Analysis

  • max time kernel
    153s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/02/2024, 12:29

General

  • Target

    PollyMC-Windows-MinGW-w64-Setup-8.0.exe

  • Size

    36.6MB

  • MD5

    77f098ad333889de410f665e4f9a8702

  • SHA1

    6b8e8abe6a374f02a88058961f180818cfcf7670

  • SHA256

    1c04ed11ce29fcfc3186144f0f907b70296132eb3db89044463cb14b97eb87d0

  • SHA512

    711326a015e02dd4789023fbefeaedc769d0ef33668497c107cb3c512a2acc2fa312d3cd5011d3a510ccb87ce236bfe0fc1d4b253b332c2e6ecd9ff6e7c6af9c

  • SSDEEP

    786432:2KQbhz5LGoCjmcE/ppyp22HaxvPAXkFeOLV61DDKr0wlqDIgtQ:2FLCjmphS2iSvfJLQxKr0wlw2

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 51 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Kills process with taskkill 1 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PollyMC-Windows-MinGW-w64-Setup-8.0.exe
    "C:\Users\Admin\AppData\Local\Temp\PollyMC-Windows-MinGW-w64-Setup-8.0.exe"
    1⤵
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Windows\SysWOW64\TaskKill.exe
      TaskKill /IM pollymc.exe /F
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2448
    • C:\Users\Admin\Desktop\New folder\PollyMC\pollymc.exe
      "C:\Users\Admin\Desktop\New folder\PollyMC\pollymc.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      PID:1556

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\nseF2F.tmp\System.dll

          Filesize

          12KB

          MD5

          cff85c549d536f651d4fb8387f1976f2

          SHA1

          d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

          SHA256

          8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

          SHA512

          531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

        • C:\Users\Admin\AppData\Local\Temp\nseF2F.tmp\modern-wizard.bmp

          Filesize

          25KB

          MD5

          cbe40fd2b1ec96daedc65da172d90022

          SHA1

          366c216220aa4329dff6c485fd0e9b0f4f0a7944

          SHA256

          3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

          SHA512

          62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

        • C:\Users\Admin\AppData\Local\Temp\nseF2F.tmp\nsDialogs.dll

          Filesize

          9KB

          MD5

          6c3f8c94d0727894d706940a8a980543

          SHA1

          0d1bcad901be377f38d579aafc0c41c0ef8dcefd

          SHA256

          56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

          SHA512

          2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

        • C:\Users\Admin\AppData\Local\Temp\nseF2F.tmp\nsExec.dll

          Filesize

          7KB

          MD5

          675c4948e1efc929edcabfe67148eddd

          SHA1

          f5bdd2c4329ed2732ecfe3423c3cc482606eb28e

          SHA256

          1076ca39c449ed1a968021b76ef31f22a5692dfafeea29460e8d970a63c59906

          SHA512

          61737021f86f54279d0a4e35db0d0808e9a55d89784a31d597f2e4b65b7bbeec99aa6c79d65258259130eeda2e5b2820f4f1247777a3010f2dc53e30c612a683

        • C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg.atSzOn

          Filesize

          30B

          MD5

          a6dc16331f06bc5831e5ddc9799284ec

          SHA1

          d344f83d549df8c3e2c959182ba37f8c81d885a5

          SHA256

          9da99b49301ba83c33387e75d2028185562479e677b6afb110b4f8b098465807

          SHA512

          43e498eab5c6f9b2f70c01e0abd4e63edb2651e498f267b53c7f62f2ef9c1eb68fa4783967fdba1880722a8bcd6e58065108f42773f0f47c04c9e54e809b1c14

        • C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg.lock

          Filesize

          60B

          MD5

          08805ba56716944fb08955db0c8bf28c

          SHA1

          1864215d18f58eadf258e7d1172bfd3891be0707

          SHA256

          7194389d8103256a721b73adb2bc6861ded68ac45e76e45a5cc09c7bbad1e2bf

          SHA512

          45be90766405789a702a0735036135d512aa020c50f278ebab0429decd97f868a3955736b77c489af0d1435a55f5595814b757847912c3dc4d7b84f3ee99503f

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Core.dll

          Filesize

          245KB

          MD5

          addae4a147aa2ed8a2169dca9b664ecb

          SHA1

          c7108df0dbadd892a65b9a96dc6d9b1e55b81e06

          SHA256

          e7554b5c1017600e75c83d4b1dc847b234296a56abf1315e3bd086a31e4181b5

          SHA512

          d81d2d08f453dcb6c6c01044e18790bdd0a59d9e74263f57c6fac0a027868700e8c4d400bc044ecd8435b1ac7555240bb589b8310a7c309593c466d14ec6d941

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Core.dll

          Filesize

          162KB

          MD5

          79ceb7e9fbb02911eddd829808eb4376

          SHA1

          34c738355ebf9ca9c5de1b30aedee5aa87d80c5e

          SHA256

          49fbb1ce9389bf9030b91f23107ed8851d1f367427ec56978161d3c8a9d0ecc0

          SHA512

          3ebf7b5a8f2712c8e56e017021b2b9cd88f43bdff44bc24b914e04ec91bd9ce7ee0865192d7777d458394e76893090c49098c394bfeac8cdee4e275a45698158

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Core5Compat.dll

          Filesize

          408KB

          MD5

          ab88dd4c87ff60a81b698c5b194d0d92

          SHA1

          a5c114e642297ee477db5f38286d5e24eafe1920

          SHA256

          792cdcf3a9843bd46e1af141029e714464ce125a45b74582b5de1d7ef01801b5

          SHA512

          43089e7cd5bb983af01413d2774febfefebfc85cccdcdfe7097eedc8bb571c5b90ffb269a6c5e029b8db8aca96d32c2cf9c216211dfe762db5167e6e52f66f3c

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Gui.dll

          Filesize

          1.8MB

          MD5

          5e9c2eaad662577215e95b8828bd5218

          SHA1

          c587baa36ab88a8888695d7813afe6ed9b1b8fa7

          SHA256

          4708f05bc01d3bf58e533dc4b02065d038a5087ac87e28a5768c5712d95b1d25

          SHA512

          82afff68ec0ab33a1b319f818e100c184a095d67c2f8010ef82f9c49a683cf18008bb5a00e7ab486b939a26c9085f9a263b06decd2a3ad933dd76f779db461e3

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Gui.dll

          Filesize

          1.4MB

          MD5

          61118487975fbbc80b14102b0971776e

          SHA1

          d87eac8ec1cd8bf0669b8b887d89ed7521d453b6

          SHA256

          2acbf44e4b0320c82f27b47a667830b4c823528cbac36b5d14d22f6dc037997e

          SHA512

          2c3539934e0ad4f59ca26c342d65dffdc7c42578d1e89a915d42af526b1351656b4b89fd3dd16a5c4008fe26dd604f237cf267def5a3b8a6622ec397a7da3cd1

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Network.dll

          Filesize

          2.0MB

          MD5

          0f315a61e5d7a8693c55458f9576f292

          SHA1

          8a9e1caea0f3f629f3def7d05e047a9bf0173942

          SHA256

          ee860831eeaf34792d403b1d42fb5313fc0b3396c370f8b36924491f159c85f8

          SHA512

          de85ac62c0d596e5f147770d0b6ef2df9ffce2d51331e36110838816da49150c52ee33e2eda961d7749274ff20ce6ac10e10e421662a4c92e7190c2e771df397

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Widgets.dll

          Filesize

          2.4MB

          MD5

          a429797b61b1c82986aedd2a341eef3a

          SHA1

          266b95bc599f4019588dedba8a50bf2061c164c0

          SHA256

          b889be03147797c34e3c3042b25ae88df8196f3012962ca07c7eba19d1c48eba

          SHA512

          b03e7ea5709912b6d6d6044bd5806dedfc28c8cfd6d6ae13cf2709a7759b6bffb070f68c7c405eb4c5a37a980c51831c7ec97b87ad52c1fc046e2997461148eb

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Widgets.dll

          Filesize

          1.2MB

          MD5

          1f9a06f59c6b20d1843072a9e91cb8f4

          SHA1

          6ae6616da89f2910bad780e401856aa2b23ddff1

          SHA256

          011a41d057af7ba00c68dbb9d6f12517fa4fba8fc77008a996d93eb454bf01a5

          SHA512

          defe5deedbbfc0c1fe590e8ae7f26abad91e3dee353ae6f55e12cbb38ce042291eef375c3f4a662ad9d944c6859d051593f908e8aeb6827d8667498ec8a18431

        • C:\Users\Admin\Desktop\New folder\PollyMC\Qt6Xml.dll

          Filesize

          187KB

          MD5

          63e76c8c687df6aec9f41e3d8a1d0746

          SHA1

          7577d4d681c012a3ded924e2f30aa6969ca5e815

          SHA256

          04ff3840b3a84ae2ed1b4a388a5e6ba5e7fe05f64bde8919d10739a7fcb8917e

          SHA512

          e4a65b254b0e7b2c1cd0f19d6c3b7df5b044ed7f90aa08e8163f93998624f6ffee13715796f55c5a780b77ac2c900fd2070dbf9b2799ba43f3b0d8fc7cc5b141

        • C:\Users\Admin\Desktop\New folder\PollyMC\libb2-1.dll

          Filesize

          42KB

          MD5

          87ab9208b130b7d7b2dbf6e887aafc5f

          SHA1

          afc23cf59beea5dea0e7b4d7f96b936ab4594511

          SHA256

          d6754584336b179a02722cfb80854f764024b6649e6f0cbf2d3878407e5678af

          SHA512

          fee411c30bc4df1777f42df27deb198114851672c916b197e8a1eb44f39fc88ba801703f24d06c51a72ec952d91ed992695f1c38b32689b54be8c578f23db8c6

        • C:\Users\Admin\Desktop\New folder\PollyMC\libbrotlicommon.dll

          Filesize

          145KB

          MD5

          00bc42b62d1a5adeb2f599a591403d9a

          SHA1

          42fb609f84e1fa97451a10aba914cda6db950b06

          SHA256

          fc5bf42b62da64ac76ffcdf50f232c8c821c9c278e23f63c9477c75a74b2b7b7

          SHA512

          2407e732a44b5293260a882b8118cd18d1e5d5339735d19efdef0c33ec5bed64aa4d099f1ab7eb590324e0c860c4a5bc7ba04eb04f5d9fadb1407c078d32d91c

        • C:\Users\Admin\Desktop\New folder\PollyMC\libbrotlidec.dll

          Filesize

          63KB

          MD5

          6b933641e6a997c2a100191783370ce9

          SHA1

          0ec5b215cdcb3c5ab1fcca8c1591474349cdab7f

          SHA256

          ce832348f2e913ceba2d0b94d9a8fe655035e438067ad9a7527b1d7e556acc27

          SHA512

          6308a7a34ff517e7b43958ad119206b44f92b75456617285b520e8706bede28d1b319c3b57253cca45d208988a6ef4e2720c3e343b0cf7ca876ecb0cfed2e3c2

        • C:\Users\Admin\Desktop\New folder\PollyMC\libbz2-1.dll

          Filesize

          96KB

          MD5

          b843434a8eae82adea4f9eaa2fbffe47

          SHA1

          b34aaa305cfc1a4936a88592b5689b0c978ffaa4

          SHA256

          22289ed41efbe633f798047de836b31170336e5e40e7e7b586c915bdbda7fcd9

          SHA512

          9f7c152c3b7ef52c0b3131d865960f8529bfe43776bfcf00c668fc41258e4ba4fcecb09888a99f77634534b42202d57e71806b808d9efe9ca6125712b8db7570

        • C:\Users\Admin\Desktop\New folder\PollyMC\libc++.dll

          Filesize

          1.4MB

          MD5

          0314b68d4684f7fa62c9273df902bced

          SHA1

          c8cd94d2a41c66c56b3dd465868c800bfd201a83

          SHA256

          7c2515f1a68339b2f100a56aa69c2fbd1223a1e649caaf220e3b81c779a1b08b

          SHA512

          de5219e3e2d415b1c02b64191b4de51ae6080059495f8109bf01a88365a27ac1691012a11ffddb81279fab792453f67a148def4aa52c012a8a9b6a7fecf4fb25

        • C:\Users\Admin\Desktop\New folder\PollyMC\libcmark.dll

          Filesize

          136KB

          MD5

          45a086563e8a560fb3fb40347eb7e59f

          SHA1

          00a7773944cb8c202d8b8b4390ba077d8f41c6b4

          SHA256

          a917fdd34e384dfcaae1849558ce1d588b4dd2f6244f87b4dcb95988cecd2f8f

          SHA512

          bd5992489d9e9ea2f722f73de21ec44630b6718b8dc32a85f59f45de1f5e6a2902457facdf846b0dd218f56398e446d437215e81b40fcecb6fde7249734e0543

        • C:\Users\Admin\Desktop\New folder\PollyMC\libcmark.dll

          Filesize

          161KB

          MD5

          55ddf21ce27e8fb1d3cbe9c4907b5372

          SHA1

          fc601d6cb8d35a040633a9772c51a969f903a97c

          SHA256

          2355c808fbbfc63e4b6ef606250981e3156670de78cad1abe70b2e90c1dcad0d

          SHA512

          08ec83093e9ee335c20bc99be2f67437a4510540bdec9b681744d02d7be56f285485752194493578b2954c038b3faa2b30aea0e09256f541c072b1570776fc97

        • C:\Users\Admin\Desktop\New folder\PollyMC\libdouble-conversion.dll

          Filesize

          78KB

          MD5

          20d6fca191ec4998242748eb54df4905

          SHA1

          e2d5afc4a3778c73762ebb4af9c446689a355a92

          SHA256

          52a913618d12f2e02d756d7c8af5199ed77d61c47cf3c94cd23209f64b001eb7

          SHA512

          49d6bcfd5f2d9c304b81fae3a18d642302a5055f64a98b27e72e277b1f5cfb2ddb77d0080624ad5bf2ab62bdb215da7a44441dede5999b056954159c75184a1e

        • C:\Users\Admin\Desktop\New folder\PollyMC\libfreetype-6.dll

          Filesize

          828KB

          MD5

          7e0efe15a52434441699b4e18a403012

          SHA1

          d4564f3ba2e8236003d13e2e5bce71248fc655c6

          SHA256

          7a3258d807643e786983c107c49a9bcbe9bc755bc0a32e0f548d3bf8c048e818

          SHA512

          b60c46832556fcceaebd81f72667c6548e4f0c1655bb2d9a8e424564751fe46a766339850c92a4145064c3439a020ff23734228abc7151e1dfdf1b76f5ca2916

        • C:\Users\Admin\Desktop\New folder\PollyMC\libglib-2.0-0.dll

          Filesize

          935KB

          MD5

          2e4616af26a59699f3960cb6b9bbc630

          SHA1

          222c198a09520a726045364f6d083f6228b7636e

          SHA256

          104dcaec637983d6455fe26f3b3f6beb8651c31fa47b5636415e68c9fffcca0d

          SHA512

          3d469cccdbefe0db02b69f5e4a8209914a78287307d8dd78aefbac90caa41bae674901f3eed0b19a983c0e323868f7c3d574b19d6e62658677d38fb0fb8ebbea

        • C:\Users\Admin\Desktop\New folder\PollyMC\libglib-2.0-0.dll

          Filesize

          909KB

          MD5

          b7b25491a6e44b616bccbe56ba919f9b

          SHA1

          479f316b076b591b656d15b1ebdd7ccf303d2fac

          SHA256

          c332862744bb6931c064e91980112ad6af951ae3347d2f8840a125cbbd161fc6

          SHA512

          db574b3aee26769944ca4815faca57625afce1a59060a76c9595a01941df99f408112a85c9cf0b2cee94fb8dd48abcd579cde68e0b13c62e0934cf031ce8e008

        • C:\Users\Admin\Desktop\New folder\PollyMC\libgraphite2.dll

          Filesize

          149KB

          MD5

          c8dfe47f78c491446d7b1c39449d82be

          SHA1

          218fab832b78f14072be0d2f9d7d9775bba24323

          SHA256

          51ad68c31e706d4d9181cf3f15df259e5962644f664a3723d6ca48f0ef4fb8c4

          SHA512

          39ea8978571db1c5b1c89134e53d799932092f5102e0390aaa28cebde3ce1049e92287db49ed9cc2b57e4662a464e17bf945b221a496ea90bad52b882e86d903

        • C:\Users\Admin\Desktop\New folder\PollyMC\libharfbuzz-0.dll

          Filesize

          1001KB

          MD5

          9eb81f20f078271d2070b40d9e5feebd

          SHA1

          621be81d73004cda60f5e330d2c504d9b7f179ab

          SHA256

          08b9e80a403fec50969de26d9823c59f1c4a112df276616ec685d5c40fd88fe6

          SHA512

          441ef9eb2c64f37f9a41922332c96f462b70791cb5b7164ed0b07f00a43c3fec3c418adf5cfda345a46db70bdee0f053c8af44e7bbdafaaea50d09e82deb6518

        • C:\Users\Admin\Desktop\New folder\PollyMC\libharfbuzz-0.dll

          Filesize

          948KB

          MD5

          028bc7a3f6bf9fa788485b0d436367a0

          SHA1

          ef5dda530f89b17c20081a21ba910319e8782e4b

          SHA256

          ff38e5e18020c32a82d11b61a6c37583cff14a42f742fafd6588807f5f759c56

          SHA512

          c00896f1af7b078c3f06da5b27457ed8bd296c5a9991d3c9df2c178c4e68d96e9f7c6efb5cf660b8ed6d38537aa6a66a196007b96f03890f54335c561d79bd6d

        • C:\Users\Admin\Desktop\New folder\PollyMC\libiconv-2.dll

          Filesize

          766KB

          MD5

          8b117942fcda8d8bd75d47fea74fb7dd

          SHA1

          d82d99938fceae1dd181b9685bc262801f79bd97

          SHA256

          180433020969669ffa2f0033eef9a96485c0b4600cfdd71949cfcd438c01ca8b

          SHA512

          c3cf462e98704e43c4a252773985d046376d8154f198831d75eb7b7724520564baed0276851e6d412322519d270b61dba789a44c8caaee2707245dd1a1bdbb1a

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicudt74.dll

          Filesize

          1.0MB

          MD5

          329555ba5407023791e536176bec83c6

          SHA1

          0fc8c03e0bb149e2e39af7d4b752244309372222

          SHA256

          23eabc02bdb021ce775c230416f69c79870dee951eabb577c49136e95ce87f3c

          SHA512

          aa093840509b80554e52a0c111e72bc03710011732ad649b6f8ca15818bb765168eef8abf01613357c5939b8a2ff41026ed4a9d1038847083a97b2cce5d5f76d

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicudt74.dll

          Filesize

          943KB

          MD5

          1c7e5558a932129f5209e696d76e91ad

          SHA1

          86648ea3bb6cea7b071fff6de240672fc383b939

          SHA256

          08db14ff3a078039cb5ed20ea10a5efcc55c10c2a40346063e0a965cfae94818

          SHA512

          8e7e7f6d2ef593ec9bfd3583c6482bb1398d448f158f75e7d16f96da9c6bb6ec92397845ea4e3787ca880e8ff45c40be0c6846fc069b9e11fe28dd53255fb28a

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicuin74.dll

          Filesize

          741KB

          MD5

          85da15e41bc69fdf222ad876f7956ea8

          SHA1

          559d6114e284685486d705a18286ed1202912253

          SHA256

          661e1316dad14e70c7b60d987d55179db03db82b716a163a15817039df3ab6c3

          SHA512

          e6218a8845b69f482481ff9a1c0b08b90d0bbc0b97535145ad0df0a182c809f97cdd48c9030714de03b7be643615c17ec1ccd1b7a70ac02566369d49f79f8d0b

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicuin74.dll

          Filesize

          922KB

          MD5

          9209f811884a1f627ddb7eb62ae48a61

          SHA1

          96aef728c2eb58f76e247fd2f2d24212f39dde63

          SHA256

          aecadf79646c65d188beb8c77f0e35587978f7f389afb9bc70b5b434a55b0cc0

          SHA512

          9b60f47a5703d0fb7967ed4ee2e4b705bae26540108e456477c677e707a38803ecb042bf95c47e85bbe65a329c26ce36ca79cb5d4da1b080ee5e647545686505

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicuuc74.dll

          Filesize

          1.1MB

          MD5

          de35a7fb5631c778e69fe0a024c04df1

          SHA1

          3a2e410ff9fc899ddfc16893505f93ff1e90ce40

          SHA256

          d2d8ff2e28d460d394f9174411dab4d1226a2e59821fad6d16951963d4617689

          SHA512

          8af6db38b9873c2477e532f75563e76d9cc8fa5655fd1d93e972fef8e4a944b3c005b2c6dcca2ec83aff248dd555bff544643eedebd70169bb57a6f32600d461

        • C:\Users\Admin\Desktop\New folder\PollyMC\libicuuc74.dll

          Filesize

          825KB

          MD5

          74cd1a19ba690a10a5743391dc23db01

          SHA1

          9a9d275510b300d351d6b48cec5f18a9d24b88ef

          SHA256

          a69360728d03154b78a0493f6353538a2dcebfac12776be8b6b53ab2ec494a6b

          SHA512

          b3683eadebed8f74ebe2428b8e65479e6145a32fbda40f1b15b07dee8019d1bab672d73d431665763ac9beff8f55a2726aba019221c5d3b67771769c1f636c28

        • C:\Users\Admin\Desktop\New folder\PollyMC\libintl-8.dll

          Filesize

          196KB

          MD5

          e3de79fc630d7fabb9118a4f7ea53971

          SHA1

          dcd7b2f6d68f897501b6464588537f452ec29726

          SHA256

          4dc000c25b05ff454bf4387ece7002fd77049a2d2daf98d228ba657f3dccd4fb

          SHA512

          47a7cca88728d89b097603ae244b5abb27c4fa2c20291180f1829e31fa4de15e89afdeaa058dcaa3750fc9db481e1778537632eabdfe63b55f2707b627cdf280

        • C:\Users\Admin\Desktop\New folder\PollyMC\libmd4c.dll

          Filesize

          78KB

          MD5

          09eee10544ef56a8fa86517fa80f2bf5

          SHA1

          68977088641b2356fccbcaefd4cf0cd37aeb68ca

          SHA256

          bdbafd132c7b5a162b6d83e5c49a3e0b3d86a609ae01be8f99d2f7573f7cca06

          SHA512

          5684315cf49061d517341b8d1f2ffbc579f0ca0907f42c234b68e9fcf928d65b33f75f16d1f2908a07285598e3a4c92d69f754d7cfe58c6f25f8c94529b5a4c1

        • C:\Users\Admin\Desktop\New folder\PollyMC\libpcre2-16-0.dll

          Filesize

          353KB

          MD5

          e5609c3469858b9f5ce8bb294275cd22

          SHA1

          47229f6eb790ad7d1b56f1e06c913850a8591e81

          SHA256

          285824fa911fafbdb10949c5785b8902b4605a8333c4d7bce3bc9ab63016de6d

          SHA512

          eca1cc9ab9a355d778b952e3a22098b56932f39238268b09c747508f923cfb52453d6618af77baba96a0e4b2e8ce9f692af2f59720a273da78487b7c43d9bd9c

        • C:\Users\Admin\Desktop\New folder\PollyMC\libpcre2-8-0.dll

          Filesize

          392KB

          MD5

          15d5c11c10693fbf46c929f71b1de96d

          SHA1

          273a39b7bb3651bb51caf05504213303b341d942

          SHA256

          57dadbe91cd2a7aa36e4bf30794dbe9bedd4183cc9277a3fc2b8ba50a78a273c

          SHA512

          70da5db227271e3dcd5876cb7eba47316a304791c40bb824bc1cba3ab2625b9174842a3504555454a3244fe91e3cf48dc87f47aa1a6fa2c5a5bfd5b28031db19

        • C:\Users\Admin\Desktop\New folder\PollyMC\libpng16-16.dll

          Filesize

          269KB

          MD5

          980ce62995e2b0fc6d809a64bfc02896

          SHA1

          601eca760fbea62b992f1bbc9ef83e6b33235392

          SHA256

          0b51dd5b254595dbfa003d5ce27363412ee098612837e569edebabe2149b636a

          SHA512

          d5b2e88a165ca41b45fc03f35eed02995fd0028067fe92fefff0e5fb57895f69608934a754face68b2555b2bcbe747166f172f720d5e32ff07d961a4f3860c67

        • C:\Users\Admin\Desktop\New folder\PollyMC\libquazip1-qt6.dll

          Filesize

          250KB

          MD5

          92fd1c7887462c3e2d8c4b75329c14d5

          SHA1

          3305b83190612b47a90f34e20687fc2159d8f7e7

          SHA256

          3f06ff804caff1aa10da61ff9b3c8e060b1a9ad54cf336e582bf7422f7ea639e

          SHA512

          61a25ff7ef8f7651c4798659a17f9fdd2111752e9cc5da13488d54da8e90fd3e1259dac69342a19cf2f2b882df2442d290dcd72bee2ec7fc6c610c3fe0f99fcc

        • C:\Users\Admin\Desktop\New folder\PollyMC\libzstd.dll

          Filesize

          977KB

          MD5

          a5a025948728670f0bfbeb74f230e707

          SHA1

          9f1731b0e6eabe9aa95298bef969b0c13fed3a62

          SHA256

          ccb7d0ab3f2b27de35df97af338a286c20f5f7d110b822c42481ec92e57bee74

          SHA512

          4d1efb01f695b30d8730043edeb388a283429b5dba7279cd33afb2987adcaf0dde090c44c19b6f03381fd158bdff41a6eea8ab8e8119db8483ea3f1e44477f89

        • C:\Users\Admin\Desktop\New folder\PollyMC\libzstd.dll

          Filesize

          916KB

          MD5

          c7240458c8995d530f5e6fd8d015e0d4

          SHA1

          b244880161f0da8d2f8b5ebaf53ebad256ed6545

          SHA256

          5443bdf7ce21114063d7bc9d74810569ca7741a0251f253493e54e2cc1839d13

          SHA512

          5925dfa114111f42710d9e81cc8cc21d4001792c3b7338ec031ce795b7b71b9f564abeeae7d8a667891f5018462669a94eaacd3819811c3446ff6a23c5b22694

        • C:\Users\Admin\Desktop\New folder\PollyMC\pollymc.exe

          Filesize

          5.7MB

          MD5

          46139892c11d9b3f30d07368af1dab5b

          SHA1

          1d1cfa4e38c78b782d6cc926a895a058a8589de9

          SHA256

          d9c3cd7f291a2238593b0da0c8125ab79be9d7e50fbbd9e28b2e8946a524dc96

          SHA512

          f07e5356997399a99cd28970ccd62d613e1f1f7e34211c3afde7f60b87e4f99d3b9e60bb95aadcb139d9cc46c04f816876c6114425210b432300c0f802897792

        • C:\Users\Admin\Desktop\New folder\PollyMC\pollymc.exe

          Filesize

          363KB

          MD5

          acad93608adb54618879e022b862b19b

          SHA1

          071d81be2e0a339adc02f6d91c5f7fa091a37a97

          SHA256

          4be0298bd5a5fa91d324e017cbbd6119f059962333786cdc87d69e8c1e807c65

          SHA512

          2798b1c16b8f7dc68e7cac260449332758aa737d4bf583dc15cef45ba04a3b55f36a3d47a873b18ef73fba7a649b08e5a7d662096ca968804ac948867e2fe254

        • C:\Users\Admin\Desktop\New folder\PollyMC\qt.conf

          Filesize

          1B

          MD5

          7215ee9c7d9dc229d2921a40e899ec5f

          SHA1

          b858cb282617fb0956d960215c8e84d1ccf909c6

          SHA256

          36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

          SHA512

          f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

        • C:\Users\Admin\Desktop\New folder\PollyMC\qtlogging.ini

          Filesize

          509B

          MD5

          58967a7fcc8cd9d2bdb9b0fc24eed94d

          SHA1

          b09f4ed1fe53850307cf8cb8cd2767524c26335b

          SHA256

          ba15aee260e7ca1d48016546bab52fe30c3da264356b629739c125cd4eb3c700

          SHA512

          5d44670d283b8a88892fd8def2fd2f2f9222d5115b25cc4b9e2b04a7c5f004930dc0b5e2d11ae128ab844f826ba079a0f93e17d5428355bdb4d21a04ee58055a

        • C:\Users\Admin\Desktop\New folder\PollyMC\zlib1.dll

          Filesize

          97KB

          MD5

          be9764cd884766755e1f53ad8c2a7149

          SHA1

          b7be969d75a08c7822462f0298b54eb2fdcb362a

          SHA256

          b0f14b5fa660d5161a716194b4b7be5f002d895c1e9d7e06a1130f682f760236

          SHA512

          3ac1b922c808911fe96d2f87e408380bdd6083339927f38cfad6839c9d0982a58f85307d211079449acbf4753d914e7ccdd0e78cbd6b06c35e5ea982818a41c8

        • C:\Users\Admin\Desktop\New folder\PollyMC\zlib1.dll

          Filesize

          108KB

          MD5

          17d86210bfddc727ba2751fd02c533e1

          SHA1

          c1c53c48c78852003045114c030747dcff017aa9

          SHA256

          7ef90c6875d176bae42aedc6720bd27d8515431a19b37c6a071f3b19f82a9eb8

          SHA512

          c7f1a80a2285de93d63c9b7f069da1966ed16415ca01f02faeb9bd48b3d00f6e6d190aaf5f24d11f8ad78b6b2a8ff9c96ef7bfb7e80d6954cdfb73dca24c9152

        • memory/1556-213-0x00007FFAEDF70000-0x00007FFAEE528000-memory.dmp

          Filesize

          5.7MB

        • memory/1556-212-0x00007FFAEE530000-0x00007FFAEEC6D000-memory.dmp

          Filesize

          7.2MB

        • memory/1556-217-0x00007FFAFF020000-0x00007FFAFF04B000-memory.dmp

          Filesize

          172KB

        • memory/1556-214-0x00007FFAFE960000-0x00007FFAFEACA000-memory.dmp

          Filesize

          1.4MB

        • memory/1556-220-0x00007FFAFDE00000-0x00007FFAFDE2C000-memory.dmp

          Filesize

          176KB

        • memory/1556-210-0x00007FFAEDDA0000-0x00007FFAEDF66000-memory.dmp

          Filesize

          1.8MB

        • memory/1556-215-0x00007FFB03500000-0x00007FFB0355C000-memory.dmp

          Filesize

          368KB

        • memory/1556-216-0x00007FFB03560000-0x00007FFB0359A000-memory.dmp

          Filesize

          232KB

        • memory/1556-249-0x00007FFAEB550000-0x00007FFAEB587000-memory.dmp

          Filesize

          220KB

        • memory/1556-197-0x00007FF7969A0000-0x00007FF797684000-memory.dmp

          Filesize

          12.9MB

        • memory/1556-196-0x00007FFAEDF70000-0x00007FFAEE528000-memory.dmp

          Filesize

          5.7MB

        • memory/1556-232-0x00007FFAEEFD0000-0x00007FFAEF024000-memory.dmp

          Filesize

          336KB

        • memory/1556-231-0x00007FFAF5B60000-0x00007FFAF5B75000-memory.dmp

          Filesize

          84KB

        • memory/1556-211-0x00007FFAEDAD0000-0x00007FFAEDD9F000-memory.dmp

          Filesize

          2.8MB