7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Size 27.9MB
Sample261113-sqlx5ac16r
SHA256 7e19013a3252b4522897eb30c388767425009bbc3de82680613317ebaaa140c0
MD5 29958aa35778d835adc2fd4e48a0d4b7
SHA1 c0f5aef59c44f08cc11f11c4a133bd1cb3419db1
SHA512 9ce1193c87a8d508768cc2f5b01c718e37efed4ad77deba5b4173eacdab4cc5f94e529a569a67357649cb5294066197d1bfc7a1df1ab71be9e74bb9ef5b023f2
SSDEEP 393216:SpF3oRwYF6Z8u/vZNlbNlRmvN6Qjl5MmdTL+dhxbn:5R28EGNvjPtgDxb
TLSH
T172575B257A5B99ADC15AC4B0C38A46A31E6130DB0B35BAFF44C856383F79BF41F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5756	ZeroLauncher-4.0.5-installer.exe
5952	zero-launcher.exe

Loads dropped DLL 5 IoCs

pid	Process
5756	ZeroLauncher-4.0.5-installer.exe
5756	ZeroLauncher-4.0.5-installer.exe
5756	ZeroLauncher-4.0.5-installer.exe
5756	ZeroLauncher-4.0.5-installer.exe
5756	ZeroLauncher-4.0.5-installer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	zero-launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_541883083\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_541883083\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_541883083\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\model.markov	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	zero-launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	zero-launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ZeroLauncher-4.0.5-installer.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies registry class 25 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\DefaultIcon	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\shell	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell\open	ZeroLauncher-4.0.5-installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\" \"%1\""	ZeroLauncher-4.0.5-installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\URL Protocol	zero-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\DefaultIcon	zero-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\DefaultIcon	ZeroLauncher-4.0.5-installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe,0"	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero	ZeroLauncher-4.0.5-installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\URL Protocol	ZeroLauncher-4.0.5-installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe,0"	zero-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\shell\open\command	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe\" \"%1\""	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\",0"	ZeroLauncher-4.0.5-installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell\open\command	ZeroLauncher-4.0.5-installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell	ZeroLauncher-4.0.5-installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\ = "URL:com.launcher.zerolauncher protocol"	zero-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell\open\command	zero-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\ZeroLauncher\\zero-launcher.exe\" \"%1\""	zero-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\ = "URL:com.launcher.zerolauncher protocol"	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\URL Protocol	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\com.launcher.zerolauncher\shell\open	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero\ = "URL:com.launcher.zerolauncher protocol"	ZeroLauncher-4.0.5-installer.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\zero	zero-launcher.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5756	ZeroLauncher-4.0.5-installer.exe
5756	ZeroLauncher-4.0.5-installer.exe
3172	msedgewebview2.exe
3172	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4952	msedgewebview2.exe
4952	msedgewebview2.exe
300	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	5756	ZeroLauncher-4.0.5-installer.exe
Token: SeImpersonatePrivilege	5756	ZeroLauncher-4.0.5-installer.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5952	zero-launcher.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 5788 wrote to memory of 4952	5788	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe	88
PID 4952 wrote to memory of 1256	4952	msedgewebview2.exe	89
PID 4952 wrote to memory of 2276	4952	msedgewebview2.exe	90
PID 4952 wrote to memory of 2276	4952	msedgewebview2.exe	90
PID 4952 wrote to memory of 2276	4952	msedgewebview2.exe	90
PID 4952 wrote to memory of 2276	4952	msedgewebview2.exe	90
PID 4952 wrote to memory of 4332	4952	msedgewebview2.exe	91
PID 4952 wrote to memory of 1648	4952	msedgewebview2.exe	92
PID 4952 wrote to memory of 1648	4952	msedgewebview2.exe	92
PID 4952 wrote to memory of 1648	4952	msedgewebview2.exe	92
PID 4952 wrote to memory of 2068	4952	msedgewebview2.exe	93
PID 4952 wrote to memory of 2068	4952	msedgewebview2.exe	93
PID 4952 wrote to memory of 2068	4952	msedgewebview2.exe	93
PID 4952 wrote to memory of 2068	4952	msedgewebview2.exe	93
PID 4952 wrote to memory of 2068	4952	msedgewebview2.exe	93
PID 4952 wrote to memory of 4228	4952	msedgewebview2.exe	94
PID 4952 wrote to memory of 4228	4952	msedgewebview2.exe	94
PID 4952 wrote to memory of 4228	4952	msedgewebview2.exe	94
PID 4952 wrote to memory of 4228	4952	msedgewebview2.exe	94
PID 4952 wrote to memory of 4228	4952	msedgewebview2.exe	94
PID 5788 wrote to memory of 5756	5788	2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe	95
PID 5952 wrote to memory of 300	5952	zero-launcher.exe	98
PID 300 wrote to memory of 6076	300	msedgewebview2.exe	99
PID 300 wrote to memory of 1284	300	msedgewebview2.exe	100
PID 300 wrote to memory of 1284	300	msedgewebview2.exe	100
PID 300 wrote to memory of 1284	300	msedgewebview2.exe	100
PID 300 wrote to memory of 1284	300	msedgewebview2.exe	100
PID 300 wrote to memory of 3368	300	msedgewebview2.exe	101
PID 300 wrote to memory of 1376	300	msedgewebview2.exe	102
PID 300 wrote to memory of 1376	300	msedgewebview2.exe	102
PID 300 wrote to memory of 1376	300	msedgewebview2.exe	102
PID 300 wrote to memory of 2904	300	msedgewebview2.exe	103
PID 300 wrote to memory of 2904	300	msedgewebview2.exe	103
PID 300 wrote to memory of 2904	300	msedgewebview2.exe	103
PID 300 wrote to memory of 2904	300	msedgewebview2.exe	103
PID 300 wrote to memory of 2904	300	msedgewebview2.exe	103
PID 300 wrote to memory of 3852	300	msedgewebview2.exe	107
PID 300 wrote to memory of 3852	300	msedgewebview2.exe	107
PID 300 wrote to memory of 3852	300	msedgewebview2.exe	107
PID 300 wrote to memory of 4492	300	msedgewebview2.exe	108
PID 300 wrote to memory of 4492	300	msedgewebview2.exe	108
PID 300 wrote to memory of 4492	300	msedgewebview2.exe	108
PID 300 wrote to memory of 3172	300	msedgewebview2.exe	109

C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:5788
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5788.5020.16651443905123009238 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4952
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff9dc495fd8,0x7ff9dc495fe4,0x7ff9dc495ff0
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1700 --field-trial-handle=1732,i,1200889660335205688,8272694691964859326,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
    3⤵
    PID:2276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1732,i,1200889660335205688,8272694691964859326,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3040 --field-trial-handle=1732,i,1200889660335205688,8272694691964859326,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
    3⤵
    PID:1648
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3288 --field-trial-handle=1732,i,1200889660335205688,8272694691964859326,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987 /prefetch:1
    3⤵
    PID:2068
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=2026-11-11_29958aa35778d835adc2fd4e48a0d4b7_akira_glassworm_remcos_rusty-stealer.exe --webview-exe-version=3.0.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3964 --field-trial-handle=1732,i,1200889660335205688,8272694691964859326,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987 /prefetch:1
    3⤵
    PID:4228
- C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-6HjR20\ZeroLauncher-4.0.5-installer.exe
  "C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-6HjR20\ZeroLauncher-4.0.5-installer.exe" /S /UPDATE /R /ARGS
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5756
- - C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe
    "C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe"
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Reads the TCP/IP host and domain name from the registry
    - Modifies registry class
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5952
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5952.5712.5825995153216051927 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:300
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView /prefetch:4 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1cc,0x7ff9dc495fd8,0x7ff9dc495fe4,0x7ff9dc495ff0
        5⤵
        
        PID:6076
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2060 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        
        PID:1284
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2264 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        
        PID:3368
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2364 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        
        PID:1376
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3484 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987 /prefetch:1
        5⤵
        
        PID:2904
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4516 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        
        PID:3852
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4444 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        
        PID:4492
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView" --webview-exe-name=zero-launcher.exe --webview-exe-version=4.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4584 --field-trial-handle=2064,i,16480380898237328596,4060180869583222108,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:6ab9ddae31f42f109363fd411fddea612debe987
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ZeroLauncher-4.0.5-installer.exe

Path C:\Users\Admin\AppData\Local\Temp\ZeroLauncher-4.0.5-updater-6HjR20\ZeroLauncher-4.0.5-installer.exe
Size 28.2MB
SHA256 99c50be140ed0071a70aa97ac87620a4c05c7d73bc7ace87ccaf7f8770b873cb
MD5 b3568ceda4f90e4a91e8671ba1c0e0db
SHA1 ecc3c4ca1336fc4193687f093ecada0e0d5c96b1
SHA512 b5c5fc531179947e4168dff26526d671f059f25886c0a503843aae6e786979a37db05480c2ff1d3fea92c0474aa335059e683bad9fd7515ca5260d863e5e9b47
SSDEEP 786432:dMPFeAwOUMYaujop6eFQKFTvi1V2JNjQGYvzeGZoWpHZEMv:dfgdyGygTkVIMGSeGZ7H/
TLSH
T1AC573368D7F6625BE81A51F3476D6C383EDF0699DEB8E51A140EF62438EF0888350E1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn21E3.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn21E3.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZeroLauncher.log

Path C:\Users\Admin\AppData\Local\ZeroLauncher\Logs\ZeroLauncher.log
Size 463B
SHA256 8e511616d5101a1d0d288db04ff667042df0c696963f5ef672e2f7c5cf0b6baa
MD5 39d8299cdfea0df058130a50b0ca7bf3
SHA1 ad78fd60f93e9bc81a98f380aae3b4fba908b643
SHA512 cc89a3cfc467135df7c6a051d8d3b543729dff07a56a4033fd7706351fc8a7019e10cec72a40641f319eef20b150cd5c3512e721c165bbcab1caab9ed2036c68
TLSH
T19CF02E4900F294569DE87540402F27219471E133B1CC56FC79D1978C0846C56ACBF4FF
MD5 SHA1 SHA512 TLSH

Submit Download

tauri-logs.initialized

Path C:\Users\Admin\AppData\Local\ZeroLauncher\Saved\tauri-logs.initialized
Size 9B
SHA256 194e7da6caff47cb8903aa9558035bef0a72f548777dc653aac4fee9cdd7decf
MD5 2381745ec30d6e71ee91b3e182800ed7
SHA1 c676bb23f7c5e052bf667c0ee01c2cb7b9766fa7
SHA512 03ed4eba6a5ac77380b84a066fcaf9f7ba0b44b521adfcad9cd3080333f4d14c7ed468bdfb6c668a56a7e26f07baa191661b7e62fd45ebcc0f586681475d9f03
MD5 SHA1 SHA512

Submit Download

zero-launcher.exe

Path C:\Users\Admin\AppData\Local\ZeroLauncher\zero-launcher.exe
Size 43.9MB
SHA256 66eabd4fcc52ec6a65830ed8322aaa86d9672b9ca75b280ea9c03cb8d7fa301e
MD5 36cdcea56646bf7511c7b66984dfdfa3
SHA1 0820696f60e871804f7fc23be3c33fd8e18ec55f
SHA512 c9c9390cfed8e57b00be87eddfcf44a6b8b81b44db7217cc5f7b1c63dc2ecad926df2c5305e35e149dbeaf645838d57bfe7f9d8130cf9c5de333c3ca689d1d01
SSDEEP 786432:dqMwIDWqdajAm1QFLsmuM44Mu4jzK3Jrhq8jEZMmH2EmyccgdUMey:0XQKmhwu4cJrhhjEZmAsUM
TLSH
T1B2A79D257E5B99ACD19AC470834A8A631D6130DB0B35BAFF44C496383F79BF46F38258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c484e2b-4774-4802-988c-0b3d5c400d47.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\3c484e2b-4774-4802-988c-0b3d5c400d47.tmp
Size 5KB
SHA256 cd19add741870678eef0135bb73420e3f90902d8b15ce45c3c42d3018786a6d6
MD5 13c10c717f5309245e854c9e836a69e4
SHA1 31972a954911e9d3e2db72c5187197d258f90854
SHA512 3f6ba545829cd0fae3676f5d9fd5f94f918cbdc070c1bc71a02a1ebb17efcc45e9d68a31f47bf19029b67ffa44e1b82f36406e6e9ba839b62661507777b95bc7
SSDEEP 96:7Y5B3NkGSCHfmYVR9/l8kh/cI9URoDotoN5hnRBEyc6ryZKVZlTC01C9V6rjBvra:7Yr3NBShYVeoDUaRnEyN/RfBk
TLSH
T104C1E73769B1AA334DF3E909B9063B479764A1A3E8C43FA4D6EC1F1E01DB2891381C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64cfac58-2e10-40e4-a917-89d2f964d8c4.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\64cfac58-2e10-40e4-a917-89d2f964d8c4.tmp
Size 6KB
SHA256 3913aef28950c449c47ebef18c1e3b372e5f540121f8b2d0d8c1f779110de4ee
MD5 7324b63bb393794e14bf78e08019f2b2
SHA1 927141864300ad184047a64e7f3257030c1d1c79
SHA512 82bdb762e435157e608356869596e58b7d3fd5c8cc687673deeddd47486be0e1b5e00146b36df7815dbd9283cf714d11aca3a1d15c4e8aa2a6c4d78bc4bee5f8
SSDEEP 96:7Y5B3NkGSCHfmYVR9/l8kh/cI9URLl8DotoN5hnKBEyc6ryZKVZlif01C9V6rjBy:7Yr3NBShYVeiDUaRaEyN/AUBMBDz3
TLSH
T171D1F93B68A5EE734DE3E509BA293F4767B491A3D8C43FA4D5EC1F1F01D62991382812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
Size 118B
SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
MD5 acb0c12cc7e5345764763e37bcebbec8
SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
TLSH
T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9149069ba52597cf5aeb7643bf7886e03024bea6c2d3fb91330e93e849402a11
MD5 4eb426253d9b2d73be44bf8e41a838bc
SHA1 e46462fe0bddd04838e0637fa0f19bf7a49ac165
SHA512 f668cb6de1b3aacb0fa0068f14bdab87e991b2e756beee60ea89e98821e3c1663868f44efa7aa2050804c6a1518f60ff3623d5559593333f66cf58216ec131b9
TLSH
T16FD0121632014674C01074330006661D0841C20B804684499C38A51D2E544700A0F441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c6b9ebbcd4abf6e2f2244886002a6a9432d7c76fab8a8ac839878dd6e1337da2
MD5 07783242a723caa54c93d6584612a9d5
SHA1 c48f94c4b9ddf48a93267f7ade6b7ac9cb254ed2
SHA512 60f033f241152b0f108c72f688fe226d0912ae35310858be333883193aa25a646bef4ac6dd8be2b61198c57485fc5ea30c584f7a72457d08ee458a6a0e817249
TLSH
T147D02B0F31514628CA24F532110D1A8D0681C60B90828597847CD91E7918034060F481
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 36b4708ac86e72d893431c527dc54af222544e354a6a485b83b6ef46fdf73add
MD5 8fb2cde8d3bc303a4eccc8e301e7e0e6
SHA1 c655f499a6332a682889c4e9f45ac51cc0dabc2b
SHA512 a63f864ff7c3527aedf8adf6fe2a6d076981bd6219c71a89273d96dbbce968e98a1d5161c1d3825c5eb48b76668f99e37893e2e59192749aede2db723373f2e4
TLSH
T1E6D02B0F31514228CA24F631110C1A8D0781C50A90828697847CC92E7D18034064F481
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a062f07d7a18d270ed718afc88d83dedec1679b5d8b0e1240aef12b304dc2e3e
MD5 1c6fcd21b2ba7b6efcde302f2bcf4769
SHA1 f2432127e32ab13ec76ae95035937a93b63f76f9
SHA512 5e06ac159ddbca811e0795c318b90c56fcccbc7736ece9d88554f8961331d2ebbbc6158f8589b8d715879cc0a09457ebc7ee7555c86ac2022e7e2dce44ed2b90
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 9a31181a3a876b24a73d5ac44129f7462a7f6704e39f7839a656199ad6314c3b
MD5 a187f292eb64956e735c229d4ce70736
SHA1 bf6fcb512063c48ace457fa0a89b1fe25ea0758d
SHA512 4856a093fef5d23535e24fbb149f5951014c2f158e78fd062f3c5e2a4bf8833c36ac1fa47538ca041742bd620b73f8b0796c57c699182da27b7a5c211d156abc
SSDEEP 3:LstlNllkll/lYaB+llll:LsX3lEtx+ll/
MD5 SHA1 SHA512 SSDEEP

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 05cd6b2b3b997471a13933ea63b6ec65ff1814d33611638bf0d62bf65fecae6b
MD5 220bd0f9f7e55a4d04436249d73aaabd
SHA1 0d47a9f0c940cd597ce2291bd9e58605d8af081d
SHA512 a421e54c40c6fe61ef7062f64cfe754b659fec78cfba33aa0723f1078054845e15255b1ce5d1eef5d0491a5769eb8dbaac0866b24b8f7bce9257c59ff9cab721
TLSH
T121B0016594980C13CA900274A7E2299135A609AAA1225B1690B8B2F49A1EBB1E60BE06
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 120B
SHA256 40d4b06bb5ba3c7da27b0e4c5b1cf2c630d9b3cd906c90b2186259923acf792f
MD5 53fec0e6129d3786275319b2e7835ad1
SHA1 2eb33382215112a8279d2b8a0813c0d2c411f6f7
SHA512 bede58a1c504a23b126e86d5b652555c7e0e917e3392248d3a189924148223c8b620b3d271a5881c03d6969d8b751440c9bc4987821e4ee4c7d47b4930085be7
TLSH
T12AB0121181CB2D0BCBD0033053D23D60343B042070361F0740F572A09A0AF72A687B4A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 de568b28a951c068acb3f3edc59f81fe63632669ff4c27343a71c90524ffcdd1
MD5 bcc3bd2e6d4e406780bca3f1a1d1518d
SHA1 4958f3b84a2e31a747e2e84428cb270cbc1c94fe
SHA512 9030701cb99f9399f07a3ca990d137fbac6f095c3e84c1aa28828626a0c98dcd1ccfc1fd18038ce36c370e5ff10dbe9100ed72b5ef87eee6a296c51157db7bea
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Extension State\LOG
Size 303B
SHA256 af8354b4bcaffa9727eaaec5a33027310dd274f6690e54e1cff04d0010ef7e86
MD5 6d95e2d4b1b4f605372592531143de41
SHA1 2e46ae91d4d0780f92870105b680e964fadce89a
SHA512 885bbf8c5b84678c9c7db952c615df5dcf4ccedbc81842f79e49abafc6e74764bf0254211a6fee10cf829ec4e82751fbc64c03c8d2df70f7822ad035f84ea7b9
TLSH
T1B2E08C4618DDC52B45588EA78ABE532ACB756049B7943B694BBDEA88308E18DB8A1600
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Favicons
Size 20KB
SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
MD5 b40e1be3d7543b6678720c3aeaf3dec3
SHA1 7758593d371b07423ba7cb84f99ebe3416624f56
SHA512 fb0664c1c83043f7c41fd0f1cc0714d81ecd71a07041233fb16fefeb25a3e182a77ac8af9910eff81716b1cceee8a7ee84158a564143b0e0d99e00923106cc16
SSDEEP 24:LLiXxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:iBmw6fU1zBmI
TLSH
T1AA92EE075E383407DBA10E7D266B187A8E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\History
Size 164KB
SHA256 da31bdf5896cbf94eecec4e3084bde29e17231a1053f463f68558b9dfba43461
MD5 5ca1fad0e559d05d56e4ebe8965338ed
SHA1 1f8dc1eac6302b610e7b4277fa10ac618ba8d915
SHA512 7965d9a0f8fcc210d1d5d20707260cb946da191f78f414ca5dab097a972cfa39abafa3dedf8e46730d39e0c39acf02e0a01ec8648744a2142dd63128ccedca21
SSDEEP 192:8BTsq8qL/tH+bF+UI3iWGV8XWNVVV63i8:iTR8qL/tIkUI3ijV8XWNAy8
TLSH
T18FF30A5E5F243202CDBD923669E649B3597DF03F47232A856C6208B5CEE2656B02C4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d972ced-e85a-4df2-ab42-4c263ec9716b.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\3d972ced-e85a-4df2-ab42-4c263ec9716b.tmp
Size 188B
SHA256 dcd71f227703acf17e84e6b15af2f20fb2d5d21c5bcb7b2daef868cb79db81ca
MD5 dd12c4cb52400ca45cbadf4e9e8ca5d2
SHA1 28a087c8256dcbdffd55e17b321290f1fe21b7fc
SHA512 fe2de9463d476861c78c901e6adba6035dc427f9300677de5ededb9eacbd754888b02be052f6e6b1e4e277cab752131367655e1a7a805585cae58fbb366aa107
TLSH
T1B5C02261007DA0B210B8063509C07D489F77E830008254E8C2930A2CA0802B75623052
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 10ce46995378459151b5a072d6ef1e54867ce57edcc1520ec6a0965b5ff432ff
MD5 5f080b35a2352f916d574e049ffa88c5
SHA1 bb4cdb42ea2c454bcb92fac028696d65b4b91697
SHA512 b9862a5ba6723d3859bb1baecc04df0bf14a3d6c06278fd7cfbbba2412fd0dc5dceca969a9e1fe967a8f29764cb800f475b3270f3d1c2868f56a2d1586125bea
SSDEEP 48:TkIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:IIEumQv8m1ccnvS6
TLSH
T169F2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF862A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 62d0fc6ed4bb7763277f5eba4755d378815e7931b6ce96874afdb14c93a0bab5
MD5 ca5a71d7cb0acc613a665fac68311dfb
SHA1 0ec76890154f9bd2006bead27f919b152159c040
SHA512 bc6853b379423dbed673810230d674fe54f6772221dff6a223ae812f423f0388aecb3941434b3f6176ea962cfbe2531f9ed02c3d5bcefba34b151dc9ef780f36
TLSH
T147C022A1002DA87220384A250A80ADC09F3AA034024264EC89A3822C51B00775207002
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Preferences
Size 6KB
SHA256 66b9e71f1bb686941d7e8a8ac6cfa7cfd1d554393749e5f0a385416143361e6e
MD5 e27f5ccfb3886fa89276b475722eedaa
SHA1 83baa1f945429a36acdb35b63aa8902b60aad525
SHA512 b2fdb6ef4b05f034744d72388a1573566b0d0ee8264152a1103bf5f4cce8d3683c4a7f98ceb1a3d46b6f291e6c2c06dd9a4cf1d5f961bfded7bd11c9ca924fd3
SSDEEP 96:rO/ddaOFb9Vk+mbdo5h16Z0ps7/x+6MhmuecJeqMkkje7K+gbBerI8XM1C7K:rWzTEonpsV+FdeqwjdPerg6K
TLSH
T1D2D184065E64A97F4CC6F519BA29BB43E2F9607235D42E98EBF8492C04D76DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 fe9cf574f0ec10d9089ad1a6e1643f6bb42365fdc518f83c5caf69bd5a084f0e
MD5 52d3205ebaf0fda15f8273ce47825a83
SHA1 2637c927910ba09c772c94bb91b9e4a3fec895b5
SHA512 5f917be0d314f339c2f6250db291f7e23d3750da5fe52169f8d0dbf60ce5206ab4fbba53d07cff0e26ca15070ce894507a1af65b13a26164ec5d29df3f3aa400
SSDEEP 96:vTixPlf/ROo1pkF5d13iU7VaTEv9V5h5pg5+e05rCR/S1hGnVcSM:25vjo9lZrCoLX
TLSH
T125C1B6E3052DC579AF445BEBE8387ECA9DA601CF88D54C1597D2C48802C2EFD21D94D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 843148fbaa0c863a63ded2cf00ac320a059b11e142c29dfe3084d6371c3a058a
MD5 e46a7589d26e86053dfdeeb3b948717f
SHA1 8bb0f42b5a1a9e210a550c615f21ee3f782a18ce
SHA512 f7543b57a53016aac73ce9e7be3516b4a1d45c7ce81a420406d3d00804c0b63b0595c263d871d06cd0d50ecc9b1c4f28fc2089b56e55a13c694178d85e22642e
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 7fe8a40c2636db94161ca2c2a1af1b2cd1050548f6e2af6305a318433cd34c4a
MD5 80b0bc537f221e7998d2c694f6ce1a89
SHA1 2e82cddabf364888b4a1018e61d75427cce5adc2
SHA512 84a6133f86d120d5cd22738c42093b7fa2072c5946baf64a8260b86f02ecb2a2f40771f0cfdd7f0a247d377128e9efab0a5099e0918ff8561a4438d98cca727c
TLSH
T171B012887B40912BC0E80F3D0AD4C7A0A360E20379415D0348448F210EB63E4BE018E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Site Characteristics Database\LOG
Size 331B
SHA256 129e3b5d8fc90f4f82ae7a0b89e2d79b2e23a3791ad12b3f614ff1ee70a00b1c
MD5 d694376ab1fc9ced3f23e302cc8b7bf7
SHA1 f048e1b89afea1a3ca592e86986bb914cdd93467
SHA512 c861f08c91b3f232809806426e5d56c0f150e83862ac217b09f78290b54d78fa4d43122b802181c10c4ffa378def4c1786d2e56a352bd7b9fe7a25534de36c0a
TLSH
T158E0201119C5C63B014906DB167DE31DC276E005F7E937691F7CF784214F48C7891600
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Sync Data\LevelDB\LOG
Size 307B
SHA256 9c98ce5af8a287ee8d159bd0f9d55b71e2a150c53a44f7c3373549af20612bd6
MD5 3c359bdd754327ced2dc3471872a937f
SHA1 fea4d87f93c2e4455c3af688b5d9bb8c84537cc6
SHA512 280ba6fb61f47ce97620dd8db4550b7ccd4efc28776d3a4503e8167f53c7f6f516cb290ab968341cce3f81b8da56c22445f9d7042a54567112c0cfe74bba66f6
TLSH
T1C5E0867254C88677454585D706BD536BC274A449B7D63B5D4F6CF688384F04C78B1641
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Visited Links
Size 128KB
SHA256 22be34d58284b26d7b2a7f3eda23e0f453ba92d1c4307b179b2cdfdbc8d080f3
MD5 7aa934f8202bd311be20ba0c10aec8fd
SHA1 2647def928329e5642182ba2b11bbb0a10342a9e
SHA512 bea778e83fbe242d00a4886f9ad888b0196917a288aa8d7e25cd864a2c1e464cbbf0b276e826dad94bc1b5ac1ec187235066ca4ef6dca39be79ba8a817ae1c53
SSDEEP 3:ImtVf7wlAElll/Uq+:IiVzwlDGq+
TLSH
T109D3020001164419D61103B80AF41919D53465251496A4025774965A419058F6102D31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\Web Data
Size 210KB
SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
MD5 de64b3487ba692a60d246d8fecc05bbb
SHA1 e2c1d6c0c2ef943be79fee667d2895d5579f279f
SHA512 13e75703aa5562b559896e564a264385fddfcde4ca29de673c1ba7582425776f51c6aeda5a324d89207b0d69b0c915284a1290577774220302a45d3b0fae8f1a
SSDEEP 384:FihpPI2DnEDsKc1IysvHEBMehIv0QKIqJOw:wzPDDnEAKc1Iys/LIIvfKIqJOw
TLSH
T1A724554A7B746100DDE2D9B21CB080771A3CB16D8F22E6925DB264694DF7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe4410ea-fc1a-4087-9a35-954f040811b6.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\fe4410ea-fc1a-4087-9a35-954f040811b6.tmp
Size 6KB
SHA256 40be6121721a978642ddf4922eb1873670e627b8850600429b4eed3b8d2ad864
MD5 f67a9747c8847e64668d03ae393ff45c
SHA1 8b2e26cdff8221740ea7450216d2e313f2108139
SHA512 da633b0e2a4094f83cf5e8ede69a7986ae0455f2204988def7f13fa2c7f9c0a6b1570b4d0644c51262df37c67f6047aabaa409096fa7176f1e323aa2a74bb58c
SSDEEP 96:stOXd6aOoR9bDVk+mbdo5h16Z0ts7/x+6MhmuecJAfOdje7K+gOBeP28XM1C7K:stCMqREontsV+FdAf2jd0ePG6K
TLSH
T127D184065E24A97B4CC6F519BA35BB43E3F9607235D52E98E7F8492C04D76CD6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\shared_proto_db\metadata\LOG
Size 319B
SHA256 899a743893ec39fa0fcb14185af24deb5dd7d38983e5596bacf8fd09e388de06
MD5 e303e23b4caee482b405b910c28f95bc
SHA1 5378f3b10755d2c3e538f62bce082a7e2eb07ef0
SHA512 faffe5215d49f9fa791eb22ae5b5f9c68c022e3792afa766b338724fadb5b4a4f6c1662b3f4f1358225c4d19c275cc351b0229534fe10a173dd2835b2f92f00e
TLSH
T125E08642B8D885AF4545469705BD53A9C2396489FBA43F6E0F68EF48244E88DBC96601
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Local State
Size 1KB
SHA256 b4fe4162bdb0abb06d2196db4d0ae780b00a51ba6b860e408009f3f46cd6dc93
MD5 743290012293f613d44cc5ce76b1598e
SHA1 3fcd802e14b56fe0924dbd8b3f57b2e84a0c7a9c
SHA512 8abe2cbbacf309a277f5d05d966ccdc18251a172e761addfa42cc0c7483bd1a74f809eae936af19f9223690c4400a74db0778c04e90ef32498f078c42e6f8d4e
TLSH
T1B121727394A45B32DCD6B30731073F970F2021BB91815E0091DD0E0E02E229D9795C33
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ShaderCache\index
Size 256KB
SHA256 9811a0e8dd744f4f6e67e796f6af680bb15f1cedf190af245c8ac483e0c34f57
MD5 cad722157f5d9c15c575c97562e97859
SHA1 8bbdca53d72032cc445b6c04b9b3fe9dc6527366
SHA512 2c99c06a055ca8297cad77b064003ca74d2df10bd0e83e2598861bc848931b2b11994af2f82cefe6af7493ff9475b41d7d2980c63ab9d263467bc197bf873b50
SSDEEP 3:LsOllllklkXl/PLlll:LsUlPrl/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

cf746b6a-dca3-48c9-8dda-72b8461417de.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\cf746b6a-dca3-48c9-8dda-72b8461417de.tmp
Size 2KB
SHA256 b8ced9ffba1259ef34529e0388feaec47c202dfd174dd42af58ea8e79f34a8b7
MD5 e09c379f71fee26f6c9c33c5752776e7
SHA1 d9cec9ceef0278b7c2d214b2d9cebc9d86291fb2
SHA512 2fdeab82cc27ed10176f726a72375c8bef3668630651293f2e1a0723eaefa9a1bf88f72fab49207061d9d6bb1f1425f5fb659b67d4335c25c95a34797f638306
TLSH
T1AB5195336864AA33CDF39609794A3F638B3561A2AE922F6089DD0F0D01D765D1381C27
MD5 SHA1 SHA512 TLSH

Submit Download

d0728e73-bfc3-4c11-b24b-75b497083ee7.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\d0728e73-bfc3-4c11-b24b-75b497083ee7.tmp
Size 3KB
SHA256 ed026287f688796f314da9b703c81108f58496b5692ba6286e67e6ced834fd10
MD5 515f2c2747d0a62f66aabf4aa06b45e5
SHA1 18706b47d06f1887917dc41ed50dd0cc6c27a1e5
SHA512 c35d472ccf57092cc98846f04db13c027f136a90a7fe6bd3a0e4bf3c9aefd1c26eac70d642174a04ba79e57224d6477b36b2fb6ca5acf7cc8fd051c9aab28c7d
TLSH
T1C46173376974A9378DF3EA05B98A3F16A7A56173E9C13FA4C5EC0E0D01D72981381C17
MD5 SHA1 SHA512 TLSH

Submit Download

e92474f2-ce78-4f8f-b507-142c358908dd.tmp

Path C:\Users\Admin\AppData\Local\com.launcher.zerolauncher\EBWebView\e92474f2-ce78-4f8f-b507-142c358908dd.tmp
Size 16KB
SHA256 15ee6c5373c3fda7b4d38fc169de1b50e59474836fe86e09bae17cba1d8150f4
MD5 6873646231c66b6f70002c478fde385c
SHA1 9bdcd1f3d20998a5bfd9f08ad995438aa56ead1a
SHA512 e4f72e933e67ea5a407d688af599666a43962b51cfb431add7d9924976eab17f392d943285b337772654f286bf519b6f519aa5392deee9833992418b5037495e
SSDEEP 384:s+OBqImmJvGBLx3NaFMJFQ3NBSiswl23BDzyg6r0:NcvGtlNQFsaY
TLSH
T13272AF7F2C65AE632CF7D509BB4D3B878BA162A3C4C47BE4D9EC9F0F115A1541392841
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_541883083\crl-set
Size 13KB
SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
MD5 5111ab39b220749a299b5bb7cd25c730
SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
TLSH
T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_541883083\manifest.fingerprint
Size 66B
SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
MD5 fa32cf839f99432676ca9acccd8a0550
SHA1 9a869d2475f9840495188509e12ce9ca5a9e7189
SHA512 b1e901d92adecc46f96f52ac38954688f0a2514710041109785656ffe694766448cdbafcda397e9edb196763997d952537ebfefb4e5d128954576024f8856c04
TLSH
T1C5A00216AEA0E812F29486DEC4254B6A14372BF9AE76008979E8E4819C87260815B8D5
MD5 SHA1 SHA512 TLSH

Submit Download

english_wikipedia.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\english_wikipedia.txt
Size 269KB
SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
MD5 c5b5e739e99f368b294af5d6341d79ab
SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
TLSH
T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

female_names.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\female_names.txt
Size 26KB
SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
MD5 65c6b77a97ccdb4f09402295c75cd151
SHA1 48d9de4e0c6ef8f29db7e3b69008d1e25423f333
SHA512 59608916ece278c8d6b518b9ac19f38b071acac1e8698be851a5e357b97a2e4c4dea4d122321f61e937fd2480e6041e78e97e01648098da194890895d7ea0dc4
SSDEEP 768:QLAlqUDcjeadVlvbnevUtIaBY30lzpoTTC:Jlq4Ceahn2HQqC
TLSH
T150C2EAF7EAA8097F748F890DC5893B604C58FA332C3658A59E698FDD42056D0DDA4F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

male_names.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\male_names.txt
Size 6KB
SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
MD5 ed2a7be8d1007adf88defbba6a30fb18
SHA1 f00e2d8892ff2808a81f50d360edc960bd8d51ef
SHA512 1577919e4654086ae6d673ecbb5e436ca2fdcefb30bb4f839fdcb545f3b3b102bb47e78ce6c4ba451bfd9cf6099eba35c765dcbdadbac80aeac3083dc095017d
SSDEEP 192:+qi/Dd0Ms6tPdSiuDvtnNdqfkKY1kqPgxC4Hb64:+vbLu5Nc8UqPu1b64
TLSH
T14BD1E8BAD2E43975AC9F058588CF2F41994C36337F321676E6B90AC94252A805ED0D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\manifest.fingerprint
Size 66B
SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
MD5 a346573314757c677ba7b22bf474c77a
SHA1 aec9bbc033bc1c11aa690a8c5ceab69324ec42e5
SHA512 8bfad9d06097a6571bf855b189d645a3f4913798fd6ff66fba00c90673f891901d03571ab57dddab2982591b60a8e6c27fc47f05a69f33da0e92ec49ef5fa43e
TLSH
T17DA022B02C230A0000C802002BF08C3308F8C2008C30232302CC38C0003C0C0F88CCC0
MD5 SHA1 SHA512 TLSH

Submit Download

model.markov

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\model.markov
Size 44KB
SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
MD5 2bb4fc702c8b59a0b518482f60a082c1
SHA1 ffdc0a063cdd51e4913df4e4917495abf7e486c9
SHA512 f6b113084bd43a1f1844102ca860efd8bcd363de3eebc8acf23f5744d74b191fdc92a601630eb8e602e93005a63b73a9cb3bf5de115e157a2b72eab4dd891c5f
SSDEEP 768:aRuG/TuKUqwxhRH6t9O4v2uoDO+L1kO5qNlFpIpJmfaLtk+Yg6qFw11/aeMgE3Uf:aRuG/SKoLH4vC9L1kO5qLAbJkE2/aeMy
TLSH
T15923F1B3D385DE3992E317B0E67D22A74BD21AA47ACEBB23492BDC4215F1C504254DBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

passwords.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\passwords.txt
Size 233KB
SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
MD5 13c1efee289d7ecc8a7e7bcc7ce47df8
SHA1 c2864b21ab8130e8cae66f1f19ac38723a7cf42b
SHA512 08df4c520a896ee26ef9b8f093b2e14b6e4af67f910f12d70270917df2d78a4666458386fc6e83258d84d24b03e517e39d7799225b41a6687278dbe9610ae537
SSDEEP 6144:EY19QF6DI5luckZEjoQKe8rbbIptoWfEYixiRG+GpAcBN:EY19QKI3HkZ1QKe8rYf3fEp0RDIAsN
TLSH
T164348EB5F6A03176E6CF464E580A3F058A9D37335D11589FE7B80788120BBD885BBE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ranked_dicts

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\ranked_dicts
Size 865KB
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
SSDEEP 12288:8WG0mOflZV35OtQm/b1Ed7pJPR3cjqKMjgP/pwH6sKFbEb3d4CPLsVQCcekWpH6m:k0m0lH35mVb1AJPtOl/06s6Wd4iBSsG
TLSH
T1AB15B071E714177E5A9F23AF98856B4546799302982204EAF7A6034D810BDCC63BFB3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

surnames.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\surnames.txt
Size 74KB
SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
MD5 64ffd4d0d29a84dbf99bddf1afe7e068
SHA1 f1c3703c60fa8ceb538a851acbeb2cc48e78243c
SHA512 d447a251bbc6b5da76b9327dca62d3a40d6e2ae5c59c35f9e7615be15e1e5eedcb7ec6d20ec48df33904851002c823501f9f3347dcd0e279f3fa86b00d050d28
SSDEEP 1536:HZQFhD0AAQnaaq6NE1f+oNh2MGfAoocKAPvY02+dhQ:5y5/LaZmoCJeoxbdK
TLSH
T169731A76E2B4383AE95F1B8D48953FC1C904D6338D10A1A5F7B906CAA047BC58DB5F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\test.txt
Size 15B
SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
MD5 29b933a8d9a0fcef0af75f1713f4940e
SHA1 9fbc3fafddca353898269a2f4069e4653083bcdb
SHA512 9751ea443fd632e147831566ccb822482220188993cd1269edbe98d2e2d69beb5fb4b631c5001f47491dfe7550cb68035267fae518f1ff119e465b54379389fb
MD5 SHA1 SHA512

Submit Download

us_tv_and_film.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping300_935056328\us_tv_and_film.txt
Size 159KB
SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
MD5 206a438724efc16dc8afa5a8984f05d1
SHA1 57225b5fb5cb51333fa9d79865f2393ec4445e42
SHA512 6a653e259d4f15c88145c820d1e3062194370459da34cb2cc49fbdc681e1bf3176501129640fdc1b635ea805c03ab85c8bc5169e23ef099975fe559bf284bbab
SSDEEP 3072:CwawB3H2+8PW7D0Nr45Wn9TkOijxjTBUCbws5d0hKS4D/ODGRtenXpMFU2c92C7/:fawBXbD0NEc9yxjt3bws5d9S4D2CnKXn
TLSH
T1FEF31930DB64353ED79B2BCEC8642F52415445321E3570B9FAAE0149180BF9E8B7AE3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1284-537-0x0000017A39860000-0x0000017A39909000-memory.dmp

Download

memory/1284-559-0x0000017A39860000-0x0000017A39909000-memory.dmp

Download

memory/1284-513-0x0000017A39860000-0x0000017A39909000-memory.dmp

Download

memory/2068-351-0x0000021FE3460000-0x0000021FE3509000-memory.dmp

Download

memory/2068-96-0x00007FF9FDD20000-0x00007FF9FDD21000-memory.dmp

Download

memory/2276-353-0x000002C790E70000-0x000002C790F19000-memory.dmp

Download

memory/2276-26-0x00007FF9FDD20000-0x00007FF9FDD21000-memory.dmp

Download

memory/2904-514-0x0000026D3AE90000-0x0000026D3AF39000-memory.dmp

Download

memory/2904-560-0x0000026D3AE90000-0x0000026D3AF39000-memory.dmp

Download

memory/3172-652-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-654-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-662-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-664-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-661-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-663-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-660-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3172-659-0x000001B20FC60000-0x000001B20FC61000-memory.dmp

Download

memory/3852-565-0x00007FF9FDAF0000-0x00007FF9FDAF1000-memory.dmp

Download

memory/3852-564-0x00007FF9FE600000-0x00007FF9FE601000-memory.dmp

Download

memory/4228-352-0x000001EE6DD30000-0x000001EE6DDD9000-memory.dmp

Download