1c04ed11ce29fcfc3186144f0f907b70296132eb3db89044463cb14b97eb87d0

Resubmissions

23/02/2024, 13:06

240223-qcaxlagh647

23/02/2024, 12:51

240223-p3xnlsgf647

23/02/2024, 12:34

240223-prvd4sgc568

Analysis

max time kernel
1277s
max time network
1270s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
23/02/2024, 13:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Size 36.6MB
Sample240223-qcaxlagh64
SHA256 1c04ed11ce29fcfc3186144f0f907b70296132eb3db89044463cb14b97eb87d0
MD5 77f098ad333889de410f665e4f9a8702
SHA1 6b8e8abe6a374f02a88058961f180818cfcf7670
SHA512 711326a015e02dd4789023fbefeaedc769d0ef33668497c107cb3c512a2acc2fa312d3cd5011d3a510ccb87ce236bfe0fc1d4b253b332c2e6ecd9ff6e7c6af9c
SSDEEP 786432:2KQbhz5LGoCjmcE/ppyp22HaxvPAXkFeOLV61DDKr0wlqDIgtQ:2FLCjmphS2iSvfJLQxKr0wlw2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3076	pollymc.exe

Loads dropped DLL 59 IoCs

pid	Process
3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
1472	javaw.exe
5088	javaw.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
1612	icacls.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 60 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\ntdll.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\jvm.pdb	javaw.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\symbols\dll\jvm.pdb	javaw.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Kills process with taskkill 1 IoCs

evasion

pid	Process
3480	TaskKill.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge\shell\open\command	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge\shell	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge\shell\open	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\PollyMC\\pollymc.exe\" \"%1\""	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge	PollyMC-Windows-MinGW-w64-Setup-8.0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\curseforge\URL Protocol	PollyMC-Windows-MinGW-w64-Setup-8.0.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3076	pollymc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3076	pollymc.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3480	TaskKill.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe
3076	pollymc.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 3488 wrote to memory of 3480	3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe	81
PID 3488 wrote to memory of 3480	3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe	81
PID 3488 wrote to memory of 3480	3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe	81
PID 3488 wrote to memory of 3076	3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe	84
PID 3488 wrote to memory of 3076	3488	PollyMC-Windows-MinGW-w64-Setup-8.0.exe	84
PID 3076 wrote to memory of 916	3076	pollymc.exe	85
PID 3076 wrote to memory of 916	3076	pollymc.exe	85
PID 3076 wrote to memory of 4964	3076	pollymc.exe	86
PID 3076 wrote to memory of 4964	3076	pollymc.exe	86
PID 3076 wrote to memory of 356	3076	pollymc.exe	87
PID 3076 wrote to memory of 356	3076	pollymc.exe	87
PID 3076 wrote to memory of 4464	3076	pollymc.exe	88
PID 3076 wrote to memory of 4464	3076	pollymc.exe	88
PID 356 wrote to memory of 1612	356	javaw.exe	89
PID 356 wrote to memory of 1612	356	javaw.exe	89
PID 3076 wrote to memory of 1992	3076	pollymc.exe	91
PID 3076 wrote to memory of 1992	3076	pollymc.exe	91
PID 3076 wrote to memory of 3812	3076	pollymc.exe	92
PID 3076 wrote to memory of 3812	3076	pollymc.exe	92
PID 3076 wrote to memory of 2900	3076	pollymc.exe	93
PID 3076 wrote to memory of 2900	3076	pollymc.exe	93
PID 3076 wrote to memory of 1676	3076	pollymc.exe	94
PID 3076 wrote to memory of 1676	3076	pollymc.exe	94
PID 3076 wrote to memory of 2352	3076	pollymc.exe	95
PID 3076 wrote to memory of 2352	3076	pollymc.exe	95
PID 3076 wrote to memory of 1472	3076	pollymc.exe	96
PID 3076 wrote to memory of 1472	3076	pollymc.exe	96
PID 3076 wrote to memory of 5088	3076	pollymc.exe	97
PID 3076 wrote to memory of 5088	3076	pollymc.exe	97

C:\Users\Admin\AppData\Local\Temp\PollyMC-Windows-MinGW-w64-Setup-8.0.exe
"C:\Users\Admin\AppData\Local\Temp\PollyMC-Windows-MinGW-w64-Setup-8.0.exe"
1⤵
- Loads dropped DLL
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3488
- C:\Windows\SysWOW64\TaskKill.exe
  TaskKill /IM pollymc.exe /F
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:3480
- C:\Users\Admin\AppData\Local\Programs\PollyMC\pollymc.exe
  "C:\Users\Admin\AppData\Local\Programs\PollyMC\pollymc.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3076
- - C:\Program Files\Java\jre-1.8\bin\javaw.exe
    "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    PID:916
- - C:\Program Files\Java\jdk-1.8\bin\javaw.exe
    "C:\Program Files\Java\jdk-1.8\bin\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    PID:4964
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    javaw -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:356
  - - C:\Windows\system32\icacls.exe
      C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
      4⤵
      Modifies file permissions
      PID:1612
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    PID:4464
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -Xms512m -Xmx4096m -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    PID:1992
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/JavaCheck.jar
    3⤵
    PID:3812
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PollyMC/instances/1.12.2/natives -cp C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jinput/jinput/2.0.5/jinput-2.0.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jutils/jutils/1.0.0/jutils-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl/2.9.4-nightly-20150209/lwjgl-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl_util/2.9.4-nightly-20150209/lwjgl_util-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/patchy/1.3.9/patchy-1.3.9.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/oshi-project/oshi-core/1.1/oshi-core-1.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/jna/4.4.0/jna-4.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/platform/3.4.0/platform-3.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/sf/jopt-simple/jopt-simple/5.0.3/jopt-simple-5.0.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/io/netty/netty-all/4.1.9.Final/netty-all-4.1.9.Final.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/guava/guava/21.0/guava-21.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-io/commons-io/2.5/commons-io-2.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-codec/commons-codec/1.10/commons-codec-1.10.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/authlib/1.5.25/authlib-1.5.25.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/realms/1.10.22/realms-1.10.22.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-compress/1.8.1/commons-compress-1.8.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpclient/4.3.3/httpclient-4.3.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpcore/4.3.2/httpcore-4.3.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/it/unimi/dsi/fastutil/7.1.0/fastutil-7.1.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/text2speech/1.10.3/text2speech-1.10.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/minecraft/1.12.2/minecraft-1.12.2-client.jar org.prismlauncher.EntryPoint
    3⤵
    - Drops file in Program Files directory
    PID:2900
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PollyMC/instances/1.12.2/natives -cp C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jinput/jinput/2.0.5/jinput-2.0.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jutils/jutils/1.0.0/jutils-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl/2.9.4-nightly-20150209/lwjgl-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl_util/2.9.4-nightly-20150209/lwjgl_util-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/patchy/1.3.9/patchy-1.3.9.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/oshi-project/oshi-core/1.1/oshi-core-1.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/jna/4.4.0/jna-4.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/platform/3.4.0/platform-3.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/sf/jopt-simple/jopt-simple/5.0.3/jopt-simple-5.0.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/io/netty/netty-all/4.1.9.Final/netty-all-4.1.9.Final.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/guava/guava/21.0/guava-21.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-io/commons-io/2.5/commons-io-2.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-codec/commons-codec/1.10/commons-codec-1.10.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/authlib/1.5.25/authlib-1.5.25.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/realms/1.10.22/realms-1.10.22.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-compress/1.8.1/commons-compress-1.8.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpclient/4.3.3/httpclient-4.3.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpcore/4.3.2/httpcore-4.3.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/it/unimi/dsi/fastutil/7.1.0/fastutil-7.1.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/text2speech/1.10.3/text2speech-1.10.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/minecraft/1.12.2/minecraft-1.12.2-client.jar org.prismlauncher.EntryPoint
    3⤵
    - Drops file in Program Files directory
    PID:1676
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PollyMC/instances/1.12.2/natives -cp C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jinput/jinput/2.0.5/jinput-2.0.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jutils/jutils/1.0.0/jutils-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl/2.9.4-nightly-20150209/lwjgl-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl_util/2.9.4-nightly-20150209/lwjgl_util-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/patchy/1.3.9/patchy-1.3.9.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/oshi-project/oshi-core/1.1/oshi-core-1.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/jna/4.4.0/jna-4.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/platform/3.4.0/platform-3.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/sf/jopt-simple/jopt-simple/5.0.3/jopt-simple-5.0.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/io/netty/netty-all/4.1.9.Final/netty-all-4.1.9.Final.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/guava/guava/21.0/guava-21.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-io/commons-io/2.5/commons-io-2.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-codec/commons-codec/1.10/commons-codec-1.10.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/authlib/1.5.25/authlib-1.5.25.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/realms/1.10.22/realms-1.10.22.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-compress/1.8.1/commons-compress-1.8.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpclient/4.3.3/httpclient-4.3.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpcore/4.3.2/httpcore-4.3.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/it/unimi/dsi/fastutil/7.1.0/fastutil-7.1.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/text2speech/1.10.3/text2speech-1.10.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/minecraft/1.12.2/minecraft-1.12.2-client.jar org.prismlauncher.EntryPoint
    3⤵
    - Drops file in Program Files directory
    PID:2352
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PollyMC/instances/1.12.2/natives -cp C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jinput/jinput/2.0.5/jinput-2.0.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jutils/jutils/1.0.0/jutils-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl/2.9.4-nightly-20150209/lwjgl-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl_util/2.9.4-nightly-20150209/lwjgl_util-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/patchy/1.3.9/patchy-1.3.9.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/oshi-project/oshi-core/1.1/oshi-core-1.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/jna/4.4.0/jna-4.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/platform/3.4.0/platform-3.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/sf/jopt-simple/jopt-simple/5.0.3/jopt-simple-5.0.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/io/netty/netty-all/4.1.9.Final/netty-all-4.1.9.Final.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/guava/guava/21.0/guava-21.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-io/commons-io/2.5/commons-io-2.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-codec/commons-codec/1.10/commons-codec-1.10.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/authlib/1.5.25/authlib-1.5.25.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/realms/1.10.22/realms-1.10.22.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-compress/1.8.1/commons-compress-1.8.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpclient/4.3.3/httpclient-4.3.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpcore/4.3.2/httpcore-4.3.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/it/unimi/dsi/fastutil/7.1.0/fastutil-7.1.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/text2speech/1.10.3/text2speech-1.10.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/minecraft/1.12.2/minecraft-1.12.2-client.jar org.prismlauncher.EntryPoint
    3⤵
    - Loads dropped DLL
    - Drops file in Program Files directory
    PID:1472
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PollyMC/instances/1.12.2/natives -cp C:/Users/Admin/AppData/Local/Programs/PollyMC/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jinput/jinput/2.0.5/jinput-2.0.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/jutils/jutils/1.0.0/jutils-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl/2.9.4-nightly-20150209/lwjgl-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/lwjgl/lwjgl/lwjgl_util/2.9.4-nightly-20150209/lwjgl_util-2.9.4-nightly-20150209.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/patchy/1.3.9/patchy-1.3.9.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/oshi-project/oshi-core/1.1/oshi-core-1.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/jna/4.4.0/jna-4.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/java/dev/jna/platform/3.4.0/platform-3.4.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/ibm/icu/icu4j-core-mojang/51.2/icu4j-core-mojang-51.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/net/sf/jopt-simple/jopt-simple/5.0.3/jopt-simple-5.0.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecjorbis/20101023/codecjorbis-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/codecwav/20101023/codecwav-20101023.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/libraryjavasound/20101123/libraryjavasound-20101123.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/librarylwjglopenal/20100824/librarylwjglopenal-20100824.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/paulscode/soundsystem/20120107/soundsystem-20120107.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/io/netty/netty-all/4.1.9.Final/netty-all-4.1.9.Final.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/guava/guava/21.0/guava-21.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-io/commons-io/2.5/commons-io-2.5.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-codec/commons-codec/1.10/commons-codec-1.10.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/authlib/1.5.25/authlib-1.5.25.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/realms/1.10.22/realms-1.10.22.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/commons/commons-compress/1.8.1/commons-compress-1.8.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpclient/4.3.3/httpclient-4.3.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/commons-logging/commons-logging/1.1.3/commons-logging-1.1.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/httpcomponents/httpcore/4.3.2/httpcore-4.3.2.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/it/unimi/dsi/fastutil/7.1.0/fastutil-7.1.0.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/text2speech/1.10.3/text2speech-1.10.3.jar;C:/Users/Admin/AppData/Roaming/PollyMC/libraries/com/mojang/minecraft/1.12.2/minecraft-1.12.2-client.jar org.prismlauncher.EntryPoint
    3⤵
    - Loads dropped DLL
    - Drops file in Program Files directory
    PID:5088

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Qt6Core.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Core.dll
Size 704KB
SHA256 362ff924327ce0edb98f8d559ca135a069c7da84600578e20dc703b97211c312
MD5 ec88a18c08cef00e15c58402180ffd8a
SHA1 73dbf4bc713b4b37790248ff51c7b511d58ea98a
SHA512 e5d06215eb7e9dc4543658758923ee6f5b70780e45ea24056f126f3665a5d82dd74141777ed6a2467f47ea96e1176784481bb72d7d39820f88e624c48efa1910
SSDEEP 12288:9fRuGNt3iHZxnJWJ1jcPCwRhBPzPyCC7sHPM/nqMJaWf2Z7yKejsHatM:JRLsHZxnJ2sCIP7PdC7sHEnDn7a
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Core.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Core.dll
Size 384KB
SHA256 c83c760462cb02bead2d1381db0f1c42b9f859aff4b94141686d7f62a4395297
MD5 d96d3faa17230a98abc9bfc9bd44451e
SHA1 aa77383560eed940dc5a1183f5bfffe3ad8e3b74
SHA512 311d5ec83af6841ec2b40948690b3a67f563e293abd67b843a3739aad737f2ac84023917150e14ad408edafb93a16bc826cb125c8eb308703fc1ac683f152c34
SSDEEP 6144:9fRuRWLNtrTiHZxnJWJet2jcPCwRGABPZlf7zPyCXyZ2iv:9fRuGNt3iHZxnJWJ1jcPCwRhBPzPyCCD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Core5Compat.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Core5Compat.dll
Size 408KB
SHA256 792cdcf3a9843bd46e1af141029e714464ce125a45b74582b5de1d7ef01801b5
MD5 ab88dd4c87ff60a81b698c5b194d0d92
SHA1 a5c114e642297ee477db5f38286d5e24eafe1920
SHA512 43089e7cd5bb983af01413d2774febfefebfc85cccdcdfe7097eedc8bb571c5b90ffb269a6c5e029b8db8aca96d32c2cf9c216211dfe762db5167e6e52f66f3c
SSDEEP 6144:BFjJvtY6xPc75VS4e4NSj85X4Spth8gGRywZgDfe51XtcQCDT0:FtY8ci4xjptGFyaQaHCDT0
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Gui.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Gui.dll
Size 640KB
SHA256 2560526e710c2e8a5baf4a3b2cbf39a1d3334d759439a62fb20dc0212b809f3c
MD5 3c34c77fbabd2562b42d9690e9b39b3a
SHA1 62e3e151615cbd417f97b0a70c79f8e446661a80
SHA512 f1ccdc2095caf04ac21d6b7aca6e7aac0d28c9ec1c2e6f42ba28b0f19e1f2580147422d0d4c7086a580f0502ff475fa95f1ddace261b7bbf82ec8266c2bd012d
SSDEEP 12288:P8lY24dVztIRT473QNs+iQRkDh8srthV2s4nYWgsvVy:ku2EzC42irfhV2s4nYwv0
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Gui.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Gui.dll
Size 3.4MB
SHA256 24ad934e48f7064b69514424937fb234411535e753385b3a438e8171251a21d0
MD5 76802eacf861167bbf59df7929dec5f0
SHA1 5f79fe5aaee697ced14cd31e9898c7919b13d6c8
SHA512 8b1341524e4f4b32b296a652b734a71eaf8490c4882ea9b419b719da664a371f05354e3d187b686c06894349d5346f40fc43dbe6bcd15dfb9ee8a6ae94fd1d88
SSDEEP 98304:k4zvfLTx01VX+DZaitQ/rc6NT6+7RvnSd2OaR:EnX+deWyRF
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Gui.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Gui.dll
Size 3.2MB
SHA256 3d5d8d70ae6d49a585d74e98eb4803d06b207d10b5636adc91cdf5d3a28fd788
MD5 68cd810a768108985aca3d90672922c5
SHA1 b433d04ed6911040e3f212e1c3fd1b234cba7754
SHA512 dad3631d2ae24708428ddcf355b0a4c036d999ec49ab9b3cffb2ee6e0aeac52be27f95d3ca58a1f55b68e7017825c66c8c9ef3b4e1a89b7bf5e9b6d117b9c446
SSDEEP 98304:k4zvfLTx01VX+DZaitQ/rc6NT6+7RvnSd2Oa1:EnX+deWyRx
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Network.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Network.dll
Size 640KB
SHA256 54b231ab98dfd1655d41125fc0e29f83eebff8c7854b30e02279a8ce38f07be9
MD5 645e0b5ca8541cd6bd94dfb170212caa
SHA1 f1175d9dc495de3a6fc2a193d56d4096b38bee56
SHA512 67786435435096db61bd1c71f27fefe1fd881bfbcd4f5ce550bc3de219fed24cf5d0b4351d6a86b9831d3447c7d32608eef7256a6e1f3cc70f53a172479e2eb3
SSDEEP 12288:cqwI4n4A8Sd/QnOmaLvmYbBT+N566eJF9EmxLTCyi4Sa:cqwd/b2566e79LTM4Sa
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Network.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Network.dll
Size 2.0MB
SHA256 ee860831eeaf34792d403b1d42fb5313fc0b3396c370f8b36924491f159c85f8
MD5 0f315a61e5d7a8693c55458f9576f292
SHA1 8a9e1caea0f3f629f3def7d05e047a9bf0173942
SHA512 de85ac62c0d596e5f147770d0b6ef2df9ffce2d51331e36110838816da49150c52ee33e2eda961d7749274ff20ce6ac10e10e421662a4c92e7190c2e771df397
SSDEEP 24576:cqwd/b2566e79LTM4SnRS7ckzdED+UFPGQ:cqwdz2566G9L4FAz+D+UFPv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Widgets.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Widgets.dll
Size 640KB
SHA256 1bd1584c019337edd997bb66f63b563cfbac199c5cc137ee3dd957b16c53ffa1
MD5 6fbe0d54f23a108143c41ba2582c73d4
SHA1 7650d88bf33b45ef380fd98c18e30fe778d6f868
SHA512 36cbd56906aef094d5545cd251955d007bb8a407dcc44ea7472d93f203ee238b3b6e96a121ba340617ae75f7ed1b85836c356444f3383786a521a7cec8a96461
SSDEEP 12288:CaQ3EKOxcT+wV2mTaCwUymGtl7D9DBa3iV2wbJpCKYC6usRgMt86cFe:M8udV/atl7ZFNokJ8LC6uMgMqJFe
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Widgets.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Widgets.dll
Size 5.5MB
SHA256 de931e5f6fe37d3543ff163932993614a745da3a6739721118248745a1aed36e
MD5 a33d1b4740983fc6d6a6c0412bf617d6
SHA1 8d7badd80e3427b94577741746ae463b318cecc9
SHA512 aa8a859c7d1663a2468be2ba9c11ac49f2acc05e0b223234c2bcce40cd8516ea28d0bffb563cec23bb07bb66796651c09ba585e969016701f2b36bee82d868eb
SSDEEP 98304:sVK51qyNnGVEGUXNr0x7MQSFXee4eTrfvyiE:rGVEGUlJE
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Xml.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\Qt6Xml.dll
Size 187KB
SHA256 04ff3840b3a84ae2ed1b4a388a5e6ba5e7fe05f64bde8919d10739a7fcb8917e
MD5 63e76c8c687df6aec9f41e3d8a1d0746
SHA1 7577d4d681c012a3ded924e2f30aa6969ca5e815
SHA512 e4a65b254b0e7b2c1cd0f19d6c3b7df5b044ed7f90aa08e8163f93998624f6ffee13715796f55c5a780b77ac2c900fd2070dbf9b2799ba43f3b0d8fc7cc5b141
SSDEEP 3072:dpt7SgOHP2rvbTOpJDLuoNBrEfG2gmSSVzScZVTsctWJxb/mUGSE+G:pYerkNRszgmPzSSVZtMb/mi
MD5 SHA1 SHA512 SSDEEP

Submit Download

libb2-1.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libb2-1.dll
Size 42KB
SHA256 d6754584336b179a02722cfb80854f764024b6649e6f0cbf2d3878407e5678af
MD5 87ab9208b130b7d7b2dbf6e887aafc5f
SHA1 afc23cf59beea5dea0e7b4d7f96b936ab4594511
SHA512 fee411c30bc4df1777f42df27deb198114851672c916b197e8a1eb44f39fc88ba801703f24d06c51a72ec952d91ed992695f1c38b32689b54be8c578f23db8c6
SSDEEP 768:TCkFQpFtYAuZbKrbKlK6zy7GvC2mErBSnan50zkoaAcvVO:2pFtYA8lHy7Gvhlg7c
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbrotlicommon.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libbrotlicommon.dll
Size 145KB
SHA256 fc5bf42b62da64ac76ffcdf50f232c8c821c9c278e23f63c9477c75a74b2b7b7
MD5 00bc42b62d1a5adeb2f599a591403d9a
SHA1 42fb609f84e1fa97451a10aba914cda6db950b06
SHA512 2407e732a44b5293260a882b8118cd18d1e5d5339735d19efdef0c33ec5bed64aa4d099f1ab7eb590324e0c860c4a5bc7ba04eb04f5d9fadb1407c078d32d91c
SSDEEP 3072:Y04lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBlavxA:Y04AhdNorGvHdbi09GJOx
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbrotlidec.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libbrotlidec.dll
Size 63KB
SHA256 ce832348f2e913ceba2d0b94d9a8fe655035e438067ad9a7527b1d7e556acc27
MD5 6b933641e6a997c2a100191783370ce9
SHA1 0ec5b215cdcb3c5ab1fcca8c1591474349cdab7f
SHA512 6308a7a34ff517e7b43958ad119206b44f92b75456617285b520e8706bede28d1b319c3b57253cca45d208988a6ef4e2720c3e343b0cf7ca876ecb0cfed2e3c2
SSDEEP 1536:QI0kv30D1vleo2465oymusFCfJq0rHoJXHLf:QI0n1vso2AAsFRXHD
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbz2-1.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libbz2-1.dll
Size 96KB
SHA256 22289ed41efbe633f798047de836b31170336e5e40e7e7b586c915bdbda7fcd9
MD5 b843434a8eae82adea4f9eaa2fbffe47
SHA1 b34aaa305cfc1a4936a88592b5689b0c978ffaa4
SHA512 9f7c152c3b7ef52c0b3131d865960f8529bfe43776bfcf00c668fc41258e4ba4fcecb09888a99f77634534b42202d57e71806b808d9efe9ca6125712b8db7570
SSDEEP 1536:XbxAQ+Ny/Nl+cBvnbHGFQAa0NkQZm4BZkd38pR/yjr/wRFULiQW8TbOJ:LOQd+cBvnNA1FZk2U1TbA
MD5 SHA1 SHA512 SSDEEP

Submit Download

libc++.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libc++.dll
Size 1.4MB
SHA256 7c2515f1a68339b2f100a56aa69c2fbd1223a1e649caaf220e3b81c779a1b08b
MD5 0314b68d4684f7fa62c9273df902bced
SHA1 c8cd94d2a41c66c56b3dd465868c800bfd201a83
SHA512 de5219e3e2d415b1c02b64191b4de51ae6080059495f8109bf01a88365a27ac1691012a11ffddb81279fab792453f67a148def4aa52c012a8a9b6a7fecf4fb25
SSDEEP 24576:8hW+7fWNZKX7iYe+pshSMXl2hJR7l1SLubPX3wN+lQBwms6paQgR8h:eWStX7iYvUWmssf
MD5 SHA1 SHA512 SSDEEP

Submit Download

libc++.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libc++.dll
Size 640KB
SHA256 92674e264809a18d44748379a0b62cfcafa4e59fca4861cef1a66dcafa95e430
MD5 506799e3badd405c23ae64fb2cbd826d
SHA1 20a33501380c8eb750a62c7a01b8e5527677975b
SHA512 99dbefd08270f85ebfa9c254da39b47269796fb359dbfec1963757aaf587de56d145e4dec702c51b7ec6295d180081057d49bf24f7684c53291636590fb540da
SSDEEP 12288:8h/Q92hPEa78cVWlzOJWNZAr74cnccdgJeiwFZsztQd:8hW+7fWNZKX7iYP
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcmark.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libcmark.dll
Size 249KB
SHA256 503c476dbc9f57cacff1062e6bc48f70e3d9f00453180ba7bc4cbf4373810fa6
MD5 f5f97439ea8c9b6ee10b76b9f94e2fde
SHA1 4e1ba63e394087fadbb908274b6ae77c3b92b59f
SHA512 091e2997e29862aae35d9d9deb7db83356933cb3de89f80f5a239f9f3914d8f4218a1f2393055000707826baae9c4f4a3f43625a4eb3fd4f098f91ca34fe819b
SSDEEP 6144:X4P6AHOX/w2nAJm78FHSNsLmZY/KlEzuh3gtyLsZmfkt+AVb0s5SLl4:oP6AHQw38M
MD5 SHA1 SHA512 SSDEEP

Submit Download

libdouble-conversion.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libdouble-conversion.dll
Size 78KB
SHA256 52a913618d12f2e02d756d7c8af5199ed77d61c47cf3c94cd23209f64b001eb7
MD5 20d6fca191ec4998242748eb54df4905
SHA1 e2d5afc4a3778c73762ebb4af9c446689a355a92
SHA512 49d6bcfd5f2d9c304b81fae3a18d642302a5055f64a98b27e72e277b1f5cfb2ddb77d0080624ad5bf2ab62bdb215da7a44441dede5999b056954159c75184a1e
SSDEEP 1536:vBek0a0m7qSccFJnwYYQ3uxadkYqHpgr:Zek0af7DTnGaSHpgr
MD5 SHA1 SHA512 SSDEEP

Submit Download

libfreetype-6.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libfreetype-6.dll
Size 828KB
SHA256 7a3258d807643e786983c107c49a9bcbe9bc755bc0a32e0f548d3bf8c048e818
MD5 7e0efe15a52434441699b4e18a403012
SHA1 d4564f3ba2e8236003d13e2e5bce71248fc655c6
SHA512 b60c46832556fcceaebd81f72667c6548e4f0c1655bb2d9a8e424564751fe46a766339850c92a4145064c3439a020ff23734228abc7151e1dfdf1b76f5ca2916
SSDEEP 24576:Ex9EPoJMcBbPgDE7yf/mQNWkiOBlBCZXd87VZ9p4lu:2EfcBL8Ik7lY87VZ9alu
MD5 SHA1 SHA512 SSDEEP

Submit Download

libglib-2.0-0.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libglib-2.0-0.dll
Size 1.5MB
SHA256 451f6de29a44a7a525d1c43e3439837e4afe5bcd0cfc1b8715bcc85ae2556d4e
MD5 e5cac1960181ceee198818ed98aab8e0
SHA1 9de2f0aef00de17855a7232a99e07e21661d0da8
SHA512 11ff53b6ce7bed01c0935b6d336262f646b35c9083cc88c721acddf838bccfc0b9f71e11514e97815c008a6c7bd93767ac3c79be1917c925c5bc67682a969c19
SSDEEP 24576:YFsvpxsO1uWNY7NMMIN1Rd8cm+mIvASaWtv59W45wUZA1ykjGkmwOFm:1vbskY7Od8cmfxmtvpZA1EkmwOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

libgraphite2.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libgraphite2.dll
Size 149KB
SHA256 51ad68c31e706d4d9181cf3f15df259e5962644f664a3723d6ca48f0ef4fb8c4
MD5 c8dfe47f78c491446d7b1c39449d82be
SHA1 218fab832b78f14072be0d2f9d7d9775bba24323
SHA512 39ea8978571db1c5b1c89134e53d799932092f5102e0390aaa28cebde3ce1049e92287db49ed9cc2b57e4662a464e17bf945b221a496ea90bad52b882e86d903
SSDEEP 3072:dZgCQBHA1F/+q/xNjjSLUOCsv7S314txH6ANc12:dZYBAhxNx4tMAN
MD5 SHA1 SHA512 SSDEEP

Submit Download

libharfbuzz-0.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libharfbuzz-0.dll
Size 1.2MB
SHA256 cd99ef0a232ec917816e8be1792213fb00a196b9428e9cb0a6cd022fc5f04ffd
MD5 4234bf41775eda6bbe8fe5991184b8e1
SHA1 cf4e906b6eda0e8bdb50cd6f53e9b13f058d5716
SHA512 8331d5e039fb8c766f64670096c07c866826786cbe4802418ed2ab6eb38a2bd1e57bdb85e0d06a431883b87ba8943366013d26a8ae5d790e6fa93ae11743566c
SSDEEP 24576:uPQUgqlRsT3DVs/MIzByQc+bDXMIqTOWAaY5sIz:uhgqfMIgQ5cLKxaY5Vz
MD5 SHA1 SHA512 SSDEEP

Submit Download

libiconv-2.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libiconv-2.dll
Size 1.1MB
SHA256 1cee2939e385258fe32fdf010b878c4c695c784cc78eb47916b7f142c393453a
MD5 57167d5e13651c542045b72d880b950d
SHA1 0a7adf978a50576cc0e2e4f7c1361e8544ee1dcc
SHA512 2d72ecb78911157c0dee9ef763424fc95794616475b2db5f0100d43c0fec83631382c1ac3ff715d0e1c0c5f1679a383cccf88173d5cd38b0e0a668feaf981fe2
SSDEEP 24576:hCf2h8FfrNffGavkg3NyElQKuqsbbTujvKYw0BAUZLY:hCQQZXGaXDQKuqVjCx0BAUZLY
MD5 SHA1 SHA512 SSDEEP

Submit Download

libicudt74.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libicudt74.dll
Size 3.4MB
SHA256 79a64cb7ff635f516997a0d12b77377dba2f9e9c6fc3cc3ff79911eba1803ba0
MD5 a71c96a83bbce377bc717f33481cf7a5
SHA1 d0d1972f8a9f247ceb5d7af32837cfc8ca19d572
SHA512 bcb22dee2136a5db0015e924ae117e1126f93c2ccd50e1396e9a255bdb72e1bb9e4810fe4c8b4a833657cccdb9c0dc3f78e89bc0e47019071def159eea4ba8c1
SSDEEP 49152:w+uBn0tJJkxc8aoK++BwCUaT6HP2c3NDH9:LQnEsxc8zlSUaTKP2c9Dd
MD5 SHA1 SHA512 SSDEEP

Submit Download

libicudt74.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libicudt74.dll
Size 1.8MB
SHA256 08aceb4d865119dc2d63b164bfbc42d67c806e8bf08084fcb18dd1a78db4b1a4
MD5 6e86f113722632e680084ca2a47bf494
SHA1 3ed31fc2d3782a0a7c19a64f2d0cbe0fdd153c82
SHA512 0b2e6d2bf10f985a1589a24f3b2233e5e5b662f12284e1be80cd30c8abfbb7b57bf1091f0d71bb868a4a3f3f6538173112bd161c07695e1e84160a08ec82bc6a
SSDEEP 24576:w+ArHB6c0mFhw3zVtjTiEoTAT5FIKVbXWDQkxcvvsasMviK+PksSgt:w+uBn0tJJkxc8aoK++U
MD5 SHA1 SHA512 SSDEEP

Submit Download

libicuin74.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libicuin74.dll
Size 320KB
SHA256 45d9f7a69ac33569d50f069edecea23b2b60fc5f045ea5719a4f5de2e08eefed
MD5 10f578de6c8572f6bb4d6e999c3566cb
SHA1 03d2c9d166b8edb95ddcb8c738d7192cbf7309cc
SHA512 1971603eb52f8269edd4ecb6ebd698f8d3499c6f1587b73ce2a5d30a5fc4fa8abd8ad6c63bb3f2ae32de02e6c5ff583685af64f1caac3dbf4bfdeda0053e41c2
SSDEEP 6144:rX6N4sDk1W/6GTbqRLxvfFWyQMX3ZikaC1Gxp7A:rXBsDp/6GXqJd9WyQu30jiGXU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libicuin74.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libicuin74.dll
Size 3.5MB
SHA256 6a94f8630b1207ac14460c7baed819133bf96b06e33a86ec98c5487c0a2e351a
MD5 4ecebb81171478eb0ea25486d8f0e877
SHA1 fc64cf8c67825ba28a7aff8778f0503a0f5cbaea
SHA512 330492251c3e52b084e8349d01dc36b6d8552ddb91767095a1a888da9dfc93cf489ed0b55a49eb1becaa31886600a23ae8f8dc372cf9a24954bbe2b8fb3ea675
SSDEEP 49152:r+9qJnWyQ8G8Bs7WzGdWXy8U/zycVDHQIKne69iWoYzlK4MzATuhmFyL8xHF8:r+UkQfW3mTxHF8
MD5 SHA1 SHA512 SSDEEP

Submit Download

libicuuc74.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libicuuc74.dll
Size 2.0MB
SHA256 111f1a66b1f3d380f2782e00b964eaf4d9fa4aaf64efc3d0010fd261d8872755
MD5 36d2fa039a890672c8cf67fae90d0658
SHA1 cd0991e07eb8540d2a034c3060543be91029dcfe
SHA512 2206f368e1d93af09f70ebb66e47a26d7177e7363059811f52e99ed6e6b3780c89ce01c457cddc53496da917f72f1adc74b9ffc343ade09bde0fad525e8467ce
SSDEEP 49152:DgWsy6qECCty4ryIh/UA6z7US2hY87nLwmoqvn4BVU:0DUEy42hJ7cL9SBVU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libintl-8.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libintl-8.dll
Size 196KB
SHA256 4dc000c25b05ff454bf4387ece7002fd77049a2d2daf98d228ba657f3dccd4fb
MD5 e3de79fc630d7fabb9118a4f7ea53971
SHA1 dcd7b2f6d68f897501b6464588537f452ec29726
SHA512 47a7cca88728d89b097603ae244b5abb27c4fa2c20291180f1829e31fa4de15e89afdeaa058dcaa3750fc9db481e1778537632eabdfe63b55f2707b627cdf280
SSDEEP 6144:U5LtkVxCjgH0mwjfC56ldJHnv47ntFNihr4O:U5JkVx/UmSfA6Vw7Dmr4O
MD5 SHA1 SHA512 SSDEEP

Submit Download

libmd4c.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libmd4c.dll
Size 78KB
SHA256 bdbafd132c7b5a162b6d83e5c49a3e0b3d86a609ae01be8f99d2f7573f7cca06
MD5 09eee10544ef56a8fa86517fa80f2bf5
SHA1 68977088641b2356fccbcaefd4cf0cd37aeb68ca
SHA512 5684315cf49061d517341b8d1f2ffbc579f0ca0907f42c234b68e9fcf928d65b33f75f16d1f2908a07285598e3a4c92d69f754d7cfe58c6f25f8c94529b5a4c1
SSDEEP 1536:Ji4KNXms1febEpu07DpNlu25LAapis1k4GGmlOy90L:JiFNlpebEpu03pNzptmd0y9
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpcre2-16-0.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libpcre2-16-0.dll
Size 353KB
SHA256 285824fa911fafbdb10949c5785b8902b4605a8333c4d7bce3bc9ab63016de6d
MD5 e5609c3469858b9f5ce8bb294275cd22
SHA1 47229f6eb790ad7d1b56f1e06c913850a8591e81
SHA512 eca1cc9ab9a355d778b952e3a22098b56932f39238268b09c747508f923cfb52453d6618af77baba96a0e4b2e8ce9f692af2f59720a273da78487b7c43d9bd9c
SSDEEP 6144:QPloY5bgSD1DnkdlPdqbPWsq9TAtor597x:QPloY5bgE1Dnkd94iscgorbx
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpcre2-8-0.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libpcre2-8-0.dll
Size 392KB
SHA256 57dadbe91cd2a7aa36e4bf30794dbe9bedd4183cc9277a3fc2b8ba50a78a273c
MD5 15d5c11c10693fbf46c929f71b1de96d
SHA1 273a39b7bb3651bb51caf05504213303b341d942
SHA512 70da5db227271e3dcd5876cb7eba47316a304791c40bb824bc1cba3ab2625b9174842a3504555454a3244fe91e3cf48dc87f47aa1a6fa2c5a5bfd5b28031db19
SSDEEP 3072:KkxK2ggMzRggrggggggggggRcHXOU0Q4v93KB8jjAnbSzQ6AFyaW+7gJK0pfzhR5:B49iXOJl4KkneQ6A4/405fkxw1E+ZJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpcre2-8-0.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libpcre2-8-0.dll
Size 192KB
SHA256 c4840c78e4468c8e8e62b1297f1654ae5446ad04e3dabf979137345219ada979
MD5 fb2c3263cc1ba93bd89b04d555a972fa
SHA1 1c70019fe8eeece6bc84e328a74ebd2aed8c1a6c
SHA512 7983b5ed5a7c963eae0cd3c02360c0413619d21c627ebac3e58b26682c44eb24478398bc7d149e6aefe36944c1e96cec01f76563ef920531b106b7eeaef7b9da
SSDEEP 3072:KkxK2ggMzRggrggggggggggRcHXOU0Q4v93KB8jjAnbSzQ6AFyaW+7gJK0pk:B49iXOJl4KkneQ6A4/40e
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpng16-16.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libpng16-16.dll
Size 269KB
SHA256 0b51dd5b254595dbfa003d5ce27363412ee098612837e569edebabe2149b636a
MD5 980ce62995e2b0fc6d809a64bfc02896
SHA1 601eca760fbea62b992f1bbc9ef83e6b33235392
SHA512 d5b2e88a165ca41b45fc03f35eed02995fd0028067fe92fefff0e5fb57895f69608934a754face68b2555b2bcbe747166f172f720d5e32ff07d961a4f3860c67
SSDEEP 6144:74giQZogHmvW1xMfdUk8M4mnRL+CHxEDjlNvD:7rtqStmnRLJREvvD
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpng16-16.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libpng16-16.dll
Size 192KB
SHA256 c862c1561312588dc8f115883abbda773d7971d37e7ca9b80a0464bc11241666
MD5 9708ac0125c5b9d3b098103e225e85c4
SHA1 b6ada49459ff305ed1a3fe22725c6fdd6490175d
SHA512 fa5d5e7adc29a53dabc70d9293644d7176e8d370da79e3ebe0babea5a68ce43c5233e34fdb08b5bbdc8833361980219910afb11d89c2a3a1e0c5b57d20adba8a
SSDEEP 3072:/8xZjxvfyUWiWv43wi9iZL0gHZU8uW1xMfVVGMJbm7xCXkvRKn7YyH5P4mnR0Ev2:74giQZogHmvW1xMfdUk8M4mnRL+CHxEl
MD5 SHA1 SHA512 SSDEEP

Submit Download

libquazip1-qt6.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libquazip1-qt6.dll
Size 250KB
SHA256 3f06ff804caff1aa10da61ff9b3c8e060b1a9ad54cf336e582bf7422f7ea639e
MD5 92fd1c7887462c3e2d8c4b75329c14d5
SHA1 3305b83190612b47a90f34e20687fc2159d8f7e7
SHA512 61a25ff7ef8f7651c4798659a17f9fdd2111752e9cc5da13488d54da8e90fd3e1259dac69342a19cf2f2b882df2442d290dcd72bee2ec7fc6c610c3fe0f99fcc
SSDEEP 3072:taWaLhgTzF+fltFDaEIbUOaZu4mi3Ilv3NP69iP3h8Xl0+rsE8Dh63+PdtcXOX/g:zzF+fltFD9Ix6+vd3PR810hPtc+XwH
MD5 SHA1 SHA512 SSDEEP

Submit Download

libzstd.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\libzstd.dll
Size 999KB
SHA256 f9b8f326310503b8a79f8d16a80367728af0240af7cb3ea820f81144d2010fc3
MD5 4cc2b0f5e67f781406696b8032f30b72
SHA1 cf957e5f56c148d8fcf005989da1443c55ef190e
SHA512 b31e6377134dfcbc3b03c6be30d20bb721ec9dc395f68e497292469eff39dbd543e30593d0e18ba4548cb1c85f0e9b0a3c2ea8a4fb2ec8134a3ff93005daad79
SSDEEP 24576:gLbr7Lbrc5PJujQXfqSXqCUbCUeRym4BVWt7EX+1ciq7ir:gLbr7Lbrc5PJOQCSXqCUbCUSym4D+1c6
MD5 SHA1 SHA512 SSDEEP

Submit Download

pollymc.exe

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\pollymc.exe
Size 704KB
SHA256 377d96be766e7dfc1a3a91ce176eff25eb20bb94ceeafbd8e265c268555c4a6e
MD5 04246c734685526f102b71376f526ccb
SHA1 aae3636e291a12e8afcbdd8c35f67ad3968843af
SHA512 5bc30cceea584248401547c4b17a6958d17320734201c6063fdf59380c86976ab29b7093309b40199e00a4b17838f41f35c3f941dc8dc116d50ec830a58a5ffa
SSDEEP 12288:8iNCFdf1dC4VQt+7WItxxDDe4ZycZg3wpEkzfWUkYwHv:8iNCFt1kaWItxci/ZvpEkzeUkYQv
MD5 SHA1 SHA512 SSDEEP

Submit Download

pollymc.exe

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\pollymc.exe
Size 5.8MB
SHA256 d9c77a4e3a11cd9367064f4b48e3636996379a12950a381c43a05a3bafbf4843
MD5 bfc867ec6eb9a0c53f15e01893bb6e29
SHA1 9d38f40946956c103417e2ebcfbf3beff277b2e9
SHA512 bee0b1232b03e5b91de53c8f25545c81e4d44f07a97673f40ed0bf9700b004c30298b81801847c12cfed94984d4f808e7dc20c9d7f42e25f42bad5723ae7e730
SSDEEP 49152:8iNCFt1klItxcKvpE3U+iiKuBWpxYwv+HAO5gy2hfvoryWRs+1BPJbJklqZo4kj3:3ntDcj467JR1ZA2
MD5 SHA1 SHA512 SSDEEP

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Programs\PollyMC\zlib1.dll
Size 108KB
SHA256 7ef90c6875d176bae42aedc6720bd27d8515431a19b37c6a071f3b19f82a9eb8
MD5 17d86210bfddc727ba2751fd02c533e1
SHA1 c1c53c48c78852003045114c030747dcff017aa9
SHA512 c7f1a80a2285de93d63c9b7f069da1966ed16415ca01f02faeb9bd48b3d00f6e6d190aaf5f24d11f8ad78b6b2a8ff9c96ef7bfb7e80d6954cdfb73dca24c9152
SSDEEP 1536:FrydO0SYKz3fBslsm2zVeFb5ERhlb2ZFxVhOYERn6dhyIOUIO2d6iaeL6ML90:r0g2lsTUFb5ELTh2Q62d6iaeL7x
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nst8260.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nst8260.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nst8260.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nst8260.tmp\nsExec.dll
Size 7KB
SHA256 1076ca39c449ed1a968021b76ef31f22a5692dfafeea29460e8d970a63c59906
MD5 675c4948e1efc929edcabfe67148eddd
SHA1 f5bdd2c4329ed2732ecfe3423c3cc482606eb28e
SHA512 61737021f86f54279d0a4e35db0d0808e9a55d89784a31d597f2e4b65b7bbeec99aa6c79d65258259130eeda2e5b2820f4f1247777a3010f2dc53e30c612a683
SSDEEP 96:J9zdzBzMDByZtr/HDQIUIq9m6v6vBckzu9wSBpLEgvElHlernNQaSGYuH2DQ:JykDr/HA5v6G2IElFernNQZGdHW
MD5 SHA1 SHA512 SSDEEP

Submit Download

accounts.json.gepjHN

Path C:\Users\Admin\AppData\Roaming\PollyMC\accounts.json.gepjHN
Size 701B
SHA256 2576da3c2bf55f62f172b32bb0d0e6f805bdb48872f530f032afae05ecde2bde
MD5 fc058273fb56e042dc8649c0f7074496
SHA1 e1c22347fdd178705bbd2c1d94d3f0c447e3bbfa
SHA512 cf9781f9b688c48d5d3d6ea4ee5bc370846a755c2ef5394277bd9c87c47c823f3e89064c87fb769da3b21a3d686a5a659ad3c6886cbe1022602a8e1d956ae24b
MD5 SHA1 SHA512

Submit Download

1.12.json

Path C:\Users\Admin\AppData\Roaming\PollyMC\assets\indexes\1.12.json
Size 139KB
SHA256 7a87ae9278d129fc60285547332b8c17c1ae7f72b9c8017cb0a6898df743eb2f
MD5 837546708c50e9fa4614edb5a44d4d5f
SHA1 a21e1ded1a24ea1548dd8db0cf30b6acb02655a9
SHA512 51ff2c0e72afe85a5231647d551932bd342a73ed59c5788c03fe759587e39d605eca7ce915567cf541d6ae9ecad23389eded1cbe5d752d0f31d3d2d0a71648bd
SSDEEP 3072:sUXmSmjb6rY2u9JT6NjDd/cFMmyFxagK64wokSvJ9FcL4mBhy7thegE2SAGqVvNq:sUXmSmjb6rY2u9JT6NjDd/cFMmyFxagJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 60B
SHA256 bf9fbd5f470f9113a36915b0c9fffef42ada1729fd17e43694a636640794bcfe
MD5 2eaae1b8edcc064956070abc53d587f6
SHA1 f62a3663bcd33aadb06ad941f54777e072f0a48d
SHA512 2efaeae6299af5274758de9cf56ed417c6ea86d457532da6232a1c5829399a8bf44dcd0ea69f18d99cfd6f5e930d6bcaf12827bef7cd2718c69f20850b86c636
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 7bc578adc4d643229aef4fa376dd6398e319e7c066da72db29cfe74d63753399
MD5 19979ad036c309142e359f3f36e4e18d
SHA1 97c391516c1da22e31edfb3323a0da421dd494bc
SHA512 37bf57addb23c5dd7c34618061f190df46a4f5d67d398e3175f7a319fe9ba0182ac67f2bb8c4f1feba1c72ec7ef1fe29e81330a9157e56fd5c202a70ce566197
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 7dcbeaa1f6d82389727e94fe30d769326701446b4b502cccf7ef76023eafb975
MD5 4e4355ac4330cefce2645b52509f8cfb
SHA1 7935e43a7144f30319ec8274c5151513aa141afd
SHA512 8a31489d732b4635c152ecfae1fc9c95589a2fb6b2d1716f5e9c85d47f7d9356a691ee426c3035b3a48a5dfaad9acf3369f9fd9e6e980bb55f77a3c5b84cb410
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 f43a652fe378162f530b3eb9840a21f9e1d1338c4760dac9b1a01713bbf6faed
MD5 577650d32a9d2a37a91a6aa2301b2903
SHA1 d9275678db6e477960a28dbef466e1721a2e2dd0
SHA512 de15681076349004a9977ff0cd2f1d9c24dc6163f2aedcf9cabdfbcff7f74e9a36827fc718e678ff993186f450b02d8fb5c587e9d17dc51b4066283a313bb6fd
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 388B
SHA256 34d0bc9dea87cc305130de2ac67d40b4a874a8ba5bc30fae9513c226c6357dfd
MD5 3863a78a377d6e576d8a4f7f3a1241a0
SHA1 14645246a7e64330cbfad0c17017c93f38e73fc5
SHA512 6bb405ea3740719ba716448964076b3e739d5ed02dbace077d745a6746a233e8fb1925cf12a447dc492cc202c3cf8b2aa4468a6e6470bed00a4c3f52274b18bf
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 6beccdc7175224d430479cfe517b5847d57fe51b200c539690f88515662daf7f
MD5 baad9ea865146855ca8df538bbb2f13c
SHA1 93b3dadada59d45326b76e73b517c7697ebdcce6
SHA512 9a31b936318f019371e20805ec6e1b99832e3ae24e0ca98a2435fd9f8e0022bba9a76714ac0bf4d8f0bb0f3d73f42b03fbc0e19c64afe461b79e970cd6ffb299
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 4780c2d2edf2a29b33a8f7d677632b830fc4fa746d63ee3c3125ac652ec51665
MD5 89187e78018805e52944aac0852baf3b
SHA1 250276f14432223270ad60b4afeda0db2fe987c4
SHA512 1d2c9573e8cc0e0778b85f6f0c092b1cb44820870bdc79a1c5643599a2df5af6dfc79c6647698c17c853678511d7a51d76d6df51b0a12d5a143591c384881d1e
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 9c836ca219d0573e628abe45863b6de043930760558850ac519df7ee86e7079d
MD5 2f92a2b9120d7f5bd5f7448f932d1462
SHA1 825519ecec677aa885a0dc9ab726831b296b118a
SHA512 9fee3d546230fbefd7f8f46d21155456f4509fdeab9eccc7228b11be7fefb590094c43ad5839ae0d22757fe81fc8f3115328fd819a41e3e379bf19517d1d0db2
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 423da1819d6052cb5002e24cdcb6c48f531205068d0beabd2fe81357586b8bdc
MD5 7e85e9971d35419be9f0abd8797ab30a
SHA1 49a195fa3128c12db4944c8b9fa12772acef58d8
SHA512 f0a7013bc7bedd3c0a6ef2979dad27380b60a21c8f167e2158c2194bfdb6aa635788923af26a8b3e4cc24c01acc02a266e3d6b33440f70cf296542906cc68a4f
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 d1ad9aff9d8e2c959f32b018c678bcd303e63b92781b60bb92954bab30371e0e
MD5 842a6c1e28270fd13f1b41a70319b668
SHA1 d98d2167ed433dcd570a5c596db2cc4fef65881f
SHA512 9f12cb415471d43fef6e09d4e07d2653c7daddfb99f8a953ef8d3b627bdd4d554d40b35ca2b05e40fcac91f7ab69a40f7751790eed175f2f1d35d04975ff081f
MD5 SHA1 SHA512

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\instance.cfg
Size 1KB
SHA256 ff40db7ba6400f54f1dc628b32350c3398a3318d124130c3456eaf7abb6b1bf7
MD5 0cc051acb7b43f7aef7f624ca2f87a4f
SHA1 40f38b404c11a334135e6ee38d2862edeb6899c8
SHA512 c20e85d2e1bedf78bf1e75141b07d67e2c93e83e114070284288472a83eedbdd3f62a4fc903d61c59953d589e68f95986d6f57064b57ff035e98b7a921970214
MD5 SHA1 SHA512

Submit Download

mmc-pack.json

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\mmc-pack.json
Size 696B
SHA256 2e3ecc45cd7f123323c7d6b52daa30d19a5997db6656c59032f21ffd0911101c
MD5 e147d5f4c38c3fb97f4174bac6015916
SHA1 26f7cc86139b572d99a65f4a07af52e81dc6e2df
SHA512 269c66e28516b481290bd30ed8946df367c1256468fc721737221596c57169478cceef09bded33fa9e81d3fafd0a34cda2b27b653f94d237e1b8a1d1aa05c619
MD5 SHA1 SHA512

Submit Download

mmc-pack.json

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\mmc-pack.json
Size 173B
SHA256 0bd8b0416a3b93867245c2439578be09fdb6861c7cd3e7743cb3dd5cef15e8ec
MD5 3eb339661cacb686b9f5d666ad77810b
SHA1 3601a9a39e80e97c32cf5e5f95ceb0aa299852bd
SHA512 615797c57ebf45e08d88363765625e527226175bc723ac837cdf7ed80d6c0237741247c9e48939622be21fe53359885d5c04a3a73bb30819c4068e6fbb67ae72
MD5 SHA1 SHA512

Submit Download

MANIFEST.MF

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\META-INF\MANIFEST.MF
Size 25B
SHA256 566ad1a80220026d05099562645ce968ff0e7c36cde22634332605bb34cc3eff
MD5 92d04d6bd8a0235843240bba30d2f091
SHA1 79e33dd52ebdf615e6696ae69add91cb990d81e2
SHA512 d01c0adaf501bd1fadab5b911fb6e9c817fc57d3e5ce6a46c04fee263960a39f74467c8792b5d50c7827d6e180a8056d2e714caafb07bf8ab69c80c7e4bcfa46
MD5 SHA1 SHA512

Submit Download

MANIFEST.MF

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\META-INF\MANIFEST.MF
Size 107B
SHA256 9ed6f74e29c4397e63e5b5477e9a75c1a07ae124c5bfbd6b92deaada959db5c9
MD5 993d982806e559301981fda56c52bafb
SHA1 310df5381bcd2f24b192ea65679aa96f22356284
SHA512 88df8ca0725648b860b479a5ef347ca79490967c77c2167facdfb3f38d30958d91246928e86d7bcf31e330215c79c5dfb36e1a28210f459958a8c21c587be035
MD5 SHA1 SHA512

Submit Download

OpenAL32.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\OpenAL32.dll
Size 381KB
SHA256 baf27fc91dc852d78889e052cfc9ed2b6fc0927258bb507a895c6fcd50f10fef
MD5 9e02334f9bba622885eadb059f0633b3
SHA1 ede381bf55e7d0cd3a7e058237bbc66a8ff63837
SHA512 066eaaee241976d99e3f11de415976fb0e47e97035d4d7a7c121c33882190f3546637650f841a2858ac1734655f4994dc2cb8c5bdda5828557485fc20a779def
SSDEEP 6144:qB0wNMEdGJE5cN8PLJ8I1kabGLPwrWr+JervPI6YXaZ8AO8+H1MOi7BU:qBDL+af1kabGL/r+JwvPjKaZ8NMO
MD5 SHA1 SHA512 SSDEEP

Submit Download

OpenAL64.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\OpenAL64.dll
Size 373KB
SHA256 9261b66010a845ddef9f61d5e4266fe2f08a53f3605da002e9e8f8d202bdbc5e
MD5 89021c218a3f6feb807a664f852ffbd3
SHA1 97362fba53dfb6d9581b8c64829f4b1d98a97855
SHA512 e511c707c4453016cdeefcbc863fbf2750ad9cda12ad31f27369d5a396f9c98d9ef37fafb4030c683f17b1e2cdcfce924015fe49dd6652c3060bb0ba77ea3064
SSDEEP 6144:ABdTusYmeqPD3H/Jm9iQV4+ttOpJ2z4dpFg1RB/vPI6YXaZqRs0:AjTWIbgOmyEvPjKaZqR
MD5 SHA1 SHA512 SSDEEP

Submit Download

SAPIWrapper_x64.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\SAPIWrapper_x64.dll
Size 83KB
SHA256 241dd8e036a1cd27dfd7bc52027aa5c02528ce5138c5515c4864db723b109731
MD5 2675265c0f5baa7483a6b66b7ddd1226
SHA1 7fdbc1a8a9c0e550e95b7444369529c823f7d24f
SHA512 baf8123edf643cce5eec7457dab131d0906971ff5f8de039bfbb4a5ef22da35a770dfc8809f8731d6fd17c5efcce4cb7605d59a4e4e6688aa417988386463e52
SSDEEP 1536:i0pQvAZX4pQe0KmVmk/H/SRAqg1wsWjGpRsBQ+8/iJyzfGdc9dlUmcc7BI:i0pRXe1mVhH/SRhI0GpRsBQ+8/iJyzfk
MD5 SHA1 SHA512 SSDEEP

Submit Download

SAPIWrapper_x86.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\SAPIWrapper_x86.dll
Size 69KB
SHA256 58488c47b41bed97913e5694a6bbe418dffb4055cb2bda28348b6381a86f98c7
MD5 41dfbc2efe788a9aa10317c1a1a19f63
SHA1 d48b1c8b9e20f9e4de21497d6dda1fba2f0d84d1
SHA512 d9fcd723d8fcbb72de571c6196b3771d88c8d12fe843cc6196eb1f733b322d211be419aebf7133c7d1d339205e2a548e306b6c910745688aefcfc0c8a60d23cf
SSDEEP 1536:QnhkNXcIOIIWXikjzY2Eeq8+Q4fsWZQcdyyyhc2h8xFYD:FIWSkzYTlVJyRh+xF2
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-dx8.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\jinput-dx8.dll
Size 60KB
SHA256 89779abf806a93dd809bc7a4914967d0e6924dedf293afd48dd205dbce87d8b8
MD5 ec587acff9c06d699829908b515ea17e
SHA1 50348b2958b017df3bf30d7915ab61a4cb9a2b33
SHA512 2a7895d6196e3f1f740982bd4d0daeba255a033c971638e3aebd2cd2233c39f7c8e92c72d2eeb41f8b368d388a3b270fee2cbe219ee239f5d62af9f6f8ed72d7
SSDEEP 768:2Rj4ZLedvA5Z3cYlqcMOml0V6jY/MDS5TQkuzFqIn1pCDFECBXT7kE:gyLwvA/cYuLpYMSp2zJn330TT
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-dx8_64.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\jinput-dx8_64.dll
Size 63KB
SHA256 a38cb458b9e5a246d7418f38ac04430c2e5a3f46b082955d6dfd5d2bd74f4222
MD5 90cab52fca89e7d233741c0439dc2005
SHA1 5d9a7d3fb6224dab97aaff7bd9430232732d9be8
SHA512 041ca3aa3d6560f207d841c8af1939e4e93538fe4f34d74fb9eee003733d98783914c6cbe45022c483a6cfb54f0e4f25013f67851d9ae6e9ea6a8cc158d28936
SSDEEP 1536:PVt32LOgsg0Vn88QhCuUDhsI0CSS2u4mL5Ie2JQ:H2JsLV88QguUFT9DL5I9JQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-raw.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\jinput-raw.dll
Size 58KB
SHA256 0a8c0b47e173453bd92da224f73a6aff35b07c2db315abaf33e68edbdb147971
MD5 0862d141de8b4dd93ac55cd4a1a78b69
SHA1 4d982f408e815519c2289cd720c78338392a9887
SHA512 c070516f902082c3eda3f19fab6d6a6998442664f1b25d5d4c2229c03b7cac1a2a41d78b98474dfde3514bc206f5fb92e1949627e3e64052e0ed880e3f6a52ad
SSDEEP 768:YxAM8x3LQmQhccHXx+LHfFCxMJvI/+q9c6LTZsTUkwS9/FE5HBXTWoJCRX:tDI3+jFWTLTiUknG5NT9JMX
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-raw_64.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\jinput-raw_64.dll
Size 61KB
SHA256 832308f96b1760f2ebc183d1a1771278bb3236e4567dd7a23e1eaecf95f9c03c
MD5 ffc85e4a631d90112aee8e213cd367cd
SHA1 067c11135f9ebeb554d5f80b7a8a5244c0f3b7d7
SHA512 376393d9351ad2317bdff831df012ef993039c6bcb0616dec3c91ff1b13568a6f04c3bc8a0f9888aabafa7182513fe5f7fe5fe1fca7f14f64b58414e02bd8c48
SSDEEP 1536:ZFG7/fQHJY7EJsvjf30G8DbI7RfnBUVEGhM0q2JKmf6:ZFG7QHy7EJsvjfkG8QnByfJKm
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-wintab.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\jinput-wintab.dll
Size 55KB
SHA256 59201c94eb563025e47fe6b6f5c4dc326f0059d49285e2d3a44482cb60ffc9e2
MD5 7b5d669b490d5737d8a9d1f96274e2e5
SHA1 e7b9beead279298611d0c4753089d3af07c4c9e9
SHA512 ac43cfe9e3ef9dc0e1d2e49a8bbba041b5eca0d4822e694031c694f463017f39ad0131b9f689cc30d177bbf0253f6d2942314683c1ab51a54674ad1309baaeff
SSDEEP 768:gxucOm6iQLZXNvJGgY1mus+XBpkJ3L6GAwk44Rv+1mYxTauAR:ZcZQbzZC8J3LfA0Wk1T4R
MD5 SHA1 SHA512 SSDEEP

Submit Download

lwjgl.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\lwjgl.dll
Size 299KB
SHA256 fff711369747e9bb3656d4c5bdee7051bbc13f30abd634418bf40706a25f365c
MD5 2644c73a80eb9f9fb7f81a2a5e546642
SHA1 6f1661fc6952312a9f34dfa6d3840b46e9c85e63
SHA512 b67cb978b780fff10df8e610b722b81f7b68168bf4510cfd9406c65182703d8f42fc88820861e73f78ba75cb70d2f29c6b0978d7a02b0d196699c2650d869ae6
SSDEEP 3072:zd8I6dvi/byiLxRfg6p2ykoDYABr2JFcLN9Z5S0QoY6Pw5W+LMm002eunkmKq/XD:zqrd+DT2gLN9HKlmKqz
MD5 SHA1 SHA512 SSDEEP

Submit Download

lwjgl64.dll

Path C:\Users\Admin\AppData\Roaming\PollyMC\instances\1.12.2\natives\lwjgl64.dll
Size 310KB
SHA256 ebdcedbc3e24b911aacd7bb666ab426397ca7d7883a8d4e3cf28946041c95425
MD5 0b9fcfbd6d44e4d83605cc35171668c8
SHA1 f4013116d6750829851370ed19a9eaf8251ad6e1
SHA512 e920e284f47f888d10cac45ec8775e58481f5a8c2316d3fa01ff1e7b1bb63c64d2d0850b2da8fd040727b969d3b3f9b85afbd86b6cbfaecca580b853a1499f59
SSDEEP 3072:Jy6nSomUPQukwpSor62AIiGYIR2LGPHc0Ul+S4KQdw6tqYKVFlCh7NZqSEgbh:JciFkwpL2DI0yPHTw6tVKYr
MD5 SHA1 SHA512 SSDEEP

Submit Download

text2speech-1.10.3-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\PollyMC\libraries\com\mojang\text2speech\1.10.3\text2speech-1.10.3-natives-windows.jar
Size 79KB
SHA256 9b63bf0912199d89b0acc8ecd2e1469201056028f3aceeb58a891fc159158c68
MD5 2ceec2204daeb7588414098b9091be9e
SHA1 84a4b856389cc4f485275b1f63497a95a857a443
SHA512 971a4c9b7b5c44de0581903f9c1b85c4de408cba3430b96aeb2224970e23beb782e871b43744f6f58934bc00a0fdbd1fecc8e54a9c45f4654ccac8cd7fbee96e
SSDEEP 1536:Lhb4zRhmfWn4UduznY9oLCPgabqdsVXLeg7nngAnjZuXMKp5V4DKhb7I1jEY:F8ofWn4UoznMlYabasVNDxg8KR17wjEY
MD5 SHA1 SHA512 SSDEEP

Submit Download

jinput-platform-2.0.5-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\PollyMC\libraries\net\java\jinput\jinput-platform\2.0.5\jinput-platform-2.0.5-natives-windows.jar
Size 151KB
SHA256 24afbd5e1fab17da57d16a4d3f19d53f36155ef46a9976484201a4bb9722287f
MD5 b168b014be0186d9e95bf3d263e3a129
SHA1 385ee093e01f587f30ee1c8a2ee7d408fd732e16
SHA512 e8dd2c73c97cb0ec065acb3973a89cacf742005d60eca5f68edfd5306a23c4a6be8dd8deb4f7ff870075f75d79fff9a87c2aaee980ef7b4da764bcb822257dfe
SSDEEP 3072:gZZFp7OhuJ1SqaixK65/tUOuCZq+/qPrB/rlSTgaCi+97lRxp9JJKjMVfHYdM:gZfBOhL4K6ttUOu8p/KWTgDi+Fxp9JJx
MD5 SHA1 SHA512 SSDEEP

Submit Download

lwjgl-platform-2.9.4-nightly-20150209-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\PollyMC\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.4-nightly-20150209\lwjgl-platform-2.9.4-nightly-20150209-natives-windows.jar
Size 599KB
SHA256 f2e1f2c6bd7511a7504f389b8b716f5d8dc2fdc71e29c89b52644314cf0a228e
MD5 6cab9a7349c4a33e172ad405682e7796
SHA1 b84d5102b9dbfabfeb5e43c7e2828d98a7fc80e0
SHA512 83308b1b2edb19b6d252f7363f1cf10b56cb36cf40fbdae83a5ef403436d20a1d088f2c654d85d54143232f82bdef6d01087b3a4d70521d04defcddf548f4fa9
SSDEEP 12288:8C91j1LvjHyvs71yI9xINuowxa1FqenlCFkvZnBSshn6L//y:8C/d7PW0dxa1FJUk9Hh62
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.json

Path C:\Users\Admin\AppData\Roaming\PollyMC\meta\net.minecraft\index.json
Size 350KB
SHA256 0b8d18238e76b3e9871104e01b19eb81166336d58daad3240cb471f971fe6ba4
MD5 689eab3656dd1b766391aae4d918e137
SHA1 436b4d16b39b43d8fd55446e446c1858e6d3d14c
SHA512 c7cb2927240d792750bedda3e1020bca2787af813a16cbd1d09f9decfe8b02849659401e656fa03fff33d6f58cec5b68c696f89338504c0ba2086ddf2d05db16
SSDEEP 1536:DlmRSWsG930Rs3W8s8/qADr2dS5qAk645/B7MKIId5:yvu4s8Nrz5W/B7MzIL
MD5 SHA1 SHA512 SSDEEP

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 100B
SHA256 e1586720862cfc30c4073c612d34e5acd94ab41365b8f7ebef8f2af4d549253d
MD5 465113a37b57c81becd3905b8c3005fb
SHA1 60d0d20b78d5368a5036fb9e8fb2c6d8d269958c
SHA512 56b9bc093f2f1653fa542d50a5426ba3a7e901a488c32c3c522b39d99d9ea310471dbbeda8a9ddd1bab58f92c31e9e6d3b741d55e611446f4c83f442cbdb0bb2
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 18844bd52944a130dfe9a80fb10413b9ecfa0d53f5751481d49658f7305a4405
MD5 1a501926f7a6daa8a55453057cebeac6
SHA1 a6712d8aca313f328d0b92cbd00bb1f5517ea833
SHA512 c2f63fd90cc7841b13d3e6f555afd512e5ed426bc6edcb5fbff2e80e2fce8b4e4e664d42f68f25ced5c90dea3cc2059f691df87440bd765fd8f63c1e8815edd3
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 116B
SHA256 087e9318ab1b9cc30dfcbcf25f46f19f7a7dab3c8bac09a9b00d0161daacf12b
MD5 1ee2656be1389a5909a261daeef2767d
SHA1 340dcbb461fdbb2ec2219eb768868e21b568c7f8
SHA512 c40f16be75edc3a1f8b8f8e0cf1e51b8d8691c822cf4d880780f072189d6967e14fcd420b3a27de9955b6165ef44a2ec3e6dcc65be618f2bab1f7b9945ded6c8
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 90f37e5b6f51433b2f990f4f62e715dccde5d7d67f98ec5525426cf109ef9dab
MD5 a5883a90bf7c6532539b7ed1051f0617
SHA1 c356468fc495d921b3a35409f468a8bb43dee87a
SHA512 a70a370b9b68ff652a8daf54423ac2cad98b7733824f285aa7b9d45ed875a709c1af5851803bfd0b044510f5ce7881be3227ea2126237c78e425578ea0431f22
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 4231b7baec61a2c137c5654c1067f62c65bfea84b280217dc8bcc78ebb86671b
MD5 45300adc101da3fa562000e901106617
SHA1 13988bcb52ff6c3327bcbc6cc30d1fe46200a6db
SHA512 b06f477079ab37f14d3dabd97d09a44b2d3adf6b1e1f1e75bef5c21632800720094e933281fb25830f641fe4694b24c333efea7bcbe1029ab1103ce4c2e90585
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 75B
SHA256 af01c368b6143e77f16d67224483352ce44c43440ff5490d3c14c53a2f8483e9
MD5 56f429c2747394e7974612ca0b3a2f81
SHA1 121cc4703f89555b3ef88ad906ce39fec604bdc9
SHA512 426bb13d6fc53979357590c5d54b1974b86ecb2d54f55bcfe97fe7e6768af80e7de14abeb810bb9dec3795a74fa4dc5d409397083cdaa809a6ac328919e28520
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 228B
SHA256 cb0cc33e56f675739338ce65d50a5db626600dbeaff134ce4131282f735828b4
MD5 12c89b16a128d8524ecf663a9efcc21e
SHA1 c72f76dae6901b8528a40d44a5804c1b4a048528
SHA512 90af1b8c513edc4a5c0a94c4e76440329399cd1e330397afebf300cb333539939feb0fe39f070db134b2d8f30b5f2c185db195e1e881e7f7c36481c3d6e5c142
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 160dd5ef852981ef64998c7e3e9f1ea0f290b93bdb1d9f4090dae4d15b8cf3a4
MD5 04e6928d6ebdb60cb4c8b4c15283c49d
SHA1 641c116e8f7d8e5e5892d8cdb0c9e00bbdc4f570
SHA512 a835699a38594b69a334b1412ef1abfcd6afb198a1f6ef46426ebac843bdbe1c7b7b3cf418069ebd97c2e6c6c72873b98248b28c9831ac1b0097b871618b520d
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 f70e520f2283cfb15f3f1759e7ea2c242993e9e585814f45ceb3af2de9532ae6
MD5 1de12147b328f36f5b456d5db9b0c000
SHA1 a695d913d0bd449b183b6a1efb42351ec7b5e57b
SHA512 9469b61ecb39947ede66a5314ce048482826e783f57ed6ccd5b1c60e4e7ead0bbe9a9910dc275854cf43aa10a4be96f85671fe4f75394526e6210a4bdc35d2f1
MD5 SHA1 SHA512

Submit Download

pollymc.cfg

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg
Size 2KB
SHA256 3618c12386ce113b6607d994029cf1a45719674faa2cfd175607641e2264b330
MD5 cdcb6adb343f8072519dcfeed69c61b5
SHA1 74ce83ea9e5fb127998a9312034a62e1151a765e
SHA512 3e184d3348df752ad6300396366ef43555a4be94c99e73d737c4b8a7674ef74bf979bab0b1f490d9248d01cf5aff71ad838a17ec865ca1b62505de11818a5708
MD5 SHA1 SHA512

Submit Download

pollymc.cfg.gGXeMH

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg.gGXeMH
Size 30B
SHA256 9da99b49301ba83c33387e75d2028185562479e677b6afb110b4f8b098465807
MD5 a6dc16331f06bc5831e5ddc9799284ec
SHA1 d344f83d549df8c3e2c959182ba37f8c81d885a5
SHA512 43e498eab5c6f9b2f70c01e0abd4e63edb2651e498f267b53c7f62f2ef9c1eb68fa4783967fdba1880722a8bcd6e58065108f42773f0f47c04c9e54e809b1c14
MD5 SHA1 SHA512

Submit Download

pollymc.cfg.lock

Path C:\Users\Admin\AppData\Roaming\PollyMC\pollymc.cfg.lock
Size 60B
SHA256 1523272a01b3fc0adca53f770bbde23921429b24a1c493e72114a4c24401b819
MD5 1b872b94de122ec955e2e6b13adfae66
SHA1 b0752559b2f3f912f69452c6719491e07c0f933c
SHA512 0787b66465b3e92fec97be5fa4bf99c61270c04af99df292803388acdc0126211a18c6ea69e9ac33200e21ea892d9c5206a2fabbabd9ace8a97511c67166a6c1
MD5 SHA1 SHA512

Submit Download

memory/356-335-0x00000170A7B80000-0x00000170A7DF0000-memory.dmp

Download

memory/356-329-0x00000170A6390000-0x00000170A6391000-memory.dmp

Download

memory/356-322-0x00000170A6390000-0x00000170A6391000-memory.dmp

Download

memory/916-355-0x00000232636E0000-0x00000232646E0000-memory.dmp

Download

memory/916-316-0x00000232636E0000-0x00000232646E0000-memory.dmp

Download

memory/916-325-0x0000023261DC0000-0x0000023261DC1000-memory.dmp

Download

memory/916-331-0x0000023261DC0000-0x0000023261DC1000-memory.dmp

Download

memory/1472-5319-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1472-5314-0x0000025A58AA0000-0x0000025A58AA1000-memory.dmp

Download

memory/1472-5313-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1472-5304-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1472-5295-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1472-5285-0x0000025A58AA0000-0x0000025A58AA1000-memory.dmp

Download

memory/1472-5331-0x0000025A58AA0000-0x0000025A58AA1000-memory.dmp

Download

memory/1472-5329-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1472-5278-0x0000025A58AC0000-0x0000025A59AC0000-memory.dmp

Download

memory/1676-4186-0x0000020D52280000-0x0000020D52290000-memory.dmp

Download

memory/1676-4185-0x0000020D52270000-0x0000020D52280000-memory.dmp

Download

memory/1676-4169-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1676-4179-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1676-4180-0x0000020D52220000-0x0000020D52230000-memory.dmp

Download

memory/1676-4181-0x0000020D52290000-0x0000020D522A0000-memory.dmp

Download

memory/1676-4182-0x0000020D52250000-0x0000020D52260000-memory.dmp

Download

memory/1676-4160-0x0000020D50710000-0x0000020D50711000-memory.dmp

Download

memory/1676-4184-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1676-4156-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1676-4183-0x0000020D52260000-0x0000020D52270000-memory.dmp

Download

memory/1676-4187-0x0000020D522B0000-0x0000020D522C0000-memory.dmp

Download

memory/1676-4716-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1676-4246-0x0000020D51FA0000-0x0000020D52FA0000-memory.dmp

Download

memory/1992-349-0x0000019CD9720000-0x0000019CD9721000-memory.dmp

Download

memory/1992-351-0x0000019CD9740000-0x0000019CD99B0000-memory.dmp

Download

memory/2352-4721-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4773-0x00000235BCF90000-0x00000235BCFA0000-memory.dmp

Download

memory/2352-5407-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4782-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4781-0x00000235BD050000-0x00000235BD060000-memory.dmp

Download

memory/2352-4780-0x00000235BD030000-0x00000235BD040000-memory.dmp

Download

memory/2352-4779-0x00000235BD010000-0x00000235BD020000-memory.dmp

Download

memory/2352-4778-0x00000235BCFF0000-0x00000235BD000000-memory.dmp

Download

memory/2352-4777-0x00000235BCFE0000-0x00000235BCFF0000-memory.dmp

Download

memory/2352-4776-0x00000235BCFD0000-0x00000235BCFE0000-memory.dmp

Download

memory/2352-4775-0x00000235BCFC0000-0x00000235BCFD0000-memory.dmp

Download

memory/2352-4774-0x00000235BCFA0000-0x00000235BCFB0000-memory.dmp

Download

memory/2352-4772-0x00000235BCF70000-0x00000235BCF80000-memory.dmp

Download

memory/2352-4770-0x00000235BD000000-0x00000235BD010000-memory.dmp

Download

memory/2352-4771-0x00000235BD040000-0x00000235BD050000-memory.dmp

Download

memory/2352-4769-0x00000235BCFB0000-0x00000235BCFC0000-memory.dmp

Download

memory/2352-4719-0x00000235BCC60000-0x00000235BCC61000-memory.dmp

Download

memory/2352-4767-0x00000235BCF30000-0x00000235BCF40000-memory.dmp

Download

memory/2352-4728-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4734-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4739-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4750-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4749-0x00000235BCC60000-0x00000235BCC61000-memory.dmp

Download

memory/2352-4754-0x00000235BCC60000-0x00000235BCC61000-memory.dmp

Download

memory/2352-4756-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4765-0x00000235BCC80000-0x00000235BDC80000-memory.dmp

Download

memory/2352-4766-0x00000235BCF00000-0x00000235BCF10000-memory.dmp

Download

memory/2352-4768-0x00000235BCF80000-0x00000235BCF90000-memory.dmp

Download

memory/2900-3624-0x0000027AE0AF0000-0x0000027AE0AF1000-memory.dmp

Download

memory/2900-3641-0x0000027AE2590000-0x0000027AE25A0000-memory.dmp

Download

memory/2900-3640-0x0000027AE2580000-0x0000027AE2590000-memory.dmp

Download

memory/2900-3639-0x0000027AE2570000-0x0000027AE2580000-memory.dmp

Download

memory/2900-3638-0x0000027AE2560000-0x0000027AE2570000-memory.dmp

Download

memory/2900-4249-0x0000027AE22E0000-0x0000027AE32E0000-memory.dmp

Download

memory/2900-3634-0x0000027AE22E0000-0x0000027AE32E0000-memory.dmp

Download

memory/2900-3626-0x0000027AE0AF0000-0x0000027AE0AF1000-memory.dmp

Download

memory/2900-3621-0x0000027AE22E0000-0x0000027AE32E0000-memory.dmp

Download

memory/3076-212-0x00007FF8D2E10000-0x00007FF8D33C8000-memory.dmp

Download

memory/3076-260-0x00007FF8C2250000-0x00007FF8C2287000-memory.dmp

Download

memory/3076-208-0x00007FF8D2E10000-0x00007FF8D33C8000-memory.dmp

Download

memory/3076-210-0x00007FF8C4900000-0x00007FF8C4BCF000-memory.dmp

Download

memory/3076-211-0x00007FF8C4BD0000-0x00007FF8C530D000-memory.dmp

Download

memory/3076-216-0x00007FF8DF920000-0x00007FF8DF94B000-memory.dmp

Download

memory/3076-217-0x00007FF8D2DA0000-0x00007FF8D2DCC000-memory.dmp

Download

memory/3076-188-0x00007FF72A260000-0x00007FF72AF44000-memory.dmp

Download

memory/3076-209-0x00007FF8C5310000-0x00007FF8C54D6000-memory.dmp

Download

memory/3076-229-0x00007FF8C2390000-0x00007FF8C23E4000-memory.dmp

Download

memory/3076-213-0x00007FF8D6620000-0x00007FF8D678A000-memory.dmp

Download

memory/3076-214-0x00007FF8DF950000-0x00007FF8DF9AC000-memory.dmp

Download

memory/3076-215-0x00007FF8DF9B0000-0x00007FF8DF9EA000-memory.dmp

Download

memory/3076-228-0x00007FF8C5B40000-0x00007FF8C5B55000-memory.dmp

Download

memory/3812-834-0x000001ED25830000-0x000001ED25831000-memory.dmp

Download

memory/3812-1048-0x000001ED27000000-0x000001ED28000000-memory.dmp

Download

memory/3812-835-0x000001ED27000000-0x000001ED28000000-memory.dmp

Download

memory/4464-323-0x0000021910B70000-0x0000021910B71000-memory.dmp

Download

memory/4464-328-0x0000021910B70000-0x0000021910B71000-memory.dmp

Download

memory/4464-333-0x0000021910B90000-0x0000021910E00000-memory.dmp

Download

memory/4964-330-0x000001FA08700000-0x000001FA08701000-memory.dmp

Download

memory/4964-337-0x000001FA08720000-0x000001FA08990000-memory.dmp

Download

memory/5088-5872-0x000002473B3C0000-0x000002473C3C0000-memory.dmp

Download

memory/5088-5879-0x0000024739AB0000-0x0000024739AB1000-memory.dmp

Download

memory/5088-5888-0x000002473B3C0000-0x000002473C3C0000-memory.dmp

Download

memory/5088-5896-0x000002473B3C0000-0x000002473C3C0000-memory.dmp

Download

memory/5088-5902-0x000002473B3C0000-0x000002473C3C0000-memory.dmp

Download

memory/5088-5911-0x000002473B3C0000-0x000002473C3C0000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads