766b8cee1e72377b2b12436479d637a8943e6a4e53f50b5af42ef9a70c1a65ec

Analysis

max time kernel
2721s
max time network
2753s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
11/11/2023, 04:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

EasyMC_Setup_v1.6.11_x64.exe
Size

61.3MB
MD5

d52bc1a559d8f0a4eeb42010276e0438
SHA1

f852c7456b480647b0f8cf0de923d9aade9ea9c3
SHA256

766b8cee1e72377b2b12436479d637a8943e6a4e53f50b5af42ef9a70c1a65ec
SHA512

4d6972e0a8820f296f8b179be7932d885bb2a9792352dd47ce4424a5a5cdf2fdbd279aa1337d4e7786ee860f490ab065381171ab40e6167a2bd43c5cf315d06c
SSDEEP

1572864:vO1g0aTp2u0HflkYr+p5N/2QWSuU7TZYfDY:vO1haTp2HCYI/HWfUXZSE

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-984744499-3605095035-265325720-1000\Control Panel\International\Geo\Nation	EasyMC Launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-984744499-3605095035-265325720-1000\Control Panel\International\Geo\Nation	EasyMC Launcher.exe

Executes dropped EXE 13 IoCs

pid	Process
3208	EasyMC Launcher.exe
1800	EasyMC Launcher.exe
4772	EasyMC Launcher.exe
1916	EasyMC Launcher.exe
4320	EasyMC Launcher.exe
484	EasyMC Launcher.exe
1308	7za.exe
4028	7za.exe
4400	7za.exe
2100	7za.exe
2544	7za.exe
3340	java.exe
3768	java.exe

Loads dropped DLL 26 IoCs

pid	Process
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
3208	EasyMC Launcher.exe
1800	EasyMC Launcher.exe
4772	EasyMC Launcher.exe
1916	EasyMC Launcher.exe
4772	EasyMC Launcher.exe
4772	EasyMC Launcher.exe
4320	EasyMC Launcher.exe
4772	EasyMC Launcher.exe
484	EasyMC Launcher.exe
3340	java.exe
3340	java.exe
3340	java.exe
3340	java.exe
3340	java.exe
3768	java.exe
3768	java.exe
3768	java.exe
3768	java.exe
3768	java.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
4864	tasklist.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies system certificate store 2 TTPs 11 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 0f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd67707390b000000010000001e000000440053005400200052006f006f0074002000430041002000580033000000140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589101d00000001000000100000004558d512eecb27464920897de7b660537f000000010000000e000000300c060a2b0601040182370a03047e000000010000000800000000c001b39667d60168000000010000000800000000409120d035d901030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c1320000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	EasyMC Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	EasyMC Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	EasyMC Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	EasyMC Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba9531400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b0b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f	EasyMC Launcher.exe

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
2636	EasyMC_Setup_v1.6.11_x64.exe
2636	EasyMC_Setup_v1.6.11_x64.exe
4864	tasklist.exe
4864	tasklist.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
3208	EasyMC Launcher.exe
1916	EasyMC Launcher.exe
1916	EasyMC Launcher.exe
4320	EasyMC Launcher.exe
4320	EasyMC Launcher.exe
484	EasyMC Launcher.exe
484	EasyMC Launcher.exe
484	EasyMC Launcher.exe
484	EasyMC Launcher.exe
2952	msedge.exe
2952	msedge.exe
4448	msedge.exe
4448	msedge.exe
1600	identity_helper.exe
1600	identity_helper.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe
4624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of AdjustPrivilegeToken 23 IoCs

description	pid	Process
Token: SeDebugPrivilege	4864	tasklist.exe
Token: SeSecurityPrivilege	2636	EasyMC_Setup_v1.6.11_x64.exe
Token: SeManageVolumePrivilege	4532	svchost.exe
Token: SeRestorePrivilege	1308	7za.exe
Token: 35	1308	7za.exe
Token: SeSecurityPrivilege	1308	7za.exe
Token: SeSecurityPrivilege	1308	7za.exe
Token: SeRestorePrivilege	4028	7za.exe
Token: 35	4028	7za.exe
Token: SeSecurityPrivilege	4028	7za.exe
Token: SeSecurityPrivilege	4028	7za.exe
Token: SeRestorePrivilege	2544	7za.exe
Token: 35	2544	7za.exe
Token: SeSecurityPrivilege	2544	7za.exe
Token: SeSecurityPrivilege	2544	7za.exe
Token: SeRestorePrivilege	4400	7za.exe
Token: 35	4400	7za.exe
Token: SeSecurityPrivilege	4400	7za.exe
Token: SeSecurityPrivilege	4400	7za.exe
Token: SeRestorePrivilege	2100	7za.exe
Token: 35	2100	7za.exe
Token: SeSecurityPrivilege	2100	7za.exe
Token: SeSecurityPrivilege	2100	7za.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
3208	EasyMC Launcher.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 764	2636	EasyMC_Setup_v1.6.11_x64.exe	91
PID 2636 wrote to memory of 764	2636	EasyMC_Setup_v1.6.11_x64.exe	91
PID 2636 wrote to memory of 764	2636	EasyMC_Setup_v1.6.11_x64.exe	91
PID 764 wrote to memory of 4864	764	cmd.exe	93
PID 764 wrote to memory of 4864	764	cmd.exe	93
PID 764 wrote to memory of 4864	764	cmd.exe	93
PID 764 wrote to memory of 4284	764	cmd.exe	94
PID 764 wrote to memory of 4284	764	cmd.exe	94
PID 764 wrote to memory of 4284	764	cmd.exe	94
PID 3208 wrote to memory of 4480	3208	EasyMC Launcher.exe	130
PID 3208 wrote to memory of 4480	3208	EasyMC Launcher.exe	130
PID 4480 wrote to memory of 3116	4480	cmd.exe	132
PID 4480 wrote to memory of 3116	4480	cmd.exe	132
PID 3208 wrote to memory of 1800	3208	EasyMC Launcher.exe	133
PID 3208 wrote to memory of 1800	3208	EasyMC Launcher.exe	133
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 4772	3208	EasyMC Launcher.exe	134
PID 3208 wrote to memory of 1916	3208	EasyMC Launcher.exe	135
PID 3208 wrote to memory of 1916	3208	EasyMC Launcher.exe	135
PID 3208 wrote to memory of 4320	3208	EasyMC Launcher.exe	136
PID 3208 wrote to memory of 4320	3208	EasyMC Launcher.exe	136
PID 3208 wrote to memory of 484	3208	EasyMC Launcher.exe	138
PID 3208 wrote to memory of 484	3208	EasyMC Launcher.exe	138
PID 3208 wrote to memory of 4448	3208	EasyMC Launcher.exe	140
PID 3208 wrote to memory of 4448	3208	EasyMC Launcher.exe	140
PID 4448 wrote to memory of 4276	4448	msedge.exe	141

C:\Users\Admin\AppData\Local\Temp\EasyMC_Setup_v1.6.11_x64.exe
"C:\Users\Admin\AppData\Local\Temp\EasyMC_Setup_v1.6.11_x64.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq EasyMC Launcher.exe" | %SYSTEMROOT%\System32\find.exe "EasyMC Launcher.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:764
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq EasyMC Launcher.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4864
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "EasyMC Launcher.exe"
    3⤵
    PID:4284

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:2656

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4532

C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
"C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4480
- - C:\Windows\System32\reg.exe
    C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
    3⤵
    PID:3116
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\easymc-launcher /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\easymc-launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=easymc-launcher --annotation=_version=1.6.11 --annotation=prod=Electron --annotation=ver=16.2.8 --initial-client-data=0x484,0x47c,0x490,0x444,0x4b8,0x7ff68b6229d8,0x7ff68b6229e8,0x7ff68b6229f8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1800
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=gpu-process --field-trial-handle=1688,11703312152181607162,8802951199749367078,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAABAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1696 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4772
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1688,11703312152181607162,8802951199749367078,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --standard-schemes --secure-schemes --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1812 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1916
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --standard-schemes --secure-schemes --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1688,11703312152181607162,8802951199749367078,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2396 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4320
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe" --type=gpu-process --field-trial-handle=1688,11703312152181607162,8802951199749367078,131072 --disable-features=PlzServiceWorker,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\easymc-launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAIAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAABAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3636 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://easymc.io/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff9d52946f8,0x7ff9d5294708,0x7ff9d5294718
    3⤵
    PID:4276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
    3⤵
    PID:252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
    3⤵
    PID:3920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
    3⤵
    PID:2304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
    3⤵
    PID:3704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
    3⤵
    PID:1184
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6332 /prefetch:8
    3⤵
    PID:2768
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6332 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
    3⤵
    PID:4368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
    3⤵
    PID:1164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
    3⤵
    PID:3676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
    3⤵
    PID:1572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
    3⤵
    PID:224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
    3⤵
    PID:5984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6972 /prefetch:1
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
    3⤵
    PID:5248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1
    3⤵
    PID:5264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6724 /prefetch:1
    3⤵
    PID:5240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
    3⤵
    PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1
    3⤵
    PID:5192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7472 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7393621856113027123,12250750897155348487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7616 /prefetch:1
    3⤵
    PID:5060
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe
  C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe x C:\Users\Admin\AppData\Roaming\easymc-launcher\temp\zulu8.40.0.25-ca-fx-jre8.0.222-win_x64.zip -y -oC:\Users\Admin\AppData\Roaming\easymc-launcher\temp -bb3 -bsp1
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1308
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe
  C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe x C:\Users\Admin\AppData\Roaming\easymc-launcher\temp\zulu8.40.0.25-ca-fx-jre8.0.222-win_x64.zip -y -oC:\Users\Admin\AppData\Roaming\easymc-launcher\temp -bb3 -bsp1
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:4028
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe
  C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe x C:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\libraries\net\java\jinput\jinput-platform\2.0.5\jinput-platform-2.0.5-natives-windows.jar -y -oC:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\versions\1.12.2\natives -bb3 -xr!META-INF
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2100
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe
  C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe x C:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\libraries\com\mojang\text2speech\1.10.3\text2speech-1.10.3-natives-windows.jar -y -oC:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\versions\1.12.2\natives -bb3 -xr!META-INF
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2544
- C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe
  C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe x C:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.4-nightly-20150209\lwjgl-platform-2.9.4-nightly-20150209-natives-windows.jar -y -oC:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\versions\1.12.2\natives -bb3 -xr!META-INF
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:4400
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe" -cp ".\libraries\com\mojang\patchy\1.3.9\patchy-1.3.9.jar";".\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar";".\libraries\net\java\dev\jna\jna\4.4.0\jna-4.4.0.jar";".\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar";".\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar";".\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar";".\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar";".\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar";".\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar";".\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar";".\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar";".\libraries\io\netty\netty-all\4.1.9.Final\netty-all-4.1.9.Final.jar";".\libraries\com\google\guava\guava\21.0\guava-21.0.jar";".\libraries\org\apache\commons\commons-lang3\3.5\commons-lang3-3.5.jar";".\libraries\commons-io\commons-io\2.5\commons-io-2.5.jar";".\libraries\commons-codec\commons-codec\1.10\commons-codec-1.10.jar";".\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar";".\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar";".\libraries\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar";".\libraries\com\mojang\authlib\1.5.25\authlib-1.5.25.jar";".\libraries\com\mojang\realms\1.10.22\realms-1.10.22.jar";".\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar";".\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar";".\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar";".\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar";".\libraries\it\unimi\dsi\fastutil\7.1.0\fastutil-7.1.0.jar";".\libraries\org\apache\logging\log4j\log4j-api\2.8.1\log4j-api-2.8.1.jar";".\libraries\org\apache\logging\log4j\log4j-core\2.8.1\log4j-core-2.8.1.jar";".\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar";".\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar";".\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.4-nightly-20150209\lwjgl-platform-2.9.4-nightly-20150209.jar";".\libraries\com\mojang\text2speech\1.10.3\text2speech-1.10.3.jar";".\versions\1.12.2\1.12.2.jar" -Xmx4096m -Xms4096m -Dfml.ignorePatchDiscrepancies=true -Dfml.ignoreInvalidMinecraftCertificates=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Djava.library.path=".\versions\1.12.2\natives" -Dminecraft.applet.TargetDirectory="." -Dlog4j.configurationFile="C:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\assets\objects\bd\client-1.12.xml" net.minecraft.client.main.Main --username Carhartt__ --version 1.12.2 --gameDir "." --assetsDir ".\assets" --assetIndex 1.12 --uuid 8da73919-9671-49a1-87fc-dd9e740038a5 --accessToken Z4sGmcCxDtJ9qZMy1SUDCj5AYPURZcq2im7GGRqkBW0 --userType mojang --versionType release --width 854 --height 480"
  2⤵
  PID:5184
- - C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe
    "C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe" -cp ".\libraries\com\mojang\patchy\1.3.9\patchy-1.3.9.jar";".\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar";".\libraries\net\java\dev\jna\jna\4.4.0\jna-4.4.0.jar";".\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar";".\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar";".\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar";".\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar";".\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar";".\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar";".\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar";".\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar";".\libraries\io\netty\netty-all\4.1.9.Final\netty-all-4.1.9.Final.jar";".\libraries\com\google\guava\guava\21.0\guava-21.0.jar";".\libraries\org\apache\commons\commons-lang3\3.5\commons-lang3-3.5.jar";".\libraries\commons-io\commons-io\2.5\commons-io-2.5.jar";".\libraries\commons-codec\commons-codec\1.10\commons-codec-1.10.jar";".\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar";".\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar";".\libraries\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar";".\libraries\com\mojang\authlib\1.5.25\authlib-1.5.25.jar";".\libraries\com\mojang\realms\1.10.22\realms-1.10.22.jar";".\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar";".\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar";".\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar";".\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar";".\libraries\it\unimi\dsi\fastutil\7.1.0\fastutil-7.1.0.jar";".\libraries\org\apache\logging\log4j\log4j-api\2.8.1\log4j-api-2.8.1.jar";".\libraries\org\apache\logging\log4j\log4j-core\2.8.1\log4j-core-2.8.1.jar";".\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar";".\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar";".\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.4-nightly-20150209\lwjgl-platform-2.9.4-nightly-20150209.jar";".\libraries\com\mojang\text2speech\1.10.3\text2speech-1.10.3.jar";".\versions\1.12.2\1.12.2.jar" -Xmx4096m -Xms4096m -Dfml.ignorePatchDiscrepancies=true -Dfml.ignoreInvalidMinecraftCertificates=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Djava.library.path=".\versions\1.12.2\natives" -Dminecraft.applet.TargetDirectory="." -Dlog4j.configurationFile="C:\Users\Admin\AppData\Roaming\easymc-launcher\minecraft\assets\objects\bd\client-1.12.xml" net.minecraft.client.main.Main --username Carhartt__ --version 1.12.2 --gameDir "." --assetsDir ".\assets" --assetIndex 1.12 --uuid 8da73919-9671-49a1-87fc-dd9e740038a5 --accessToken Z4sGmcCxDtJ9qZMy1SUDCj5AYPURZcq2im7GGRqkBW0 --userType mojang --versionType release --width 854 --height 480
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe" -version"
  2⤵
  PID:564
- - C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe
    "C:\Users\Admin\AppData\Roaming\easymc-launcher\java\zulu8.40.0.25-ca-fx-jre8.0.222\bin\java.exe" -version
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3768

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3532

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4036

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm

Filesize
16KB

MD5
ba25e690808f9404975a5ad5a828a1f6

SHA1
50be86cf206e7e757ff1fa9c73e5af4c336c8950

SHA256
06881976a261f67fc7cee5c03de523a8808bf0fa892f6cc9a72ff90f37222403

SHA512
1866fd9925cc6c39e19f55aca3cda315dc233165d025d33987b82a2826b101df531157e98be40428f6123ed3dee15c16597e9d2902ccccb9f1fe01eb16ccd517

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
84df16093540d8d88a327b849dd35f8c

SHA1
c6207d32a8e44863142213697984de5e238ce644

SHA256
220f89151a0f978b8bbe338b937af90417ae8c17b72a53f2acea7be2ac171a8c

SHA512
3077ccda8f86f47c41978d6cbb1dcad344e36f236251c8fd8c58d1c48a59106aecfdbe306357b7ebcfe3300bec8ea10ee0e59434c799e8c40e40e6c3c1bd4098

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
186KB

MD5
740a924b01c31c08ad37fe04d22af7c5

SHA1
34feb0face110afc3a7673e36d27eee2d4edbbff

SHA256
f0e1953b71cc4abbffdd5096d99dfb274688e517c381b15c3446c28a4ac416e0

SHA512
da7061f944c69245c2f66b0e6a8b5a9bca91bda8a73f99734dcb23db56c5047de796fa7e348ff8840d9ac123436e38a4206408573215b7e5e98942ea6d66bb7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
52bb02df820b4eb94914c48f41199364

SHA1
5ddd72dfdab694b5ab5c18e7d5fd8f51db9c8e6b

SHA256
18bee442428de6e6e55bd703c3edb97b7ae70ad86bb8b3f34b7f07fa48e3d1b1

SHA512
b0f28cf7f0975e5ecd3ee815b46ca1eb8bff3a936fda4637c10ec05bd3c883994927be07ba5ffdf1b4deb99e23d86aaa3d2c043bb178bf0f4cb21f9caaa20714

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
53c71b2f16f4ed909f6969574401693c

SHA1
70253a012883db5ec60e4d98314d67b309bfe384

SHA256
f79b3b289002b3cbd0aab55a34c4576d26cc1b3e1d1244b77fd575c2266d5d85

SHA512
8f7bd986abac96ac55555697865a447af6b3eaba6aa322ef9f904d6d97fe7322ee623cc726da8aa8e76a24e8c094333062e439229ca344e5d750aab52645cc37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
a85abf76286b4b675767d2e9b5b7c832

SHA1
422f373d35dbcdcd3a197ac6228bae7139ebd1de

SHA256
ac840e5e372742085625be6c5ce9950d2a9f94c734f91fcec57db92520492eae

SHA512
8a903074d37c0eddcdd05ad61bbe72ff7e32dffc8f220683750d7ddd143294578b3d540b386053d79a87fe55eb3aa02cf6beacacef953ceba5291bb3e06c7b8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
68bebc23e13ea11963dccbb51761b7dd

SHA1
a14b66f74fc1230b01e7430f675fd9aca5529d1d

SHA256
deafb5a938e972ca6b2d49af0961b7ab99d585ee16e2b9e8214dfab86a7b8a29

SHA512
54f44660a7df993a60c5e7d33022d1c9c4e1f06e5a2b0b71336e4630257fd781d7944a2f52b230141865324a84e22f29fb19871e0c4297848920e12880d0bfda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
25253e123d82a207a9f65933d0a9485e

SHA1
f4deac5ce8e64d7e7ad55615b68ecf03e78bff9b

SHA256
95753a325273ef1a2079211d5336e5ee97e912cba78c3b40d9f3a6d3d8d5a202

SHA512
97d19a49e6b2b4f28b35565be4681ab9b2507df7caab348968e77e424943dafff21f1bf47d02140b87f2af11973486f83a27fe8fe97be0b8d0476f70a4441d1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
59a028e2dfa991014436cb991517d897

SHA1
65337a9d258f9993f2bc03f85ac5f6fbc00c4d85

SHA256
621763e4d7d0b6d0dee87e303e907b343a641301718b50dc4a183e251ec76b0d

SHA512
8ef4f7e552db4f4d21e14c1bc35db0f659da41acd66d9258845a3d701c64bc8bccf88e06975722689f62a7f29e20f8288ce6876cb27321a7999f29482e6906ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cced798c92eb015112f7dcffac13039c

SHA1
bf10e6f7ea1a5bb82b8a8b87eda86b4b328cbad9

SHA256
3b4634f460eede6aa52a026cd066837e64a848b577635dfacfc8d4d2504df333

SHA512
fc05c0c9e5a8da7ddb5342f81bcdee15b165195ac656ecab78934913f71a8a3efc21724f0333728f020383a70c999f5f013f6192e9dd4f0f186350fcecef6a7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
99d112773408e415a1531b840f955eca

SHA1
a1f74e4f840895690e7326c894c6220ec0313797

SHA256
71a697f679cb912e07c40d1d8d87e336cbfc27a263daae75df5ab57190d9d989

SHA512
9446490dcbe7435f786aac9072faff200aa0c094b6dbd4314943623f097665fccfc0b46863fa6bbcee3380e0b0ca89e59dbdd90d10a416f64e8d82fb84bed73d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
3d3304b1626f7c69e1383567faeef528

SHA1
8779b482c24a45940af7e3322471151fcc281434

SHA256
61583fc3edd6ed21e100824add263bd79c65a48ea0fb6445b993d0a0cb12ad7d

SHA512
908591ca97bb88881d881a229a41beda8079b03679a836e92f03d6b570ddb36425f10ec2fd005f9ce79270a41297b31090908a899a2ad4d933e3c1c2f0403c8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d0004365bb05aa2cbbffc7bcffed62de

SHA1
f9fd0802c9558a552577c2b68d1c173ad14a66b8

SHA256
3851ce571a78f12365804b410c46160a14141232b11cc1365ae557b68adc45ba

SHA512
e6da220bf234082cc11af06124bdc903c30a8970a6da5b7e04cdb6281140f468d7907078f0be844db40c8800a10af26f2fb1a105a6698fe3014a22d826600028

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
4746bbe73498ce271760ba4d9848ae08

SHA1
cbbdd784a1a395daa85010ad193dc26d5b25fb60

SHA256
647efa5ceb2cb57feaa4f610dbe50ab69146ab11b4093549cecf933441711473

SHA512
58075206086209b0dc86e9abc4677435e60da12a708dc920d5034890fc21d8b5044c5352e0957820ebd7193498fd324be1cba556628d0d1c3cba360cc1063719

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9e9a8767580c3fd740c88583788ffb1e

SHA1
15cd206345a591fe6c13ac800e243b779a0d3df8

SHA256
9090ee0390be556f5653afc9449b0b9a6157d0461e1af7200488a87212286f92

SHA512
08127b7e5671281c0dee8af4fd397899cfbde1d466f42ad4e9fc05c99d67ef958a59d5f6bff8a3bf2a1b89b86b5c647c2230ae354907fbca4febed5fd33c2f09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
918ecd7940dcab6b9f4b8bdd4d3772b2

SHA1
7c0c6962a6cd37d91c2ebf3ad542b3876dc466e4

SHA256
3123072fba0ea8e8f960dd213659a0c96ce2b58683593b8ea84efac772b25175

SHA512
c96044501a0a6a65140bc7710a81d29dac35fc6a6fd18fbb4fa5d584e9dc79a059e51cbe063ca496d72558e459ffa6c2913f3893f0a3c0f8002bbca1d1b98ea2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
ab5c2142fe5c405bee102674de7aca06

SHA1
2db82829382962c190c28bef15377c4cd9b23ece

SHA256
4c1850ad6e617de4579c54df19ecc1495ebd2ec8320609cbb0fead942eafd248

SHA512
05ca4a303fa57c03cbf7165f2f9a61b2d1ca23d34a08d05f5715b835287ed6e4a54132329a714468246218cb550e6ebc6a9d7ef117887f65167e5648d129fa52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
a0eea8ee1e45f8dfb6e7c59c2ea58080

SHA1
ebe0d1ceb32fcacc7698db39c7ac0b95d9eaf2fa

SHA256
0d3e7fdbc613caca0be909c4ab0429e542b0e17b67205883578751f654824220

SHA512
885cda7c67c17d66cfc61649411db88837cf78cc07a67a3e4da5473552ef3776e8c9d05e9d0fa888feec569996caa84119e390dde64cb989a8fb93f6fcc26f62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
cd70587f75109843e6d07b4fd29fccf9

SHA1
137aa39c2948cfaef1409c4baa24ec41164596c7

SHA256
9313b2de410eea4adf3801fa7edcf033d6d642611a5f5398ee33428d5b314000

SHA512
551499248b48ff5352d8ff05905df57fafda0a6f1f7020122290ea289dcd17f601296ba0dd53682b27f0d5b57f12f6723b72959a7854a89bb1b559eb45c29f60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe6c6ea2.TMP

Filesize
705B

MD5
a3657a1f3ad80f6f54c01d655533594e

SHA1
d61f12ce0d4cf5d6b5163d906149519c8ff571a1

SHA256
f69b0eb4ff7be5ff9349c0dedb8ebdc5e3210274d228f3f079ae1bdfcce473d4

SHA512
4e1425dadd1f942a901b57b2499884dd43b9beb9f3d7572b4f6bef61539273f56f43626bb041b23f53d8a9a3f07eb2af1aff404011c489644924113effe69b2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
17212dbd6a4883f17ebbb4c4234181c4

SHA1
415043a27178802f882c559bca8d4ee2f1d88077

SHA256
af5bac54a78cc40673fb56094bd97741bc7d200c03a54be882898dffb2e00be2

SHA512
dae8b178cd1fc926af7e7e81847acdb811daa68e59fe478f65e24b763e82e955011fd21c6f0f2da8be21991a9c48957f8a4036ae7b6673333270aef890ce681f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
5d75ceb6b153f4cd928eb8c61020d92d

SHA1
d57fa95329d4ef743fdf2295a968770a094a0797

SHA256
318fb51efc504cb8c24a3b65ce61fe941db4f8ebeb2c4f4357b2b95ba50d301a

SHA512
d397d8629cb03f663da4dcaa9cc067e1395c71ce8945d8cafecc1eca5cdcebbd59433cb16e635637917b22a36a0e2027fe1d0924b62eb984dcb1713da30da061

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\7zip\win\x64\7za.exe

Filesize
1.2MB

MD5
b7b7473472c9806bee3e7ae6c1adda23

SHA1
2dc03597a0d9c7ff97250f90d47bdeaf9b5753e7

SHA256
b0cfdeaf429f5cc53f85123dd8f5a5feb92c19d31aa34df257edf9a26be05f95

SHA512
544949f1213817599fdb09dbb9834aeeb370b3f6225c3d835a29797b006bd36aa37b8a246a22204277f40d3865a01bc8d029a531d17d6bb43d9ddd3db7370580

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\D3DCompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\chrome_100_percent.pak

Filesize
138KB

MD5
4f7cf265db503b21845d2df4dc903022

SHA1
970b35882db6670c81bd745bdeed11f011c609da

SHA256
c48e6d360aee16159d4be43f9144f77d3275a87b3f77eae548e357601c55fc16

SHA512
5645d2c226697c7ac69ce73e9124630696516fc18286a5579823588f93a936da71084a3850f1f9a7b34c624f4c502957107f5957ffba5e6c1e4da6d8da7d3348

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\chrome_100_percent.pak

Filesize
138KB

MD5
4f7cf265db503b21845d2df4dc903022

SHA1
970b35882db6670c81bd745bdeed11f011c609da

SHA256
c48e6d360aee16159d4be43f9144f77d3275a87b3f77eae548e357601c55fc16

SHA512
5645d2c226697c7ac69ce73e9124630696516fc18286a5579823588f93a936da71084a3850f1f9a7b34c624f4c502957107f5957ffba5e6c1e4da6d8da7d3348

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\chrome_200_percent.pak

Filesize
202KB

MD5
6a7a9dee6b4d47317b4478dba3b2076c

SHA1
e9167673a3d25ad37e2d83e04af92bfda48f0c86

SHA256
b820d19a7a8ce9d12a26837f967f983e45b07550b49e7b9a25e57b417c5f6fd9

SHA512
67466e21a13ca449b014b511fb49bfc51df841eb5776f93b4bda2e0023da96d368ac5c65de051ed9de1899275b9f33839af2c387be903688cdb48bf08993791e

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\icudtl.dat

Filesize
9.7MB

MD5
2e7d2f6c3eed51f5eca878a466a1ab4e

SHA1
759bd98d218d7e392819107fab2a8fd1cfc63ddf

SHA256
b62b7240837172959299dc3be44fffa83dc374353154eca1612e1bde330aa8fa

SHA512
0f1465e8efe32b0eaba628a30bbb21254a05d80f4407a1434120a55fb928cf575b3879e1b7cf754cd19b23c262ae715fa84a8049073563cb38f1855be7db1124

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libEGL.dll

Filesize
431KB

MD5
7b77074945dfe5cf0b1c5a3748058d57

SHA1
fdea507ac2be491b8ad24ddc1030ea9980c94c0d

SHA256
994972c1bc515c199552d50e97ad217ae15a3eed16db06181c7df50e743e8a56

SHA512
d637b2c7d75723601af099317a39820d3edbd3cea1e1cb20b702deb6ca7fdb0b67e1351cc8fee1c7badff957fffb848a8dce18bb25bfd60c81a588da4f68c1fd

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libGLESv2.dll

Filesize
7.6MB

MD5
8c93e19281992a00993fc0f09e272917

SHA1
3a2d12bc85f829775ec8c5c1f8e35a783d37b7a7

SHA256
1ebc1da8d7e463a5d3dc127a632989ef35cfbd94cb18bf1f8ee790f172d43703

SHA512
c4ec65378d83e6645c9128825853de2d3e82c0f430cd28fdc761eaf2d011267c3794b7c1dcef017750323873d7fe976656eebf9ed7c03582741d43738f3e0c7c

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libegl.dll

Filesize
431KB

MD5
7b77074945dfe5cf0b1c5a3748058d57

SHA1
fdea507ac2be491b8ad24ddc1030ea9980c94c0d

SHA256
994972c1bc515c199552d50e97ad217ae15a3eed16db06181c7df50e743e8a56

SHA512
d637b2c7d75723601af099317a39820d3edbd3cea1e1cb20b702deb6ca7fdb0b67e1351cc8fee1c7badff957fffb848a8dce18bb25bfd60c81a588da4f68c1fd

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\libglesv2.dll

Filesize
7.6MB

MD5
8c93e19281992a00993fc0f09e272917

SHA1
3a2d12bc85f829775ec8c5c1f8e35a783d37b7a7

SHA256
1ebc1da8d7e463a5d3dc127a632989ef35cfbd94cb18bf1f8ee790f172d43703

SHA512
c4ec65378d83e6645c9128825853de2d3e82c0f430cd28fdc761eaf2d011267c3794b7c1dcef017750323873d7fe976656eebf9ed7c03582741d43738f3e0c7c

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\locales\en-US.pak

Filesize
104KB

MD5
0dcd84e9e50a3e0819d5875ea889ced4

SHA1
7c47f6e4e0cafec3a13c07d689d1dd6ff6516b1e

SHA256
699b6d7f05a484e76d3e1197a656247863e570f03cc02634c9dc42078a5c5007

SHA512
153fc15f676d78d5d0f3a6862fc7eaa60c2a659c25ce87485f0253c321d9407a9b799b959104c27a8e7b5487f0de926ae8f375e2c3d313329112e48f2d001a17

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources.pak

Filesize
4.9MB

MD5
99c5bf0dcd43f961aa3e177f7dc42d42

SHA1
5618abd2e7b45c50400bb4aa0c455bb0b28bc472

SHA256
75ff04d991c2a203105525a1ccb200a461717ce7b86ada4be092fe903d95cdc8

SHA512
2e508c46eb266301f42ee6a7d63494f3856b422df61d0b605096bf4fc4943239d3fba15161adf8cb1cdcfd3bea8608102a0abce636999cc2a9e01bda51cc77ae

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources\app.asar

Filesize
12.3MB

MD5
e69d3d412e3e3fe7253a1718bc179912

SHA1
154010073f04a05b3524841254b0f4d3ef6ba2e0

SHA256
61bdb262360c85de95cdf2b9619bb0621076d4355fc48a46492d05cc3626f3a3

SHA512
3436dfa3f7a84820da24afb6a454ee605bc51f79446be3434b6da8b42bc5f50c4d5099a9276e910b226268723c999c24370a8bca0a1618b12685059f7bdf48d4

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\resources\assets\icon.png

Filesize
2KB

MD5
bd8d487e261ad75074f94d065a1fe5ea

SHA1
5fed02a831fa006d24d2053f271817969c411539

SHA256
5155e83d66a6c33b38551a7806b2ecedf4c3d6022811c18e3a90a542e725dd20

SHA512
5ab2b0b469ff0af0cd8e26a6767335369ca8b73e7b9f574ba38458b1499978242dc88fef5975ffc6417335c7931dedfc91158e70018982adb92c23d776dd1de8

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\v8_context_snapshot.bin

Filesize
160KB

MD5
a718c9b6e5e6563e23e450a0d01b932a

SHA1
95ccb1228f024f037259e759dbac464f3c27b8cf

SHA256
315f5ed966a1f3a89c94d1b78b9bf70e59a2869601cf6551b2c1fd3e3b008447

SHA512
b04512e95ab3997bc7d5c65e2f526e124bf1895b139eb2b6c6c7b4a4aa381cd408eb2bba01f44b09b1936d24752baae288f24a32ed84687d3e7e0681b5387d01

Download Submit
C:\Users\Admin\AppData\Local\Programs\easymc-launcher\vk_swiftshader.dll

Filesize
4.3MB

MD5
77f7b4f46cb3e06b53729fd1e562dfef

SHA1
223c09805220ff2b5c1dcbdd5c0396231ea34f11

SHA256
a648cd4671b12b469c4d2de20c2ba2429c9388c0f9d4b3d9d2244853d0e5acb5

SHA512
6be9afda9320074c5842419cf8493d715ca65a3362d368d3a35e35a47d36f8197b0f19877485b41a06e21148613a77bb6275b0586c4a38da8a25efe6b5a6b571

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\7zip\linux\x64\7za

Filesize
1.4MB

MD5
6a2e4039a2f56265369f22ecb1a19fd5

SHA1
b0ea59484a4827d7d9a0a27a5270310ef07e61a8

SHA256
afc9448bd0cc2eeda131cce313ef4994f9656417e0a15c8465fcda9ca859b280

SHA512
796188635271cbd7dbd6a7f37cb4d4d5b394c8a302dc62008c40b4be507382925eeb8a550ca11e81c791d5dbda238f95dedecbdd0daddf84907c4fa3a9b1ca59

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\7zip\mac\x64\7za

Filesize
2.8MB

MD5
335361d7f6faf13cadbf116bfdb97226

SHA1
d6cba0f2e221d1061261767ec38ddd7c550015a3

SHA256
434075f6ff5ea9250571033ca06b95d464efcad87a528dd0b224816c86b1a444

SHA512
5fa86f6ec50e0f2fa87ec7cfa0e98cf2bfe158035e5af024e017cce4ddb33aea631008e43328e6049e0f95e8c63dac8b1e03d3c949b34ad2a3e94ab979cad0e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\7zip\win\ia32\7za.exe

Filesize
773KB

MD5
dfd1cf824c781069def1d239a626d43e

SHA1
bbe24cbae89166de829a7cf91eebfb518d8f45be

SHA256
31fd52f8996986623cf52c3b4d0f7ac74a9dec63fc16c902cef673eed550c435

SHA512
0413adecc5560ddb18133eec70b3a717d82738f304bdbe6eb6e2dad9ada57314c60bbd48ac0aa948af77ae76f7d522ada4f6089fffab88f882872c56bd12ca20

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\7zip\win\x64\7za.exe

Filesize
1.2MB

MD5
b7b7473472c9806bee3e7ae6c1adda23

SHA1
2dc03597a0d9c7ff97250f90d47bdeaf9b5753e7

SHA256
b0cfdeaf429f5cc53f85123dd8f5a5feb92c19d31aa34df257edf9a26be05f95

SHA512
544949f1213817599fdb09dbb9834aeeb370b3f6225c3d835a29797b006bd36aa37b8a246a22204277f40d3865a01bc8d029a531d17d6bb43d9ddd3db7370580

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\EasyMC Launcher.exe

Filesize
133.1MB

MD5
91797b7bf8f40175bbb65577822a0c8d

SHA1
ef64a937e0fd7cdafb8cb0f8f60dbe6267294924

SHA256
da146fd91722d654c1002f3c910cacfe2dfed21da15079209503316b726a0e41

SHA512
2342984d70652b10d2447c85c02ae93a4141c937abb58e93c8fdd104c3a31aba5a5b92cb1936bbdd813a20461c16f7443bad2cc305921345739b4d2303cb45ce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\LICENSES.chromium.html

Filesize
5.2MB

MD5
4247afa6679602da138e41886bcf27da

SHA1
3bb8c83dc9d5592119675e67595b294211ddbf6e

SHA256
bf59a74b4404aa0c893ca8bbe636498629b6a3acdff4acb84de692462fd626e4

SHA512
ad3103f7fd32f0ec652bc7fcb8c303796367292a366037acad8e1312775cdd92c2f36ed8c34a809251ad044508e1e7579b79847de61025baf8bda5ad578a0330

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\chrome_200_percent.pak

Filesize
202KB

MD5
6a7a9dee6b4d47317b4478dba3b2076c

SHA1
e9167673a3d25ad37e2d83e04af92bfda48f0c86

SHA256
b820d19a7a8ce9d12a26837f967f983e45b07550b49e7b9a25e57b417c5f6fd9

SHA512
67466e21a13ca449b014b511fb49bfc51df841eb5776f93b4bda2e0023da96d368ac5c65de051ed9de1899275b9f33839af2c387be903688cdb48bf08993791e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
7977f3720aa86e0ec2ad2de44ad42004

SHA1
04a4ef5ccd72aa5d050cc606a7597a3b388c6400

SHA256
61c6bd5fee2c150265241a15379c4053b174b1cd7687749629afcdbd1264a02e

SHA512
8ef3b8f506b5ad7241b96d381a501033266358fb3756a457c46ed499547db1232012f849838e65f916129fab1a0d74711e9851b8e0669831acbbf4c3494e492d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\hostsremover\EasyMCHostsRemover.exe

Filesize
13KB

MD5
dff1888306d5036e9e831d62d16412ab

SHA1
2597f86a16af51f61f7b4754fe290a9969e85abe

SHA256
136b6ddebbd837f775a10425fc0a6eaf4a46d32473f372208873cfeb2f64a28a

SHA512
c2f984340c6d01531151b6ff58d2e5b47740b3faf309bc28c6349c4dd2b1e8715e24a69ee238380bd3ffc52e7922cf6c9a0c1ab685f449dc7e13054383b1de62

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\icudtl.dat

Filesize
9.7MB

MD5
2e7d2f6c3eed51f5eca878a466a1ab4e

SHA1
759bd98d218d7e392819107fab2a8fd1cfc63ddf

SHA256
b62b7240837172959299dc3be44fffa83dc374353154eca1612e1bde330aa8fa

SHA512
0f1465e8efe32b0eaba628a30bbb21254a05d80f4407a1434120a55fb928cf575b3879e1b7cf754cd19b23c262ae715fa84a8049073563cb38f1855be7db1124

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\libEGL.dll

Filesize
431KB

MD5
7b77074945dfe5cf0b1c5a3748058d57

SHA1
fdea507ac2be491b8ad24ddc1030ea9980c94c0d

SHA256
994972c1bc515c199552d50e97ad217ae15a3eed16db06181c7df50e743e8a56

SHA512
d637b2c7d75723601af099317a39820d3edbd3cea1e1cb20b702deb6ca7fdb0b67e1351cc8fee1c7badff957fffb848a8dce18bb25bfd60c81a588da4f68c1fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\libGLESv2.dll

Filesize
7.6MB

MD5
8c93e19281992a00993fc0f09e272917

SHA1
3a2d12bc85f829775ec8c5c1f8e35a783d37b7a7

SHA256
1ebc1da8d7e463a5d3dc127a632989ef35cfbd94cb18bf1f8ee790f172d43703

SHA512
c4ec65378d83e6645c9128825853de2d3e82c0f430cd28fdc761eaf2d011267c3794b7c1dcef017750323873d7fe976656eebf9ed7c03582741d43738f3e0c7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\am.pak

Filesize
179KB

MD5
ebe0e7e0c78fac281a3f0196da22cee9

SHA1
689864d898905d43b8a70bdf37c5b339daaf48eb

SHA256
08d86a45ff0a4b21e74b06509c376ab0f907cae72a3e0cbf5c17fc275d10ac5d

SHA512
89b6603e5db8ad53ee5623c2c0f7e81194278dbdf5ed49c7480049006b20744fd4642743c2b4a264cafa87e7f787d6d6cbf26f12ff2b851333b3ba7541ebd933

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ar.pak

Filesize
184KB

MD5
3a8a7a08fedb148ebee6d3300356e37a

SHA1
2e9ac1ea8b6396b909f823486538d5640ddcaa1a

SHA256
43636fc76a2da6ab562c4c3bcc1a5d548a169dc0e884484fb7e4341814c44c78

SHA512
7951829cc7aa385bb5f8078a7af7d4f0b49fa8c05eecb2808eac3fb0e8700c63f92db888ad64f526d992a14d54948a6807bf06f9fb688aecea40311eaacea181

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\bg.pak

Filesize
200KB

MD5
5ed6adc6158f554e71bdac7dc9731b16

SHA1
394c8396c566d2b92cef881c332624be812115fa

SHA256
0a3e79a6d270d212037ccb5a8730b7abfc45c6e9175dd7e17d997daed0985726

SHA512
796f107698e82dfad9ec8d2ac1fc3f79b1f3a339a06eccd783dcd262ddb7399f8e3c093799f16640cf7a4488f1d2eb04ba6b7cb14ac9e9fcf87488cb8305b35d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\bn.pak

Filesize
257KB

MD5
ee25e9cf28fdd35846d8a9b3c4220eed

SHA1
702342cc207ced1bb585195abcf263cbc4ea0069

SHA256
9994b9832bce803bee8c48a8176653099df7768074e3c54d09a18593376466b9

SHA512
2b703cd07bacc9f70e36844f148c980cb112a806b4ca11f692b9bbe6995fd5636eb9bdc84c5cfaf79790dbbb1ecf7cf2b61a7d6ff89311eb4907c586e20b7dbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ca.pak

Filesize
125KB

MD5
53e3fb38f84f60b98d23b337e4f03f92

SHA1
42e435837dd36872d2a413518a299cd293ff8536

SHA256
b00bd41c1222b3ea078df5b92cec1946e41430be241d0d57dc9baa4c70c91f3a

SHA512
98d0328e7370b1fec9e15ad0cff9e1353686fc581e3df9a8896e3c2e62ced044c4c51ea63f35ec8b7eb3e7df5c83ef5157468979b7f20e85480597042c1ac192

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\cs.pak

Filesize
128KB

MD5
f125738776a9fb8dbf25311fa3dadbcf

SHA1
3448b58d4810e69f5c1eca4e1484308c3ceff502

SHA256
5d5089718677f9a4e677dec72058c376a5829921cd523ecb919d0da7766d3cd4

SHA512
ca5300e5fb73ed4ee8c108e875c66ce7f105693f3ba78cb00f33218febfdb3ea27fe26f118dff3fb2e4af66f722f8348760cb576aba48887be25fdfae4991776

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\da.pak

Filesize
117KB

MD5
22134b12d90fdc00f23a1e0a6fb04eec

SHA1
17c9fc2cacb6e5ccc393d1af9bdf3e8e63ecdaaa

SHA256
62020dd01b47b696e2e11d7f5598628c07782a96ea6bc013dc2ffe8c820b7c94

SHA512
9cce6ffb2d84cedcc5ccf200080d6a2cab691468c042e8e48a5fdd809b5c0d067c322326e49d18f66da8e0b1d28adeda4cd03e12d7aa11350b72776737aa3427

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\de.pak

Filesize
127KB

MD5
fceb00caf7e76e688007665feae99e83

SHA1
06fece84cf7028b3871f144258b8d084faf8745b

SHA256
80e63ef1950b8438813271365a7b6a3f3aba0bacc179f5675654249f31c06a3c

SHA512
08c14eb299a035949e6b64a069cadee66c420b7d66bb00d65d6a1a08fbee08a57ab08f8e77c44387f0fe02b47aeb0bf2709a1979025613cb51af4ab82fc3b6d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\el.pak

Filesize
220KB

MD5
db449f218a705453eb10b5f418e28d7b

SHA1
7bc8fcc59c532bb086a7f081cd8d275a89dac835

SHA256
73da35d01b91707846775bea7dc0331fc1caebd5c63d101aa8bb8bb58ca7f193

SHA512
7dce45bc723d62498b335be0ab72dfc91c44c01f96f25c2314e9245a0eab28a92dcaa730b11f108b604545592445ed1612721416f60ae3bf55b1bd438bd04f78

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\en-GB.pak

Filesize
103KB

MD5
074d3dd44706502de7c33e791794b23a

SHA1
564a73ffad9232052c692eb94f560d6b17227c47

SHA256
9c3954a5ca2cf126370a1152e9281f41a7ca97c69293f556a2c79ea6729324ae

SHA512
6e1296d04b16534274fa438643ecee6e37d17ed935623f73d5a8f3510a194e0efda9ca60fac8d51d25763c4818050e23c306f9ee18284b8600610d14f7768d98

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\en-US.pak

Filesize
104KB

MD5
0dcd84e9e50a3e0819d5875ea889ced4

SHA1
7c47f6e4e0cafec3a13c07d689d1dd6ff6516b1e

SHA256
699b6d7f05a484e76d3e1197a656247863e570f03cc02634c9dc42078a5c5007

SHA512
153fc15f676d78d5d0f3a6862fc7eaa60c2a659c25ce87485f0253c321d9407a9b799b959104c27a8e7b5487f0de926ae8f375e2c3d313329112e48f2d001a17

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\es-419.pak

Filesize
124KB

MD5
cadd9ec43e823609c4bbdc418da6009a

SHA1
91bdd44d5972a4763227ee7c127fe122aefe195f

SHA256
6c8d074047d57a79cf5cadf9caa6e9a64bce0895743a3dd89ed1350cc91c1e4c

SHA512
2b9eae4072e46024e33f000b1df1a64246f70498a557f4a03234d3dd47aadb04883b98ebf48eec21f0d6ca4c8a62065f675fdb352be680a56644ea3ae1db93a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\es.pak

Filesize
125KB

MD5
39288ea031009bb9db582cbd93c7d534

SHA1
467f76d33e39526a4d8cb6068eaf8e2791b3a9ee

SHA256
6cd39669df96b4b5b9047f7689338d3beb9ad7f8be2fddc595ef1ecbc47481c2

SHA512
4a635e969cf2b09aab5f8723a3380c5e226bf0546019506d18de65c1e4a599d268b9ee2e03a65b245075f899a09697b7b535f1055c19344a411100c8f29d93b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\et.pak

Filesize
113KB

MD5
fcdea2954549e5d8f1e7a5de36ae4f74

SHA1
41dcdcefbbab3e0e908d98ec9b6bac7eacecbb99

SHA256
d875bca2e8800657306727902f4f5fceec7415ea530bfa780ece0f016f792569

SHA512
37ea008078083a36b07b1f5d0ca6e16f62b06a19266d8042efc796bf33c53200f37d3a37f5b48d024dbfab9e6689ec9c3f22d6e37e3898fa7deb61ace1fb2df3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\fa.pak

Filesize
176KB

MD5
e3f56d4b0fa2878ed6847631d3b05dea

SHA1
627f48d5423afcb3cade0789f058d60867419041

SHA256
2ee67a38cce9ffae1a639be17c0ef7ed7c763d9c15c9621f300bf634e1f25a64

SHA512
e29c28717f31dc57c2294857680a439acec25478913ea425b0c7b6e50f3343b21fb7983c15352f9e3c001ffa0c8e500d92a1924acde32a4b5bf3f5b6c60c4142

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\fi.pak

Filesize
115KB

MD5
4f323a2eb73ccd029e742cee4dfa9769

SHA1
b860372d21cc55eb7ddbbf9f5bac61fed39426de

SHA256
e1888472c8e1330e70e514d0a1936749a7e5d39f67e7edc818661c2cbf3e301a

SHA512
d07d0f74736cd32d73b3a33867e65a25b727b5c30cb743162908e23d958fb3ae97285f600a9ef8196e61be9d450da5903d1e468fceb3b05ced93aa600387fddb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\fil.pak

Filesize
129KB

MD5
693abd21a6855aeaa31f6c738c6b6fc9

SHA1
bb1fa375a9f0c682d9913b1c1610535eb2b4028d

SHA256
f0bb231c710c025ad4643e2128867de6e111da867384082e7dc2d0769976b6ce

SHA512
03c68c45e3144a73251d950a8c7695e5b9c2c66711134016543ac07ee6eded723324d5312fad4624d35d0bfe9861ca4b7440d2445e6d3d6cff4a1a3cd5263c98

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\fr.pak

Filesize
134KB

MD5
e609419893f1d885a2f17f94805a441c

SHA1
31083ac114fa4077a7da7c796ab3744873fb893f

SHA256
8d71c36d04f2d6062458aa2614f7ce223b2ee9b4665556803f764f384b191091

SHA512
77f965f436a009a5aacebed3cc15adde5a1054e1c699b8a50b947a7e78a97cf43317d50b0ab7a42532c77d320b7393007e47199f31c58f7acb6f462f98fdd4c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\gu.pak

Filesize
248KB

MD5
57cf11b4352e59f11b20b7ab754af031

SHA1
ca1716d419f175a2dd548929fd551dcbd1ef4bd7

SHA256
55588f211c26e1deb47b04d39728ec051b99334c55d30252b94df57d0fba2f52

SHA512
c74360769323b3267aa218e994f49c7e135d4f320365a349a5362c1755c4b660050a070bec6c5446d4620be97a341270b6c01289db20ddf5199ece23117110a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\he.pak

Filesize
155KB

MD5
6010987755f300c7984dd3f72f518ab2

SHA1
eb85f0849a86aa5fb585efaa070d2d7300b197a3

SHA256
1c84a575e28e9a72335ed13409d6861995bd9859fd57a4d9509fe912db4a56a9

SHA512
4b77f74d986c16524a3a6c7f60cdbe53ac5be59418737835a7fa186e4b6ee853cce8317cce352fe4064c75a7d27bf1303d76eabc53993ff1e4b7758a8ccc6228

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\hi.pak

Filesize
256KB

MD5
34bcb12c154075510d9d3066ad4a8d1f

SHA1
6a3c062221db4f391f8505892f584647b05a410a

SHA256
83c6c411d75ec5c5de6984b21fdecb07c9b926c66b67c5c99380605f6fdd8928

SHA512
aba38e4a8039bbdc46b510a8370c82d3b199b4a02da7751c162c941e6d893a9cdfc0ce92db4144ecc2b2644d58b0bc6cc7cceb0533c62c131cc55be0258c3a7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\hr.pak

Filesize
123KB

MD5
feea1754a955eb61cd41763be4e5ae2e

SHA1
bb6252fec9ada8bf9ed7b81f59843d5abfcac80d

SHA256
787680ecb5d5ece246894481834b30145919c22b04d2dcad2f6ea2b2254abafb

SHA512
3d24c9ccb83f6ecf976df5cf00fdb0b46d53f09c1cb08ab68bb8d9944452785f40a761a152605708d7672f7dcb24e0b7cad1cfc14b267bf5fc1393cfd05ae4d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\hu.pak

Filesize
132KB

MD5
ae13d7ddfeb82df9950c71a4ea0bd10f

SHA1
7b55315628060668f444b110031b1fc4715bda11

SHA256
17758e2bc746f6d770fca8969ed0aa2d00658d68792d2e8bae94d7b58665d83f

SHA512
f94247fecc4fda5bdbe9732f151cdffed337eee01f59aaab6e6452c570a549dfb87c0528484c1879a04af134ac883a21043c582d0a642e185e4e64e3aff830be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\id.pak

Filesize
112KB

MD5
b5e4e0092bd1063e8bd68d0b539ab005

SHA1
5e3d12a6fb497687df81ed64de17b0502ea84f2a

SHA256
8d7ef1377d39fb6045c9d4b1bb064c329bd789ee33b6de530c187f1e713dd7f0

SHA512
52b535a143bc13a03804cfda2d3f2f81f036b8d24897d1ef4a657ed290ba14e43d7cfe92c868cdef6b093b09b90119f7e50e8496eaf347c8e4fdfc13c5e306a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\it.pak

Filesize
126KB

MD5
a2b9cce245e754258ea187ceb3aa2670

SHA1
50f84fbcabea10385714a3c3a2483247ac040c02

SHA256
b72f89e5d2cacbd2db7ce28ceae35faab8c4199ec993fea64e8c78df882032d0

SHA512
5e9cca2605d4a86d4f2b39845c8396c37f88b6f1d08c8f0e2b6f0896d60754331a588d0c0fc59e9ad8fccf0d50100a2307fff2d9df784f91537b1d9e108727ad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ja.pak

Filesize
148KB

MD5
e720738027460b044429705f7ea1d25c

SHA1
851b59efad4ae074849fe41f40a56c5534caaf72

SHA256
c78fde77efbca1b3cc0cd12bda718d1a113bf6b6f3ed558b5c9a452dc974edfa

SHA512
08b0fd0ceff7ddfed26985bf84b54d75cead1f6fd4d5971da9e40996af6dc5fe9455c402f62e758020a6ccdb1ee0213cc2a5ddfa28a2bfb1e8064c6a4401c3a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\kn.pak

Filesize
283KB

MD5
90107e2353e707a6d071c9aabb5adefa

SHA1
e4dfe445ca7830b3a56af38af1d73e3cb94abc73

SHA256
9155b06ccaefbea6461f5c51e25ce25d85ca7bd557e76dae00a4d6a09a4bc424

SHA512
dead3b94638afbf4ef27e1cb5283ad2d0af73ab8996e7d2e8202ad174796121799992f577c974fc0ec53fe2b8f6fb4d37c3bef70b72c29b5b721377a0cf3b093

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ko.pak

Filesize
123KB

MD5
f21c6033fa73bc7d3358c2467c9048d2

SHA1
939f209f00e6664294872e0dc3b33a9015a2f1fb

SHA256
d19cfa8ae07f23b81c0d40d7e751628844fc1aafb83d4bb4dcbe71caecf6ea2e

SHA512
a4a4909ca56d3d924639cf1adab6d9ee512132c99c8e3dd37f2b949a1c816ab29ce81c01c658022e680344516201fdb0440abb97e577e6946e2731411674566d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\lt.pak

Filesize
134KB

MD5
02e9c88d9d5e58d135c9a92effcce38d

SHA1
92421a5fac68d506fa904075ea7cf39a3da8efc3

SHA256
38ad40532287da53fcdb6076b9cdb841bbb4f30162681707295bcab448149e65

SHA512
f0897d62e81eb6e2c56cf1a5b5ad5124521c345f70cab841071c7b70b16130984700d694a32dfa010460244d8b520ba1b217ffd76f75c074b5b3a9ccda26b02b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\lv.pak

Filesize
133KB

MD5
7313fab584b7561b1fa63de07b972118

SHA1
3a44d445f57a78867d37638a80ab39add3fcaa4a

SHA256
7b92238240c31c197029d41fdffc244f68caeb8002854f65ee3125bd95643598

SHA512
05b067847a63c0419298616278678ade6a4fec4008323121ace5a09e22f6dae409494474f5a88adc703833691a7d4810546d012d4311e176fe58812f166b8ae3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ml.pak

Filesize
298KB

MD5
21aee42070f9eace2a8e14759526f05f

SHA1
fedd83251a3fdb1846bf0e7e49a3a78cd77fae02

SHA256
393d2dcd5c7c33945626fcf10ea4457649fa7b4c100c039898385133c26395cc

SHA512
60cc85a5a638d370710680bd39a6946d04660a0856bde49190fbc0002acf91617cfc3f3087a37cf592c047550ed2c5b73c2a769fbdffcacf4ad3ffa129c929e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\mr.pak

Filesize
244KB

MD5
fd3452d812a6129b8b6db620423adca0

SHA1
9bfe47a0e9f1843c90875f28d8873d592098024c

SHA256
c9704a3e528092ef676be4a653cb14b906e7c32424d59c8e4f22981014bd9111

SHA512
7ec30343e985f7bdc6a64fc13d50bfe58ae098b03e18afeaeb4c89073059698cdf40477f2323a52c5e8f07f37b28608c54734501d14ad6ae0c9a0f2f4ab0e689

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ms.pak

Filesize
115KB

MD5
0bb952597b170dd4dd76e9d9d546ac3d

SHA1
101aafdf6a4ac0cdba7bd88538e7ac395e715e3e

SHA256
f6721ce0d4d601ffeff011d652a9bf2518386cd8c1d2317763e37512451534ff

SHA512
46c9b63273d6ea30ee63ff230d6b5600018ae54032e04a6707f5873ebd383d0d59645f8d0b44b8ce9a4d40d5acd3453b618b9c4fd3c1b958adb5aefba3465464

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\nb.pak

Filesize
114KB

MD5
e5546ac3407546d6b786e24c7bc21ab1

SHA1
7a9e44a525ae005d0b41020c403c4e1e49d237b7

SHA256
751521cbf27777bc99f2039b987686f921cb27e02c959f6cbeb976799e45066e

SHA512
becf51540db5a0893e6f44d588be98142bab5c2a0f37c0212348e3cf39da52def2fd104c039229b52767a9345890f5768ed897b4bde5c6feccd75036d8b4f363

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\nl.pak

Filesize
118KB

MD5
a17bff141aec095625d0420c7a609b08

SHA1
edf3746b20ff9e3bdbf09b195e7781da1f799a91

SHA256
7482c28c2a42a94615118b6b8cc7d002415923ca104ef86a95a4ad05c8db36b9

SHA512
903c50c39160e40920bdcce0dc337e83b03bba00481f82ebc8ac1cf6927ebfaa75b1f9791038a71632c5e79bf7331bbf7468cc626e303929801c08f54d092c8b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\pl.pak

Filesize
129KB

MD5
41fd7c76e30b333027e86e20a65283a8

SHA1
81afebdfd62255d0b0ca508141dcd7b67982f4c1

SHA256
5de95dc2236f896e66debfe2cc7553a5bfeaa7ffea2820fe1f2f67368af84f7e

SHA512
c59132dc329ee72fa8e9e9c653da597b5fa40a6eb0a7988cf62b1bdaa646a9f09f504219bfbc5af394a12c9ab6050a39740460a3e5c3ed0946b556c33f608219

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\pt-BR.pak

Filesize
122KB

MD5
3b70cbf1aa47436b78a5e8c7672ce775

SHA1
ff9f2820e5782f9eae0ea1d5ede61665fa62cc06

SHA256
8b4a8a3b8741610c279283a6cb843cb274223f720edac1c73296340b02569fbe

SHA512
41e3b3264d8034edf9ee1ab696ca4612ee6ef4e8537b4598805362c4a250f81274425cfa2c9c62330fed73a683e6d3b2ff537b51d869d7da19c4422728da7c0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\pt-PT.pak

Filesize
126KB

MD5
e9f8bc9fd1e845551fe3bb63c9149726

SHA1
0bfbe46e8ffd62493c019e890a30ebc666838796

SHA256
50cadb4da4e61fc335d145374511c34e5a0e40f9c26363614cd907cc7942a777

SHA512
1d3761caadc3ac750c0a89c64db472bcb0764fc1c4b1108a9443fa71633ec7fdd945120a6f05e76221d9c58103cc9865b4857877d57d60b623f92a0235ed15fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ro.pak

Filesize
125KB

MD5
4d1ed9e347de9351454d11132c06e916

SHA1
e3734d17a579ac423ec5fdc5829a211c7b76e049

SHA256
57dc80c76c535c645893c9d3b4d0c4779aaa877445383abec79e32cf02c41276

SHA512
bd3d0841678879a24eb6f2f15c27bcb64a5d7ad171debbb51e7601a3898b830b1985b365363a01d22967969d4d4ddf89a130a5a33ff6a94cef6410b0e89f1849

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ru.pak

Filesize
199KB

MD5
fd441a4b72397f5d76915ebcdef45aa1

SHA1
94a0ab5704e7303c6ef1c2ee5be0b6f4a52d146e

SHA256
df41fb92e4d682d47b5adf942600b4f23c1aa5274b31b844cd4c4b6f0ec86a86

SHA512
5fab517ec0141bb67b4b5ac868100b770fc0b7773b94f977af9205294da9305a2079327a4ece1ff1d9a3b3c805c8d8676c2b0505bf190d1c57c4ed0c14a1cfdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\sk.pak

Filesize
131KB

MD5
befec33f564454253ad90d6cc06ecf62

SHA1
1fa0e082c89f9aa397551421a35b7dfc941f5250

SHA256
9db30eeac7f1814158283affa0af6451c6f7966896cd6d6df8eab14a37e58c9f

SHA512
a581faf67311eb8d81b481d1e3348f579745331f87523650a4fc35ddbe6d5033e726feab0ca3911ef76a21aceabc3e2122d16333d1b7840a933b5231a9e2d157

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\sl.pak

Filesize
124KB

MD5
cfb094955a5a8f655ce8a598d5a89706

SHA1
181ace68b0c3be132ab73302ba7f7c8750f9adae

SHA256
15489195e92cf11354a9a02895aad2ba8f17aecb676dd77942054a4f3f0fd623

SHA512
a31e131663072c1192a4146321db5f0f457d27e14afc8ae40a92a4f255df4cd5302774534fed5247e145c73739a709dd5852af35750f35ecbab0fd4c1a612e2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\sr.pak

Filesize
189KB

MD5
f4041623ce5e06d2dea58d532edb120a

SHA1
2d7ee3ef60b39e3508427c7bc12e046d7bf5e928

SHA256
f2f80d7325d259811afea1e7648c42d3ef3eebfeddaec27ee2817f4e68ab541b

SHA512
18691f4cee3eeaa2305d1c978d803fdf757d9c4e87e88e36d7b1fff482cfddd820568b39a1108065f61dd2cf10d7219c27813aad4d64e71695ab91084ec3c694

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\sv.pak

Filesize
114KB

MD5
773fc8c89b093c40191fc233730188c1

SHA1
28001794144bdb76f62044d57e2d52c8ae1635c6

SHA256
6aab29795a36a0234c6d447fb1fdd9011da505c348b934346a27b6a2ddb92ff3

SHA512
f9bfd3e72955104b922c34352ec16d56939eea634b9abd549d4a3342dd72f8768c85bff59814e419aee6469f6521f4f71fcfe9b8a81c1824187ba818f6d6caac

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\sw.pak

Filesize
117KB

MD5
70510abd3079bf26caf327989e810216

SHA1
ea640cb8b3c63d71d9b3a0d377fef5540b04fe81

SHA256
a11017a3e0e7f48338d4515ec9e79c1764387232a0d9a05fecc4b594bff40091

SHA512
ecbc97397557e27e66536a97ddf78a744c104b258d40d6f31972e6e5c6615699dd24eb02144ae0d3d53764da0f83a06f561ba95bbf08da4bf4a548b0e7f8c052

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\ta.pak

Filesize
296KB

MD5
8a1a245b43af1f174f262d8f53014d59

SHA1
655045f5c71aa2589851a66d5387d4125bbce1ec

SHA256
85d8ef6fb5fdbd1d689aa6cdbbb768376b08b03ff39f7528a3804a3b4bd82af1

SHA512
d71b73fd2b5658acf5825f142130c49c278c801fd8beb5fb2039a3c209a1214a9cc00fb6896735fa4d020bc2279afca1577f35fb0a96a315631d46656d2055d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\te.pak

Filesize
274KB

MD5
93edec428bdaa1f84f5c9478f440997a

SHA1
e03f6bd50b0e0d888f9dfbdc87c98ff567e6a91a

SHA256
a499f50e452ca02ea476fab8954e7ff58d2ee0c6263b8a4657b6ebddeecd2520

SHA512
ae34e29f1e8d23dacca66036e355b12ebb1117ec6e5e99413c792a0dc8b772eb63578b2406730b014fb4ffe32b05dfd9fab8adcf38ab3f5b9bfd0cf054ed09f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\th.pak

Filesize
232KB

MD5
96212a5191b7062d1620388acf1d09cd

SHA1
d3616b6c4649dcfa347df0473e64219ccd63e63a

SHA256
fa5f97bf433df481a6257fa39ef8dcc7961c5d5a83008b02c9773836d7bfc96c

SHA512
5192c36317c3a50696796c7286f77b1a02b7a0f83abb16ff7d47ec94281b85ee2fb29b9ddff7c4ad8b28a2a757772bd2bc726b10c19658ab672966679d391508

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\tr.pak

Filesize
120KB

MD5
4e7c047364c7c4809242741b98b28092

SHA1
4ff1b303476cb75d8190568c346e8cc2e452da14

SHA256
6a25be43b786ab853f8081c53012be623543830cce5ccd246ec040d98f22b852

SHA512
4624cec04114c15a72a804fa4966fe61303effe97039337273ed0dc99e8a6a685ca5cf5fa901a84c8b219d443f1a89e6e7cbe09eb21e7ecff662301067a6cefb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\uk.pak

Filesize
202KB

MD5
33f02db055c3f91148feee375acabfb7

SHA1
ca1dc284f41bc55cf35f94a4039008df9970d411

SHA256
1968e9ed7722089330e7a8ae2c08f241aa106ed2be8948461439e6a92c330688

SHA512
ad16973e4103ced979276c6de175eb600241491ec9c441168e6375f68f8867d3f0eba422dd0ef6404208564015119f1e5e2500d5cf4ff2d8da45d713ed8c251d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\vi.pak

Filesize
143KB

MD5
98cb45f0555aee1985710196db17d72e

SHA1
1362238c253bc2a0e50c8dde6c95deb027fd6348

SHA256
39a130557fea33a9c899f347fa3ed455e58bd51acc0b3b4586f76694b0f34646

SHA512
93125310ade0c7029f0406aab291c35d2b7d1941f85bfd3d6071f85ff347c46e793a5ef164c08ebfcba252269a4aa84bf7a3b8779a36ee2f3da303411becc27d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\zh-CN.pak

Filesize
105KB

MD5
20b6d54de42cf9c56f0a85fdc27d82e8

SHA1
cecb82b4afe8544876f443fcf578453358ab59a8

SHA256
4140caf95939f116993ecd8bc5f7681991f96735d2397c9c7b4c66e3013eed24

SHA512
646af407dfb85863f4555961f37f706c18b5c1e68b3111eda9f9b531ba2bb60cf67211ad634037b872156f0ddd04d50d68c49173a27a78ce59f75cbc2bb6c3bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\locales\zh-TW.pak

Filesize
104KB

MD5
03ade5ba27cd3ae9bab6ab3a5cb721c2

SHA1
a747311a5f6c2e0e535efd52bc96f3c4d12d5c3f

SHA256
0c4abf7a66026068cd4f458d504cb04f3e04cf9fae45419ddc2d592f24899a2a

SHA512
33e122328773039595248a85dc0940841a1e273957ec9a4e175871b3ada48008b608ca6569b495275abb8e2a8844ee0c4d90b48af915a3f5a6aa44f3c37e51f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources.pak

Filesize
4.9MB

MD5
99c5bf0dcd43f961aa3e177f7dc42d42

SHA1
5618abd2e7b45c50400bb4aa0c455bb0b28bc472

SHA256
75ff04d991c2a203105525a1ccb200a461717ce7b86ada4be092fe903d95cdc8

SHA512
2e508c46eb266301f42ee6a7d63494f3856b422df61d0b605096bf4fc4943239d3fba15161adf8cb1cdcfd3bea8608102a0abce636999cc2a9e01bda51cc77ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\app-update.yml

Filesize
100B

MD5
753871ff73d231ba73614677412ac14d

SHA1
789f696b41591498eec4fdb0db78c68c6d59dfd1

SHA256
2090cb7c9033d9cd1afa2275ede6ee080aa7bb97ff741e3e449af97b177551ef

SHA512
f56bf2114cb84f0888eaec4d715bbac5653c5dd038b3bdb07282a9a560b20efc590909428a3f7b0d95bdc3c6aa9d2f37c8810d07f737a8b290ba0e924c7be1f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\app.asar

Filesize
12.3MB

MD5
e69d3d412e3e3fe7253a1718bc179912

SHA1
154010073f04a05b3524841254b0f4d3ef6ba2e0

SHA256
61bdb262360c85de95cdf2b9619bb0621076d4355fc48a46492d05cc3626f3a3

SHA512
3436dfa3f7a84820da24afb6a454ee605bc51f79446be3434b6da8b42bc5f50c4d5099a9276e910b226268723c999c24370a8bca0a1618b12685059f7bdf48d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\assets.d.ts

Filesize
514B

MD5
3474b89e956a0f104c48700caf1f35e8

SHA1
061fd896f9f418a4db9685fdf4cc4646bbd7018d

SHA256
498a5a3ecd170f99e34ef350c1150397a56461ca7f9961d2a22890833eec2edd

SHA512
164804bb6b9142dd423f75e3f75700813a154f4a41a271aad4e191fefcf4a8d32d4c7d5972cfec6a7f4753ea44ea5dc03d4fbbe0c28cf00af47729b2f66c3ca7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\entitlements.mac.plist

Filesize
333B

MD5
9920b60c89256ceca825062dc9c53c53

SHA1
0f1d847ef4067022c69fd82c135f3dfd2e4d352d

SHA256
f4b2891dc2b1239191cecf7cd5b9a36ea4edaec33c1cc091e09380d669e8fb63

SHA512
93ef0a66d6aa8091af3ab8af4b1ced502ded11f658aa77b6a5fe9e3d36bd5d01231060a0a656ea627c0fa32313b7a3438c75e1eb96f4f07692ee4d0f53ce9a90

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\icon.icns

Filesize
18KB

MD5
fd27b269f6bb7c7c28d0f8d330cb8b78

SHA1
5436360c72d3bcf03099b91904d6013e4ef9098a

SHA256
c32d173e12c75d85532de8bebf8a65389ff352e38623cbcb5d90614f979b4a1f

SHA512
647e113d40973b96377ab818a3ea3f269613da29c84e0b5649cd024c9ea1c2d63235dadd97bc9490fa46706a2f39c2957360741e85da78df96c74cc0144cccb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\icon.ico

Filesize
2KB

MD5
ba449c2f602dbee8ccb754ab9ccb013b

SHA1
b61391be537be84bb22140a22d43fbf96472cc55

SHA256
8557d5790488957917671bb447fa41248961cbcf60395023d700f4b431e16db8

SHA512
cc5ca1fc2844ad01eeb5dc50d469427a6a4c18ae54c5732e8cb9f20be5667207330f870d18e681503ae2bf9c6c94a03eac8b83d8d32e344101566a933405b885

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\icon.png

Filesize
2KB

MD5
bd8d487e261ad75074f94d065a1fe5ea

SHA1
5fed02a831fa006d24d2053f271817969c411539

SHA256
5155e83d66a6c33b38551a7806b2ecedf4c3d6022811c18e3a90a542e725dd20

SHA512
5ab2b0b469ff0af0cd8e26a6767335369ca8b73e7b9f574ba38458b1499978242dc88fef5975ffc6417335c7931dedfc91158e70018982adb92c23d776dd1de8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\icon.svg

Filesize
3KB

MD5
6e21449b8640ba1dcf485c7f4fabbd2f

SHA1
1a50ae72417ef6bbf868f6a3fc75d1a6a4d8cce7

SHA256
08545f22c3bd00fca027a79a26f605c815166a0f18ffe41ce706b5cf68525bd1

SHA512
754a63e1e04b8a4e1c674c4e7fbee91d025a10010cd5051d2aa22d303e7ed5de1a404833a9ab2f9662f478bc269424672ea3d172ddfc4854fc18620719a5597f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\icons.icns

Filesize
17KB

MD5
158e222cd935bd0896c0ae9f487ff802

SHA1
608d0f248deb75705ff42c3143f16456debd9307

SHA256
a62384102c23e7dd8e715a671c75bae0b66d455088cd80c957276a97915386dd

SHA512
1f166bbbb73ae64575b0dc6359769cb16095bbe49b3f94a6cba9cf5ac433e62e3ca1779ce7d40abe8aa1a2b8dad4fd0bfab4fa386ebd8acc4dd86b78c88bfa9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\images\grass_block.jpg

Filesize
14KB

MD5
306cea0ed44b65ad39b655b390cd7193

SHA1
f6eed63cef5c6753e43becc09b337119779a12a4

SHA256
d41c38b285922cea8c7fff69ffdecf536a438b080d1cd7de05dbbda8d2c8edf9

SHA512
8ca08690130c679e01b5e29781b2e113bcd24aa80875d39ec6d3800f6119a36c4ff029c8c062d5f9fde8b049e0556e2e1083e821236862563a4699a0c09565f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\images\microsoft.png

Filesize
711B

MD5
4d388badb05661ef1163991b0d40a55e

SHA1
ae4fea8bea799d9e012946112081e8441ddebe67

SHA256
e3345ae5060dcd5a7e5b9e61735c8b66916152831298707a5b809e5120a88be6

SHA512
87dc0b07479234ef61c4b1a838ee629dfe4d62c6c02337182f561fa6209f82c5070a3c0f072e22030a3c8c21dc551f66b6d05d3a2809d0f5f3b6ca7afe34a846

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\assets\images\mojang.png

Filesize
15KB

MD5
c87524b65e064c564d97b782cd5e49be

SHA1
439e9d6ba008a53015bb35dd4c757f68a27035c7

SHA256
ab15f46745e9f79b03f2dd414db0692c43776297b416c508dfb478f3fc31d517

SHA512
4bc2c07479aac39b2529c6639f7dbbfa6866b10dc2aee055b549f8d49e6609e68d9073166169c304cea65784c45c18ba9bc3a751fdefeaa0e8df1174e7ec2b9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\snapshot_blob.bin

Filesize
48KB

MD5
c497639990ef3d4435fd721e8e855c9a

SHA1
85e7df364daab70730c756b8e24e81965d5a2255

SHA256
5e15a82831965e521bee172e6878806bba51d410d1fdf1b4eb01385d1954502b

SHA512
63f2514d585dd7d3b988f0aaeed8106a06b67629eb54f2152e8b4a24276d9f56fc4650c8770d0ab44b4c57ca458856a0cce5f26f6226a56a807b38ce5615ead3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\swiftshader\libEGL.dll

Filesize
445KB

MD5
be1b6fe26a1b5a3e1302c26ce5ce53f3

SHA1
c3cac08e89c4cc91eae1cc87e33a1dea723f1d78

SHA256
162abe61314e720384d8cdd43190a89df8a96de52f3ede7b6c58998f615d8546

SHA512
07dca111391dfb6b7e90d4be02071bc625128eeca0b9d9a3cebdc7916baec9f95cbbf906f2533befd6b62b9bbc69488ffa720f8d40c9710dd3b7d540d9dcaa55

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\swiftshader\libGLESv2.dll

Filesize
3.0MB

MD5
1e401ccda5b723ab8a595a54f7d2531c

SHA1
127716680dd16f776b19c2306d716935e54c5100

SHA256
c167a458174e2a280c39d7af31bd109e8e2921032a687097b584653adc33ab21

SHA512
1f2f35021f338aa7c5a0ae83c196217fbca6b1d017ac1bb4f1eebb93bd6e18c5d74c1a14bd4899d7a91d054b0139b2c4fc3271c35148ad1d8b71139aff0132fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\v8_context_snapshot.bin

Filesize
160KB

MD5
a718c9b6e5e6563e23e450a0d01b932a

SHA1
95ccb1228f024f037259e759dbac464f3c27b8cf

SHA256
315f5ed966a1f3a89c94d1b78b9bf70e59a2869601cf6551b2c1fd3e3b008447

SHA512
b04512e95ab3997bc7d5c65e2f526e124bf1895b139eb2b6c6c7b4a4aa381cd408eb2bba01f44b09b1936d24752baae288f24a32ed84687d3e7e0681b5387d01

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\7z-out\vulkan-1.dll

Filesize
715KB

MD5
25afbdf6701013c57b19b92225920915

SHA1
009300dd4ab3b81794388ce7d126ae90ff97535f

SHA256
22bb65dd206ce7ee10c05557933a04a04144e1a8228d2a9d1e9d704b0b1b2f7c

SHA512
575e38b60948cb704c355ba9cf3457f2693c30f95e85f10f795e759652bf4317e18ba480bee8aafcea9108415e8e58f674b22c7513a9fabee765142486919a0e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw5659.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\2f55c133-1e69-4dc4-9a40-e0bab3529d69.tmp

Filesize
539B

MD5
0d1209d75b9e6a209ffd437bae662f87

SHA1
cf91fb897109f6f478205a4be7cda382bd8929dd

SHA256
00be1d826fcb0c5354b89e89a3390a4948a3489e5c8582cb40faaf9cc0215cde

SHA512
48cfde015a5868d658e756c8063632f6e0b5bb95d09f0525bba457b2ccc32082759edf69253fc7b3c1b400eee6198b5e6dc60954da27c37a9ab91a7e57ac52db

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Crashpad\settings.dat

Filesize
40B

MD5
2b7fdb995d8692507d92c764d9d0d4fe

SHA1
06582bdf960fb61429e989b3476df27d784045f7

SHA256
b85c80876cc32f2f540e49f1aacc18cff8605327afe13e78d6c8d59ed74c3972

SHA512
a8f20107aa478c6db6b2cf76b942f2c8fefff1ab9fb15eb9b9975b4f0edf0be069d0118d8000f468ddd4c90ec6603b35fabf9acc21f163082f043544faa23292

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
997B

MD5
250d023d609588c6fe151837ced4f0a8

SHA1
daa179b4f1c7ae8c524d9d7a897c89eb038549e9

SHA256
fc414dafa7abc1c2c1085e905187b6c7a8cdd05c8694767fbe4195f8ed99cdb3

SHA512
948dabcad6fecbffd90ad8c5c3c8d3f2b257f86d7b0003aa81a41cfc8b0c6aaafbdd8e480f7adedd691873a2cc7d2e2c2b9b0d7d964c560ba5ad0c8adbf7d694

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
f9ae233c7214d664546bffa16b5adf5c

SHA1
0c3f89ced6c4dba5efa710b53d99370151ab4be2

SHA256
14837b84dbe7ce38956a0940910e29234253f89ac8a501be1557d955216d93eb

SHA512
f54af176b577b75221db422272fe7f94fa77a5e325f44a660731dbe71e4e348e0d7407bae74731fec7885a2c5d077e1bcff9d088bd492524d8fb72d56d028b66

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
a901d802082818f067ce4d04bdf03935

SHA1
b856a83468f3175664148de5cd1a50fee98b1efa

SHA256
ee8776b3326124a38c9f9c982d2a86b4da42ef2b1b49250c9ad0ade5c41a8253

SHA512
8897dd8c99af4576cbf57ab7177619d78c9ed0ae6acbab1472d9b8956039591d1d476841424e5308f2025192b2f30740ee4e91bf9dd25429867a52695894ef31

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
935B

MD5
25689453f91bf68a674870d8e1841d7c

SHA1
e4640642c2f2b8257b6e6517855559ab003c4b4d

SHA256
7974258a170400f75d6505fc3dbeb6f1a9b77bdda04765a4920160a236adbb65

SHA512
a090d8dabc34c7defb4730f2bfd791daa1e5afb5c73efa18ebaba78ba578b7c8002db9160402ead563ece9d6c37929fb8a2cd5b0ef5e619a4b62f9dab02c19e8

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
997B

MD5
b6c0f3720733adefe9628d8a08022d91

SHA1
e3ded7049cdda44607a7890672d0b886d67102e0

SHA256
b50c01812c70dce1abba975e4bf37894475ba1853ffea5f099f6b2a96b1f16e8

SHA512
8822f38d4dc59f5a3d1e259304bb8708a3194b96e924d2db7ea6b260cfb6b0454316ffe0f56ef3f62e0ff07d0f782720a1ec5c03a31d7548c037c78548b3265a

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
8cee10016b4604b40f00cf258daf8378

SHA1
4dcd16ab39d8ddaada90c77c47fa26cac9363e49

SHA256
ec670b98f0a9108b9c8c2962a1a766ae3ef63096c291a4171de99f3baa03084c

SHA512
a92221a4508a0caad790c4adbc6e594b2a87eb94e2a09ac623e5062b22ca0759fa51d240eb9d05107d1d7d30faecb8f50de5cfdb2578a7f147630958bd3f5c18

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
58163680f87e43e9b967fa007a9c11d1

SHA1
1d93fc032bef089c24504f5882585a21ff643e76

SHA256
3d9ec64105c3b5444c6ce505a06c71b85054fd4542091493e4452e8c5f72ebf7

SHA512
992c629bfbcc8bff6a54832e23f291f8150aef80147092b5469664e371df435bc2e61d0f0c5f791777c0027e84235aefe58c18c0da04f029422e52e3d9251a30

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
eaf457f06ab1d065fe209839078c1b11

SHA1
0958cda73e8a3ce14fec3fbe84778b69aa20e2f6

SHA256
be8151dd763873f8e4022dbf81e776cbc6a222d399b00f8e7658c803d9a1446d

SHA512
f7249fedf11ffc5f86e067dbc42aadeae0d7d904193985d306ac7d582282d0324193ab6461285e398cc4edf66dbb35f61ec72cf02520786168dfed2ad2e2596d

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
9a855cdc88b796a15a161f5461bde16a

SHA1
2530172060a759aceccc575c11335dd17b4f9d07

SHA256
9ed38ef0d02c2dd04b2d0bb800f98b90b9c0f20594d295db6890cccf10bba804

SHA512
61c91f92a67e546c38f26055a5c24baf487db0b9730e994a1ce86304bd1a1554234a8345f633ff135df1dbe46b4ca4d7a722a16e837482d270782d821d8dd8e7

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
dafa90e0536dda66643c011ff91804f1

SHA1
878fefd694c4c9674d7c93dd294a4a01c3fcf564

SHA256
626c5803693683494c295d0f45d528660a2a27d427c152cee364903d3485e7d4

SHA512
6de4dceba47f903cd756c0439ea1600e1575b8395ab094ef32e7e1783e483948eab5addf911bbab690825ff4eae0e33ad71bd9487e05faa0ea0989858f272d59

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
b430ba9f3bc6148e637185d3dab4c8a2

SHA1
5967b691a17e3c82e2213abf1a45f2f8e1d0b0bf

SHA256
a38ab44d2fe1cbcedd897662e0a9b2519d924c8bbc09bc5b343ad9358f8501c7

SHA512
0f2c536a9a76b0e2e7b18b1177ffd055724bb2b250611c40783c9fe84619f3a76752836787b902d32c20202503a4c9c19a5bdd604c6c4a09b211d4d999705481

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
9fe222e92867ce5d284bfc4a8b17cb21

SHA1
8ea9f8fa06df6fd57a35bda36b4b9ff5a03d6e12

SHA256
d7156ffd8fbd93dd48966da502ed700ecb253f5cdec9e06cb98c6cb2dca51bf8

SHA512
8ffc971642123a21fc0030abb04f73f53798fb6ada9e1067291d52f9f79afa7d8aba2a19093d506ec810458f79b63ba76d3ec589605f5c58c3abc9fa9debfd51

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
e460dfb0b7b7055fc65b5d17c83cee04

SHA1
12dd9f8404350fa5c9eeedb1b7079607ccd1f525

SHA256
ba86ffa539b769c0c10d3d7ceab1818e5a55c725ce6690ca383cd29676df7b97

SHA512
66e7fd57dcf38f2359d0ea5fe76c783935d25c8d231a4b71514927530c097b2834f5d0aba9969acbba852b3dc885703950bdd09487cc94426d7995a09a9408d8

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
2a3664075ad0295e9ca71271274935cc

SHA1
8331a8ec146734044c6a60a58a9f98bfd6ab8077

SHA256
0d7bab2a16ccae0b5be31be2e650ff74c66f3543de9a64ab39a46b31680b365d

SHA512
bb52dbdf67171f9d9af235930339a0778665611b4c7f01c2edd8b1e49be84f58ea543cb079eab112f0d3229816bd76964f72d86fd5ab6569a3c6b786861f2861

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
c74d26f9915e0a99ab41a0716045f103

SHA1
e93331bb02610c77d14a9229ecd44bf47ca7af42

SHA256
7cb58ba4e308b38e81eb7754d236463f5002ff51153c86ad916d896a2d27d557

SHA512
77a8d5516bed3c759333d67f2cec8123887ae92b0e724e5871ffcc6c2ea56ce925770410b962bef514404100dbd86da5f8536a2749d086763448c23f71bf5a02

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
1KB

MD5
1e7b82957c6315663b3e94a84ac6fc25

SHA1
75fcddfcadec0a866527de89e3246096c6fbf32d

SHA256
47c7951ec70d7459eb4a2cb8b00d0e9df2fba03b0419a1dea5627e4548c1acbb

SHA512
95e0c0ec2dc17f4b04f5874fb39468d2f14f4392360a84f9e3966df2569a63aa45438a49b5310b2f7996367a8ff72b75586b1ef561953d8d7ae09d7d3daa2cee

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
997B

MD5
6f5e9cf3a590377498340b79b3784819

SHA1
f73d74eafbde4f8b7f97d241b08ce6ed2792cd97

SHA256
f2997b6ec374ee1d11be40c065cfb26c5c0511129a987d0d979659afc06cadbb

SHA512
228550bf536ba5ff22d80312335e91cc5d59513def893e1c03bc89b1a8ed69124f0d057e5320e03b720cf56d73eb72e7d4167d58bd960e18425568e46ef29c59

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State

Filesize
997B

MD5
2125ebdbd59e0e82e4dec743c653f6e1

SHA1
380ac3d6754fc4c4513d44229f468e5ae4734d3a

SHA256
f1301521e3f190056b8f7d4b429c2b542c59c19ef24580a76fadec3132a05694

SHA512
cdea72b30b660ac7ebd5561b1a973b067e1d4449d354ad7ae76d69cbe82293044596f348b8224e70e1061d2942321d0d54f4c993580fa0224aa85a4d6b61d459

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\Network Persistent State~RFe68dec4.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
371B

MD5
edf684546635b8ec77dda9c2c687ac43

SHA1
a9d33510446b6e0db9719bccfd7c61e6a94e04e9

SHA256
f6c9b7019d4a9ec08026bb1e20fed008ebd73e9fa22db3b16ab2939b612517b6

SHA512
2f0f5eb3b86887aa09062759966a67f5cd01b2659c59d925091ae05eb8ee9797d035b772fadf10bc222adb51b7b52fa40a7cd9f5a80db1b51c54ced11eed7f0c

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
539B

MD5
f84d109d3a77c74f92199e0521b65eab

SHA1
50d3ec0447e8cd98fb09ccdd557b6d2b15c8040a

SHA256
d7c5a646c3c6a4b4411e5292a4994764b4a8522af7f478528e8042d488f1168b

SHA512
67bd7e6401dacb90b343f3c66ef7c92876fb1ca1d7560c9e179d97e968a9d69e3d1f99fe77b3beff320a4fc7f35fcf0c6b544576ee75b83baa85b957b0f46c8d

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
371B

MD5
b7ab90855543141e38517ad3bcb6091f

SHA1
b9c6621215e3d102e7c8252dab84a44162c06c6f

SHA256
426b239b7269f3944d4664cf610396255bbc305e11c4bb0ccba2847dafd0a692

SHA512
e1fdf8f977adca02350464c1d3a7f4ee0c3c953b7f5412808c3f21a9bfdcf7ab1562b8f95f62e36967edc10b88e93cd34b979cfe875bc3da115030f575b5d8b8

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
539B

MD5
f3a211d8de603347f06edef141ff3236

SHA1
764ee86085b421ee40a428c4f5b1a22be4e09f17

SHA256
6747fe15a0ca56021cbd9539e5c84c3e39a0af16a325be7bca52c0f4278ff729

SHA512
b352930dd14ce7a8284bf6d18f60f164b99938fea11eae21dfe2b03bcd6f04e2b96a6df52f45f8797d24f3351f11650ef23a4b1b95b1d46cd895f4e077391374

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity

Filesize
539B

MD5
c4eeda93f55918711aa1eee14695b440

SHA1
4b14a78da7b49ebc0f2a1f0a1972a97f9a5c2baa

SHA256
0ada1e68595af52510e77b09191fc3ad31a580aed953213f062f457192c36f96

SHA512
233bc14ec963101242422a8654ba1f0132f02fb46c31594ba634f73f178a5e595b9e84982c3f31aba5b4cb131ddb2e2ce27b7bd4676b53cd4ff938b09986371d

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\TransportSecurity~RFe686bc7.TMP

Filesize
203B

MD5
a24ac4afa466b80f2a3c9088e1b491ba

SHA1
655dc8f0590b4b47c108915a9dbe9ca32632eaef

SHA256
8e6030dbe01bae356a574bbc0a2f45a1b517dd4069817ac778fa1ea75ad1549d

SHA512
e08fdba3212cfdceb49ea83b9dceb8b199ea859ebf098ce512c4d79706887d6fd347acb37e9b2ecb3eb196a70b015f61aa0e9397bca105a34db03946ebbfea80

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\logs\main.log

Filesize
4KB

MD5
8d838aa6c6317247c7446caf30f3a408

SHA1
122a349bd670e31396b59eaab09c9033212cb882

SHA256
a491376b8bc76032684251f8cd81c7a41e7868d1df03a414efcc5c63dd2d41a3

SHA512
334b935a11cfea9690c9092698c5b1c233642abb3e9deac6482690d51bf359f0b7acdff744521b45b5770a60638fc8b749757616325f611a22d83a615541b5fb

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
65685db5a28a44365efc0fca83adb267

SHA1
5ea9f7d7eec2619e6e00bd2ca529af8709cd53a0

SHA256
8d3327502ac28fa3b90871b3238d3312055ef264ca3867da7cf4200cecff81f6

SHA512
db591c0d5c8a1935f11d66f9e4da65a0e1137aead8cef816b4fa5d06fa879a340639e63658cd50340b97037c31181a96d807ba56215f77f90839c8dfcc5bf980

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
b995b1c5f5d84100d441199ce0e925e6

SHA1
653b2058ab67f9bca370e7656a69bbe8e224b68f

SHA256
b0ab7b4dbe1c3884c5d4c796f590e7ca49f9e4d2ce7ac728c6ee62a0c3722d42

SHA512
16fc76183a4924ff9fa3b0e2b2eb3d4ad498006ee8a4ab818b0fb799c7e5969dadcecf72331f1fc6db9b5053a5b28610aa2278bb3fee19cb5aa87e13df7d80a0

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
a7986a86dac2f82cfe57508e9ceb718f

SHA1
8affd6e028499192566d5c597cf618d71920afee

SHA256
e198ade90aaf8972395d568c55a6853217762d4268140ec098ea77984b33dcec

SHA512
b25b63efbbfdaeef93f4a11ff9160239faef3014be6ebebcbee0d0580ebb608441145e5a37e7c84296e1e2cc403b71ab1ae2c67144cc398dd9b03c1fe7da17e6

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
ec8bef5673888f56a3109c80db8d97ee

SHA1
2f708ad48454aaa667b63e6cbf79c5e309da0fef

SHA256
51362132a4bb96811d0ad7c9ca05ca74f995b2ba3470b8ca53aa40dbd022b9f7

SHA512
8572c900a7c8422d32474713032fa5aa40b9209fd906dcec55a8a9ec46c1d84006ae58f6f73b555f810bb92ce520188cdcf23bed1d84f0a7eb46a42c3bafd0a2

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
e1e23e333360a7a810264accb3a2cb3c

SHA1
efe1a69db87429a22bbf7f362440b34dd06e6255

SHA256
e17c6e5b9c6105262b81fef1e85ecba22e9440514fa0605222d3441769181424

SHA512
651c022d9269f3fe06a175211dcb76bc5c042bdd4eb36aae431d82a03cf0c86deab49226753a4d2d4e08b04876987120597fff32b6bda72440a477551b4b2ac0

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
5a2fd59c37c78e67dba85f0a8ae23c0b

SHA1
9a8ca06502527e76e752841c884a885b5bca7ad8

SHA256
d6c20c372c6b91dc56e206e478e9ecfbdeba46bb164b001a7b8e1fa83b56dcea

SHA512
4853b531d439c33ff485823e002097e4861f044633fa248161f581d021708f361a9442be4aba075aad36884ef233f91c7e551f24d84101ee5a44059f87ab676d

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
17329846ca13e6800b5b59e0f021a235

SHA1
d0215e4d87a169d19c188119fbf63bd5527add82

SHA256
def678c467eb3d1ede4de2ebdb2a7715be34200a4facbbc3cafc0b62849f0554

SHA512
f2b5df3269db371564d6c0d19c25416d3eff3efb84c20346110fe224b61dd17cad72bbaa8fa57f2f0aba9f226d3b360307a07c633a96c6cac6117b2d3f7baf74

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
213ce17ae4c90b944018a64b5d9d2008

SHA1
553c83f7555aec715fdaaa9109ccb0947879549c

SHA256
d1c96eb50267868fa1e219e11de8a5450c9b8a30b858aa1606d5a5ba7a3b4098

SHA512
677cb3837945ce8dd1042bb8adacfaaff05a0d585543c40c682e17476bba5840fdf07043d77ed9f01363ad8f085d9248204208dbe12c3ce4261f55d241066d5e

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
c929ab01274b1755553292a75b53a8f2

SHA1
794a200f6584733849a76429b176f5f826a09131

SHA256
452a570d0a6d5fdebfe69bde0d1ba31cc78bac2bac9a8c9d1a1c6817f044953e

SHA512
ee329df443f01a86591ba74f9cccfd5d14bff459af1afb40a925ad912ff0d2f67b99208afc3e1de330351d507672ea89a623613e248019966c68f73a99dbc08e

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
059f88e204ecd43ac8a34fc508408c17

SHA1
9ac28da98808bb8e5bab4d44f4b6282bce432139

SHA256
030a87a55cb20eb3dc04b80cddbefed709914e10f573b668960c1c0882b3c394

SHA512
3ca094066c325f2fc2342cc97be7324e7ab27043f75a69c3db75dd5288550ea00ce05d1cff7d4d3b62cc2a115bb9225d8a01b9a939f69f45638e5d8744795392

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
19KB

MD5
17d9d3f6a0c293dcae420476471c6707

SHA1
fcbe537af2d49c045651b74460557576e9f77664

SHA256
736fbfb29ada7fb4d8c974d159f70f7a7db14507d933f64df77b665ec0a30886

SHA512
d804a50c667f38fa29ed1906a0221a6911fdef263ec9131ec8db64c24d81d69aea4433eb739abfca7a9d0bf0962af4ef19f369052f5e4b07b7076becba9c2d71

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\scope_v2.json

Filesize
632KB

MD5
088039c909705409bb80aebcec6e930d

SHA1
0965b2d22009273006c2093381dc04baf588c548

SHA256
447aa81198b168f86e96592f4f97001844176992c41cc6cde58085431dad6c90

SHA512
837bbae659c2f854521943bcb50656723b4f2dcfd4f0f21a6bd709094d39a0945ff130999a60146df07215f350b551d500f86a2ceba14039a1a2b1f8e5b58283

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\sentry\session.json

Filesize
261B

MD5
67e2c50b3c77e6f850fa3b74e3fd07a1

SHA1
bf51bdf9408e4991e6f8803c0c90d45f20ebafc5

SHA256
900fe36c049de5a122332ee501c5a7b4e1f78dd6397a1b2baf14f571ed980b08

SHA512
0c32b892cf667a6bad38e84c234d3fd7abad2743a0be0be9fb2e2f429bc32368d99e53391be3debf93ee3388fdc21a7175f5a430f8c04ed4c1005d354c982398

Download Submit
C:\Users\Admin\AppData\Roaming\easymc-launcher\temp\zulu8.40.0.25-ca-fx-jre8.0.222-win_x64\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
153B

MD5
1e9d8f133a442da6b0c74d49bc84a341

SHA1
259edc45b4569427e8319895a444f4295d54348f

SHA256
1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

SHA512
63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

Download Submit
C:\Users\Admin\Desktop\EasyMC Launcher.lnk

Filesize
2KB

MD5
c264ded66e38fffd7fe1c6b9a0395526

SHA1
cdd69a32e9ce3147ca789ba16855c9d946a9748b

SHA256
1e98bf59b78c2e46137027c9c8da465dcb7c54926a6dca3b3af29d33e474d28f

SHA512
8d0b096a4ab4a169b2521fba42f3d17996889e0f1ba461d12d7c2f4dde91d0b42dbafff9fd0926b83d543eb8774d14ae5c263d5d2fa059211eb407f3331dc63e

Download Submit
memory/484-907-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-899-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-898-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-897-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-905-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-908-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-906-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-904-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-909-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/484-910-0x000001B27AE10000-0x000001B27AE11000-memory.dmp

Filesize
4KB

Download
memory/3340-5889-0x0000000002B80000-0x0000000003B80000-memory.dmp

Filesize
16.0MB

Download
memory/3768-4580-0x0000000002850000-0x0000000003850000-memory.dmp

Filesize
16.0MB

Download
memory/3768-5901-0x0000000002850000-0x0000000003850000-memory.dmp

Filesize
16.0MB

Download
memory/4532-714-0x000001CF12920000-0x000001CF12921000-memory.dmp

Filesize
4KB

Download
memory/4532-670-0x000001CF0A640000-0x000001CF0A650000-memory.dmp

Filesize
64KB

Download
memory/4532-736-0x000001CF12A70000-0x000001CF12A71000-memory.dmp

Filesize
4KB

Download
memory/4532-737-0x000001CF12A70000-0x000001CF12A71000-memory.dmp

Filesize
4KB

Download
memory/4532-738-0x000001CF12B80000-0x000001CF12B81000-memory.dmp

Filesize
4KB

Download
memory/4532-703-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-702-0x000001CF12CE0000-0x000001CF12CE1000-memory.dmp

Filesize
4KB

Download
memory/4532-704-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-722-0x000001CF12860000-0x000001CF12861000-memory.dmp

Filesize
4KB

Download
memory/4532-686-0x000001CF0A740000-0x000001CF0A750000-memory.dmp

Filesize
64KB

Download
memory/4532-719-0x000001CF12920000-0x000001CF12921000-memory.dmp

Filesize
4KB

Download
memory/4532-734-0x000001CF12A60000-0x000001CF12A61000-memory.dmp

Filesize
4KB

Download
memory/4532-707-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-716-0x000001CF12930000-0x000001CF12931000-memory.dmp

Filesize
4KB

Download
memory/4532-708-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-713-0x000001CF12930000-0x000001CF12931000-memory.dmp

Filesize
4KB

Download
memory/4532-712-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-711-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-710-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-709-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-706-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4532-705-0x000001CF12D00000-0x000001CF12D01000-memory.dmp

Filesize
4KB

Download
memory/4772-766-0x00007FF9F17B0000-0x00007FF9F17B1000-memory.dmp

Filesize
4KB

Download