hxxps://www[.]curseforge[.]com/minecraft/mc-mods/better-combat-by-daedelus/download/4534620

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
23-05-2024 02:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.curseforge.com/minecraft/mc-mods/better-combat-by-daedelus/download/4534620

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133609050780487260"	chrome.exe

NTFS ADS 1 IoCs

Processes:

chrome.exe

description ioc process

File opened for modification C:\Users\Admin\Downloads\bettercombat-fabric-1.7.1+1.19.jar:Zone.Identifier chrome.exe
Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

3760 chrome.exe
3760 chrome.exe
4952 chrome.exe
4952 chrome.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

Processes:

chrome.exe

pid process

3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe
3760 chrome.exe

description	ioc	process
File opened for modification	C:\Users\Admin\Downloads\bettercombat-fabric-1.7.1+1.19.jar:Zone.Identifier	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe
Token: SeShutdownPrivilege	3760	chrome.exe
Token: SeCreatePagefilePrivilege	3760	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

Processes:

chrome.exe

pid	process
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

Processes:

chrome.exe

pid	process
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 3760 wrote to memory of 3628	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 3628	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 4576	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 3012	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 3012	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe
PID 3760 wrote to memory of 2072	3760	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.curseforge.com/minecraft/mc-mods/better-combat-by-daedelus/download/4534620
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3760

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8bf9dab58,0x7ff8bf9dab68,0x7ff8bf9dab78
2⤵
PID:3628

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1648 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:2
2⤵
PID:4576

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
PID:3012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2152 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
PID:2072

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3004 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:3876

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3012 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:2208

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4464 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
PID:3444

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4584 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
PID:2456

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4832 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
- NTFS ADS
PID:1728

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4480 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:1156

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4832 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:3508

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4828 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:1456

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5148 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:1028

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5152 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:3928

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5288 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:2340

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5836 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:1
2⤵
PID:1920

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:8
2⤵
PID:3580

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2272 --field-trial-handle=1792,i,16559630082280398012,2762571928579988208,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4952

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:2752

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Filesize
27KB

MD5
c984007d060766e41c7822ba1429658b

SHA1
b016cc7dd0f8243422b7bd3636c6f45426edc234

SHA256
1a5ce05e4a177d78ac9565c1104e1fd113c41aa5deb202442e48c102d22955d9

SHA512
7720ac3ab724bafaaaadd5892fafe526fef0d4cf9618453a5df6dfcebc35173a980aaa52f7ccff7afea99cdc39fe81ab7fed4cd2baa5dca89d07b8befa3480ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\207b0108cf39f5c4_0
Filesize
150KB

MD5
f9ebd7f18cbdde830439a689fad82671

SHA1
54f36a5126dcdfeb879a043d2334c043b1e0889d

SHA256
f136356054c854ea1e5edaa2cfdc0133e8ff53973790bf95c8b91787b216fac7

SHA512
c45ee8f3fff1290bf3a373aebbe4f67737011e44ee18eb81eae312ba9de887a380e4a7fa62636c59d7c806ffff402962736ff458427df7465d31111774bb7074

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\849e838794f3cb09_0
Filesize
252B

MD5
d81c1d6497e49bc65c2857dcf0956b0f

SHA1
e7b0a76e21d166a6fad2a88a51dbf938d704a0a6

SHA256
93b1dfefe0956a479059dd546ae2c7f54c75733582a5de9c7a47d1a2269b888c

SHA512
920b9864fc04695f88727a1c1241f0bdbc4cacac7707d1a173e83afda4c6365506fc64496a2041ce40e683b5ff929067419c805cd81cacbec6e3db4fc662becf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
720af6b2474ef3125bd4d850b18a6e76

SHA1
bc17c2186e24ba829c179301c59a68e2cf5d66ee

SHA256
45b4714289cb764e7a38a854490c0a8c4d527704fc2552dcff2b6517727f19dc

SHA512
4a971376dcbd1635d4f2fb7d95540d6ccbcbdf1b9d5ef964cf7be7ed06642f89fba265765adffcf24c3a96eead11de48f68844cf576e7cbc67060743b42bd7b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
41b9747196a2ad941e57e4f02078e48e

SHA1
53566442af5cbc3250ca4322ce3322297c6e6c0e

SHA256
59da815771d7c03865d1c21845bc3ea60520f12912031806685abc359b264c3f

SHA512
3b5aa48e50165e1650eda25c9ac99e15635abd55641dd42d3d02f947b317f0779ec03e961d2c86b41afc831530f811eb778474cdea694b1442cccbe89229ba1f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
984B

MD5
1bb717d62511ce5dbf18ea5c5e7ea681

SHA1
f70b788aedb409c26e2e69a7a5fc7865394ddc26

SHA256
5443ab575a16f17f7b1ba27ed5712444e179780ca35433d4ccf4d4a804a1744c

SHA512
c303c24663745d431e97ee0245e50ab7519346c73af86c23eca5cbf1f6109c795c757e473a0341dbaa2e349c86fcc6f10a553e1cdc783e4cd4ded2fc3c0ca9ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
936B

MD5
5cc5f1f956d3c15d2d94efcc433ec629

SHA1
fb92ec40811b8032d419ceb5919ca14abf579bdc

SHA256
dcca95d6f22eeaba1ed82a38c1522cb7f76e1fc175d0f681b63a99aa9d3544df

SHA512
56bf4e209edc56142863e3f900bc6d132351cd345ef801440887293d23ae868dc286f730536a23fcf663473ccb69fa551281176611c2be3de6790c50cb0a3fd3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
12KB

MD5
8a527426f5f020236f430db222526e4d

SHA1
ae79e7bddb596f1b8ab2e65ee8452ce5dc4937fd

SHA256
5d1a2b5de9630e0de6c0d5d5ffb00a544980c4cf68e56a8f0a94116a5d96a821

SHA512
fa4e2fdfa8c3efa4ac7b8c6dc1a67bcabdfbc471dac0a7bd3c5187a12390ead2afbd97d0a67e66614cdd2a61573aa3706f2b397e6b0307e0495646b7b2c55cf4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
11KB

MD5
b5517212c02b6bff944b9061d9aa6c6f

SHA1
f9e62202bb5767aafcd077ea09d97a7a6cb5f62a

SHA256
d9f1a9d9759ce4d11663aba333d5ff55f70c7e8775f2c8e8d32bc3efe7b4bfe9

SHA512
03150d587ebd438895f5f7799a12dc3cabfb8004b38e575611cefec8bdebfefa24ceb65c035c85d7a35087e81c85d22e8884295cb4c5d63191aeeb0907c4b1b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
6bd9921bbd42afba2b889338d041bde7

SHA1
f4e32e3b9c6f04ccadc545591a4ef07ffa207287

SHA256
2e99c4e4200ee800a2ba476b150c143c8d098237a83f2d57b077f4a92813e85a

SHA512
47a861d664c0a76ddb7201bfddeddb15459312ecf4028b977c2d8d53f9f1ff849a4d51886363bf6b8d86f610b3a5f6d885021cfec030101be179848779ec642d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
9579e562a0242f728bb75b45560eceb0

SHA1
8d9d1f513705899d36da5c31c250d1a45e3bdb70

SHA256
3802a3419528177900836b31a1035a4239199f5823be1ea1ac824c18e742afd6

SHA512
0063ccb70821e62723ee1a31dd4c8829742503c5ad3405e3cd6ec9b9740fdd798fde01eecb8fc1930ca95acc1e733634c565956fd97c034bd8f3203456638a26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
93d9615ae6dfb681f3136b9f90689470

SHA1
4331d40e93ee5577ecf7568362742756b9a229f8

SHA256
d126c6c239b265637e943c357e40a4ef1188c7e15e28b48eb751edfd3b521548

SHA512
8e8920bde28e7efccb06c5c5c7fab9a5453acabdc2acfe62550f377dfe7570227f53b018f8b0ddb6ffd1772b2a18b605c49bfb45ba0c1ff57bbcc15db04d01ce

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
e3a0ed92196b10f156ba679b17089094

SHA1
790a0e8abe2d858e2e1eb3936c8e473882c111e2

SHA256
edd914a6f3ac90b4692824155dffe4114e874eb747a16807af95cc4080f9e8d8

SHA512
15d693e1aaea2a858615719c49cb1f0a37e21bb3a6848f5a1ae03692695443092ba91ceb65cc003ef035aa45765db1d505a46af3ce94e4223694894cbef80314

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
7242028306e002a497d855711e766a23

SHA1
36efdf8f9a2ff77af14b389302836f9d505cda3a

SHA256
8f3fc88ff42ca76cadc10f472240d149b91c85a8292e5fdb823d9597447eaeaf

SHA512
4332a18e86bec98ec7cbf342554d713ad5712f83642eb005833c9741b3ca05a970561905d03d62d7bf8d021da29dcf39be0eb75178c3a94cd558f15a0a2fd88c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
1750ec22329847aad5dab034eb8fc09d

SHA1
11e2ac84e6011ddd8a25ebab139e6a5c0aefc2f4

SHA256
04f99e453978f8e70048111029a3afd649fd069f0cf221b66d58a8e3e0bfae76

SHA512
cabc284e4896fbf86b84d843a88d88de442e8b77b8d778529cc71e559abebf18ae2482f9e77bce56cb0de03c7d20d37ecd9c909e82e7c1bec67e2d3d91c41ad9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
2KB

MD5
d73031c90e244de2d9bd73f98c9f9728

SHA1
77812806f6e59b96a8c78d449511cdc56e24cfd4

SHA256
a20dbea8fbe4f1641a68a62692c5cbb5e7ac1e265d0c4ef2013a2244a9e6e180

SHA512
5d2809f1fd4e0991201828372c53b9ab3df5660d9919f94e1695948bd4259552f92a88e691984cd0973466ae32c855396c06eee00c605b13abb2febd241d2405

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
7KB

MD5
eb83637fc3144c0b9fbd9a68c52b74a5

SHA1
6675ae1f1ff208b5b45b0dc20729627935e9ac2d

SHA256
2304dc5005155bf0bc9ee3883103676bd61a1a16efffb023d91c3c25653db1ff

SHA512
1b8d24a77f656b0ca61211f3d2648d89f118658e344e09a0c7ee2e979450a064db92d6e40b26e3a5a38e748d64ab52a289eba55d0127c5f702b5a0ed199809fb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
7KB

MD5
da5a9b35516f3879ad814788d1c83686

SHA1
18ec2110eab8f8b0eb282062a8ab317727423473

SHA256
576b59f32d14a1997809dc0f47c832f1d85dc118e36950e7adb1b5cf5f729f24

SHA512
3a9ef54793726e3bef935933f584b4431d4bff5d551abfea8db91e756fec928d17736426f616c50d6b0a45c42ebdb7989e095f53a3cc8f49c1d918d4beeeab44

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
130KB

MD5
80e63e5e0ea02e6b1d3c662ed8b8cc62

SHA1
18088789ce092236e5c6e179e8df4848b128c218

SHA256
3c9ab336609136cee2bd349ba77676bfe4fc6cb9de74336c78ac078bb334b510

SHA512
a44848d566d3503cc7e98d2d73c4c6c4d50958771fec580fabc09640ba0a8d1bef2a73e2dd8d06b17574bc7e67115d9a06f6f1aed307fd87c7525b5a77c4016b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
88KB

MD5
54395bb1db242ff47f416a0ac25bd165

SHA1
1baca325168160650f3113ec6c1c1facec7e4a6b

SHA256
a79e6776ec79b89ced3c48afca7553cfa741f1323413b54c02da4249e67d4cfc

SHA512
71770cd68266f09acd22a0c68f8a8ad19d7807f8c0bb3eb2869d95485f042e05efdfc8a8133ce7eb91c5a97bb83fc104f78879422bda93cd1e9b7d7ed710de66

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe587f9b.TMP
Filesize
87KB

MD5
0000ef95c0c82530741f80a67df98d8d

SHA1
da722dbc0000eb0440c7e93dd09dce619fbb6fd2

SHA256
6378d06274c4869815e26d47cc206f56902c78e8076e729bb8ecbf38d8b853ec

SHA512
e13732784f855a1ff2125a6b4b275233e62956070cfc9bf5f4ce266924d31e30fbff263bd36f3ce2e4e65c5e8fc712e8d8f948e9abbc7a0db55b6c3839b45732

Download Submit
C:\Users\Admin\Downloads\bettercombat-fabric-1.7.1+1.19.jar:Zone.Identifier
Filesize
160B

MD5
d2b57f092d9c1263fd5ec93448a11a74

SHA1
28e8ffb8188671ad5dc817610847ec99294dda28

SHA256
449911c407ebf2c555feded8393b2b7441064994901dec35e77ae342c7eee310

SHA512
d03c42c9d0ab935ab700f6f1e7218e9de56bcd2f301a51059107b21349c9f13f4ca3993314110c60682f02f819494a63f9393e544b2b9700410f043c72514f7b

Download Submit
\??\pipe\crashpad_3760_FXPYVBHKUKIFKQQW
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit