66CC230790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\index
- Size 256KB
- SHA256 2dfd52b7a4d610cc22dccb4661a23ab82a1aae3cd163aae0380ac993ba8d5287
- MD5 add63749bd10d4253477f4c1e710dd2f
- SHA1 076a084b5315a4facbe18e5c8a035960a17c88b7
- SHA512 94e13bbb44cc4a8779567da64224654877e4c969051ca1acdd8c9ea7797f4e40f9724e800943b4151d7aed2b62639560598338c4f88c50ec2c2e2dd8a596f576
- SSDEEP 3:LstlNllkll/lzYuq/ll:LsX3lEtw/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Last Version
- Size 14B
- SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
- MD5 96fb5f155aee0f8cd88274656c58ca83
- SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
- SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Local State
- Size 1KB
- SHA256 c485dcf6bffc7d4890cf3ad321af31fa26aff20da9a9ca96e6d33de387625c47
- MD5 027230260a01692780c391bb6e1cdfd9
- SHA1 96b397e6b88a4ca8b4867a39bae4a24ea237480b
- SHA512 65347536734ac19bf83f5496a297230b1744927f6e4e0de4789d4304f973f50d5c003218ff18168df1fcc2c44a7475b33eafb301b066a4ddcb61a7221ff0ad52
- TLSH T1C321B7B7E8E96A769CD199447182FF872E20213761104F9C90DE060D02EFD8C993BC32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ShaderCache\index
- Size 256KB
- SHA256 0782553df9f8a6bb96a6b181b540d2c8c7d0a1461e50b3c88300acbcacd6936d
- MD5 8eec55885c8ff6c94fb50311286ecc2c
- SHA1 bef967133c228ae736d5c1787fff0492d982d5be
- SHA512 c0cb6518f26f054f5fba9dddfa1f2b6e4ce6c59085cbea73e7c6ef3b4a21fca2936b2cb79594d9192fc935bbf4f1a40f739d4d7c17ed12e7f7bdf37577c693bf
- SSDEEP 3:LsOllllklkXlZvKtll:LsUlPYt/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
- Size 34B
- SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
- MD5 cd0395742b85e2b669eaec1d5f15b65b
- SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
- SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
- Size 66B
- SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
- MD5 bd493e5a161e6d66c7253da476ecb4b6
- SHA1 4ce1686e9532aa7190f90457cc648bd55e1a8bf5
- SHA512 ae673a5aaf2d5c73eb3a0331cd9dc6b7d8d481aff6afb3015c745079debe10a73c089026c2c614bd847d3d364bcac6e6910f896e785225d88ef81a98ac24c15b
- TLSH T186A022E2E8F3B8802CA0200C08CB32C0A022B3E300800EF8C0000E8C02A2C2CF020AA2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Trust Protection Lists\1.0.0.38\manifest.json
- Size 132B
- SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
- MD5 c9209ab189a035569ba3c65d7375d220
- SHA1 1987aaec8f436325415fe36c168c9a37829523f9
- SHA512 60495e096f78de05c6025a9d7b69aef9dce0d08ec1abbd4ccba206827a8c25d8449f54f93637599649762ec09a034d32fc8afc06199b1b57cd010ff1a0c850c0
- TLSH T17FC092615802797A14DEB7F00D29CB926AB3CB2E18A4650546F5C228ED2DCDFB5B330B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Variations
- Size 86B
- SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
- MD5 961e3604f228b0d10541ebf921500c86
- SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
- SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
- TLSH T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
- Size 69B
- SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
- MD5 fb0d9796a86299d3689982f7a949dc6e
- SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
- SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
- TLSH T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
- MD5 SHA1 SHA512 TLSH