Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3Qt6Core.dll
windows11-21h2-x64
8Qt6Core5Compat.dll
windows11-21h2-x64
1Qt6Gui.dll
windows11-21h2-x64
1Qt6Network.dll
windows11-21h2-x64
1Qt6Svg.dll
windows11-21h2-x64
1Qt6Widgets.dll
windows11-21h2-x64
1Qt6Xml.dll
windows11-21h2-x64
1iconengine...on.dll
windows11-21h2-x64
1imageformats/qgif.dll
windows11-21h2-x64
1imageforma...ns.dll
windows11-21h2-x64
1imageformats/qico.dll
windows11-21h2-x64
1imageformats/qjp2.dll
windows11-21h2-x64
1imageforma...eg.dll
windows11-21h2-x64
1imageformats/qsvg.dll
windows11-21h2-x64
1imageforma...mp.dll
windows11-21h2-x64
1imageforma...bp.dll
windows11-21h2-x64
1jars/JavaCheck.jar
windows11-21h2-x64
1jars/NewLaunch.jar
windows11-21h2-x64
1jars/NewLa...cy.jar
windows11-21h2-x64
1libb2-1.dll
windows11-21h2-x64
1libbrotlicommon.dll
windows11-21h2-x64
1libbrotlidec.dll
windows11-21h2-x64
8libbz2-1.dll
windows11-21h2-x64
1libc++.dll
windows11-21h2-x64
1libcmark.dll
windows11-21h2-x64
1libdouble-...on.dll
windows11-21h2-x64
1libfreetype-6.dll
windows11-21h2-x64
1libglib-2.0-0.dll
windows11-21h2-x64
1libgraphite2.dll
windows11-21h2-x64
1libharfbuzz-0.dll
windows11-21h2-x64
1libiconv-2.dll
windows11-21h2-x64
1libicudt75.dll
windows11-21h2-x64
1Analysis
-
max time kernel
1800s -
max time network
1734s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
06/08/2024, 15:03 UTC
Static task
static1
Behavioral task
behavioral1
Sample
Qt6Core.dll
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
Qt6Core5Compat.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Qt6Gui.dll
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Qt6Network.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Qt6Svg.dll
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Qt6Widgets.dll
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Qt6Xml.dll
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
iconengines/qsvgicon.dll
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
imageformats/qgif.dll
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
imageformats/qicns.dll
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
imageformats/qico.dll
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
imageformats/qjp2.dll
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
imageformats/qjpeg.dll
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
imageformats/qsvg.dll
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
imageformats/qwbmp.dll
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
imageformats/qwebp.dll
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
jars/JavaCheck.jar
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
jars/NewLaunch.jar
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
jars/NewLaunchLegacy.jar
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
libb2-1.dll
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
libbrotlicommon.dll
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
libbrotlidec.dll
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
libbz2-1.dll
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
libc++.dll
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
libcmark.dll
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
libdouble-conversion.dll
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
libfreetype-6.dll
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
libglib-2.0-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral29
Sample
libgraphite2.dll
Resource
win11-20240802-en
Behavioral task
behavioral30
Sample
libharfbuzz-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral31
Sample
libiconv-2.dll
Resource
win11-20240802-en
Behavioral task
behavioral32
Sample
libicudt75.dll
Resource
win11-20240802-en
General
-
Target
libbrotlidec.dll
-
Size
63KB
-
MD5
6b933641e6a997c2a100191783370ce9
-
SHA1
0ec5b215cdcb3c5ab1fcca8c1591474349cdab7f
-
SHA256
ce832348f2e913ceba2d0b94d9a8fe655035e438067ad9a7527b1d7e556acc27
-
SHA512
6308a7a34ff517e7b43958ad119206b44f92b75456617285b520e8706bede28d1b319c3b57253cca45d208988a6ef4e2720c3e343b0cf7ca876ecb0cfed2e3c2
-
SSDEEP
1536:QI0kv30D1vleo2465oymusFCfJq0rHoJXHLf:QI0n1vso2AAsFRXHD
Malware Config
Signatures
-
Downloads MZ/PE file
-
Executes dropped EXE 18 IoCs
pid Process 1052 PrismLauncher-Windows-MSVC-Setup-8.4.exe 3308 prismlauncher.exe 2008 prismlauncher.exe 1432 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1436 PrismLauncher-Windows-MSVC-Setup-8.4.exe 2576 prismlauncher.exe 1260 prismlauncher_updater.exe 4728 prismlauncher.exe 2884 prismlauncher.exe 1376 prismlauncher.exe 2396 prismlauncher.exe 4568 prismlauncher.exe 3676 prismlauncher.exe 3272 prismlauncher.exe 332 prismlauncher.exe 4344 prismlauncher.exe 2868 prismlauncher.exe 4108 prismlauncher.exe -
Loads dropped DLL 64 IoCs
pid Process 1052 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1052 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1052 PrismLauncher-Windows-MSVC-Setup-8.4.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 3308 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 2008 prismlauncher.exe 1432 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1432 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1436 PrismLauncher-Windows-MSVC-Setup-8.4.exe 1436 PrismLauncher-Windows-MSVC-Setup-8.4.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 2576 prismlauncher.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 1260 prismlauncher_updater.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 4728 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 2884 prismlauncher.exe 1376 prismlauncher.exe 1376 prismlauncher.exe 1376 prismlauncher.exe 1376 prismlauncher.exe 1376 prismlauncher.exe 1376 prismlauncher.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF chrome.exe File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF chrome.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe:Zone.Identifier chrome.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PrismLauncher-Windows-MSVC-Setup-8.4.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PrismLauncher-Windows-MSVC-Setup-8.4.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PrismLauncher-Windows-MSVC-Setup-8.4.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TaskKill.exe -
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe -
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Kills process with taskkill 1 IoCs
pid Process 2140 TaskKill.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133674321035864885" chrome.exe -
Modifies registry class 39 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\PrismLauncher.App_backup PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\OpenWithList PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (int) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.zip\OpenWithList\prismlauncher.exe = "0" PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (int) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.zip\OpenWithProgids\PrismLauncher.App = "0" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.zip PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.zip\OpenWithProgids PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\PrismLauncher\\prismlauncher.exe\" \"%1\"" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell\ = "open" PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell\open\ = "Prism Launcher" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell\open\command PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\Capabilities PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Local Settings chrome.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\shell PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\PrismLauncher\\prismlauncher.exe -I \"%1\"" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (int) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\OpenWithList\prismlauncher.exe = "0" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\OpenWithProgids PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\Capabilities\FileAssociations PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\ = "Prism Launcher" PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\FriendlyAppName = "Prism Launcher" PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (int) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\OpenWithProgids\PrismLauncher.App = "0" PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\Capabilities\FileAssociations\.mrpack = "PrismLauncher.App" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge\shell\open PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\PrismLauncher\\prismlauncher.exe -I \"%1\"" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\shell\open PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge\URL Protocol PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge\shell\open\command PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\PrismLauncher\\prismlauncher.exe,0" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\shell\open PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications\prismlauncher.exe\shell\open\command PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\curseforge\shell PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\PrismLauncher.App\DefaultIcon PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\Applications PrismLauncher-Windows-MSVC-Setup-8.4.exe Set value (str) \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.mrpack\ = "PrismLauncher.App" PrismLauncher-Windows-MSVC-Setup-8.4.exe Key created \REGISTRY\USER\S-1-5-21-3007475212-2160282277-2943627620-1000_Classes\.zip\OpenWithList PrismLauncher-Windows-MSVC-Setup-8.4.exe -
NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe:Zone.Identifier chrome.exe -
Suspicious behavior: AddClipboardFormatListener 15 IoCs
pid Process 3308 prismlauncher.exe 2008 prismlauncher.exe 2576 prismlauncher.exe 1260 prismlauncher_updater.exe 4728 prismlauncher.exe 2884 prismlauncher.exe 1376 prismlauncher.exe 2396 prismlauncher.exe 4568 prismlauncher.exe 3676 prismlauncher.exe 3272 prismlauncher.exe 332 prismlauncher.exe 4344 prismlauncher.exe 2868 prismlauncher.exe 4108 prismlauncher.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 712 chrome.exe 712 chrome.exe 712 chrome.exe 712 chrome.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4644 taskmgr.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe Token: SeShutdownPrivilege 5024 chrome.exe Token: SeCreatePagefilePrivilege 5024 chrome.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 5024 chrome.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe 4644 taskmgr.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5024 wrote to memory of 684 5024 chrome.exe 87 PID 5024 wrote to memory of 684 5024 chrome.exe 87 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4408 5024 chrome.exe 88 PID 5024 wrote to memory of 4412 5024 chrome.exe 89 PID 5024 wrote to memory of 4412 5024 chrome.exe 89 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90 PID 5024 wrote to memory of 2708 5024 chrome.exe 90
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libbrotlidec.dll,#11⤵PID:4128
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5024 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ffffacfcc40,0x7ffffacfcc4c,0x7ffffacfcc582⤵PID:684
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1860,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1864 /prefetch:22⤵PID:4408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2148,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2156 /prefetch:32⤵PID:4412
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2208,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2224 /prefetch:82⤵PID:2708
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3256 /prefetch:12⤵PID:2020
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3180,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3400 /prefetch:12⤵PID:1780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4384,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3584 /prefetch:12⤵PID:3236
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4612,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4832 /prefetch:82⤵PID:4444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4860,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4856 /prefetch:82⤵PID:756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4416,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4608 /prefetch:12⤵PID:3104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=228,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3440 /prefetch:82⤵PID:4512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3728,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4272 /prefetch:82⤵PID:896
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3740,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3504 /prefetch:12⤵PID:2772
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3384,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4400 /prefetch:12⤵PID:1532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5216,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5264 /prefetch:82⤵PID:3876
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5256,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5408 /prefetch:82⤵PID:4736
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3324,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5280 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:4968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3732,i,9550435669918621909,13128955653802983818,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4740 /prefetch:82⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:712
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:2776
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4368
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4528
-
C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:1052 -
C:\Windows\SysWOW64\TaskKill.exeTaskKill /IM prismlauncher.exe /F2⤵
- System Location Discovery: System Language Discovery
- Kills process with taskkill
PID:2140
-
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:3308
-
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:2008
-
C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1432
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {c82192ee-6cb5-4bc0-9ef0-fb818773790a} -Embedding1⤵PID:4456
-
C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-8.4.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1436
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:2576
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher_updater.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher_updater.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:1260
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /01⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4644
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:4728
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:2884
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:1376
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:2396
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:4568
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:3676
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:3272
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:332
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:4344
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:2868
-
C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:4108
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request196.179.250.142.in-addr.arpaIN PTRResponse196.179.250.142.in-addr.arpaIN PTRams15s42-in-f41e100net
-
Remote address:8.8.8.8:53Request206.23.217.172.in-addr.arpaIN PTRResponse206.23.217.172.in-addr.arpaIN PTRprg03s05-in-f141e100net206.23.217.172.in-addr.arpaIN PTRams16s37-in-f14�I206.23.217.172.in-addr.arpaIN PTRprg03s05-in-f206�I
-
Remote address:8.8.8.8:53Requestfonts.gstatic.comIN AResponsefonts.gstatic.comIN A142.251.36.3
-
Remote address:8.8.8.8:53Requestbeacons.gcp.gvt2.comIN AResponsebeacons.gcp.gvt2.comIN CNAMEbeacons-handoff.gcp.gvt2.combeacons-handoff.gcp.gvt2.comIN A172.217.169.3
-
Remote address:8.8.8.8:53Request3.169.217.172.in-addr.arpaIN PTRResponse3.169.217.172.in-addr.arpaIN PTRlhr25s26-in-f31e100net
-
Remote address:8.8.8.8:53Requestwww.googleadservices.comIN AResponsewww.googleadservices.comIN A142.250.179.162
-
Remote address:8.8.8.8:53Requesttunnel.googlezip.netIN AResponsetunnel.googlezip.netIN A216.239.34.157
-
Remote address:8.8.8.8:53Request162.179.250.142.in-addr.arpaIN PTRResponse162.179.250.142.in-addr.arpaIN PTRams15s41-in-f21e100net
-
Remote address:8.8.8.8:53Request157.34.239.216.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestconsent.google.comIN AResponseconsent.google.comIN A172.217.168.206
-
Remote address:8.8.8.8:53Requestprismlauncher.orgIN AResponseprismlauncher.orgIN A52.58.254.253prismlauncher.orgIN A35.156.224.161
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestobjects.githubusercontent.comIN AResponseobjects.githubusercontent.comIN A185.199.109.133objects.githubusercontent.comIN A185.199.111.133objects.githubusercontent.comIN A185.199.108.133objects.githubusercontent.comIN A185.199.110.133
-
Remote address:8.8.8.8:53Request215.156.26.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.109.199.185.in-addr.arpaIN PTRResponse133.109.199.185.in-addr.arpaIN PTRcdn-185-199-109-133githubcom
-
Remote address:8.8.8.8:53Requestself.events.data.microsoft.comIN AResponseself.events.data.microsoft.comIN CNAMEself-events-data.trafficmanager.netself-events-data.trafficmanager.netIN CNAMEonedscolprdcus07.centralus.cloudapp.azure.comonedscolprdcus07.centralus.cloudapp.azure.comIN A52.182.143.209
-
Remote address:8.8.8.8:53Request209.143.182.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.18.190.77a767.dspw65.akamai.netIN A2.18.190.79
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN A
-
GEThttps://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQk8dqZYMe7mkRIFDVNaR8UhNPMsUJv-EH0=?alt=protochrome.exeRemote address:216.58.208.106:443RequestGET /v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQk8dqZYMe7mkRIFDVNaR8UhNPMsUJv-EH0=?alt=proto HTTP/2.0
host: content-autofill.googleapis.com
x-goog-encode-response-if-executable: base64
x-goog-api-key: AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
x-client-data: CNCCywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:172.217.169.3:443RequestPOST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 2657
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:142.250.68.227:443RequestOPTIONS /domainreliability/upload-nel HTTP/2.0
host: beacons.gvt2.com
origin: https://beacons.gcp.gvt2.com
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:142.250.68.227:443RequestPOST /domainreliability/upload-nel HTTP/2.0
host: beacons.gvt2.com
content-length: 402
content-type: application/reports+json
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:216.239.34.157:443RequestCONNECT HTTP/2.0
host: prismlauncher.org:443
chrome-tunnel: key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
ResponseHTTP/2.0 200
date: Tue, 06 Aug 2024 15:36:18 GMT
-
Remote address:216.239.34.157:443RequestCONNECT HTTP/2.0
host: github.com:443
chrome-tunnel: key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
ResponseHTTP/2.0 200
date: Tue, 06 Aug 2024 15:36:18 GMT
-
Remote address:216.58.214.14:443RequestPOST /log?format=json&hasfast=true HTTP/2.0
host: play.google.com
content-length: 957
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
content-type: application/x-www-form-urlencoded;charset=UTF-8
accept: */*
origin: https://www.google.com
x-client-data: CNCCywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: AEC=AVYB7cqGz6gV3iSaERSBJTa-wrmQXwfA6EtJt8V9Pk-LTKyiTm5eKSnTXeE
cookie: GOOGLE_ABUSE_EXEMPTION=ID=da3b5a217e0c61e7:TM=1722958510:C=r:IP=194.110.13.70-:S=touBOSfiwbyhYbOOpJztLq0
cookie: __Secure-ENID=21.SE=GcOxmZmMvOOqKLpYFhY5D4ISDBzi_jwoEli3Jr7bjGOAxun1xJnY2EzG1FD5x5roKts62E25R4qcKUrfDnxQ1OnTVo0pvQuWsUDYv71CTmSyDhjDD9BgN-shnv_yu8g9YbbKZ2syzg3kbsmfq_mqtLjfTzYPVrOji6X-9uAmo-iFt14XMXr3OJYU8E1fF8RIIeF6ug
-
POSThttps://consent.google.com/save?continue=https://www.google.com/search?q%3Dprismlauncher%26oq%3Dprismlauncher%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCDY1NzZqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20240730-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=truechrome.exeRemote address:172.217.168.206:443RequestPOST /save?continue=https://www.google.com/search?q%3Dprismlauncher%26oq%3Dprismlauncher%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCDY1NzZqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20240730-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=true HTTP/2.0
host: consent.google.com
content-length: 0
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.google.com
x-client-data: CNCCywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: AEC=AVYB7cqGz6gV3iSaERSBJTa-wrmQXwfA6EtJt8V9Pk-LTKyiTm5eKSnTXeE
cookie: GOOGLE_ABUSE_EXEMPTION=ID=da3b5a217e0c61e7:TM=1722958510:C=r:IP=194.110.13.70-:S=touBOSfiwbyhYbOOpJztLq0
cookie: __Secure-ENID=21.SE=GcOxmZmMvOOqKLpYFhY5D4ISDBzi_jwoEli3Jr7bjGOAxun1xJnY2EzG1FD5x5roKts62E25R4qcKUrfDnxQ1OnTVo0pvQuWsUDYv71CTmSyDhjDD9BgN-shnv_yu8g9YbbKZ2syzg3kbsmfq_mqtLjfTzYPVrOji6X-9uAmo-iFt14XMXr3OJYU8E1fF8RIIeF6ug
cookie: SOCS=CAISHAgCEhJnd3NfMjAyNDA3MzAtMF9SQzIaAmVuIAEaBgiAz8W1Bg
-
Remote address:52.58.254.253:443RequestGET /assets/forkawesome/css/fork-awesome.min.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12384
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:21 GMT
etag: "6aac68da0d7ce64a67d018263d01bdef-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B43V1NTVSXDRD1PQ2GH9
content-length: 8311
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/index.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12259
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: image/svg+xml
date: Tue, 06 Aug 2024 15:36:21 GMT
etag: "956672b3de14f3d52812359a3679bcb3-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B43VZXBKCA0P0CNJGQEY
content-length: 2497
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/600.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12384
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:21 GMT
etag: "2f7a18740cd7a76e3b9e29d88b94dc36-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B43V7QMV9SYXWA2B662B
content-length: 520
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/700.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12384
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:21 GMT
etag: "71d2b423f691e8d9ea4b5f6b848e7132-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B43VFCSDCRFM075ZF8GS
content-length: 521
-
Remote address:52.58.254.253:443RequestGET /img/logo-text.svg HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12384
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:21 GMT
etag: "405d2d43e7f3fb6045f96c70085d13a1-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B43VKECHEXK6HG1AES3V
content-length: 545
-
Remote address:52.58.254.253:443RequestGET /img/background/prism-background.svg HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: image/svg+xml
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "06906044e9aee4809c5d3ec76aa7b81d-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B47XTXETJ0TSGHJKRR6M
content-length: 1881
-
Remote address:52.58.254.253:443RequestGET /img/built/1yCsNU_Ipb-1030.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "dc909b5686a85c93fc3a76526373e7da-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49PCJWSE2312SYVKTFP
content-length: 44988
-
Remote address:52.58.254.253:443RequestGET /img/built/xHuExHF4rZ-1126.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "87752acaa1ebee8d7f0b091fdf6765fc-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49PWD4DWWSX95NRKYTN
content-length: 91330
-
Remote address:52.58.254.253:443RequestGET /img/built/RTpnre2cYL-930.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "df7973d101b57ba288af07a1fc899dfc-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49T0W5Q1X2V6F3A3NJD
content-length: 31680
-
Remote address:52.58.254.253:443RequestGET /img/built/P1H4DXTh0--848.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "94573e37654b364bbe4483061cb394d1-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49YNF57HGTG2WRFW3QS
content-length: 42612
-
Remote address:52.58.254.253:443RequestGET /img/built/UKMig8gCWO-860.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "cde444214ddd9877f9bfd97fa8c878c7-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49Y7EB33NZKXG7BH91D
content-length: 22068
-
Remote address:52.58.254.253:443RequestGET /img/built/FUM6EYzLEB-960.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "c3f4f9d43adf17c08b5134f534da1a40-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49ZAWDFH96MAFXEM8W5
content-length: 27150
-
Remote address:52.58.254.253:443RequestGET /img/built/KsZP5qjIv4-1040.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 7283
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "5bd5efa0b9709fbf1eff1aa1cbd1a152-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B49ZD3S3S6T6HRB2EJHY
content-length: 41878
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/files/inter-latin-400-normal.woff2 HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://prismlauncher.org
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://prismlauncher.org/assets/fonts/inter/index.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: font/woff2
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "d4a109328666cbb39d8739f25cb589e1-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B4A090WGP8QDDXXH6V82
content-length: 23692
-
Remote address:52.58.254.253:443RequestGET /assets/forkawesome/fonts/forkawesome-webfont.woff2?v=1.2.0 HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://prismlauncher.org
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://prismlauncher.org/assets/forkawesome/css/fork-awesome.min.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: font/woff2
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "33d07d30a1274f7f0ec43bfdc43b3041-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B4A07YDTADZDRG55BJ52
content-length: 109916
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/files/inter-latin-600-normal.woff2 HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://prismlauncher.org
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://prismlauncher.org/assets/fonts/inter/600.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: font/woff2
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "14afee748986c7832ab173df194f5106-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B4A153TQT7QNXM1HR1GR
content-length: 24304
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/files/inter-latin-700-normal.woff2 HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://prismlauncher.org
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://prismlauncher.org/assets/fonts/inter/700.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: font/woff2
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "ceb8eba60c750acee3543eafdb0e9c05-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B4A1NBP6H8B6P340RMPK
content-length: 24352
-
Remote address:52.58.254.253:443RequestGET /img/favicon.png HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12385
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/png
date: Tue, 06 Aug 2024 15:36:22 GMT
etag: "c5dec8f49f6ad143fc90f1bfda654bfe-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B4A1Y884EFYR7Q73FJW1
content-length: 4522
-
Remote address:52.58.254.253:443RequestGET /download?from=button HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: same-origin
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
age: 12213
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: text/html; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "0878d6660d744fb91db1a21f6a0aa96e-ssl-df"
location: /download/?from=button
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B8YZSADP086YJ7D4CEEP
content-length: 5950
-
Remote address:52.58.254.253:443RequestGET /download/?from=button HTTP/2.0
host: prismlauncher.org
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: same-origin
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 12213
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-encoding: br
content-type: text/html; charset=UTF-8
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "0878d6660d744fb91db1a21f6a0aa96e-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B90ZWWB5TB46SSJRDZ15
content-length: 5943
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/index.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "71d2b423f691e8d9ea4b5f6b848e7132-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "6aac68da0d7ce64a67d018263d01bdef-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B93ACSR198MY8RS7XD3P
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/600.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "405d2d43e7f3fb6045f96c70085d13a1-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "71d2b423f691e8d9ea4b5f6b848e7132-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B93AETW8B9CC649H018B
-
Remote address:52.58.254.253:443RequestGET /assets/fonts/inter/700.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "2f7a18740cd7a76e3b9e29d88b94dc36-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "2f7a18740cd7a76e3b9e29d88b94dc36-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B93ABA9C04EC0SQ3DKCY
-
Remote address:52.58.254.253:443RequestGET /assets/forkawesome/css/fork-awesome.min.css HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "6aac68da0d7ce64a67d018263d01bdef-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "405d2d43e7f3fb6045f96c70085d13a1-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B93A627HVQPFJEWWQFG8
-
Remote address:52.58.254.253:443RequestGET /img/logo-text.svg HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "956672b3de14f3d52812359a3679bcb3-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:26 GMT
etag: "956672b3de14f3d52812359a3679bcb3-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B93AMSSE1SJ40H71K3FP
-
Remote address:52.58.254.253:443RequestGET /img/background/prism-background.svg HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
if-none-match: "06906044e9aee4809c5d3ec76aa7b81d-ssl-df"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 304
cache-status: "Netlify Edge"; hit
date: Tue, 06 Aug 2024 15:36:27 GMT
etag: "06906044e9aee4809c5d3ec76aa7b81d-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01J4M5B95D2GGASG4M7CAHRKBT
-
Remote address:52.58.254.253:443RequestGET /img/built/UbCpfG2Ehi-824.webp HTTP/2.0
host: prismlauncher.org
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://prismlauncher.org/download/?from=button
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
age: 10052
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
content-type: image/webp
date: Tue, 06 Aug 2024 15:36:27 GMT
etag: "996f49e28c56ce1f5c8cbc88e62d2121-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01J4M5B96CXV522RH8TYV5A02P
content-length: 44056
-
GEThttps://github.com/PrismLauncher/PrismLauncher/releases/download/8.4/PrismLauncher-Windows-MSVC-Setup-8.4.exechrome.exeRemote address:20.26.156.215:443RequestGET /PrismLauncher/PrismLauncher/releases/download/8.4/PrismLauncher-Windows-MSVC-Setup-8.4.exe HTTP/2.0
host: github.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 302
date: Tue, 06 Aug 2024 15:36:30 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/553135896/1b652e05-db7d-404f-a1d9-3fe863d5954a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240806%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240806T153630Z&X-Amz-Expires=300&X-Amz-Signature=e4ffbf62869cc756af7cb4bcb1efa07260064b61c178210ac78d96ebc4f90008&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=553135896&response-content-disposition=attachment%3B%20filename%3DPrismLauncher-Windows-MSVC-Setup-8.4.exe&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: C374:1AAD66:6A06C2:748A20:66B242FD
-
GEThttps://objects.githubusercontent.com/github-production-release-asset-2e65be/553135896/1b652e05-db7d-404f-a1d9-3fe863d5954a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240806%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240806T153630Z&X-Amz-Expires=300&X-Amz-Signature=e4ffbf62869cc756af7cb4bcb1efa07260064b61c178210ac78d96ebc4f90008&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=553135896&response-content-disposition=attachment%3B%20filename%3DPrismLauncher-Windows-MSVC-Setup-8.4.exe&response-content-type=application%2Foctet-streamchrome.exeRemote address:185.199.109.133:443RequestGET /github-production-release-asset-2e65be/553135896/1b652e05-db7d-404f-a1d9-3fe863d5954a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240806%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240806T153630Z&X-Amz-Expires=300&X-Amz-Signature=e4ffbf62869cc756af7cb4bcb1efa07260064b61c178210ac78d96ebc4f90008&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=553135896&response-content-disposition=attachment%3B%20filename%3DPrismLauncher-Windows-MSVC-Setup-8.4.exe&response-content-type=application%2Foctet-stream HTTP/2.0
host: objects.githubusercontent.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://prismlauncher.org/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
last-modified: Sat, 22 Jun 2024 20:10:01 GMT
etag: "0x8DC92F74C87A204"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3f5a052a-901e-0017-3562-c5485e000000
x-ms-version: 2020-10-02
x-ms-creation-time: Sat, 22 Jun 2024 20:10:01 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=PrismLauncher-Windows-MSVC-Setup-8.4.exe
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 2859
date: Tue, 06 Aug 2024 15:36:30 GMT
x-served-by: cache-iad-kjyo7100165-IAD, cache-lcy-eglc8600077-LCY
x-cache: HIT, HIT
x-cache-hits: 0, 0
x-timer: S1722958590.352753,VS0,VE90
content-length: 18958658
-
Remote address:8.8.8.8:53Request77.190.18.2.in-addr.arpaIN PTRResponse77.190.18.2.in-addr.arpaIN PTRa2-18-190-77deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request77.190.18.2.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Requestbeacons.gcp.gvt2.comIN AResponsebeacons.gcp.gvt2.comIN CNAMEbeacons-handoff.gcp.gvt2.combeacons-handoff.gcp.gvt2.comIN A172.217.169.3
-
Remote address:8.8.8.8:53Requestlogin.live.comIN AResponselogin.live.comIN CNAMElogin.msa.msidentity.comlogin.msa.msidentity.comIN CNAMEwww.tm.lg.prod.aadmsa.akadns.netwww.tm.lg.prod.aadmsa.akadns.netIN CNAMEprdv4a.aadg.msidentity.comprdv4a.aadg.msidentity.comIN CNAMEwww.tm.v4.a.prd.aadg.trafficmanager.netwww.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.23www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.75www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.71www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.2
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comIN A20.199.58.43
-
Remote address:8.8.8.8:53Request23.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request43.58.199.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comIN A20.199.58.43
-
Remote address:8.8.8.8:53Requestris.api.iris.microsoft.comIN AResponseris.api.iris.microsoft.comIN CNAMEris-prod.trafficmanager.netris-prod.trafficmanager.netIN CNAMEasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comIN A20.234.120.54
-
Remote address:8.8.8.8:53Requesttse1.mm.bing.netIN AResponsetse1.mm.bing.netIN CNAMEmm-mm.bing.net.trafficmanager.netmm-mm.bing.net.trafficmanager.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.27.10ax-0001.ax-msedge.netIN A150.171.28.10
-
Remote address:8.8.8.8:53Requestocsp.digicert.comIN AResponseocsp.digicert.comIN CNAMEocsp.edge.digicert.comocsp.edge.digicert.comIN CNAMEfp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.2be4.phicdn.netIN CNAMEfp2e7a.wpc.phicdn.netfp2e7a.wpc.phicdn.netIN A192.229.221.95
-
Remote address:8.8.8.8:53Request54.120.234.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request78.190.18.2.in-addr.arpaIN PTRResponse78.190.18.2.in-addr.arpaIN PTRa2-18-190-78deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comiris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.comIN A20.199.58.43
-
Remote address:8.8.8.8:53Requestris.api.iris.microsoft.comIN AResponseris.api.iris.microsoft.comIN CNAMEris-prod.trafficmanager.netris-prod.trafficmanager.netIN CNAMEasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comIN A20.234.120.54
-
Remote address:8.8.8.8:53Request10.27.171.150.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.18.190.78a767.dspw65.akamai.netIN A2.18.190.79
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.18.190.79a767.dspw65.akamai.netIN A2.18.190.77
-
1.1kB 4.6kB 10 9
-
2.1kB 4.7kB 15 10
-
1.2kB 4.7kB 11 10
-
1.1kB 4.6kB 10 9
-
1.0kB 8.1kB 10 10
-
216.58.208.106:443https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQk8dqZYMe7mkRIFDVNaR8UhNPMsUJv-EH0=?alt=prototls, http2chrome.exe2.5kB 7.3kB 27 20
HTTP Request
GET https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQk8dqZYMe7mkRIFDVNaR8UhNPMsUJv-EH0=?alt=proto -
4.0kB 1.7kB 14 7
-
4.7kB 7.2kB 23 19
HTTP Request
POST https://beacons.gcp.gvt2.com/domainreliability/upload -
2.8kB 7.7kB 25 27
HTTP Request
OPTIONS https://beacons.gvt2.com/domainreliability/upload-nelHTTP Request
POST https://beacons.gvt2.com/domainreliability/upload-nel -
3.4kB 16.4kB 24 31
HTTP Request
CONNECTHTTP Response
200 -
4.7kB 88.8kB 50 82
HTTP Request
CONNECTHTTP Response
200 -
3.4kB 9.0kB 20 22
HTTP Request
POST https://play.google.com/log?format=json&hasfast=true -
172.217.168.206:443https://consent.google.com/save?continue=https://www.google.com/search?q%3Dprismlauncher%26oq%3Dprismlauncher%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCDY1NzZqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20240730-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=truetls, http2chrome.exe2.6kB 10.5kB 19 21
HTTP Request
POST https://consent.google.com/save?continue=https://www.google.com/search?q%3Dprismlauncher%26oq%3Dprismlauncher%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCDY1NzZqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20240730-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=true -
885 B 2.8kB 8 6
-
1.0kB 3.0kB 9 8
-
905 B 2.8kB 8 6
-
19.8kB 586.9kB 333 498
HTTP Request
GET https://prismlauncher.org/assets/forkawesome/css/fork-awesome.min.cssHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/index.cssHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/600.cssHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/700.cssHTTP Request
GET https://prismlauncher.org/img/logo-text.svgHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://prismlauncher.org/img/background/prism-background.svgHTTP Request
GET https://prismlauncher.org/img/built/1yCsNU_Ipb-1030.webpHTTP Request
GET https://prismlauncher.org/img/built/xHuExHF4rZ-1126.webpHTTP Response
200HTTP Request
GET https://prismlauncher.org/img/built/RTpnre2cYL-930.webpHTTP Request
GET https://prismlauncher.org/img/built/P1H4DXTh0--848.webpHTTP Request
GET https://prismlauncher.org/img/built/UKMig8gCWO-860.webpHTTP Request
GET https://prismlauncher.org/img/built/FUM6EYzLEB-960.webpHTTP Request
GET https://prismlauncher.org/img/built/KsZP5qjIv4-1040.webpHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/files/inter-latin-400-normal.woff2HTTP Request
GET https://prismlauncher.org/assets/forkawesome/fonts/forkawesome-webfont.woff2?v=1.2.0HTTP Request
GET https://prismlauncher.org/assets/fonts/inter/files/inter-latin-600-normal.woff2HTTP Request
GET https://prismlauncher.org/assets/fonts/inter/files/inter-latin-700-normal.woff2HTTP Request
GET https://prismlauncher.org/img/favicon.pngHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://prismlauncher.org/download?from=buttonHTTP Response
301HTTP Request
GET https://prismlauncher.org/download/?from=buttonHTTP Response
200HTTP Request
GET https://prismlauncher.org/assets/fonts/inter/index.cssHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/600.cssHTTP Request
GET https://prismlauncher.org/assets/fonts/inter/700.cssHTTP Request
GET https://prismlauncher.org/assets/forkawesome/css/fork-awesome.min.cssHTTP Request
GET https://prismlauncher.org/img/logo-text.svgHTTP Response
304HTTP Response
304HTTP Response
304HTTP Response
304HTTP Request
GET https://prismlauncher.org/img/background/prism-background.svgHTTP Response
304HTTP Request
GET https://prismlauncher.org/img/built/UbCpfG2Ehi-824.webpHTTP Response
304HTTP Response
200 -
905 B 2.8kB 8 6
-
20.26.156.215:443https://github.com/PrismLauncher/PrismLauncher/releases/download/8.4/PrismLauncher-Windows-MSVC-Setup-8.4.exetls, http2chrome.exe1.9kB 8.7kB 14 16
HTTP Request
GET https://github.com/PrismLauncher/PrismLauncher/releases/download/8.4/PrismLauncher-Windows-MSVC-Setup-8.4.exeHTTP Response
302 -
1.1kB 4.0kB 10 8
-
185.199.109.133:443https://objects.githubusercontent.com/github-production-release-asset-2e65be/553135896/1b652e05-db7d-404f-a1d9-3fe863d5954a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240806%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240806T153630Z&X-Amz-Expires=300&X-Amz-Signature=e4ffbf62869cc756af7cb4bcb1efa07260064b61c178210ac78d96ebc4f90008&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=553135896&response-content-disposition=attachment%3B%20filename%3DPrismLauncher-Windows-MSVC-Setup-8.4.exe&response-content-type=application%2Foctet-streamtls, http2chrome.exe472.3kB 19.6MB 9147 14047
HTTP Request
GET https://objects.githubusercontent.com/github-production-release-asset-2e65be/553135896/1b652e05-db7d-404f-a1d9-3fe863d5954a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240806%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240806T153630Z&X-Amz-Expires=300&X-Amz-Signature=e4ffbf62869cc756af7cb4bcb1efa07260064b61c178210ac78d96ebc4f90008&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=553135896&response-content-disposition=attachment%3B%20filename%3DPrismLauncher-Windows-MSVC-Setup-8.4.exe&response-content-type=application%2Foctet-streamHTTP Response
200 -
152.6kB 3.9MB 2819 2808
-
1.6kB 7.2kB 17 15
-
1.6kB 7.2kB 17 15
-
1.6kB 7.2kB 17 15
-
1.6kB 7.2kB 17 15
-
132 B 90 B 2 1
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
8.8.8.8.in-addr.arpa
-
162.4kB 1.6MB 475 1430
-
1.3kB 2.3kB 19 18
DNS Request
196.179.250.142.in-addr.arpa
DNS Request
206.23.217.172.in-addr.arpa
DNS Request
fonts.gstatic.com
DNS Response
142.251.36.3
DNS Request
beacons.gcp.gvt2.com
DNS Response
172.217.169.3
DNS Request
3.169.217.172.in-addr.arpa
DNS Request
www.googleadservices.com
DNS Response
142.250.179.162
DNS Request
tunnel.googlezip.net
DNS Response
216.239.34.157
DNS Request
162.179.250.142.in-addr.arpa
DNS Request
157.34.239.216.in-addr.arpa
DNS Request
consent.google.com
DNS Response
172.217.168.206
DNS Request
prismlauncher.org
DNS Response
52.58.254.25335.156.224.161
DNS Request
github.com
DNS Response
20.26.156.215
DNS Request
objects.githubusercontent.com
DNS Response
185.199.109.133185.199.111.133185.199.108.133185.199.110.133
DNS Request
215.156.26.20.in-addr.arpa
DNS Request
133.109.199.185.in-addr.arpa
DNS Request
self.events.data.microsoft.com
DNS Response
52.182.143.209
DNS Request
209.143.182.52.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Request
ctldl.windowsupdate.com
DNS Response
2.18.190.772.18.190.79
-
2.4kB 8.0kB 9 11
-
204 B 3
-
3.2kB 7.6kB 8 9
-
140 B 133 B 2 1
DNS Request
77.190.18.2.in-addr.arpa
DNS Request
77.190.18.2.in-addr.arpa
-
3.8kB 7.7kB 12 11
-
924 B 2.5kB 14 14
DNS Request
beacons.gcp.gvt2.com
DNS Response
172.217.169.3
DNS Request
login.live.com
DNS Response
20.190.159.2340.126.31.7340.126.31.6920.190.159.7540.126.31.6720.190.159.420.190.159.7120.190.159.2
DNS Request
arc.msn.com
DNS Response
20.199.58.43
DNS Request
23.159.190.20.in-addr.arpa
DNS Request
43.58.199.20.in-addr.arpa
DNS Request
arc.msn.com
DNS Response
20.199.58.43
DNS Request
ris.api.iris.microsoft.com
DNS Response
20.234.120.54
DNS Request
tse1.mm.bing.net
DNS Response
150.171.27.10150.171.28.10
DNS Request
ocsp.digicert.com
DNS Response
192.229.221.95
DNS Request
54.120.234.20.in-addr.arpa
DNS Request
95.221.229.192.in-addr.arpa
DNS Request
78.190.18.2.in-addr.arpa
DNS Request
arc.msn.com
DNS Response
20.199.58.43
DNS Request
ris.api.iris.microsoft.com
DNS Response
20.234.120.54
-
2.7kB 3.6kB 8 9
-
210 B 724 B 3 3
DNS Request
10.27.171.150.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Request
ctldl.windowsupdate.com
DNS Response
2.18.190.782.18.190.79
DNS Response
2.18.190.792.18.190.77
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5b5ad5caaaee00cb8cf445427975ae66c
SHA1dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA51292f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f
-
Filesize
4B
MD5f49655f856acb8884cc0ace29216f511
SHA1cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA2567852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
-
Filesize
1008B
MD5d222b77a61527f2c177b0869e7babc24
SHA13f23acb984307a4aeba41ebbb70439c97ad1f268
SHA25680dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\22723d13-031e-42b1-bcd1-a25ebe0f013f.tmp
Filesize9KB
MD5f12645663f731eacb1575306fbe18064
SHA12f178ce39cfc99435e53a83fc6d94de8ce543662
SHA2564d22bb685ee49dc9be8495fc1aac2767de26e766f59c98d165eee6b584e7b999
SHA512401dae31a48a60f8c6310f971bf2664567fff5c0795dda8f893bfbfa0b6fd0a5096318ba40dede7aa27bc8f8c5bdecad7d9c0233255210d330099e2d70439e14
-
Filesize
209KB
MD53e552d017d45f8fd93b94cfc86f842f2
SHA1dbeebe83854328e2575ff67259e3fb6704b17a47
SHA25627d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6
SHA512e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9
-
Filesize
216B
MD515eccff9815dc5b5b4b1b78d7dde69ff
SHA115312e6dc134693e99649d8bc2b72754c34d31af
SHA256134831c4ced383ca6e543056cafc05e32613df17a85e267754ac578d057b8936
SHA512ff50069a3c6f24bbfa19adddc7a8ff27fb9eca4ea83290ae23bd08453d32fd370b03cb744b496a73122dc383a96a4d699870cd0a27f0c5ed5bf3a37acd931e61
-
Filesize
216B
MD51ad9bfa8e702f691339604dd7f26bf45
SHA18925542fbcabd72d49068a841db3588c4c21b30f
SHA256e01cc1581a47773b855ecaac53ae37c73de33522e83da81a18fb7bb2ddb19bce
SHA5126d3b42584a1bd10376aeaa8562b11ca90a1bd36a9acf40a80ca9ed9524d78e291b323b01fb628129c12a7f0ae7668fce62752abe25f9c625656f59292ad8d464
-
Filesize
384B
MD5bb60133c2a90a0be60c44473722a2042
SHA1844f3fe06e8c9c3fd1bd2f15f08f0d229ec39e07
SHA256278309cbb6fbafb3ad3a08a4ce0e0e25e32227300a346df666f87c05c3692362
SHA51237d9315a84e7758dd3a5d857365234ed85f713e5fab29d15b75c42887f69e407077c2c77f94146c06e6253c4ca619857a34e51e737c2ceeffa70690844332d5e
-
Filesize
2KB
MD59688bf4755014799fceed59e6f9f947b
SHA10d798a7a227b4a7e97612b72c502eaf1550a5925
SHA25678282b80f2e9a7459def3137d4a0f79d8b0778e844d304a38d8a113a1eb22946
SHA512e178f28ddd30736b254f3bcb4e0cd78a4da1879634941b7e22ae1aba84d1f449416d2eaaecead4c71929187eefdeef02fe9e6d629ccdd0822ed3bc6f06a2d6e1
-
Filesize
3KB
MD5d8bd12fcd0a56741eb2ed9023eb76896
SHA1eb5fb9d63e6fcfe093e78a518df322277cf6d1cc
SHA256a752afd1429d4a2b91603c9eed4a139f689c8c8f64749b0f7738488d11b487a4
SHA512809e46b623786957785300efabc5e2c6c7b51ea472a68de353e05051377911c6fece750dc5acb1568eea05d2b08a0311b5438d5f2f86298340099ae55494a3fc
-
Filesize
3KB
MD50bf8bdbf0bd3e452fc444fc08ce95ff1
SHA157af4fd2ac08e07ed2dbd55cef0b54adf829179a
SHA256b5bc29a7eab0d09a488658af68e579c7ef2ac11c5b0b4cc8c0d0bb4652b7fa19
SHA512b4bef3bce85790efff07abad69f2ccaa952460e81d998faeb838a10c1b295df7c84b1dc231cdd28db56fea4e0814f47f23b60ab1830f0fc315743f31a64a7857
-
Filesize
3KB
MD56e25d389fd244d028f2b32b75db15b04
SHA160aecfb715348ecda62a1017fbb6370b7025b494
SHA25680b07970f75dd68187ddd37a2c871541cb0202930b8a98e773193dedac0e18f1
SHA512f49ec68cb86d6c12f84b6c9809eb1bfe155f0a3cafaaac64f0bc1570d419145f351dca39254bf40836c61be6d2029ad3e8fc880d79fe5af7b735f4a7fb2ec632
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
522B
MD5d41d665f1009544f918451888bf6e1dc
SHA1ec4cef4aeb969d5cc201764aed7ee9ec8ab57ed5
SHA2562a557168d0c0aa7d1822dd25b32fdc75f0e5fc8de7a918048f9cfde0ce8435c7
SHA512f053b72e9de2bf6183dbb9fa6a367ed7b35edd9b4e46cc8ae99e8cbd79eeee515d55b06cf935a89848441357ed9d60fdec802bf4223ec9785132fd3a98a52dbb
-
Filesize
689B
MD5f0ec5a79e7e76e928eebfc721d23d5f6
SHA1b27170f50763b3756fe23feeb65ce50e6fd488eb
SHA256841b515cd0ba8d6e06871e237379a4de8978308bf0c78dcec802448e801be9e7
SHA5121bc96f60572be64789f5c788adb81f0b9a08bdc1ebdf9cbe9a8bcc9228f589338fe7148a0429b2fd5f153b1b24ab8117d946faa1b45684f30ef3cd0ae016a31c
-
Filesize
354B
MD534f5aa3cfe131510e2da06ef3cb846e8
SHA102bff70c8ddcd1d98220b9dc9626a4ce42145498
SHA256c62af8296b77833a1c6520feb6cba839b7651bb473f524a9a3c00269608c1f4c
SHA51244210e083723a422acd31d4e4a5b4c1146c07bff5d012fa6d223d55c5dda7280e3581716c4271bc34721990a49b1c87511082cce923521b362df00a2f37ca4aa
-
Filesize
8KB
MD5553eb0fdedfeb27b6294426ac60fb7de
SHA12221df22f9ce466205a78d285b7eab84f09b5fd4
SHA256addd35fbbb4d01ddd209660c9c5d9423814937d3f9d405e72cb88276bcb11a12
SHA512f59c8e0c964d328a49334561a2cf63c4a014fa4c81457765889726f0023f83d44c1acfbc1a3eb98c0475e519e725be7361a5c8032bb49bfdf668053275530e91
-
Filesize
9KB
MD5e26376648e66608ba83230c2a7d96966
SHA193aea5fb3583de092c2c19fea50accde554a33a5
SHA256d11f93f03094730703628a4ce67202b1d6bf5041830d1920d955378fa8c1730f
SHA512f1affb6ebbfd9661a15f60454c89f94094c0969dd87536d061e3fc4e317d252a0e086af7a4f8f7fea9ac8c327d274363063969295d1bd711eb841455dc708f89
-
Filesize
9KB
MD54dbb71f429d1b6d4b76061b9af0d5ec9
SHA194dda411fceea450207658e69925b75f3deb6ca4
SHA256e3e233771173ae919a881b364e497a37fe4004e58080aba263cc9595c043a4c8
SHA512e2e599c66f01d55939d917eaf3c8e3e69f892bd02884fa2fbe28f420c772bfd8f52589decca5aa94d2d3271534500a4164692f2fec62620447a21a5d2302771d
-
Filesize
9KB
MD59c404855573d7262b93232a5fbe7b6c1
SHA10b1a863a5485ea6dc18845b03b296118b373299c
SHA2565da94a6ccc90b7b21bdc5f2cfa3e02eb2e5b1de3958c98bb49c0bf3dff798e18
SHA5125771a7aef138809aae206b21c0203baa08ea841055ecee9193ec1ee01d8310a87ff2f63ed42c70a4b3955be717e694e4f456cee5679f00a78f7346c8f20657a6
-
Filesize
9KB
MD511c70c1e00276726539b980724cc65c4
SHA1d66b6a13d082a62fdb7083714a150befcd1b452d
SHA25618c3c3a83d5029c07500757760af6f6ba3ef2d6a7c7c025a8c3aa38db3e99c1b
SHA5126cd89cfe887f7828c6a31142a92a9c91fd60d32e876b7c5cc9e67812a1a99a5c459cb3877e5086f0566ca3935f7fb3eff512da1f57bffdd363fbdaa5ae000e74
-
Filesize
9KB
MD5aa2f851776cd65cba65aa4008f255ccd
SHA17cd17bb1e0c3550b5482a7a38277ae0734fce4fb
SHA256fdf79bd75de7383b107819a58d7bcb2e75865f13b38230944550bf757ed62340
SHA512204707addf9ed207d1bf87de283bcb71a3cc9af21dcd1ca8310bd7debec2d6067ef5a2bd77b7dd03e4ddd8933d2d890eb23bfc312fd801899c5ad69461718f91
-
Filesize
9KB
MD5b4ef5f24695ffd674aad546b77f81ddf
SHA13ea5c19fce5b114a77db772cde3189512c62ac3a
SHA25667dde6a93c9c2615a5dee49965780957e92b29eb5c5d4e7e155627b1962e6b99
SHA512a052ca8d7cc9025448cdee69c355bab88221d40e3dc809e9285f0c6695d2285cc648c33056751ddd99480218326341fc4441c70394ce18c1f391419d102ab1c4
-
Filesize
9KB
MD532721bc8121294e286372c5fc8afe5aa
SHA132b9d987b75a1a3532efb176c449ba6651700bfc
SHA25661bec19b93a75176d7a20f8fe4b7829c99b5a1ea47206cce84a8d341c826e517
SHA512baf288bd2974ee259d7644e0946b653fbb34895f0e4ed3e0ffb8b9ca4567994840c881c5b2f1aeeac5685f941736a4738f94d1a9998f0d8fa1c9708384c42c9b
-
Filesize
9KB
MD5f318fadb894c61a3d78c71678dd634c7
SHA12b88db71ccbc310833c6874edf3e643a19ea0bc0
SHA25647015c5a68aaf4772bc2b43550b3c397de08d172130c563d5fcdf864b2c17be8
SHA5122c56db06e342ea331b691f1e6570748469a8f8598c5467bf1676784c832d9ab3012034eaff3d7eecd3ade3be810ef97ceff3322e13793de8a25c214a87eb03c2
-
Filesize
8KB
MD535fc91fa13ffb629b49478f16e3802b3
SHA10ce37ba8ae4fb01b2a6a6d578a626e53774bd105
SHA256bb1a04098b082e326cdc178974319af6e59ad7ccd7b4a161613a9d368eab7417
SHA512727db053f0ea9ff8b5f8684cbf240312f94a420e58c3d138a41e07c0cf4be9caa856a3c13b017405138dce04dd09ea5fe84618a5d8d8ca21c7573a9ff7717b80
-
Filesize
9KB
MD5f06b1387caabe419f16d3da431b1ab5d
SHA14dc2940e8d8b294177b2ad651cd9307b26f519c3
SHA2564d2642b280399618baffdaae8b6a84108b2856ef2287b8414781606bbf989341
SHA51257bbceaac1fa425592a1e77fd63218ce9d3b47879963308b27a431ba7e20d2fd5f5245927e41cdff6a82ad967b5c65e0be30159f112e023b47dea13e465a8445
-
Filesize
9KB
MD54c78f57bd9ddf6f69040a7abde9dbfb6
SHA12844b07ca6afa44ed74749f521471dae76cd71fa
SHA2566e6f8607fe4008918e06e4d722ae6600b8498d5df22c8aed383ef95ab257169a
SHA5128a9fb737ebc2188cdc7d62a5df1ed07fe23404c4adb3e700d4b80c6f45688c250a98db809c30703ddc20069dd452fad00c806490632f0978967e9a9593106872
-
Filesize
9KB
MD5349642fec06e3aca59458d1066234bf3
SHA1110c1d2e3c4ebbf6bf3de769ad610a0598fedbb6
SHA25688b99344a9fe2a704a2df19725798a5861cfd72b1accbf6f3b66116eb9bd5072
SHA512695368e86718f40ad7a777a615d4cc2bd7993c893318049f38a29fae8cab01abf6e7ae01490230d5b0d372d39f8ae5ea4ef000e090ad541719f99580fd166d1c
-
Filesize
9KB
MD5095a92b4fc6c7434f6977bb5c7e37609
SHA1ea0dbb1e42236e2ba41ecfebcb90e853b5cbef85
SHA25647942e62fb5398ded767a3666f31c3fefe625b03dce3b7e5111906ac8887ddc4
SHA51260ce9ddcf256872055f5d38f7a92001b90f092cdae62eabf3a4c4d0c194ce669bad09eff5f0b49941219ef2074c2cce2a2b364d5537d3bc1a4bb2a1ea98ea13f
-
Filesize
9KB
MD528c53bd22fa5ef352c9a67c6a6acff48
SHA1c5e25a9919fe8a004b23dd3b81d9f0d95f553ae9
SHA2561047e86d7fde0722877035695cd44695e25e6a29d5a874019cf4c6e54e3c3268
SHA5125e300747eb13953a568adcec4cca7c779c1b5cee0ccfca046fcee73edb1f717a05effdf5830e5c4cdfc0496c7f5324b7798cbc046c118e0c385f41bededbda7a
-
Filesize
9KB
MD5072e12707fb7145ee87661d5c4ac8196
SHA1f9df39040b82c62bb252debc20d0754041ba15dc
SHA2562e02565ad5406653e01e33eccafe0b3dcaf8e7f328f57ad37cc9cddaa5d7a878
SHA51223e123b4fb0d7dae4672f9d3bc86f83748d41bb842a017beffb0303f8f741200a0f7ec65e0bd6a1eb25abf11a53d8d8e21e132931010794ea08becadd4167027
-
Filesize
9KB
MD575d21d613f1fe401aa95accb7ade07dd
SHA1e7877d2068af556c9c56c4d0603b747afb5b1ac6
SHA2569c001df6809d93b4ac80ca2813b4cde4684ead9574b7c76f41150bd07a24d423
SHA5123900b65745358708b5d08361a2a4fa56b0dfec61e199c4826a88c32d56cd8c0740758c6d8d00ad5dc03a8461e01811ccd3ec684767ed7a675c4e94ef623818ed
-
Filesize
9KB
MD568d8c79a3a7e0c5084a5642730e08046
SHA10b991efc41d865c7384e3d959f849c48834d146a
SHA2562ce742dcac4acd459eed52bba647340d2c9f4ea29337a47af856195da933c4f7
SHA5120d55a5a058341600b78342b0b3709beffff79e0be2a369069c6d0ece3d3ce71f83a60e0d3a0637be6b100eecbf62214af19825b7ebed86088b1337c2321c9c86
-
Filesize
9KB
MD55db0f7253086189578c2d3596495582d
SHA11c2a058c5ab13dcacbe6c390475238c2d8991849
SHA256d7339ef7d0b7e73c197e77c5e1afba69eb0b28e8505e06034868b21440ec6556
SHA512ab7a52919215e4013cdaedc7796599134657532e0c0f197861a0331f5ffc0b76e1e055ecc53e3f4e7cb0c3414cd081dbc20d97b75a2b3e4a207b9ee662d98ab0
-
Filesize
9KB
MD57b4dedc7eb321d2ef7bb7a118394957e
SHA1240f5c367095f2a710410c869b1b51a925f85383
SHA2567cd99fef5eca1cb90f4c1b24ac1b5734d0a08ea7528cc5cd61b5980e8c391e0a
SHA5124edc9e055271a4c6cacc36230db5ae5e795c80998652cbd149509efb3df7b6563429319d486545c64b0a560cd9973ac3c73fe22a0b184c01582fcc6bf033d9b1
-
Filesize
9KB
MD5e5e872561178b1c50ae589495bedc2ff
SHA150891f0add3ef294567d05b941b09888f80b69e8
SHA256969a680217bccbe7ec36ee1011497627b78681ccb5aadb5f34b11439ad4bfa48
SHA512d0b8d54f9b7fa7bdd07a8905d4b183454e5d19ee9d2b1bce85b184fd7019189df8f27531ef5d1a24c6a9032ca2064838598345e5b897e505cdd745dab7b4cc71
-
Filesize
9KB
MD5bee4b28c90ec4d93ea4a2f81e43e13d7
SHA1414b09a877aa17c601555e592d33128780749c90
SHA2562ba70913a16941a4436cb9fff7771e261edb5bebc1e75eca8c6e69f71e4355f1
SHA512c1e3f8734d1d54fe336fd450b8676ffae1c6b844a81f91f3364b545146b45c1199ef29c68547438f389e7e032dbbab17f32edaefecafc46b7025afc4269bfc4c
-
Filesize
9KB
MD53ffaf7f7bad7361f6af69cd2df593a1e
SHA1ff0bdbc79f5edc84e1322e35ae3ae6f9531f9e74
SHA256db666ed7d44e8139e0b19ff359134b7a4e87cfc3861299902210f3a7096834f4
SHA512b0e267e281f10ac341b5e0081f22112855c21601f98439659a83929a2cf70055c7011f5449b9d02df3e0ae0cb1e2d73978f52fed78ee809bdff67d94106beeea
-
Filesize
9KB
MD5265f2d9e99413c3d670db57ac35751fe
SHA1050439795d8f592abacc1cc9ab92559372db957a
SHA2563c71f413c05e366cefc430f4d50db880dd5cc0440a6f310b7bc884da684b14c3
SHA512739e7d9f3a68a43f4b83ab06375771180750aeb06a9a41e62f0f42a67618b97d60a1f7e74991a0b642b12971110d7a396e92e8c2474b72bc1b224aa8d7dbd872
-
Filesize
9KB
MD55aaf1b345b07bbbaa3365d672b6a39ec
SHA1940e256a50b9d5c3d1157692bd45054e39e3df5e
SHA256057fbb373eeb872ab0677770d1eeca475065fabfe77ca7f20c3217a79352fe04
SHA51298c782e05e06b901de9b86e6702e2f52039361e00b2f91e8b97803d3029a5263bbfbe9153948e59771cca5b51bd1c3ce0d65118cf1cd5c29bd3fbc87404423ff
-
Filesize
9KB
MD52c1aece7c0277299e83985378a11c2ca
SHA1a07bc52a928f6ce66c305aae523b843f9cd3622b
SHA256fcb5b8561b00d506f1b610f60baf3d3e74c64549e458f203486f89717e37e9a6
SHA512b6157d6aa15dc08d00756221c941ba7c1178295c08b3a5f2107b9f2de5d101810a44a0c697180652437f795525ec230f236d73b7a98eb5f952f16201fec041da
-
Filesize
9KB
MD5270b213efa32f276044dbb9a20deb2c4
SHA1bb6bc560179ed11a65a68688858e8227302f402e
SHA2567fcd6c1b1564c2ac530cc15dc31d8a76d94e776d2ae04b8fb8caa3fb4a0a620e
SHA512e6926b2ea8e7b56e5677ddd1d7d43de18e3a6fa20f0360c58cb4fe5ec7d24d4ffebad6ca7be436baa2e17897d971d77ee61e37474c3fffc92e461ac4ef46c853
-
Filesize
9KB
MD565cd42d98a7ba39b8f396861b6aaa2ec
SHA17fb865377e4636e23876ddc54db425dff7497cac
SHA2569c5364147cfb47e477eca391bbbdffcb307c841ea5dd1ca33b1230de3fbe0404
SHA51289cddf9b5bdf25fce74892f682119e345646f8f3b2c1b979999ffa942e8822bb008f3deff55fe09157dd030f549c24f4f50855d12b60e532fc79685d5d56b22d
-
Filesize
9KB
MD5442744c7e267de04afd2ef975584a737
SHA1d8c2971e3cba1c4c933bcdc05436b748aa6e8cd7
SHA256de5c16ede8bc15ff1abe576767c984748aa3d2e9cc1e016ce377608b927f0dae
SHA512f6214f0f4b254b74bdf7447f34e3a15ac03c908456af2a18684f5fb3001650099da7f4eb0ff216061ada006b874066b7c9f33037481864d71697c05230e181f6
-
Filesize
9KB
MD5443747e981b9aed338a7ccd4b4564853
SHA184a23017c8a2bd0444917d202356ac72683e5212
SHA256feae885348373a18402c0aefb929753b3cd83c4a960ec628958015602c8ce6dd
SHA512a36579dab9f161c89602da468dfa9b3d9122f985867e941654456f76e3e5b476e68d7007fe5c0e0b8956a9653a259596676c6df8939bb1e93ddba0f790740ccb
-
Filesize
9KB
MD5632d55fb47ed3dae28458e8db04b07f8
SHA16e29a267c3960586d361b50a6be9d35c3c0ebb83
SHA2567fbb48d0f9445627be02e0d734bd68271b8a365be352d80f896e81786c22e811
SHA512cbdfcfe356129e5f977b389ebf1b73c821f4e8f789433568e057c8a0b5e1da5192399bd9d456b788ae8c5319b72bd1852d66248c62891c3f334be28ed9dc8656
-
Filesize
9KB
MD563d3e3577271ea96e22abbfc391aa81b
SHA17521a0dad706063388076be9246fa5f9e9c12533
SHA2561e0c09dc469581134c941718c32470df5562e1b8a21cdda9c5523c505578d178
SHA512237d8f99539a9c8bd20fb5eca89b1d28ea29c68a8740e94d869d5c56b2b75795a12246f65a638f816936a0ff0784d807d9668ba02766587a1c4f3e6056de1405
-
Filesize
9KB
MD53df582b0d1eb3e48df7262d3c3f61566
SHA19a75ae32616216550874a4a9743035a8194c79df
SHA256ba3b0150b8cd0f7391719a1e1c38fce799224d4377e713f39f08e96a2488e688
SHA512901743ba80729169dae54080a6cbfe5a100f578a64508c1266136950dbf97e180b9cf2d346de65ab35bbaafbed2a30f4f5d68e28cac0d3b270ed82710adfca56
-
Filesize
9KB
MD59168a0166c82bd5667a964666ea5a5c4
SHA195f021d2266879145aa4431befcbd32901e6ce75
SHA256d6d56c120cfaa4476d40ac7b38fd71c5435f85a9530638c216a11fa710335fd2
SHA51297af2acf1f55f871ffdaf8f42c5c8d647737c515d1d44ddc1d8a73b1aa414666dfba037e91a52ca711abc62390de6ec096605817c6d02b46e6bd0dbed2d03c4e
-
Filesize
9KB
MD53789b0ec434cef9692f942a70872653c
SHA1574b0dbad878d7cb2f094c0cb0cd06096f828812
SHA25670563ea0ec282922971d5809837ed303ea1211803bd319803d9bb47112c67db5
SHA51204dd0d2e6403f1be1ca5181625b8da075f162a58d4b64bdc506dba4b194d3694e2fc14b2a61071e85afd08507a022a37edea909dcae8faac74a7dcbff4dd90f0
-
Filesize
9KB
MD51e872aec34d88156207dc27c14b302bc
SHA1bc0525e0bf9244d206e2908f08f668d2f0ae862c
SHA256287478a78232cd45f341ba091b837b8e9334c8dc29be8150469c2f499d218b5a
SHA51221a66321093a77f63433842e5bafa8215938f9ddb18dc41d99f524cda98f52985fd5258703be703b92d900b9d2f95b39a5436ac1f016cbf7b9ad689dc872a0bc
-
Filesize
9KB
MD50451aba6df66eb24a753c7f2ac6097e4
SHA14f8b5e800b52095dbffb16a0fd027dc155a96a63
SHA25659da517f60453ee537c35000943a3b94f330fb600e94f934a317fbf0b7069b04
SHA5122fdc80b382a4b686709dbc03ffbe7662fd1d58b20416f6cbd299287c4db99fa2b81d63129f37ce7c93ab2d7ac77bedb77515653ba9e55bf15463e04d3147bc24
-
Filesize
9KB
MD5c440aeb7955db9b58eaac17935404587
SHA127095f02b10f2e3538d105062351f700e38e4c40
SHA256ee628d6979257b749778be679913b31fbdd82edb83caf5220178121c4ce69d13
SHA512fbaec0a49407935e1ac7d2f928dc91e1807c64d90f783e7d40e6da59dd3867ada45db2be76d9f46760f8feea6de7b67a30068023c62e9096aceec5efeecc63f4
-
Filesize
9KB
MD5812c3cf315f13a8c202be6168af2b7b3
SHA112aed7c326d4d49239a0bc245280a9d62c4c4fb7
SHA2567bef92b05ad8b9d85f8678a7687d4786b4e80d4d99e0b674eda8ef7141bb1636
SHA51270ad9966b0e4d0dee1e729c00b8a81d3799f4a13b0ffa0b69f9905882971f0c5107a25305db78614a6ff388fce7d0f4f7b3b80bf3f7214259fa4cafceba7fc8f
-
Filesize
9KB
MD54b478613ddb82b6acd118bd515167385
SHA1a3c433fa81e4da2341bc67327e66602e2ec7fbe2
SHA256c4a13ff8d75a792b179d15cebb51a1ebef24b7257336d7ca6f9100164b2ca8e3
SHA512d1a2399da9444566503425cdc67316560585bb76cc255c46e8f50a53cf4d3727ff695acefaf934c845cc77e2dfd454bd8292c3262a1c958646d8982b379c8b5d
-
Filesize
9KB
MD5aa1840a0b04ad58c75e440827068bb1d
SHA1d060a11bd9ca650de98ed025b754b30e3f12f7ff
SHA25616eef8f374c527917a3f118fee485373811393e6516788ad6ded58041850cd77
SHA512c94dba4a3be4efbe1036f7d1d4e8a71dd2de9a6ea498807233912b85f1c1f03fdd011a87ab8aef1b528570d700021d91fc231f7249991420b2aa94aa27f63efe
-
Filesize
9KB
MD57e488801b8adb2461789e7e1826e5c4c
SHA1e696873ab36b04dcd22b1b0a5d3583a5c43eca7e
SHA256538a154706653fa4c32cea392d8d74e373f8be0edcc6315f32ffbc88a8ed081d
SHA5121a0ae98f2e9e5935463b8f85c1cf18dc0f55c6b834d21ddf2817ad9d6b26939d4b3dc9f8e8e716b2b094cf87c100f85493d8ed69c5e7c66209b4f05ce8e7005a
-
Filesize
9KB
MD52a85d08c14ed097cae7f2dc0c40215ee
SHA1cb8219db867c16b7a53f8a89100a8271d855cdea
SHA2563c629c312e153d466fbb44a929b8b8299831e341acc78c26319420a746784681
SHA51283898e60fac7bd6485032a8eaa40d82ef8a311d9094f6ffc6159afaf7bcfe73156abc1f1adbabbd2e6c8e4fe1c4733edf95474cb2ae831bf2fd381d8155a856b
-
Filesize
9KB
MD5f1351d5d42e2b3348122eba3b798ba09
SHA1e45398c7a578b46a3e78c526f5c2f10c8f489288
SHA2560c9ba2d9bcf23b9cc832077d92af6064fbb15ec54a880225af99f2375b5e0cb8
SHA51229e196c7c4f93c256626a2b55ea708db061746c69bb87a112ed4db73db575f11bebc051b83c8c236458f1273885b39c7cbe4ff62bfa491bc665fee4150e7c9fd
-
Filesize
9KB
MD53f661ebd08b0f1fd119ee83edc953dd5
SHA1bc5ff0147eaaba8a2b61633f110b53e8165e01db
SHA256bf54ecf915f7431b5cc470d5b808d7f58bcb1df6215a3158b31956a9a2659164
SHA512819834099b3400e923d2bb05a9a056a888d866ec9660c05e8ff9497344eeb7f38b96dcb3adbfda236a6cda5d0fb0d0f48dcd084bef20ae404f7cd9b1cdb52673
-
Filesize
9KB
MD522390a305140251c4a8e40f2e06254f2
SHA124bd58f31151310a21c163e82cf8746697e7b457
SHA2566a62488fca53c23ba4c8a2a69b49342876380e7b16ce231e871a10353844fca4
SHA51247c4ae42c5bf309bf0d34e70b544c11f4b0a5cf87b486920913e3aefc7b659af62603bbe03e620d9aa91b90d712db85b4253ec9c93101ca5d6ba42ce72015abb
-
Filesize
9KB
MD5107b00e3f62aacb781fb96c6f9b74373
SHA1d087d618f314e25246ccd5cf3ac9952b6264f0e5
SHA256072f2a00803b435976f6e94c5596cce505d3f9f18eb425ccec57b654952d6653
SHA512ddca777a657049ec70751392a22f17c56cfd7a5e71b1cb2b714a7f2ff19f7603eb55ee2017aea7c3ed896d24f8c2e8ba03f810f79dd92643c56c819046985987
-
Filesize
9KB
MD5deab286c4efc83d5144d486b52403a1a
SHA19ddaf43c8a6330f67a0e5ed4edeedd863f11fbea
SHA2568e422512b6e2d59008aa8191cde15b13009a8ae0eecf49d446388bb261e7e565
SHA5124e9e539bcc135cb29a1625b0907995b3c4f529d03eb88a041f230ef4dc6c1338cc298a3009acc48f868bf35e65b897400ab8f8edb1113a47068b113156fdf70d
-
Filesize
9KB
MD50697de33121bd54ab51ae417e6c85a80
SHA17bc380dc83e846d2fd7396bd9e0ea4f821448ae2
SHA256f609973c097df03b33047770278a76aab8fadc01792bb5aeedbc82bdd12a4627
SHA5127fd0ee1c1afdd31b7b55741b18eb269731bbcf8e1b12258bef2e09d9546c455e1fe8e6ccc6d6a18d6f2c7aaeb9890e9f588924b3d5d3014d29d61a83842a023e
-
Filesize
9KB
MD5cd46757f2f90c3fcc3c7b5fb105d1991
SHA195db51868956e852c39acea5a2f24c6ea408db93
SHA256edcc339812957cbcf4d266567a49852fb3dd2aea19bf7b1560d7d3ff6169f8e4
SHA5128aa27e0300aba04b0819627a3f38278afbcc27c0f95d1e1a03d51fdf4fec5111d5298d84ea3b71253ea17c712c112c06cc879e317da24c6abdad789b5c20643c
-
Filesize
9KB
MD5deeb069ed285815576decb82c3cfb2a1
SHA17bbd08dbe2dae009e36bb6f13d773363fbf51606
SHA2563f6ef9e7e5d2a37fa139271e1c42e3aeefe957cc7f27e65ae9b17747eaee8ab9
SHA512acd5b001cfc2264113f756bfc63f647fb0f104ba3cce044d63d078c8932468a2ccb5c68a15c4eb5c588ea8dbf16f6b5d022d90b016de7b0a890dee444263635c
-
Filesize
9KB
MD51119d247ccd43af2e7b93632a054dde8
SHA14b9ac6df5128704b3edb9f00ec48f497f6bba2ec
SHA256f0ebd46cbaa05018ab785194d5a8c1420df75e45b7305643de7e51a729e606cc
SHA51238a98555f14d4378af00eea2ec94f8a1cafa74deb689cddf21476e6677dd165f518cfda1950367159f75afcedd7248ac740554a83679d842b9f34d7333f0b47d
-
Filesize
9KB
MD56ae89311d5fe9f2dd43463bcdc7e1711
SHA19fa102bf1943e57c554af8d75df1fdf7af83fee8
SHA256ee25116722caad98ed5432df3d8b04fd48580ce19fcecb3a88f0c8b9c5b2233f
SHA512ffeb390bef97f92c8f89829e462b29df3940c6a9804949993d9cc28932e36e119e294b3c6d6de1bdd5bc38cd2f44ac7c5d2c408507dc8c7eb2804e1f6364a6b7
-
Filesize
9KB
MD588733b2d1cfcdd0eab8dc779982bd7c8
SHA15d729103bfaf80ee67c13ad9572cc248f5eeda21
SHA256a170a22c523540da67a2b66e6aa410796c0f559d72d81ae9d6563eb4d1b96c3a
SHA51204035de7b8d940ab6473f041ccc317c0bd488ea07c39bad722c4fe8f1041f1e948ed030f9b881b7367c4aeb120f7fbcf6807280d33e0c1c050f241292402e49e
-
Filesize
9KB
MD59c95bbfd82077516b062dda04df8866e
SHA18ee38b6a93cc92d50a696f63bb3dccc9b7ac95e3
SHA256bf753f510094e234bd63f7928bbb477d706bb63e7afb6d471b2e22ea4c12bb17
SHA5120550e3761c7ea716afee38439fd38c1be2a22cc613943546cde63a6ccb2c2147bcdc63ef9dbc9349b75863646885132e268a439e4cfc8ee28ae3c2913f537ac0
-
Filesize
9KB
MD5688843d22c83cccd1482973c5913c980
SHA1b6137d79cfacfa893ed4cc9ebd16154dfa3c2e28
SHA25672f948a58746e6ca8f5ce3d4288eee90b6df5b30981da2f526f33c70b1888654
SHA5122506001e5fe893baf2c9a95e91d887c8d56be668cfb62da3f410ca5fc0b36ea7d58cd5b9072c79c8e0e9738ca9a83e42fab8da58d5985005f590ddd6a2b10f6f
-
Filesize
9KB
MD57669ae7caccbccf0549ee95d20fc685b
SHA16dbeab959e6ab7e2cc5f56d6688a2f982750664e
SHA256c2c2f46a188005462f0b84c0ef1f6f6c3b29c5da5dfc0ba774ed4d3b78779afb
SHA5124be9e6614699133f474875ec05ecaf89062b17941b8bd710f16947f7df68ba585bcc825efd2b46f5a936d6421a3bad5a657226a6cca21b3e6f3b65a8165831eb
-
Filesize
9KB
MD5b37331fe1a0d8e9d98148b49cfa1c79b
SHA1a71595bb1c6aaf75df087096ab8ab767529409f0
SHA256d01f80825c34dc716f7c11f01e954cfbda14c2853f9f4acde42254ae9e0a8691
SHA5125853313675c9cce376d9d720e15459e3d6af40c54b3a89beab40a7c6848ff093405797cd371f0431fb75df25e5bf3d3907befe10ffbde017403af533a00adeaf
-
Filesize
9KB
MD570fb092b1cc2a9e1f8b15716399667e6
SHA1f64e864e2941e16cf73e241d88d380be751d8574
SHA256c7aaee7e4c3a3a09f3fc2e1e4c634dfe65c9102c3ac5296e74f31ea6abc29a1b
SHA5121dfd4d47c720117258f2187cd2864e19e2defbeb90df30747a5c44192237e7eab4ea669fdc8e67dbd387e9eb2eba5d797567251dc217bae40d86ddbf496b421f
-
Filesize
9KB
MD5a1c59687bca312b11b05c8e740bc0c8a
SHA1021e3cb372973d40828134c03410296fcc7c1882
SHA25674ad706ea60b2d3446ae0f040cebe49f137f471a8274fddbee233aa11a333668
SHA512aba5d3a8e3756fbb126886dc13ac16ac04b05af9e3f6adff15f5c9c114d0ab7c90154987ee29bd6690254ba75964ef6cf49d767d97e7e41ed12248a195835bfa
-
Filesize
9KB
MD5ec9282d7f09291520b9f428d2138fba4
SHA1644cc4232550e8599b0ab99c57abbb9f24ef31c1
SHA25669adaa5f3676d2c2023f9e8b74da83fb176ab2fce1887e18f91795c5cc9779c8
SHA512487337da1a05d4ff02d3e727354c78ace4d2aae806c4c9083f96a4f36f66eb29278a4986f5a19488dfbd15b79816e5dd1e242fa2650ef912f5097d0ac8f0fa74
-
Filesize
9KB
MD59eba805505819748e971729dd834514b
SHA1eee0d62856e6e6702d58d00f95735d9f4ba02f64
SHA256bccd09deac573ea1a8034e4d9c2587ed94668fe6f9c4087e7495c1d6089a26e9
SHA512f9e2e2c9876e1b90df49110717ad22192aa8af692fd5370dda370b71b26d3b80306a87d7ae83e4cc0509937a96da8af791912d0cc660f8a16bf715c75343d33e
-
Filesize
9KB
MD570847b5ccd9b436a373ebb496422cb97
SHA12efc68de326524f75557effb0547a66b76542414
SHA256db9676aafcb3de31003d67e571dff4b1b80dc35ca7979cf976e054436e1f3c4d
SHA51242c7d5ad090a1a9a3bfa10547a1ee456a8a3643b8797760a8dff21013d5516d0ca153b6601d456b24e4b8c040280ef5cd6e8fba8a55648e52943d0a872eb15fe
-
Filesize
9KB
MD50b43e4eae5570292b983feae83a056f9
SHA132c77273b50f4fc0f1fc07ed195f7b4b9bb248b7
SHA256d041ad8509f7c5323fa91ff1738ccec2344fd8dc3182c262dff4f5bf753e40a3
SHA512711f938cf2d07a76946207b5e38fa3a8d68d7b48c224de1cfb1010d7326c0a31392eb963df821d463b753adcb84fa2b40f387ec79ac8876b264c041dc68587a3
-
Filesize
9KB
MD511db0376ff116a096a94fdc173a7a57d
SHA1e46e5de4f2f0fa7f339ea699f239ba56417825b4
SHA256c2b51d18da9eb00f94b68e4fe1508155d8b3043f104a332564772cc19534a312
SHA5123198130374bda6f95c31480ffc6dfa6aee2ab40ca460f77c936529c2ac8b9f25e20bc09b298ce6e2990ed61d14f07599d1ca68dc9a38e6081346e2091acc4e73
-
Filesize
9KB
MD5e52fafac1b148bae847502fa5a362612
SHA10c66718b9d3f30783d6ff8519ab872b2df04d553
SHA2566f959795c6a7444ad7350fd5908ccee8d9fafd06582d62c10cafd1863745108d
SHA5126226f4fb01387c8131165c99d3bfc51ccf46beffa0a76d3d2ddec2af663fa7ff0f657932ed9d0084a5ff19a30139993ddc6d8ae3511dd99afa4c92ef10d6eb0e
-
Filesize
9KB
MD54299c7bacadfda42ae2baf1fd97ec8bd
SHA1b17753360f2d0e68007a563a9192ddaf45ff0d16
SHA25611ca6c02226b725105d831102ecd8c4133ce5fafc92560e247a91773fc7d2560
SHA51290d4dd89a26a7045113e3e382c7affc956df7832af709e4f313708c0b41ce5aae7fde49c21265238a8e9f006cc7051cc021ceac90473d5cc4351c8e9eb387272
-
Filesize
9KB
MD528fac3d35853055d9d6b7f728d84d992
SHA184702a601c091481be10e068b49247784501ad9b
SHA25618dc82cc72172974ec8b2cd5abf1daac87067c860a27cef1beb7de56ac4a55e7
SHA51210c7a58b9da53aa01cf3f0df446199b7d7fd38dfd88568fb15fec51b04a49de9c307384cf24e60c7709ab302bce069a806bf4dae8f509a63c2a57d58b1786980
-
Filesize
9KB
MD505673aa248c03e048771062390dc4057
SHA18eeb3ce7c99d006679123b2f1dcd67cca451ecb2
SHA256aea8fc3983052222dbc417734aa0e93197cf63f2a1114eed58bdb58e272e9ffa
SHA51207fbe4f8f095e2faf286079f475a978942e9880fbef8371d7fea6d094f8357a30093d1636d3b26e60dbdc7b51746b85c6a5870ea0e109f0ad4068513516b43ce
-
Filesize
9KB
MD5d54e295cd7bddbee2533f049b0077116
SHA174af7884d0ff51ef577ce3ad910a41de9a5e3112
SHA2566a7267c81fbaa25ca706f007f1dbd881019190d447551b9ae92f1c2b0b128176
SHA5128aa8eed4febbb61422fd2dced350e01d032451d8a11da502ba48015b6898082b6a013f4b1a5fddf2cf22cfe2795b77f89941e2c64176b27d231f64bc49ea9e85
-
Filesize
9KB
MD5b71680af9f9c14895cf6e40b3c2ba1c3
SHA155f9dbe18cbb542fa8c16d435f02dbe7f86d3707
SHA256f2345f1b7951570a2c7b618077c0a1f270d2b5dfb0a18635285071a692febbfc
SHA5129ebaea7e45ec898eab757bf6a3d31d2c203264b5276e49ecb3f5374789a2b088686ae18f3c75b737cb676f79a0f28a78c23dffa2130c72bfff8e8f6fc58d04b3
-
Filesize
9KB
MD57949cb02e26028dc6422f5eb302d6ded
SHA18a1713537167c9f71b7342f0514d5ea55d46990d
SHA256861f7f6d045d8df93757cc048468d15b84d09788c8ffafea8c225cba096eb1a7
SHA512e375baa6138705f44bb79819be8f0b21c127bb1983779bc6ebdcce992d3ecce2edc1de9d5ede78b6bd433c88c81ecad8c17d87aac4a2f80257b5af4a33a6bcf9
-
Filesize
9KB
MD5217821be805473ededee719609a6b42b
SHA1bfa3c8aff544741452bbed38f8d25236fcd36500
SHA256c47ff38f6077699719e8452cf1ea4ba815f884ad262b2b2060ce514789ebce34
SHA512ffbf74d5e3954c73a006a81ee6e277e055759e08a3c161b5b6a36b6bd05359a6da8a0a19ee7e2daa48d8534941680905c02868ee23f834a0580aa3619e636e70
-
Filesize
9KB
MD5cda1b4a42296b830bd0c8a4f7be8cf85
SHA145a8e17e18c7e18a0ee4462ca2039dc06821f733
SHA2568bb098e4cbb46ab325002d0a5bd1e5f09d57a2904f46cf2021185848ff8ccf7f
SHA512a487d32b99c7b085853048dee9122bb6831f0965660b55de4ca5d5adfcd34faaaac213b179df53750a2d5dd6680e69c70cf9f529b50c3d16d95ec56c53f22d93
-
Filesize
15KB
MD5e074d5016913098cb6064546e4c17fca
SHA1e19216d4ad23911e43d4d606f032a11b46185b2b
SHA256f77184c0e52d8ac621ca151d5a6c164daa397116fdea233d2fee6e7cd2ba8c46
SHA512137143784bce4706fb88013a33dfcea3ff2445039ae3432707658f1a6f5c753c2437e817958e43f988ba36d0b73f6f6deb72fac7155268793725293d91d3eb9a
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f977454a-54e3-40c5-902d-f9aacaa50444.tmp
Filesize9KB
MD5a0431376edbbe6a41332d25ad1d02ce3
SHA14c3595ced6debca08107317771c2ae5e42b6a3b3
SHA2562df5fc9536a803ddbdcfc0a17b2039126ae2e617613e5ee00d6df27cb1108bcd
SHA51219022d140a7d2769544374792ca78f6e9728cbd58b9c367cd628c894501e3b906794519ee2d83ae42412dd4656e338ab83019f8b1e147d0d8f8b4f8b79f2595d
-
Filesize
196KB
MD582b956d53f4cd9497d17b85df67eb119
SHA14603d3a7b49d0bb54c5c03cd18f3c6c31e7d74bc
SHA2561686c066ca3d2ebb44d95a61f7350a7ad6eb55d37a88d055db0756ed78833db9
SHA51283f35fbd42f5de0f7ad4e1dd871117c116b361e54f4d3350e5ea351565c4562121bf4c51f5e1736fe29fff314ea88e5ab7e73960fdb56b7719baeea4c819b757
-
Filesize
196KB
MD5ed1fe43ed01fbc385e5644d2ccf7742e
SHA1d635931ab29458f5c5b0c45bf3bb454695e9e915
SHA2566bc68cc2fae58394445cb3af38e1a93c4353deef00f2acef959ab984f1de1bb8
SHA5125cbe81a6301f17b95516eb4b0e0ee577a64abd6bfe2fa0c5ee8611d7815677c04fdf9301c53b5e949452c8ad947b93dbf6624d172ce15ab4fb2f4a1b044b0641
-
Filesize
196KB
MD5f554a9e8a65278a239eae60e7719413d
SHA1d85281a2376de9938442efc54f3238130ef0136b
SHA2566a7ebb4b8b853fa5b97200ece3f160e854e3a8ccc929c9dd14ee4297f3850854
SHA512f29c6d530b509c531367344bce34198e34543198a082e69615c99424e751611d8ad8a3702ae8b4a73fcd0a5dec94c70634e86f9d8dceb54bb0fd3b9892f4ea8b
-
Filesize
196KB
MD5f925bc5e704c2b5b42e6224e4447d33a
SHA13c82913984bd6f081521c09f1120a314763e1d09
SHA256b13830acae5322b6737ba5fc4aeb4eeeaab5095b5076674ecec428f119b591e8
SHA512a1d2b87c373fc0601b4fa1959f33f023391f51bd6e2081410ac6db344d181714c704a32bf68c1ea0f3dc00e29a2eadba37f86c63255fd6e026cc244a8a23b345
-
Filesize
225KB
MD5da2eb4cad32f8c0719a3242a3efd4eb8
SHA1dc2854bcd719cb9d3d15cae6fd081c14e43bdd2b
SHA256db2c54060217a4e8c3ea4af724425ee9047250075b8c9a0c8a6893a046d62f98
SHA5124d9e03c045b8fa49f2d65d18e56c649e56d65cd5e41d1fdf3ac382c4264d2e80c15560fd86e707f9cb974c3f1b77d8151270ea14a466642f26b8451f71fbdb47
-
Filesize
6.0MB
MD546a0dbd38cb28d8e79c80c9a033f6ae9
SHA11be5f3e78485f9b08e32346f13155a94001de50e
SHA256225bd38093416c825f2e3220213f64e1079e9ab20f4738decc0fc6eb992e8a9e
SHA5123fb62bce7b1d5129237914269aa3dd9a24f9e797927f2f4f937a0a291d357a40ec51b9c829094dc0bae1edcd6c580f1c9a03ca2c84d5526599c3608246f00bd0
-
Filesize
851KB
MD5e50b9b3fa16362c86a40e6255c6b45e7
SHA1fa8ce8fd6d4415abdb67597735575dc83a8fc634
SHA256c95ab3df8dc0bfd92925b7b8b51bce859ae09008691874a5c6f5630969557564
SHA51203a8ac0ae14e8420dd9fd91bc1619d072882d152127b3f2f1c6f7e670b7c54c524490e7c84a7cd0b76e2db413439a1ca55c4e03416fd6beb47b1067c3e960cba
-
Filesize
8.5MB
MD57875aad0d0d426e9d1b132a35266de32
SHA18b7656e3412ae546153d2d3df91a6ff506d64749
SHA256fc2464f62d7915ddeaebb5490bee6d60e7b42ad5a223d5812f0993c27c35be19
SHA5129fa16c5c628f2e9b242323aed4c1aa70f093cee9f341ac61640287ff9be8663658f502769e037a8409943d3c9ab826bb1c6f88532f0fbacdaea28b2353cdfba9
-
Filesize
1.4MB
MD5960f50470059381c65833145036fef29
SHA1270e230bfc9248e5ecff9ea8dfbc5f1066df02ee
SHA2561071f4f88c65317401bf93a2ffb55e661adcbb84f05911879ab21a6656521a68
SHA512cb0a0d63aaae1b9646dad722759b1c53b36ed13a4231a30b054f6124bcc69e7285c5777ab6bbbb8296756d6c31fc94e735db42c5155db35274e0ec25c1406582
-
Filesize
6.2MB
MD534abb42b63e71b09b72b48cf5b1dba53
SHA19f3111aab57a5f28a4ce9bf82ea208fa3eadb9a6
SHA256c71e65b882a84f47114590784a256f14ba19202ec30b218ce4841b2c7256060b
SHA51206acab5a04a5d3e6834ddc95229758d4adc7a7f0ef003c80e8d59a8241e295b196aceacce20c88879e1676405a2538d032ec6ac543258538e686878fb29f77f1
-
Filesize
151KB
MD57fcfa82dd4a01915622c14931cc585dd
SHA1079736f39ed5791df528fed5a12456285bfa1f18
SHA2568b772f5f227b266c47655d02843bf51be6c50729acc28db7dced488d62f7ed4f
SHA512caf98eecb1c57789b91dbef88c3f908f0652d29d93ae335526987a47f791d565e67e25ee4643abd006a39b2d9533449672c2c21df23cc61d77032c3cd01d6f39
-
Filesize
939KB
MD5a883645fd99ed6b7d6398e1bbc5028d0
SHA1ab0afcb2d58df52f402c0a2a81bf3f769fea15fa
SHA2569386b1af2adbf8972801723f7d13f394d96001e979f06dd0695622a6a3ad63a8
SHA512d70aafb4cbc0c2f2a8fc16e3560248f867908548c7b970d827ee9ad8c7342502dcf77a7b442a06a547dda6bdc6f3673dde5f909242327161fe1fdb272575ee3e
-
Filesize
869KB
MD56031ccd3785bafba8556008cbc058dfd
SHA1885147d02060dab7b0a124865c8116a478297ce0
SHA2562bdc29b85bd94170f97aadb1cd447eefe7a3ddf7950c535c81a9ef63e17d1ddc
SHA512b35c58cddc461c0160ee223fddcc181d8e6c21b5713fd8d216334b69f6ab1e4c12f4da1d377fd5b718db2c723ab20b673ab89190a3acc88d3cab03ff23bfd23d
-
Filesize
9.8MB
MD5f870a1b89e9bb05023eff04fd1ff4053
SHA10140d7feeab5ce8833b9bb55a224d041be3b2be7
SHA256e2871c9c570bf8e8f2ea10a7b91f08ff3833136e861c5fd9679f7ad3d5433442
SHA512766008210a531061b6b0af3fe2668f6d973b008dbe325f58b571927d8cf48c76a03f26135ce1c6fe573fe61ac6274a31fc9e7a760aa0eef93b6ad78147ba418a
-
Filesize
1B
MD57215ee9c7d9dc229d2921a40e899ec5f
SHA1b858cb282617fb0956d960215c8e84d1ccf909c6
SHA25636a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
SHA512f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
-
Filesize
534B
MD54995c4ae4070a861669fd6e997d815be
SHA1aa42f6bbab438d303e6e74172eca6a0673239e2d
SHA256fa8b3d64121cc915337b69756bd87597f4f557a802a95e953e2dfe33e40a52ff
SHA51296a0cee7c45fb86deb02286f6994a7aa1979e69e6e0bd3014a9ed897e6695d2fa586434fc3ea9c083118f1440bfcbacb9d4bba55cbe6ab14fdb92424b31a315e
-
Filesize
140KB
MD5cc096aea386047b0131eea248122c0d2
SHA16251253bbc6e4460884bfc22c1dd30cec32dbac4
SHA25647a22e7958279e7668ace09849a669f7410bf8c7aed752bd6e60f23c9581cd50
SHA5124b097b86a21ac26e8849bf3908de97479b3484f28a68060c06f75515b07b8878466bce4241aae6b0c06a1b671b59b5dd115c760f08dc6d3287f1b875963d1cb1
-
Filesize
12KB
MD5192639861e3dc2dc5c08bb8f8c7260d5
SHA158d30e460609e22fa0098bc27d928b689ef9af78
SHA25623d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
SHA5126e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
-
Filesize
25KB
MD5cbe40fd2b1ec96daedc65da172d90022
SHA1366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA2563ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
SHA51262990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
-
Filesize
9KB
MD5b7d61f3f56abf7b7ff0d4e7da3ad783d
SHA115ab5219c0e77fd9652bc62ff390b8e6846c8e3e
SHA25689a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
SHA5126467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
-
Filesize
7KB
MD511092c1d3fbb449a60695c44f9f3d183
SHA1b89d614755f2e943df4d510d87a7fc1a3bcf5a33
SHA2562cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
SHA512c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
-
Filesize
26B
MD5fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
-
Filesize
18.1MB
MD569bc5aec4f40f1cd760f0fa8a1b650f0
SHA1d8156098ebe7c38b6e3d2aa6b408d89bc75dffb8
SHA2566cbbfe0860d7c601d7c179840ebbf2c65009382419d539ab2d11db91c6ea1dd7
SHA512ce5b0f27b99e838af2a2cdb5cc569ca72e5d83c2f81d10a69a60389367d234455119dc395667c1530d12314eb998006d47e7f1cbfe336d1e249f04ac5e88b44c