hxxps://tria[.]ge/samples/241114-3lfknavfqg/sample[.]zip

Analysis

user interaction
yes
max time kernel
1800s
max time network
1794s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tria.ge/samples/241114-3lfknavfqg/sample.zip
Sample260506-pp6dlaaz3s

Score

10^/10

defense_evasion discovery trojan

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 1548 created 3116	1548	Modrinth App_0.13.10_x64-setup.exe	53

Downloads MZ/PE file 1 IoCs

flow	pid	Process
98	1684	chrome.exe

Executes dropped EXE 9 IoCs

pid	Process
1548	Modrinth App_0.13.10_x64-setup.exe
1000	Modrinth App.exe
1260	javaw.exe
6652	javaw.exe
6768	javaw.exe
7156	javaw.exe
6520	javaw.exe
6724	javaw.exe
6332	javaw.exe

Loads dropped DLL 64 IoCs

pid	Process
1548	Modrinth App_0.13.10_x64-setup.exe
1548	Modrinth App_0.13.10_x64-setup.exe
1548	Modrinth App_0.13.10_x64-setup.exe
1548	Modrinth App_0.13.10_x64-setup.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
1260	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6652	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
6768	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
7156	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6520	javaw.exe
6724	javaw.exe
6724	javaw.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Modrinth App.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-shared-components\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1278637600\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_146519263\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-mobile-hub\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1923306752\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_146519263\edge_tracking_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-ec\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-notification\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1164380071\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-ec\el\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-tokenized-card\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1131521659\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1164380071\ct_config.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-mobile-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-shared-components\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\wallet_donation_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_947105726\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_947105726\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-shared-components\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\manifest.webapp.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1519162499\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_2114683181\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-IT	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-notification\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_2049233552\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\Notification\notification_fast.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-tokenized-card\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\wallet\wallet-eligibile-aad-users.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\Mini-Wallet\mini-wallet.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\Wallet-BuyNow\wallet-buynow.bundle.js	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_947105726\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\bnpl\bnpl.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\wallet.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1472846501\Mu\Content	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\bnpl\bnpl.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\wallet\wallet-stable.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\Notification\notification.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\runtime.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\wallet-webui-101.079f5d74a18127cd9d6a.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1354764000\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\i18n-ec\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_40548830\json\wallet\wallet-checkout\merchant-site-info.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Modrinth App_0.13.10_x64-setup.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 5 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
6652	javaw.exe
6768	javaw.exe
7156	javaw.exe
6520	javaw.exe
6724	javaw.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1328	msedge.exe
1684	chrome.exe

Checks processor information in registry 2 TTPs 14 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225442971659898"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 30 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\DefaultIcon	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell\open\command	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\URL Protocol	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650218026-1419908266-2856590055-1000\{9864F31E-7DD8-4772-BE48-F9A3EC958FC3}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\.mrpack\mrpack_backup	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Modrinth App\\Modrinth App.exe,0"	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\ = "URL:ModrinthApp protocol"	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\DefaultIcon	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\shell\open\command	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Modrinth App\\Modrinth App.exe\" \"%1\""	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\.mrpack	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\ = "MRPACK File"	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell\ = "open"	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\.mrpack\ = "mrpack"	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell\open	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Modrinth App\\Modrinth App.exe \"%1\""	Modrinth App_0.13.10_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Modrinth App\\Modrinth App.exe\",0"	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\shell\open	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack\shell\open\ = "Open with Modrinth App"	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\mrpack	Modrinth App_0.13.10_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\modrinth\shell	Modrinth App_0.13.10_x64-setup.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5984	chrome.exe
5984	chrome.exe
1548	Modrinth App_0.13.10_x64-setup.exe
1548	Modrinth App_0.13.10_x64-setup.exe
5984	chrome.exe
5984	chrome.exe
6496	msedge.exe
6496	msedge.exe
6244	chrome.exe
6244	chrome.exe
6896	msedgewebview2.exe
6896	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5872	msedgewebview2.exe
5872	msedgewebview2.exe
5872	msedgewebview2.exe
5872	msedgewebview2.exe
5872	msedgewebview2.exe
5064	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe
Token: SeShutdownPrivilege	5984	chrome.exe
Token: SeCreatePagefilePrivilege	5984	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe
5984	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5064 wrote to memory of 5084	5064	msedge.exe	79
PID 5064 wrote to memory of 1328	5064	msedge.exe	80
PID 5064 wrote to memory of 1440	5064	msedge.exe	81
PID 5064 wrote to memory of 1440	5064	msedge.exe	81
PID 5064 wrote to memory of 1440	5064	msedge.exe	81
PID 5064 wrote to memory of 1256	5064	msedge.exe	82
PID 5064 wrote to memory of 1256	5064	msedge.exe	82
PID 5064 wrote to memory of 2764	5064	msedge.exe	84
PID 5064 wrote to memory of 3260	5064	msedge.exe	85
PID 5064 wrote to memory of 2764	5064	msedge.exe	84
PID 5064 wrote to memory of 2764	5064	msedge.exe	84
PID 5064 wrote to memory of 3260	5064	msedge.exe	85
PID 5064 wrote to memory of 3260	5064	msedge.exe	85
PID 5064 wrote to memory of 3604	5064	msedge.exe	87
PID 5064 wrote to memory of 3604	5064	msedge.exe	87
PID 5064 wrote to memory of 3604	5064	msedge.exe	87
PID 5064 wrote to memory of 5336	5064	msedge.exe	88
PID 5064 wrote to memory of 5336	5064	msedge.exe	88
PID 5064 wrote to memory of 5608	5064	msedge.exe	89
PID 5064 wrote to memory of 5608	5064	msedge.exe	89
PID 5064 wrote to memory of 596	5064	msedge.exe	90
PID 5064 wrote to memory of 236	5064	msedge.exe	92
PID 5984 wrote to memory of 912	5984	chrome.exe	94
PID 596 wrote to memory of 3880	596	msedge.exe	95
PID 5984 wrote to memory of 3340	5984	chrome.exe	98
PID 5984 wrote to memory of 3340	5984	chrome.exe	98
PID 5984 wrote to memory of 1684	5984	chrome.exe	99
PID 5984 wrote to memory of 3908	5984	chrome.exe	101
PID 5984 wrote to memory of 3908	5984	chrome.exe	101
PID 5984 wrote to memory of 2624	5984	chrome.exe	103
PID 5984 wrote to memory of 2624	5984	chrome.exe	103
PID 5984 wrote to memory of 724	5984	chrome.exe	102
PID 5984 wrote to memory of 724	5984	chrome.exe	102
PID 5984 wrote to memory of 5556	5984	chrome.exe	104
PID 5984 wrote to memory of 5556	5984	chrome.exe	104
PID 5984 wrote to memory of 1968	5984	chrome.exe	105
PID 5984 wrote to memory of 1968	5984	chrome.exe	105
PID 5984 wrote to memory of 2112	5984	chrome.exe	106
PID 5984 wrote to memory of 3948	5984	chrome.exe	108
PID 5984 wrote to memory of 3948	5984	chrome.exe	108
PID 5984 wrote to memory of 4000	5984	chrome.exe	109
PID 5984 wrote to memory of 4000	5984	chrome.exe	109
PID 5984 wrote to memory of 4044	5984	chrome.exe	110
PID 5984 wrote to memory of 4044	5984	chrome.exe	110
PID 5984 wrote to memory of 2768	5984	chrome.exe	111
PID 5984 wrote to memory of 2768	5984	chrome.exe	111
PID 5984 wrote to memory of 1004	5984	chrome.exe	112
PID 5984 wrote to memory of 1004	5984	chrome.exe	112
PID 5984 wrote to memory of 4660	5984	chrome.exe	113
PID 5064 wrote to memory of 4444	5064	msedge.exe	114
PID 5064 wrote to memory of 5672	5064	msedge.exe	115
PID 5064 wrote to memory of 1656	5064	msedge.exe	116
PID 5984 wrote to memory of 1548	5984	chrome.exe	117
PID 5984 wrote to memory of 1640	5984	chrome.exe	118
PID 5984 wrote to memory of 5736	5984	chrome.exe	119
PID 5984 wrote to memory of 4352	5984	chrome.exe	120
PID 1548 wrote to memory of 1000	1548	Modrinth App_0.13.10_x64-setup.exe	121
PID 1000 wrote to memory of 5872	1000	Modrinth App.exe	123
PID 5872 wrote to memory of 5712	5872	msedgewebview2.exe	124
PID 5872 wrote to memory of 5276	5872	msedgewebview2.exe	125
PID 5872 wrote to memory of 5276	5872	msedgewebview2.exe	125
PID 5872 wrote to memory of 5276	5872	msedgewebview2.exe	125
PID 5872 wrote to memory of 4456	5872	msedgewebview2.exe	126
PID 5872 wrote to memory of 2376	5872	msedgewebview2.exe	127

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tria.ge/samples/241114-3lfknavfqg/sample.zip
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:5064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7fff5216c188,0x7fff5216c194,0x7fff5216c1a0
    3⤵
    PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,2781018899938246173,2928002209656128256,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,13542437761162017483,18132110935613661139,262144 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
    3⤵
    PID:1440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,10436907365356168139,4915808737455639724,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17539962786176720066,13936466644590554199,2097152 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
    3⤵
    PID:2764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13414452721272167285,4616938211618137569,2097152 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:3260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4808,i,12806490303996579865,18394520105907165734,2097152 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:1
    3⤵
    PID:3604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,13885546575330265465,8151119668366092898,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:5336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,7909604367241301892,744816776540284900,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
    3⤵
    PID:5608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,7398878975843507793,8264203765124110457,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1140
      4⤵
      PID:3880
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,11589784554536250331,4467194623905016259,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
    3⤵
    PID:1484
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,11589784554536250331,4467194623905016259,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
    3⤵
    PID:236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,4644866012486382384,4184555627605096689,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:14
    3⤵
    PID:4444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,11346562728148015017,2662100404942145268,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
    3⤵
    PID:5672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7194732124320938134,11974991619628133793,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
    3⤵
    PID:1656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,13684654749171220892,4451092882774392372,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
    3⤵
    PID:3628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,10244008186121409613,10504487457340516518,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
    3⤵
    PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,5075601317840480080,18151303212920391056,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,3281893764427176111,963025922653239252,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
    3⤵
    PID:5572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5892,i,9381092292148108548,1778652188933220817,262144 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,11394118126557719126,12653655156439261469,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
    3⤵
    PID:6636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2712,i,15829690774343050185,11562809586625784779,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=3292 /prefetch:14
    3⤵
    PID:2920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,4044735723331124218,584558767343177746,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
    3⤵
    PID:6956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,8574962789137481444,12104761490071005721,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
    3⤵
    PID:6728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,1060748174659167577,16036562371097448176,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:14
    3⤵
    PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,16196213752033703143,6182609055831887294,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:14
    3⤵
    PID:3460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,2351344215626358275,10515291890145418357,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
    3⤵
    PID:6972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,11952392639459115551,7976980636023074433,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
    3⤵
    PID:584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,7451916658982122926,9046321190875836401,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:14
    3⤵
    PID:6892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,4753750585816533543,7576781200201940462,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:14
    3⤵
    PID:2616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3032,i,12013600842680057430,10983648542800613674,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
    3⤵
    PID:6572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=828,i,17407252902037722478,9550796337307427473,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
    3⤵
    PID:6012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,16040692704803169242,7650395234142708984,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
    3⤵
    PID:6020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,15791684462075542518,1794947134375304811,524288 --field-trial-handle=2124,i,3525175354777472432,3491061048425101939,262144 --variations-seed-version --mojo-platform-channel-handle=828 /prefetch:14
    3⤵
    PID:7128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:5984
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7fff2f60c728,0x7fff2f60c734,0x7fff2f60c740
    3⤵
    PID:912
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,3089131985361792186,13481331590109257767,262144 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1940 /prefetch:2
    3⤵
    PID:3340
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,1632222683552272851,11026452160742026889,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2256 /prefetch:11
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:1684
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,3142594948964218174,1059800795384051347,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2264 /prefetch:13
    3⤵
    PID:3908
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,8196959147556640881,15574758159364445198,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3468 /prefetch:1
    3⤵
    PID:724
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,1347699154134670576,10758008851285057427,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3496 /prefetch:1
    3⤵
    PID:2624
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4220,i,14715306376855482963,10789641290457610614,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3228 /prefetch:9
    3⤵
    PID:5556
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4516,i,4483830544143027841,8748652564214614016,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1592 /prefetch:1
    3⤵
    PID:1968
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5408,i,12912847479713392277,8825911036088260657,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5412 /prefetch:14
    3⤵
    PID:2112
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5492,i,10811866362198034061,8143299637621168105,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5704 /prefetch:1
    3⤵
    PID:3948
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4740,i,5633775734712073606,12420734879985675664,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5816 /prefetch:1
    3⤵
    PID:4000
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3528,i,15353439123831447264,17567647921952988668,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3516 /prefetch:14
    3⤵
    PID:4044
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4560,i,15700401163155239206,9178566627478857291,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:2768
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3528,i,17808556981240811896,18098702949372272062,2097152 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4648 /prefetch:1
    3⤵
    PID:1004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6116,i,5710100520965244935,1636196582624649876,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4628 /prefetch:14
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:4660
- - C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe
    "C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe"
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:1548
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7020,i,8353738813025982432,11560243613256010043,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3624 /prefetch:14
    3⤵
    PID:1640
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7152,i,11481372418434655511,4187477872636371529,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7064 /prefetch:14
    3⤵
    PID:5736
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7016,i,988773796807556878,4591827337138007737,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7188 /prefetch:14
    3⤵
    PID:4352
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5584,i,1015909579650929462,10088721229180775237,262144 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6764 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6244
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6760,i,5592933871834156467,1178048108291915291,524288 --field-trial-handle=1944,i,14448903803321839873,10787797383096179390,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6752 /prefetch:14
    3⤵
    PID:5004
- C:\Users\Admin\AppData\Local\Modrinth App\Modrinth App.exe
  "C:\Users\Admin\AppData\Local\Modrinth App\Modrinth App.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of WriteProcessMemory
  PID:1000
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1000.4476.13174141513228362825
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5872
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x170,0x174,0x178,0x14c,0x48,0x7fff2ba5b078,0x7fff2ba5b084,0x7fff2ba5b090
      4⤵
      PID:5712
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1756,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
      4⤵
      PID:5276
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2000,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:11
      4⤵
      PID:4456
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2008,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:13
      4⤵
      PID:2376
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3612,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
      4⤵
      PID:4256
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3916,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:1
      4⤵
      PID:4408
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4252,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
      4⤵
      PID:3284
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4472,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
      4⤵
      PID:1500
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4276,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
      4⤵
      PID:4820
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4792,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
      4⤵
      PID:1220
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2156,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:14
      4⤵
      PID:2208
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4248,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
      4⤵
      PID:3796
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5464,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:6896
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5004,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
      4⤵
      PID:6592
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5664,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
      4⤵
      PID:6832
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5124,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:14
      4⤵
      PID:7088
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4888,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:14
      4⤵
      PID:3316
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4860,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
      4⤵
      PID:2488
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5484,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
      4⤵
      PID:4872
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5284,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
      4⤵
      PID:4692
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.13.10 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5548,i,4048277782288071533,4938678725945051594,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:14
      4⤵
      PID:7068
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Local\Temp\.tmps5GU99\theseus.jar com.modrinth.theseus.JavaInfo
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    PID:1260
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\6.0-alpha-3\jopt-simple-6.0-alpha-3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\siegmar\fastcsv\2.2.2\fastcsv-2.2.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\srgutils\0.5.6\srgutils-0.5.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-commons\9.6\asm-commons-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-tree\9.6\asm-tree-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm\9.6\asm-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\installertools\1.4.1\installertools-1.4.1.jar net.minecraftforge.installertools.ConsoleTool --task MCP_DATA --input C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\oceanlabs\mcp\mcp_config\1.20.1-20230612.114412\mcp_config-1.20.1-20230612.114412.zip --output C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de/oceanlabs/mcp/mcp_config/1.20.1-20230612.114412/mcp_config-1.20.1-20230612.114412-mappings.txt --key mappings
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Network Configuration Discovery: Internet Connection Discovery
    - Checks processor information in registry
    PID:6652
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\6.0-alpha-3\jopt-simple-6.0-alpha-3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\siegmar\fastcsv\2.2.2\fastcsv-2.2.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\srgutils\0.5.6\srgutils-0.5.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-commons\9.6\asm-commons-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-tree\9.6\asm-tree-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm\9.6\asm-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\installertools\1.4.1\installertools-1.4.1.jar net.minecraftforge.installertools.ConsoleTool --task DOWNLOAD_MOJMAPS --version 1.20.1 --side client --output C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net/minecraft/client/1.20.1-20230612.114412/client-1.20.1-20230612.114412-mappings.txt
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Network Configuration Discovery: Internet Connection Discovery
    - Checks processor information in registry
    PID:6768
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\6.0-alpha-3\jopt-simple-6.0-alpha-3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\siegmar\fastcsv\2.2.2\fastcsv-2.2.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\srgutils\0.5.6\srgutils-0.5.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-commons\9.6\asm-commons-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-tree\9.6\asm-tree-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm\9.6\asm-9.6.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\installertools\1.4.1\installertools-1.4.1.jar net.minecraftforge.installertools.ConsoleTool --task MERGE_MAPPING --left C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\oceanlabs\mcp\mcp_config\1.20.1-20230612.114412\mcp_config-1.20.1-20230612.114412-mappings.txt --right C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraft\client\1.20.1-20230612.114412\client-1.20.1-20230612.114412-mappings.txt --output C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de/oceanlabs/mcp/mcp_config/1.20.1-20230612.114412/mcp_config-1.20.1-20230612.114412-mappings-merged.txt --classes --reverse-right
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Network Configuration Discovery: Internet Connection Discovery
    - Checks processor information in registry
    PID:7156
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\srgutils\0.4.3\srgutils-0.4.3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\jarsplitter\1.1.4\jarsplitter-1.1.4.jar net.minecraftforge.jarsplitter.ConsoleTool --input C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\versions\1.20.1-47.4.20\1.20.1-47.4.20.jar --slim C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net/minecraft/client/1.20.1-20230612.114412/client-1.20.1-20230612.114412-slim.jar --extra C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net/minecraft/client/1.20.1-20230612.114412/client-1.20.1-20230612.114412-extra.jar --srg C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\oceanlabs\mcp\mcp_config\1.20.1-20230612.114412\mcp_config-1.20.1-20230612.114412-mappings-merged.txt
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Network Configuration Discovery: Internet Connection Discovery
    - Checks processor information in registry
    PID:6520
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\6.0-alpha-3\jopt-simple-6.0-alpha-3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-commons\9.2\asm-commons-9.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-analysis\9.2\asm-analysis-9.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm-tree\9.2\asm-tree-9.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\ow2\asm\asm\9.2\asm-9.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\srgutils\0.4.9\srgutils-0.4.9.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\ForgeAutoRenamingTool\0.1.22\ForgeAutoRenamingTool-0.1.22-all.jar net.minecraftforge.fart.Main --input C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraft\client\1.20.1-20230612.114412\client-1.20.1-20230612.114412-slim.jar --output C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net/minecraft/client/1.20.1-20230612.114412/client-1.20.1-20230612.114412-srg.jar --names C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\de\oceanlabs\mcp\mcp_config\1.20.1-20230612.114412\mcp_config-1.20.1-20230612.114412-mappings-merged.txt --ann-fix --ids-fix --src-fix --record-fix
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Network Configuration Discovery: Internet Connection Discovery
    - Checks processor information in registry
    PID:6724
- - C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe" -cp C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\guava\guava\25.1-jre\guava-25.1-jre.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\github\jponge\lzma-java\1.3\lzma-java-1.3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\nothome\javaxdelta\2.0.1\javaxdelta-2.0.1.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\checkerframework\checker-qual\2.0.0\checker-qual-2.0.0.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\errorprone\error_prone_annotations\2.1.3\error_prone_annotations-2.1.3.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\google\j2objc\j2objc-annotations\1.1\j2objc-annotations-1.1.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\org\codehaus\mojo\animal-sniffer-annotations\1.14\animal-sniffer-annotations-1.14.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\trove\trove\1.0.2\trove-1.0.2.jar;C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraftforge\binarypatcher\1.1.1\binarypatcher-1.1.1.jar net.minecraftforge.binarypatcher.ConsoleTool --clean C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net\minecraft\client\1.20.1-20230612.114412\client-1.20.1-20230612.114412-srg.jar --output C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\net/minecraftforge/forge/1.20.1-47.4.20/forge-1.20.1-47.4.20-client.jar --apply C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\modrinth\daedalus\forge-installer-extracts\1.20.1-47.4.20\forge-installer-extracts-1.20.1-47.4.20-client.lzma
    3⤵
    - Executes dropped EXE
    - Checks processor information in registry
    PID:6332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1584

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:496

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:240

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc WATCHDOG WATCHDOG-20260506-1333.dmp
1⤵
PID:7120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e17ede9c55d3bd2bf8d96e1931ba00515fed7dfbd13c350f624f64eb495c0b3d
MD5 faaf447b721a97543c86742bf48a8742
SHA1 ce954bcc37f11440c75871b05885f01060451314
SHA512 db5069241fe81c15afdaaf606cde3ee2754c4a3f8d5855effd50a10c0bfa3efb5c0b273f691a4fcd52941a68458035a90934bc25c745a3e1fd30af791b7655c9
TLSH
T16DE0E5A6CE26D82718F80F2820500345EB45031A2B40894B763D860A8FB1A3A465582C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1fdff67c4a32f9ea5d465ac4c9498f358855170faf6971780a8ed50e427f14e4
MD5 2d0c94ac38a1580fea97be526b699829
SHA1 963ea28ac6a1837e4a6395e8dff4467f1d7f078d
SHA512 df68dafc838fadd2f1b4f000130e87f93abf3487a379ba757c209edfcff0b13b50c7984de2ce7a53282b14f6787b859e9868db876dd3df35ddb74cfe80976700
TLSH
T15841A275B29A1F73C380D57284D136A4B2F20CA670477F2E9844A47329C2B3D5FC4C90
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 0b72fe4f7cc2700f4bfb4fdf69b1ad451906bf7206b65744c78b9f61ddf5374b
MD5 12b6530245ceeb3a11d63f0f7cc012a0
SHA1 4c625c0f569ddc6101acfb2e1c2dec7b5bc2144d
SHA512 0935150e8b673ed8b1b7b9de1e4c550f110f57896a1c133a4c7b2fdbbba8770cee95b2f4833eb7adbf191eb335cb6326c97d4817198d45528e578fb5a2936a12
SSDEEP 96:Du0VwkNFbaIa3c1rkBEd7IPakNzE+oPwhE8KSCLnkjhqCEu:Du0VwyFbaIas1kEd7ICkNQ+oPwhE8VES
TLSH
T175C18DF783F48A7D891192F0AA256F2FCD6D0924532C7C6689D4AE1B93E2572D20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 e2b673e90eb63a2bd5ad3b12af8622d9567d3b04750acd3b3b963087c7a050f5
MD5 7fc2cd7e5ce31db8b730895ea29c2da0
SHA1 2fb3356e225009f06470f20853a9fa0943322a37
SHA512 2c2c910487c13cdcd7bfebb2cca47ca6c3c90d433006b87939ac73b3700ef90f796d52a3b411cc0b64fa5e96f19fa1916ea7291cbef77239f0a7d0ff00522edd
SSDEEP 96:DuByP0kNdaIa3c1rkBb5d7IPakNzE+oOwhEj/OdNKSCLxu:DuByP0ydaIas1kVd7ICkNQ+oOwhEDCN3
TLSH
T129C16BF3C3E49A7D892192F0AA256F2FCD6D0924532C7C6689D4AF0B53E2572D20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 6a8105b0a7c28ff6069452d6c7eb7448f92f6eaf6b1e8f0573296d384b2a0be7
MD5 9167ab530a6c7e1a05ddda8156b3a3ca
SHA1 5db11404cc27677200fe45e0bd96995d2e1d4375
SHA512 8ce859ef9daf46a97988552a23748e244eb48753ead4c7c4bed7d95b58ca8e40ecbd31ecf74926a048b42bdb95cc6f57269196202ede81c933fac6e688138451
SSDEEP 96:Du0VENlE7aIa3c1rkBEd7IPakNzE+oPwhE8PnkjhnO9ou:Du0VSlE7aIas1kEd7ICkNQ+oPwhE8PkY
TLSH
T192B18CF783F49A7D891192F0AA256E2FCD6D0924132C7C7689D4AE1B93E2572D20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 65f9f377b849fd25c78f00f48c11e0378c9839deca525263b908eb3d28dc6d27
MD5 e135df6582c90a99a62ff84e9500468a
SHA1 9f17e6d48b9a91dd9337203724c4facf49faaeb0
SHA512 88387489dcd31d3be82decd2587f83cb1838b55bdd1fe15d677fef91d896bf9325ff67f5bd4725bea9950ff58443701a25aef9e6ec2ca94cd74872e86fe899c3
SSDEEP 96:DuByPgaIa3c1rkBb5d7IPakNzE+oOwhEjpou:DuByPgaIas1kVd7ICkNQ+oOwhE1n
TLSH
T1AB917DF383F49A7D8D2192F0AA256F1FCE6D0924532C7C6689D4AE1753E1572D20178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f79f62c3e14cdf1b0efeb65ba0d76e96e1214d269ef9df3c2ab2e436ddaa5c72
MD5 0a11badee30ca38aef6109729989f96e
SHA1 8a6ea40aa8b1265181a20948793b97e660cad368
SHA512 b39d1f98128f291f36253ec25eb8260971e8d3a250ca80baa43afc0f23f6b47bb39136aacc39c65ccc50c597013f4b27cedd1dcf223ed86cd9ade9452a9e6a16
TLSH
T1B231C253D37EB46B247989EF2D147D095D7BB436028164F4CBAB926C60906B7170B0A7
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ac674fa0f3016f7e2510fd01f4c011f7dd5d245d86c94685cfad010d0cfdfaf1
MD5 4ab9da04a4278d0984b93f1a81164098
SHA1 63718ce2397fa85cff8661920160558dc1624370
SHA512 136e7bb56b6968266d4ef21dc5e180df6fcab6fd3dada80e91e5850e0a786b0d2c984f596ebf6e4c2b2d46b18da85cc77ffbe8a062325907e5cfa28f76bdc0be
SSDEEP 192:7RRqekCOjK/Iv7ghAPRp27nv99Hsb+WNnJ2VLU2XWckw+wlqVyIsnAUgtaJ:7RRqzCl/Us8XW/woi2Gc5lq8
TLSH
T17752C52ABD18363B5CCBC215F921B747D7F5102261D92E88EAFC8A1C19E79CD7127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6deb0a873c813bd2e9eb66f84990c7bb801da66ad51a7e94db23bbff18b57d14
MD5 7ee550e16b34697511170c4820abbaad
SHA1 927b94eb2db57b802e3c6869c6009df3c1eb6fb4
SHA512 cbf321bf3f9ef4cbacd90fda3a013519bf3e54c1f551667186f3fee08c8ab33369222eb9b00750f38409d8462e0b0143a402345ee37d6e1ade0e5288f15d0a2a
SSDEEP 192:7RRaikCOjK/Iv7ghCPRp47nv99Hsb+WNnJ2VGTeQWckw+9lqVyIsnAUgraJ:7RRa/Cl/UsCX0/woGeDcelqe
TLSH
T17B52E82ABD18363B9CCBC615F9217B47E7F1102265D82E88E6FC8A1C19E79CD3627417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cf5d4c37ed6e2baf4b3ef33a33009f6b53fa1a22df85cb6b68bc86fe8ec4c55c
MD5 580b2f10aab44a92d819c3357267d92c
SHA1 0d3f8337869166c45c4e81c7233c9f5eca5fdbd2
SHA512 389530556ea220ae8642f33399812381f71822ed7f22088591712b9504e4a18956ccad88bd907c86110058b88b7a4be6fc9ed0bb72638ae7c501c76ffc0045a9
SSDEEP 192:7RRaekCOjK/Iv7ghAPRp27nv99Hsb+WNnJ2VLU2XWckw+wlqVyIsnAUgtaJ:7RRazCl/Us8XW/woi2Gc5lq8
TLSH
T19452C52ABD18363B5CCBC215F925B747D7F1102261D92E88EAFC8A1C19E79CD7127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82085f58435b7b7a260780dca3ee69a48427de11b3ece82d53af0d56f36fd555
MD5 92547e8f34c99d1b69c0e1d957604d80
SHA1 4ca5a2d93853b96b7fc565a0e16045bbcee47e58
SHA512 aee9857bb3f81b98b9310e49ebca2773ad80f91201f0efac2260b404123571baef569acba1d144b7aa20664020dd07820f3547f4604d3bc6c7d155025f48eb07
SSDEEP 384:V3jBM7KxkXqKf/pUZNCgVLH2HfgslQwl7pLuLcifTuXODBU+ErU3bwxHGak5Je0o:VTBM7KxkXqKf/pUZNCgVLH2Hfgsi87pL
TLSH
T1DE72FA67AC4CAA370F94D6CCD827BE4FADB5020B65DD886883FA581903D5ADF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 952fac7890d657989c25eb454838eda780b1393863208bc50b4059e636e4046f
MD5 9158c74c6d606c566400853e386d91c4
SHA1 2bde013f333e1e104187c77e0757fb5b70110761
SHA512 bb9cc8a03212607b532db4608537eabe79ce63ae8cda8c797e298cfc93a30b49b516527a01913c5b7fa58fbafaf99b7e3170e650be36bc26bbe3b82b9a1e36a0
TLSH
T120B0121080017512D44713B11286548932186F108B0A130193F4E971D8261E24038190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584dbd.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584dbd.TMP
Size 96B
SHA256 2e703c3de4bf488299efb67a152b29429664d96dbe506c79b9d4b391ca69e45d
MD5 7381c1d2f50a2786db85d3f2696a2647
SHA1 fc63060bc120cc57b0df8f7311102154f8cf7601
SHA512 060915a9a50261a93337f48ce120c4c08aa1f00eca7c06a95ce59a08ba6b68c303490fa4bcd3591fd51bff700b8869c74b09d840120eca978b4df5aebda2ab6a
TLSH
T1E1B022A8C0823222C08203B028B0C0C83030CF28CA030B3282E02FAAEC202328C200A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 d6783bdb1d81ac6a3b14ca41b4d12f75b611efd712ea709aaedbdfe19698db8d
MD5 de364793e7caccf977db4f8089cb2eec
SHA1 078879e1d894fb67ba19114160c907f51d5ebec6
SHA512 baae0c0c92561b657b15cafe79e3935a55f7caa35e734bad924c851fa9f9b4ca6a706838021df0b0f7bd491cfdc6b0d73898664134d306fbc1f48901dfc5692d
SSDEEP 6144:nePcU0FE1S+G+Djk0+bH+9rg++JjcMW2VcVLjJ:MnZG+Djk0+bH+9GOMWtJ
TLSH
T1BF1412B3AD1EBCBC535E91DD1507ADAC0C8692CF1220E5FC31C27F8A155E345CA8A9D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 3a0c40adc36bfd371cf514c846c37f4803a60c1b9a168d73c381454e1f389aa0
MD5 8e4be1c4c212d5c48df96dfda80ad696
SHA1 b3f4472c2a87fba2e12b626f0b1094a15f314202
SHA512 edd656f93e37665d558a2a7f29518c7743efa6ae5cfe38c814a042ac4e47bc87e4bd71ac6957636a4f9e1ba484c15c533828f7eb9ea7987cf615a71127cd71cd
SSDEEP 6144:nePcU0FE1S+G+Djk0+bH+9rg++JjcMW2VcVLjJ:MnZG+Djk0+bH+9GOMWtJ
TLSH
T12F1412B3AD1EBCBC535E91DD1507ADAC0C9691CF1220E6FC31C27F8A155E341CA8AAD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 602fa92f36f80c58a10b9564d3dcb69f177ad28c475835629e5a9e1a6f9a7cb9
MD5 26756189c0d66e482b0275bbfea2df10
SHA1 110436cb230be84076917cc23dae89cfe5bf8f84
SHA512 6fe1b229c6c0b7aa8554aaecfb5e2cc7a64d6d8360835207ff565f95f51cf78eecc66a76e2a3a6ff45b54c5288a7de0b26b0ba7c435b4e03df6ad5754c21ba38
SSDEEP 6144:YPcU0FE1S+G+Djk0+bH+9rg++JjcMW2VcVLjJ:KnZG+Djk0+bH+9GOMWtJ
TLSH
T13E1423A39D1EBCBC534E92AD1507ADBC4D9292DF0220D5F831C27F9A159E341C68AAC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 c0064dfabc7e1cebf0dcc8a5cf9071f00fcd01c55fb55d8c4c97a9f396b97d0c
MD5 17b35bbe15d09a7b89e027d09fa30839
SHA1 157cc3d2047c65d8001a02b48004f16dd2bc6f86
SHA512 10ae95d8c19c83885dd7bef338a241d9b999fb354ab50b06d5ba4508ee040f2f6e9b38b7eca15f022eda6d0bef130208a8ad0d96b63b905cb657e3e05793e992
SSDEEP 6144:NPcU0FE1S+G+Djk0+bH+9rg++JjcMW2VcVLjJ:5nZG+Djk0+bH+9GOMWtJ
TLSH
T1161423A39D1EBCBC534E92ED1507ADBC4D9292CF0220D5F831C27F5E159E341C68AAD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 6c41566491f88707fb275a1bd4163a8e394197576429a977b91e3f92b5b79eaf
MD5 fff043851730e3fd14d7851a4a4e16c7
SHA1 750c1220538ad263138e5711099ca6693408d25f
SHA512 2f0012fb0b6052484a7c3beb49fd02eb38be7358de380920f29447df243124ec7f862aff60aff9a75670dc491ac945add8693171fb412c03f15e1f23cfdeba49
SSDEEP 1536:ubqP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:J++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1CD9312B9991E7D79636BC696A0179CAC8CD3CCCE111455BC30C76F0E18BA392E31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 09d43745b7beb0d2574056dfdacdb3449b786708a0b1a5f978e5c9d69f81a1ce
MD5 c5c86d9c5f7c32a8c4fd09d6ffda4aa8
SHA1 8d3978b900d523ba08075019d6235c1e176294cb
SHA512 e14f89cb3354fd6d7a68e1c291c8723a5bfd3d28140a150bf75ef42a2ef8212eddaed6f6db92cd69e603806f0897ef93b8761a51acd8b8db67878c4cf26ee23d
TLSH
T10AD0C040DAF02820D8046471242CF3C00E09CCA1CC43DA2124E0EF798D820C644C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4f20f916a46d879220b75412e974c6df37fba8f0e80e78f071a3124fdb665aee
MD5 aaac91ebbf67dbbc392d45b8ba21b7af
SHA1 c12b368a2d9e5d86e38c050c8c991930b00b017a
SHA512 d7492a4c51ec39a37fa7e0e893db326eb2afa4a19ccab42d34d8b2aa7279aedca2f5868970e4513c37d26caa55dce67a9dccd146446e47298a0c41e59869c2b9
TLSH
T145D08050DEF05960D8046571242CF7D45F59D9A1DD47DA2125E5EF799DC20C648C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 c70de7288d587396650a8da328feb433376ace1043da981ae6f603d6e1a5960f
MD5 4964ca8973d8bc0758abe8424934b246
SHA1 a09d1d02e5303028b89180643f815f53bd2154be
SHA512 655a8c3aed9dc95677356c413ac0a90340f895affd8892cf3b5506aad020b3e45ee0c8aafbf9e9ac47ca96cf14f8670f66b4cd5ed43a8386013127d64ba1f99e
TLSH
T16EE0D88803E4DFD44A22B9C7E275EB1E80C2B067959DC7DE3205F2C72483444472D8E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 332B
SHA256 6a7102ce3ab0f8a125080c9dedf527e235e3b8668fef0a29b76c28432bf3e842
MD5 86ba845d73f458d6ef5389434eb72bf1
SHA1 8d595057ecb1d0fac416eb5b4b938da65b0737e2
SHA512 7a44717951abde1d6c3f72baaa44eac30ff816b66d1c7fff42b3868be73e904d029fd8d5ca777db8e6881ade82bc0e8edfeca3b4c73c44835fd7d2d91d9975f2
TLSH
T1EAE0269484D8C25FBE04A9C793A8530CC2D03A1BE6C8EB8E270CC4C63D825B866969B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 50922881aa5fc3870958ccf1a22251ebdf03f01f295570663339fc3db5c2047c
MD5 ca0e2ec1a89b2180641d4afe2c235f48
SHA1 2dfa29cf65c002c78debd79f6c3d08035803f8c6
SHA512 095fcca11051c31cfddc51787d191d0146b1dad4c9ff136edb762dbebde72c2023ec555c6197adcd011813f86841bbe3384de56a91a7bb11ff4579732b5098d1
TLSH
T1C4E0268904D8C25E97A079875364F30CC3C1361F96C8AECE6B04C4C635820C8FBCA9A1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 384B
SHA256 698c769bd13483088197c7df964e1c5dc7b5d78573871a112c46046db3229ea0
MD5 7a626113bcf498b6406d09e7e7dbe94a
SHA1 63bb7befa45bb15a97995f4107510922a2d25fca
SHA512 12c6092128bf1e7f45d7a01306fbd863ca5b9818ebefb8a1569b70d640be40db66e675152b23b1ca1eb672dc29b28519f7377feff68146e9d91881b1e14e2bb8
TLSH
T1B4E0619DB9ECBE8EE3E40ABD53A7B1400F4402D28416DF1301207DC136916F01E75020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 851c9c010e927d45726f0fd3f1a37b16649c8ffeb28c71206b3cc8e21ad4150f
MD5 416437e239134fb94673a7d26bf153ea
SHA1 1ae1c7ab03d490f280dc356fdd4040ee9cf854a3
SHA512 082d391d197ddbd260a69a40d53b9bd9b7712a27c39c9cc7d83bfdbb6893bc385a78b10dfe8226c9e06c4c33d0180c4ba18fe7522f2925d0b5a8a74fa7b130e0
TLSH
T10DE061E5D865EC2B18FC5F2DA0240345FB6013572B908C8B3A3C421D8F74E3B558795C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 171e85131bf76cf596796f40b322ef7c05f53d04f3f1ab24302f2700cab16137
MD5 067a43616e0a22b9fa40e27b9e95ca28
SHA1 e8da3e1587103ca3ccbc36f585d2dfff708b0386
SHA512 bd0ca64bcc6219295bd97f3160184bcaeac621307818b8970e6ae2e1b40fdeda909af83071e14a568bacd12aabd2581048b585799d9be09a0c272cf4e09de0b7
TLSH
T10C71828C44B2857AE3E146F4B6E6205A72786BD8D1C70FE926D171FC4F1DB7A0441AE3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583ec9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe583ec9.TMP
Size 3KB
SHA256 f03bbfb92e7c07b76a774abf2ad3d130ef2ce60ae0dc8673416cc54874b8ff51
MD5 e89da870d13105c7bc88d22bd8cdcad5
SHA1 a31e0785b0a2f6e02c34e78c19106901a1850786
SHA512 df5b11236c5b15bbbe8687394d56bf6d021290171d9e9c6e48c4b548b481719fbca2a29826a21eefbf50ae31ed0645b57f39c6d4e0bd79aabf1d79e9f571ccb9
TLSH
T1CB61A49D41B68579E3E142F4B6E6209A32786BECD1D70EE921D171FC4F2EB3610419E3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5b5688e3ab2fcb19340f224d0970769628dfd3cfb013a5f43181251998166304
MD5 d058822b6f3de001960a9d6a2680e613
SHA1 48d38a4279731fce1c3b6cf8c986c50e2d18f4ee
SHA512 e9bf7fa3940c2264c9f2fcf74c946bcadd331f4377196b31e301d4cb90c2983177757a4717f0e327042dc5abd924d16f4789d5ff4b681bc08bc44a7e39dae59e
TLSH
T1D751CCF7C3E4866DCA0196F0AA147F2FCE1D0955432C3D5A89E4AF1BA7E24B1E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ed6dfea8a09df6dc227759675b3c6b087dad380bdf6db2e2f0283333be0518ce
MD5 067f4145e362f4d6a185f043932b577e
SHA1 937ac5189fc67007835ac94718ad7a632c551641
SHA512 22bc8d0ccdded8ad6b898cf5b681b6fa08b8782d9868848277ea8a18dc8d54d7da2c040c5e9ff442ccfd0260440ee2c4636c87b885bb1e3591e6fb083f449f66
TLSH
T12F51DEF783F4866DCA0195F0AA14BE2FCE5C0551436C3D5A89E4AF1BA3E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2dcf27daca558264d2f76c75e790e0cdb16dc6d235d8cf2e9d67b5358680cec4
MD5 606a1af65d085b8d439f3664ca63c800
SHA1 9f89c932cfa261dae571bab678aa5d8cb952fd27
SHA512 684e0e5200b72a30723e838a0af0deb3164f26b211a0ad92dec652e36950cddb9718f8cd11a943d05fce943edc6b45fbd4ca8000d19ac0ea5e4279b5aaf458ce
SSDEEP 192:sxZCRbyMqZ/K1Ml8UQjFC/fxsp7+OI9zodpIty/W6+WNSHIY/Y0tGJ9zsIg5EUJJ:sxZCwqZC/fxsp7eWcy/bUX/5Ac/z
TLSH
T10572F906AA38997BCCD7D619BA457F93D6F9156392844E449AFCCB0C00D7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f40fd122e61e36e7905fbce333921c14bf9ae50765ced864fdb5cbcf87f90dfd
MD5 4d14e6662a805b73ff060a2f354ff20f
SHA1 a06d67656f5eb1323fa67e8912b51d17b634568c
SHA512 df4590e74e693eae8eed18bc79353cdf0253c026db3c5be8e54c607e817262d5d301f891f88ff7282ec5f2308d3706a9d9c46cf4d08a99d14b5d8b4a9e66762e
SSDEEP 192:sxZCRbyMqZ/K1Ml8MFC/fxs/7+OI9zodpIty/W6+WNSHIY/Y0tPJxzsIgjgJ:sxZCwdC/fxs/7eWcy/bUX/5dcjE
TLSH
T14F72D805BA78697BCCC7D609BA457F93D6F91563D2844E449AFCCA0C04D7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 9de09cf982a2e8a04c55e4a6f09190d78e51e5dd987001711c05fd073353a56e
MD5 a32f485869a9508a162b83a166f6814f
SHA1 c5e0da9521d5e6ddd4e298dccfb62164e443bccc
SHA512 5eef128c362a8cf0bfc0118be0f67cc79a077f32628fdccb72e833ab67450d1abc6aa13e397a3b71b1ff88038fcb5e57a085a017cf6a28cd97bc10acd87a00a4
SSDEEP 768:2DhVP8b320P7pLuL/mKWRmmeQRe8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3JWWlLlH:2DhVP8b320JE/mKWRmmeQReu1jaKJWWf
TLSH
T10B030B3B280CCB7F4F844E9CEC27BE9A6DE8018B9698899447FA444C03C67EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d18620f5-2f8d-43b3-aa25-6763ab1bcc3f\index-dir\the-real-index
Size 2KB
SHA256 0fe8081341158d07eebb7e95a0e1bd4c1a8c4d9e5b6ea4eab4f32db3c9094e4c
MD5 b7d97bf45fac828ce5710dd9088718e2
SHA1 863570257286400ca16e622e62a23ed7f784c3da
SHA512 beb59d58077a8ddeaf57d8a65dd05de5ec10df6e2b9a0a9a4b81cd23693356f2454304fe973b8ef6fe2d714e4b451bc67a981bc33d0ffd737622b4a8b6fd36f6
TLSH
T1C551EA4D5D8E5F17CD7C12B159FA042533794CFF2A58470728FC56386C872651D9720C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c8554.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d18620f5-2f8d-43b3-aa25-6763ab1bcc3f\index-dir\the-real-index~RFe5c8554.TMP
Size 2KB
SHA256 9c6edaea0f0cae3a7b33d4b1fa4d3bad5c25bb4baba73bf81fb12cd4cbaa3581
MD5 c7395479d8694158bdc051c850a4d7cb
SHA1 36b55795a2eb175981d0c6c38e063b5e3ec4a16e
SHA512 ec4a6964d5a134ab59d3888304fff9e9637492d04776fbad0d4e35056e8daf58a71c1ecf288f417c91384f18911eb228c401eb57cb5cdaae2b22fcbd1eaeaef9
TLSH
T17451B55E9C430A31C9A091B359CA5469333E68958A45AF0B35FCCA33ACC76AD3D66385
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 02e389be595471d2fa565b8b3e825abe55532bea62bde8db60a453d39a5020a4
MD5 e24c8e3d452b511c87de80a91c19970d
SHA1 011b1cc71e0873d3c97326eaa1a24feb21dc9aec
SHA512 d20e3ebf87949fada04849dbc921adb3ac6093ba28536b2ece994f025e16457563eb2dde343c2676964211dd9985e77e62496c9468bf5c3128513c713b211889
TLSH
T17AE0C0B32DF70808FC6FCBF7243144A90002796CC501AC0F0417A3CBC0B2315745AC62
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 e36d54dbfbd65046e2151d173914d2bbcfaa460869a35e81b29159a92f1c585c
MD5 085af6c7f615eaa18d2175216ed9601b
SHA1 cf2fba954363898bbf866511a7df6de59a5b65f1
SHA512 efda22b004e57a7daf70d0e59d510cc802c1f25f4d6248ef21e4c730a9a17ebf054ec921451c991c65759a97a5e8743aa1b23ecf0e9cd9f4b2105641eb9f3556
SSDEEP 96:KcMgKNqmuzuK8AzGYK7CWiGMKrqkEYKR6kGfOKUMLXaKMg3CWIKnKYfeKQo++Jms:qD1rjvYZ5V8fO9ddTXkrno9B73xRu
TLSH
T1F0B25B11713B13903EBE398A8155B8AF52C271633114E47B7B7904AA4F6BE24DDFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
Size 145KB
SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
MD5 370210ebc9e63f6f39a4185846435533
SHA1 17b63f65390d236465b6952953a7df4cbc6fce1e
SHA512 e594ebf58d19f6d9e7024f98107c738142c6cc2504a0ba89e13f8f771c6a600427e75951ccbfe105983c21b735dcde6e6e173f4da37745c4de51bb9f5e86b989
SSDEEP 3072:7PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEI/tLZjUd6mG:LX1aI5aZoKzMJ07NI/leBG
TLSH
T105E3F1108EC41FACDFA8291C70BE0B1D63E1C79D84676585E773FE0AAFAB90462275C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 6ab95c2c536913cf6bfb634892cfff1af2a7417f1c1d16aab1a4f46b83fdd445
MD5 14b0641a9daa8936cd1fa34f9d29dc06
SHA1 81ee25c3436b32db6655d6a1e189d86bb790588f
SHA512 769f2c432e292be2aa6fd3d75be4fe33e2e42f8f105d7c2b7bbc262dc8bfdacc7664f83b12c6c7fcc7266e8a964966fbeaf4f63546af33085b7b0f4f622f807a
SSDEEP 384:nMiFlcXqnJ38NW8TUNTUlIR5DwO2+4Or4LskYOrfpYQl9e5NrJCst1r55b39vrNr:3FZJ3lwgHDR2ZJRYQl9OGs95bxJ
TLSH
T149E290F198D78977E8AE4B87A33E6E429EFCD153B5880994B7845D0CCC861BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d994dbee0742c418def3f30f2301f5623092de93b77e73443f9fe816392b8873
MD5 daf3d08ce01444e28efb5122c71f05e6
SHA1 03bb4d518dbd9073df5b497beb6619c5bf067dc5
SHA512 b9bcdc8cf4bea665d9efe36805491e062b705bed109fbfb3d8257cbe601ba8a54d09fe014cf194784569227ad268f84fc360873f9b435140036a8cc09b3100a8
SSDEEP 384:nciFavqMg38N68TUNTUlIxBO2+4Or4LJkiSOrfpYQl9eRNe23Ra4ngOU9rN1k+5e:HFayv3dwgO2ZkiHYQl9qz3RaK9U5m
TLSH
T17AC24B71EC58C9B7EDEA4FD9A749B603EEE00167D58C4AE8DAD82D0D00D719E1307C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 924380f47146f4529a7eb6c816d9049f9a4949d0aa713a3239f7a2937376cdf0
MD5 7ac7458205ee7a2c4eaa0ee3891777c5
SHA1 3e32796175792fb1943442f9d75e5f0831ab362d
SHA512 5c6ecd31a51d91ae7007220e72076b2a8b95f1f05a9a62121566470e253b450c40a8810eb2c8f46f376c1b316af97615d1558808596ea912fde29c79a45e18e1
SSDEEP 384:nkiFavqMT38NW8TUNTUlIRNDwO2+4Or4LsQYOrfpYQl9e5Nr8isaIrN1k+5vI+B:/FayU3lwg3DR2ZNRYQl9OpsDt
TLSH
T1FCC23A71ECA8CAA7ECEB8F99AB097647DEE00167958C4ED4DAD91D0D00D71DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7d19e32d14fd9790318ce04b6a9a6060206d7104f03667718795b64c52282801
MD5 f50a02e341044b5261e2c814546af38e
SHA1 e677572e8e49e8b3d0898ea46a7de3ecbb2cb7e5
SHA512 a093be408d55b3c5fe7f827d9743e32100d00cb273abf7ff21d2c722085e6dba2d1336e698adce0c8f20e114aadd866c16b4480b854a7f3551178bdaf2cbf7f1
SSDEEP 384:nkiFlcXqns38NW8TUNTUlIR5DwO2+4Or4LsQYOrfpYQl9e5Nrjist1r55b39vrNr:/FZs3lwgHDR2ZNRYQl9O8s95bxJ
TLSH
T141D23A72EC98CDBBECEA8FD5A70A7643EEE01153858C4DD4DAC96D4C009769D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 09eb322b06f1befb819663623264db1158bbddf3edb61680ac4b5cda9fa2ed8e
MD5 0db71a9ad56d7efa78a0194405e8025f
SHA1 5060c756c05dc6a57d014536076669dc28d6fa92
SHA512 73e7377115056cfd9938530f7972eb0862b79838d92d0a4fb2910ca596b82370b1774a751bc2e7c44d6c390820d1d29beb771e1b46d4ccdc842c63d73bc97060
SSDEEP 384:nXiFlcXqns38NW8TUNTUlIR5DwO2+4Or4LsQYOrfpYQl9e5Nrjist1r55b39vrNr:SFZs3lwgHDR2ZNRYQl9O8s95bxJ
TLSH
T133D23A72EC98CDBBECEA8FD9A70A7647EEE01153858C4DD4DAC96D4C009769D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 063af5ada2e957f25f6850118e1011aece59e823ddd9207b281b05b5c2163a51
MD5 2b739daa5d50109370fe40c4bb5a881b
SHA1 a4efb30f032801a8274b90bafa49c3e345aa30f0
SHA512 67a3d60846d82a95f5470e6040918ac1c64163a241c3434452f953b4644c7e75c435533a781f362e9a9f5b4b725f857c98d8b77c1bd8e677c30ba918727ed647
SSDEEP 384:nhiFavqMg38Ny8TUNTUlIxBO2+4Or4LuQ1OrfpYQl9e5Nr6is3Ra4ngOU9rN1k+w:IFayv31wgO2Z7MYQl9Ors3RaK9U5m
TLSH
T1FEC24B71EC58CAA7EDEA4FD9A7497643EEE001A7958C4AE4DAD82D0D00D71DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
Size 1.6MB
SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
MD5 acc4a11e2e7ba213daa0f5e73300f694
SHA1 979463888ec0a9931499a9b1bf6cdedd9bee0872
SHA512 cd81ae9130a4df9ff95932ab57a6f8410aaf6fc0df0979f0d54c2d8332f0c15dc860d0e59d3d6b32e2b14c47a89179c79f935f75498634fe7cb904f3374db907
SSDEEP 12288:1Po6kw86Bm53N/m9hb0dleifKXYXHX0Wi5QIQ6E7JOPo1oQSc9paunY:1PZq9+9hbHifKXYXHX0WwQIw7VSj
TLSH
T1C985B5F9DFC00194DAB8112D20BE71D8081412A540E5EFEAFE7C855F2BC6AC977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 c56bb27832b3ab7717ed73f702cf931d4b7c413e2c1c1192d47ac84515bc0dad
MD5 decb7c0030956f67a5849e0e73052a8e
SHA1 c6996db75a34b6bcb7d0328aea586e5657417a0f
SHA512 c45fa8d43768bb397ddc10f3d1ad1a6508688033c965638772578a6c7d313d26b2097f6e1f31ef3be04c56f00f7fa71a792f82b7dafa421a0e41084472e54fe6
TLSH
T1E25140D04C3C1AD1D0BD1A7EB48B38FC95ECC726F494347D6854EA98467A24D248583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 8c2868fde215e77093207d371ec6605a594d9849fb391e68f73c82d755872e45
MD5 fb2e85964ff4ecd8fe5abc97090b1018
SHA1 c8eef782cfcacc21afe71008945b2f0790f770f5
SHA512 ab9e4d111c18e2a1960f53cca11ba7fdf4065c26e21bdc95c7436f1a9c64a5ec834025f9378acd0db303a6abc0ed1346c4b6894347119324453b09722997eda7
TLSH
T1D15140E05C3D2AD1D4BD0A7EB48B34FC91ECD726F4A4343D6814EA884A7A24D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 8e545d153ecd1b1e583e5c38aea2f225d7c6a9fb88f80abbc11e954cceaec150
MD5 31fd585757aa91ff06a436ea0189721d
SHA1 9ecb50860721540dad8add3b71b299530dc302e5
SHA512 19e22800959018db51510c1a0b8f258c58ab0f74b53b6d679b3dac02a5aef8e51f7f8c4d08fdbdb6b2d5f1b4acbfea54652c173b421e1b37af296e548c22dbb8
TLSH
T1F25140D04C3C1AD1D1BD1A7EB48B38FC95ECC726F4A4343D6854EE98467A20D248483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e28b434754520ade5efa1b5e920a38c1cb9846fda1ef997d4ce59e64303e7123
MD5 e3b7f1d1991fd179c6015c9deef16c57
SHA1 4f698d6ae71dc5c6ab4466ed14797606ceef708d
SHA512 e66f727199f4dfd7c0ba6dac3b30dfdee85a6b16fb139b6025bc6fe87f0aa2dbfcd45fa7d2f692b61c37a8398a0d60e33dbe308a94b375593bf6da354b6fdd14
TLSH
T1A8513FE08C7C1AD1D0BD0E7EB48B38FC81E8C725F4A4747D6858EA990A7A65D748583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7386e212f2eec38e1d53dd5e4e86348a8b91f082aecf53d9e0182b0bbe7d9af3
MD5 28a53be2d338247816cdd1ed4cdcc893
SHA1 f5d3cbd178e0fee3012f26dcd1dcd336edfa5aa5
SHA512 b43e54941e97eab0dba269524b64dfb43324f0776122075e6439e05ab758d240675ea1840f9e228dbc1d75fa3a0fe9efd4691f4b24bbb76fc740b6b9d27be264
TLSH
T1EA515EE05C3D1AD1D0BD1A3EB48B38FC81DCC72AF4A4347D6824EE880A3A60D604483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 96267db50672fe3ae7551e09826d59f7f083380fc8e91ec1f8009bd2269c9da6
MD5 dc654d866459761d9e7bb107b1f002f8
SHA1 812b8a1b77aa23a20e0fa808d3ba4d23716171ee
SHA512 7a15883eb52ec01f938efd5dc9bf6579a98a50a0407a9ab8924b1ee9d824b641dbe11a9c2e357d44d1673c092d7cb22967ba059049ddae0224f168d92179bc6f
TLSH
T107513FE05C3D2AD1D1BD1A3EB48B38FC95DCC726F4A4347D6815EA884A7A64D648443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d08b245208f8ea193b13cfc30709a63dd0d9f6c8a55494dd6e00ae37260822ff
MD5 4bebf2ca5fb1e4e2478f118f6b1a6ad0
SHA1 c9a4ef2befd6e56fe9e2640a08e148df2d2b9854
SHA512 cfd199fe8971a354dbb2dac12b123d5b2ee35be3b123ab3317a6417dc49c3b2d74bc2b8094956ca6a1dd994e095390a37375883a41346a30007ea7b9ff374701
TLSH
T116513EE04C3C1AD1D4BD0E7EB48B38FC82ECC726F4A0753D6854EA994A7965D648483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a11ac0d44eb530066ae501c04df59992e1884fc29df8cbc94ee0900b58eb1b59
MD5 13acd1496ab6a69935952ae7562cb5dd
SHA1 4dd2668a01820b75d8ae94061a65f7fdd081ea50
SHA512 1a18eea9a29d4f4a0644d41b25c80d56a3bbd7764263b1807b8c12b26d56f80b16cec873960b52bd5759a0f4a2d6be254715ef4a886d1d2c183ee31d682d34fc
TLSH
T1AC5130D19C3D2AD1D4BD1A3EB08B78FC95DCD72AF4A4347D6824EE88463A61E604543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e915e807a3cfdaabd7c1e66ae72fd599c778c2264d9e9aac551f7ae486f2abf2
MD5 15b49584098be3c5192b9797c675008e
SHA1 319322a9d3b19a457f20e3af043a1a628f23acc3
SHA512 4e1b212d24cf3b66f7ba1a1a0cd53e5b62b8d6121093e076445c5319b959179285f4719185d9c78dafeac5d284b2ee23e02cffe4609ce954eea7f2bb65383d19
TLSH
T1B0514FE08C7C1AD0D0BD0E7EA48B38FC85E8C725F4A4747D6854EA890AB965D648583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a1caefd0ea264d03a2b0560a7c009b7c0a03d2566570e5429a3f3971ec4a260e
MD5 42aaacca4248c067118541ccd4c1f1be
SHA1 cf7eb0eb58895523f96046143faeaf2bbeed847f
SHA512 6382a48af677add43d42802270ac4393c521b4adfd610c1a8e2bed9e4c6946a4de0e9b93ca3477e698f23d39d4b9fb8af3e1ed3a3f26d5da4782b7422d6582ae
TLSH
T149513FE04C382AD1D0BD0E6EB48B38FC81ECC725F4A0347D6858EE994A7A65D648583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 c9f4f5e086e55d6c710e7a221481af68f24d0c42d8cd448744013c967cc0fc9c
MD5 602f7632777ac1c1852581ff27f42365
SHA1 01d04df3df3436c593b88b81053bd12f81d53200
SHA512 937f22cf343667b79eb1b7217dce4380b4e1cda87e406aae04e06bad23afb8e1c7db80dba847c6d11ac140f81fd08ccafcf4111dc8e250b1268a9ddd5e30d843
TLSH
T1345130D05C381AD1D0BD0E6EB48B38FCC1E8D726F494357D6854EE980A7A24D648583F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

Modrinth App.exe

Path C:\Users\Admin\AppData\Local\Modrinth App\Modrinth App.exe
Size 25.7MB
SHA256 108b606f718fe359c5f63879208a73f5103b061ba83b56ba791e18c50591e276
MD5 6e1ba4ee45a28a2d890cc0469fa802d1
SHA1 99373ecfebb6d8b021371c91b6536f538fb0c996
SHA512 169cdfdb3fedec10096c4befd4f657b788e154a5f08083a85bb82587e43fe573a2982b970a46a946ba0bec823a48419274df8abccd9238e987cadc53b24b69ec
SSDEEP 393216:OhsfU3pQscNMPdrLEYkdW/LunpMq/Iiij2V/LDel:bETdHC0MTql
TLSH
T19D478D13F6A180E8C06EC4B8835A9633EB76B88D053476BF5BE45B212F1AF506F1D359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5b17608437c7881084e097d87e75304ae96e230713cacab779e146040d2a922c
MD5 88468e082ecf1af5fde08cc80d8295b1
SHA1 0ae149ab40ac4399756eed0db990bf7c3c8da77c
SHA512 5f2a9a44318a6d1d73b618c0da62daf53b7d45ebac5920e815639100cb85b7d01027863fc1ce5ce2dd976604bc2d5630e9e6ba91d955d73916fecd8cfb1917ef
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 90862564e13ae0599e8aa2d7fd791ea5f743484c55f8547ca29733644aae8b0e
MD5 930913221540b877f8f80d9dbf1d9f36
SHA1 63f86ccd5010dbff4fac4f64d98995d92916a6e8
SHA512 2fe40f7af5513fb941c3343f85100c8ded4b380d03fa9f5f6397bad1f366af3df4ed3304eed26f9924f1a6af7c0e4fde7dd7eec7c6d0ca4c538673a35522ac5f
TLSH
T12CD0121B72030239C0102C73550265091400C11B400A40457CA8D51F1E540901907583
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_000015
Size 33KB
SHA256 ef764240ac16e70b0b4bbb266dcb8cfaee256dcdb6300a037d259fad65c5fc1f
MD5 245948b2be6dad54beb8ffacff259c3d
SHA1 6e9a3f50a81a97b39427cdd3be11524c44e124f6
SHA512 0e210bc06ea6d57fee19181ca4bd545e189899636d84b08d3aecb2ef6cbf67ff36e8b68bd3e2db9823e07326ce5eb5fa206641318629213a5606be06e44f64de
SSDEEP 768:3dYmfb8+isYhg+ebOseZTjtqLyTbD94sb3O0UUvDgQFcb4e:ii6FG+ZTpq2PDzb377vDcMe
TLSH
T184F2F1E593FD10C59AB45CAFD29237027720FB49A32F31A2AE42C4B0E50453DDD29E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_000016
Size 82KB
SHA256 4754012d38724b23f5b455253c7c87298a0bec686338f4072409c903ed7791b6
MD5 547b61b47564b398b3fd464395cb6a80
SHA1 9c1b5cd2117af8658d8665e7c6f726101605b8be
SHA512 002e470a7cd694aa0ce8f95c29fb07f9a04e85785a688dbdbd92951926b099b626b6a69c26997ca63644cabefb3f8a2d6c939102613b2b8584d2aa4dcd6eee65
SSDEEP 1536:nY8wyqpnY6wSNyb4YYkqjc4YXBvrpH7HQaTAH7+5t84dcpVXSd3X6qnZMf2:YNnpnYVdbOkqjRIRTQaTAH7y8OcDi6qJ
TLSH
T14B8302332702D3EA47CBE76604CE94B049ADA5D83DF2EBD6A233E0E470DDDA55440B92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_00001e
Size 22KB
SHA256 3c6276c6b85d4f513a7251985249a4efab77dd0759b70d9eea2220db7e564b0c
MD5 cea5b4c591fc8d87e260c7d0acec7808
SHA1 c26eaf5d2f49caae5dfd4d1f07e14deb9b939c29
SHA512 602347131bb2f90662813f0c278fd55db949e33c7e2d910cfad987b8e29ec6dad6719989ae5d80a73aebd151b4720ba93b889b1e034a9ed77553606b6ebafb38
SSDEEP 384:4wYl0ZYKPG6/ba3PkitPDyX2LOsQLwxWmf21ok3fVd0pB78hcnphdvL3Pt3B:9xZ7PfmLa2LFQUxWmf21okz0fzDL1B
TLSH
T153B2D0D6C51C0061C2D3825922D3EEE677FB39B1B6D1E172E5D60A762410E0F2CAE1BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_000020
Size 75KB
SHA256 af6d5ffd5bdb3854485ad2365bbf67a15c66bf0214ef6332af6f0553f6ef2479
MD5 fd0a39a086bd8646f2dbc90787fc4528
SHA1 d23aa3ec6e38230689d71e837b972278dc81004a
SHA512 6f0687c370093da210b9a94130c8c5153be63da7327632090930c5851428775047e71faa12955524e8cf7eca46ef3239bbdc9e4279df7d166f06e0c6a3b0cfe9
SSDEEP 1536:5ZrjuurgFJgazZYM11tlz9p82zFU1JIh9u6gIZ6sM:TrjCZYM1Llhp82S+ciM
TLSH
T17E73028DCB1230C7112E777D0CCBB3B6555EDC89E816B165B6865A6AB363EC483B1C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_000022
Size 38KB
SHA256 3557a9bf8886cae2e53428ffd78f6441715dea5c15a09b8eb00b46166c493f2e
MD5 d70c895c6e8c1cf5d6536368547233cc
SHA1 e58ef8e975e388bb6eb36e242d2e37d19317d5a4
SHA512 ca29f62dee7ce9916964a675ed7831784dbd1d699ceeba3c51f3479094dba8f7bfb6fd02f2408133f1435e62f0b0c9504a46e7d754b77bbeb5da7af85383893c
SSDEEP 768:7VnGo7aZu6stu6792k/87tZOto5s944K3DN1ZKgFMwsNOQ3N:7V3d387CtUs9a3DN1ZKbwEHN
TLSH
T1D803020367B9D704F08B9EB464980B74BA88C4EF159F8D7C11ADEB045E696DA42CF50B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 624B
SHA256 554029e8b2d3dbaea6c1f3c579a5daaf18f4aadf9fb87474645290d39268269e
MD5 709ade45e98a91d77574f437b5c7e1a2
SHA1 8be9a160a0c4a51fda10cbc34e40e85accd8e71c
SHA512 c8ac562d129f34e5a0a297467f1e56235a0a38aaecd27ba80c67cfdf7a4fed4308241d1ded276dad15830eae9ecb927d327cbf0b4e70e81f692b854ff37c12d7
TLSH
T131F0596504B93A3FD387433B789519E4393D0D964E965B67630849F11C92F5ED118228
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 52efb13d7dd240f614893020da9549167271de46afca4f155b18fe272a460e4d
MD5 f1296a097a79bc40e0fc356113920ba6
SHA1 0d28035b6bdc7ce02ab5cbaee5af0ba67344e6a8
SHA512 a98ba6f17b87b13e49751494413fe9255c684996fc47dda94d57c65db10173c8af28fa1e8fda06fcf270df79ce71001df9a61a1ca64dcb1b28067b6c4bf4f8e4
TLSH
T120F0E50084E4747FCB998ABB3DE90CF8353C0DCA5E8B8717750898E560EAE9FC156158
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 864B
SHA256 ba478f6d08c66c09480b9dfb291f2242a4e87fbe9e2aa8f7b0957686278a4ef2
MD5 82758b01ad7b69874f34eb27e29008d7
SHA1 4232bf6fb6f77e4c59b370982f0def35fd600d7f
SHA512 21ee6be402f0f6b4d3da23c1fef7f0b0ca0e969a390cec561986f945602cba2fc4468208150053b8bd20614ee849c5c4b1cdf8693123dbdef50a4b62018648fe
TLSH
T19511991028E7397FC35246BF38991AF8353E0D868EB70F1BB31819F51892B4EA012298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 a10b29331e35a9ac2d410f039ccd452acda71666a630829738569f351ef96e4d
MD5 85994162d2464ca40c9867bb97f26e14
SHA1 9190c541f6e780809bca2d4b0db0112010eabd0d
SHA512 5ff9e5da1ce71ec2b33f797932094ced25cef5fbbdd4b08d8c9df35448127b202f8ed6b1b116f3230ce6d51338c421ca6d4baf6c5cf5182f1a904f345d0745f6
TLSH
T125F0E51084E4787FCB594ABB3DEA4CF8353C0D8A5E8B8B17751898E160EAE9FC152158
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 696B
SHA256 b841902decc07b93b43910cacc559e132219f10e0343665e882b5995f0f67f8e
MD5 84700a754eb0b0fa9e437e57f1c802fb
SHA1 33e06a3172d503d8c81045279719b89e13246c4d
SHA512 16898e80e6263dc36734b0cc254acb16bba8f8abcec246d17a4d756e99819d71954a5d55056cd1175f24220b19cd552f21f3fe2f5067ddccf497c5127fec83e7
TLSH
T1D20146A00875393FD34A427E78D56DE4383C0D8A4E934F6B231845F11892F4FE125258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 744B
SHA256 72e25210acfc3d417b678b1efb049c29e97638d41383d7c51fa99ea6a1b18dd0
MD5 67d862a226aa2d6b7c45cdc3c044a0e7
SHA1 3c83f5cee114dda6e7a23768201d2ed135b3e037
SHA512 a534359f39bb15e56176a7c9d1205e8feade96df92b5695ce1dbd830b79d8f60085f6977b33964387280a521cdc93219c10837dd7d6ac6c2214d7c9f72744049
TLSH
T1A501A66428B63A3FC396473F38AA19F4397D0E854EA30B2B630808F11C92B4FF015294
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 648B
SHA256 216bb28536616dfbbe985dfb248a44d81e211381030ab0f0684917d11883341e
MD5 a3fceef70d3e78519b70faf6922cad06
SHA1 bac751220cccec1a93743a6742bdf22824139462
SHA512 8094c1056d50a8151d5c34c0ea2b3f8fc123bc68766dead934c8c51e451b85473b5f20e1fe69df41708bf0465b8066d0c4e6da472d7e60fa018f8e44145dd3a7
TLSH
T16EF0C96200B96A3FD347873F3C9419E4393E0C850E924B6B230848F11CA2F4FD11922C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fd76.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe58fd76.TMP
Size 48B
SHA256 7b6594a36863728b9c327c73141fbc5fea2f8368f0bd94d9c14ed4340b40b27c
MD5 ff461db770f007a8211e0d25cbee95f8
SHA1 ba9f24bc010c40337d9e54daaf06194f69d0edc7
SHA512 8808743e7e5865abec38be4850da1cb5ce1cf9f033e5349733239ed8ba0166ad47d3dfd17a1d6fc6ef99fc52e3fbceaef828feebbab50a8e78c48a06bda89464
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 b5730c6a989fe9144343b0e0529b157fa219249bb61c0d6dbd9fe4c772151611
MD5 8527276ba0378f91c776d6a8c0cc85c9
SHA1 cfc2549717d22d658667c58f9e3e24904aa4d801
SHA512 6db19e46759853a5b591ebb9dc0cd8ed0c3cce97398faf448b93cd71ae36445d5c85d152cf2b731a8e05ee3f96eb9aff29213ffa6aec628c29593d578c0eb58f
SSDEEP 96:D5EEj/edRp0vPvMp2sI3tCJktQoHIAwbqSgjbsyB5WsEpRQa1Hy:D5EEj/edRp0vPvMp2sI3tCJktFH98qT5
TLSH
T17EB18EF347F49B3D8E21A2B43E256E1FCE2D0425572C693B89C59F629391471E112B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 8f38d2225ed168d42e879245aac1d6f8e809d0dc4ca7c21c79f9348c0be1d60d
MD5 fd65b0ec28c4f11b5e5000196ca01d7a
SHA1 e7c6c10a0b3c4e45d19a248d4047290bbb13c37b
SHA512 3fbcc7b7ba04c4b564c786f21a7f5b12d6b71233ff3a95a46af7d05739d1d158c78706e3c280923de73499828a956c6f045a6a5893c8d15f2b99ab6db538b4f9
SSDEEP 96:D5EEj/ewRp0vPvMp2sI3tCJktQoHxSgjbsyB5WsEpRQa1H/wbd:D5EEj/ewRp0vPvMp2sI3tCJktFHxTjbP
TLSH
T12AB18EF347B49B3D8E21A2B43E266E1FCE2D0425572C693B89C59F729391071E112B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 ae771355ff48750473990e7106ca0123e992936dda02bfccbe2a795e54eaa22b
MD5 19250780c2714ee3eec19201f76d0734
SHA1 2fe34a9b925e71b74b4b4ed00f607ab491633d1e
SHA512 a3ecfa0ed70a0ad988530595f447cee690712a8d1a0e7db4e0571041546233b23996d61634f76fc463af6e231eecf8959d2802e9294a5c0e79cc0a50e9e38942
SSDEEP 96:DD6T6KR2R0vPvMpZgjsF3WbtCsysbQvH1GpRkt1H/JaSoHA:DGT6KR2R0vPvMpKjsF3WbtCsysb+wpRs
TLSH
T12FB17EF383F48B3D8E2192F43A252E1FCD2D0525972C793B89D59F66A3A1471E211A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 24a415c1c28b2d14beb64bad1b6cc01b9f2b32100a32598c137a65249b07706b
MD5 3c7c3f4bece57dae7cc9c36dfa8c09fc
SHA1 ad57f9df9df7a919614303b88713f1b54c1157fa
SHA512 0027c7fdc390042c4801e2f313107306578e1e520404fb77e4a2595c30c4512ef86eabc28c7b35775833ef717d4fed819314b414662a7beeba5df6199e0ca6cf
SSDEEP 96:D5EjwJ/eTop0vPvMphCktQoHx/wbq2sIOgjWsysEbVJBg7QapR1Hy:D5EjwJ/esp0vPvMphCktFHx/8q2sIfj+
TLSH
T158B17EF387F49B3D8E2192B43E266E1FCE2D0425572C693B89C59F6293A1471E112B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 b2a8a966b25785c44e4e019401d89c04800f81b1e27d535fbaa4b4d85ef4fe70
MD5 3738d744e53bf9c13150b37df4d0cf6f
SHA1 b8c2bf274b059d133a99b1d0cac785ab9bf8dfae
SHA512 d2c26750a584423554c239d4e612a8cf125b10af2cfc5c3eadedf444a1ef6d2cb39000981d88a8d8d3dccd74a09f36449e9f77211d97bd23e94bca54e2ddf3c7
SSDEEP 96:D5ETsW8Te/Rp0vPvMphCktQoHxyJsIb2jWbsEsyQAB59YpR1HSXwbd:D5EwW8Te/Rp0vPvMphCktFHxyJsIb2jp
TLSH
T1BCC17DF387F49B3D8E2192F43E262E1FCD2D0424972C693B89C59B629391471E112B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 30da9a13914c0f97714ec67ec96246a8c33139ff60bd47b507dac3ef85011d26
MD5 b406b0c35969ce416955ae74e86fe276
SHA1 7e2177a4f4464f72dd8d59a1e5080d2204121242
SHA512 4c3f2caec14c47537307d324103e232a0e4a33dd0d46e511cfa9f9442e4d228005f7c80abea0e1cd240e3c723947f721144d846704f00f3e0148eb7700ad6288
SSDEEP 96:D5Ej/eTs1FRp0vPvMphCktQoHx/2sIOgjWsysEbVJBg7QapR1HSGwbd:D5Ej/ew1FRp0vPvMphCktFHx/2sIfjWz
TLSH
T11BC16DF387F49B3D8E2192B43E262E1FCE2D0425572C693B89C59F6693A1471E112B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 b8a5cbc45f4b84927c7e2e3a67b96d028204b04605ae1af7d581e84956e64a1e
MD5 dac1b5efd846ea1188366f3bf01ff5fd
SHA1 9c74eb88a6ff8d5fd9efff8898a4074b4b2ff81a
SHA512 dd75da65c74ff9df967c72bd3a3dcb5bb436fda53656db7bbed827a19b50d934530d835137d682994bcab012f7f778468c56c7c368ee11f5810110ea7622cff3
SSDEEP 96:D5ETs1FJxtT2p0vPvMphCktQoHxS7VwbrJsIb2sbdjWsybABgHHYpRa1Hy:D5Ew1FJxtT2p0vPvMphCktFHx68rJsI3
TLSH
T1C4C16BF387F48B3D8E2192F43E262E1FCD2D0424976C693B89D59B669391471E212B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 ac94e16df23dd61cfc6c349f60de14d722204507c79d6ee5a6d9f42d3973eb43
MD5 3fddbebf3aaea1ec7346747b983af2f8
SHA1 bd21f9ea2acb7bcb7ca74933a4f9f761228b218e
SHA512 e9a1df02cdeb21bc9e2258a082814a29db9ab3d917c5d539087d316e1013b540a6cd02df60e2bce66c233ed25c33264348c546b712463e1d6d559d5927697a78
SSDEEP 96:DD6T6KRedRR0vPvMpZgjsF3WbtCsysbQvH1GpRkt1H/JaSoHIAwbd:DGT6KRedRR0vPvMpKjsF3WbtCsysb+wI
TLSH
T1A5C17EF383F48B3D8E2192F43A252E1FCD2E0525572C793B89D59F66A391471E212A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 d3a1d80378b62976d1f88634aa7d780324d9c5634f0e2b2be32d2dedb5814f35
MD5 db9a9036e184a38e8b9e9786f01040a3
SHA1 51bfb533ba9cf98dfcd8c5477f74dce50a40e889
SHA512 55b7d99d86c6f67c0495227529abd9e466519027373d143314ef1e6e95fe649e8057e6b59b4a2a48189a1e38162b499df44252a06da2cb8edd148523850ddf90
SSDEEP 96:D5ETs1FJ/eJp0vPvMphCktQoHx/sIOgj3JsEWbsleQAB5apR1HS7Vwbd:D5Ew1FJ/eJp0vPvMphCktFHx/sIfj3JV
TLSH
T1B6C16CF387F49B3D8E2192F43E252E1FCD2D0425572C693B89C59B669391471E212B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State~RFe59a454.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State~RFe59a454.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 0b4c0be388ec9d608cb6ebe4e8bd7b5ca4d6ac43d24873622e4d20dd2979d2f4
MD5 ecdab3a37447edc32276e7dc736e9e89
SHA1 27dc3463d7cd416de1c71094a0bbf11d4b269912
SHA512 1c5218d60b1feb5f8e53c1377fc0d13f9f2ea9163766754a061d434b5638bfd782c6500257b2fae4385eb1c250d7a4bdbeaa5a4290ec4d9955a3ad4f602d11e3
TLSH
T1C1418B53D6BEF83724390DAB5E947D192D7AF9324281A4F5DBA7822C60909B3530F863
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 619932dbebb24bb4a210e8b003669080f449a6e06c57da12b32a7f5f05a3978e
MD5 45909a44d240bdb1bf7ca71ffa9690df
SHA1 a8d344605297b8a8b334f0bcbe8cd7025f9d6505
SHA512 8a2c8705ce59b7d8df76ecd372cef5e6df75e426ccaec0ff68dcc2f2a5adf65cd7fe2efb57fabb924c2e386dbae98794255eccb6e26ba96ce2729e493a9c53ff
TLSH
T10F41AD53D6BEF83764390DAB1E947D192D7AF5324281A4F4DAA7822C60909B3130F857
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 031e745154ab50b3aa7c76cbaabf77f1acac3d69e4504aeaf02ba3a326f4ce3f
MD5 0572d35ead31855a82e6bf3e47395cf0
SHA1 e602375689e689f53e1ed7781db6927283956ec7
SHA512 f946887025fd402b2a094bda3075b0b30964ce0b4efa7e5855c5f8f0547c5923e4acb6f8041c917519b583fe2ebd8b433c8792a87f78e020443a863e0ddf67af
TLSH
T103418B53D6BFF83764390DAA5D947D192D7AF9324282A4F5DBA7822C60909B3130F853
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 48eaa9bfe01b96e553cbcfbb6d60247d0f1e423d09cf8f254171e95a426edfc0
MD5 c06dc6bba993fe821a54c5de8a54770b
SHA1 474e53ae5ec93196aafe4a20ced5fe55f5c4f762
SHA512 d09654466245a63c107586a7cb5c831e0db349595ef4fb4b512b2538e82d8bf365015d0a0f57b017acd8903256348d830effa6dc0aeeeebc01d001078d37ba32
TLSH
T1E141BD53D6BFF837243E0DAB1D947D192D7AF9324281A4F5DAA7822C60909B7130F863
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 6274e1466d7dc1cc4466fd880168ece705560edae07cbbc90a59870032377363
MD5 1a113a253e3b25a2fffac92920a005ec
SHA1 0f22eb628a98488f41446f99100f7f11b8bb2ff0
SHA512 fd1b873dcfa77db9e6a4eaea04ac347ae06b1879ff9ceaffa1e89a5408df2342bae91764aa46cea8cd811b84a0daa7d12c6dd2290aa70a1787c6f0a8a66e8882
TLSH
T112419053D67EF837643E0D6B5E947D192D7AF932428264F5DBA7822C60909B3030F857
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 535c89e41d631ae6af3d37218255fe27419129e575799f133b2a23a6e7e9f4ef
MD5 7374f7b1ed292f30043aa63c159b9c76
SHA1 b991e8dd4ff949fdb33f4d324271b30f4d564651
SHA512 b572f3499a64f8c48cb846c3b92e1b89fd85ae4b36f3215fe81980eeb0a855ef684315ebf13691b7f424d769028576aae9930e96f0204d2c5d60f5aed0cf1b9f
TLSH
T1AB41AD53D6BEE93724390DAB5E987D192D7AF932028164F4DBA7826C60909B3130F853
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 b03a8510db2129dadf778b083f25bed6379c7d2a82ca3ac533a03262a16f1c6c
MD5 4ecbd5189ddc600e7da8c5ab9293645b
SHA1 73ab4e7c47904ec1d23e478004070f47d95993f7
SHA512 15dbd7ebbc37f764f84d64268f21eb3a1560f184283ac68614ae0b79323fbd0a2ae93e14c5d4cd3bb3d0b57fbf0b34839606be78ff78ff414a0678a080401ded
TLSH
T172419A53D6BEB837243E4CAA1E947D192D7AF8324281A4F5DBA7822C60909B3131F856
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 7242588b58a5b3371143833295363139ca7d67e8cda7e4b8404f5da14a582819
MD5 dddf9c9ab60badaf21c42fe5ea861a75
SHA1 6fbf462f6b04d57034cdb65c3ed8d814993a2080
SHA512 bb4e576a9b18b3ea8f2e987e46ae5c4f8e03964bea31aa552bdbdb1c66dea9b644fdff10b1ed0defa972479f65f1d54d9d651027cc1c81891d791a0d37dd8da5
TLSH
T1BF41BE53D6BEF93724390CAB5D987D192D7AF933428264F4DBA7822C60909B3130F853
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 a4feeebafedf54ea4da1d17d8adfc86b48a94008b92c1f3ac1c9f563cb999594
MD5 03f1b4bc0dae57c4742e6dfa94f9eb25
SHA1 35acc4dfda1e1916f7a79819b783218a4fc468b5
SHA512 9cd80c17d2043d86a30f74f48500a0e5571eafd1eab49b28c324bd054ebc093407083acdc6401981724f59560e9722cbc1292b1fd3ee6f334e18f29a7b30ca64
TLSH
T13441BD53D6BEF837243D0CAB1D987D192D7AF8324281A4F5DAA7C22C60909B3131F817
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 b73df02ebfc9bfbb99a072c88746edb42634e9369f5912d75dcc74e2fea5e86c
MD5 1b2de0eae8beaca39871d82fa1731e7b
SHA1 3bbff34daabe08278b1d225541dd145702dd8a64
SHA512 90a69fb044b5e3fb2800afe16795504f856ea67759177d586e835dd3a2cd8ccb575da1c787d983096be945250249ca93b813b61087a67933e3fdb386adf0d6a8
TLSH
T18B41BD13D6BFF837243E0DAB1E947D192D7AF8324281A4F4DAA7822C60909B7130F857
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 5d6f16bf84368593fec9542e055125a7f41ead94e3dda0f679778ec2b3a5dfe0
MD5 ef6cda85b6ad3da283ed4acd4e85f961
SHA1 777c0eadb3efad396c518c63358548a587f9233d
SHA512 020de9bdfc833e443aff0c56b083830f77adccef479c5051a7c9f3df5bdccd26ef6bb6e70d218af1826794eb5b1a44ee5d3c36bb45069600801d40e4b5500ade
TLSH
T12F419C53D6BFF937243D0DAB1D947D192D7AF8324281A4F5DAA7822C60909B7130F866
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 7deea86a854fc8c04d61c43fe1820a975ac4b85c786aad1e401e9cbb9055d909
MD5 7ca766aaaecea7ab85d9b889c8475aad
SHA1 249c3d8ed436647c337a1556e1e31ed439d07cae
SHA512 2fc864d2ed47ad139201959c94beeb641b846c3f55545b774dd5169b02892974e0117a7a01f9f0b6bc8d11a9bfea4acf47a3e3f4fdc00192a174331aa4c5ee6a
TLSH
T1B2419053D67EF837643E0D6B5E947D192D7AF932428164F5DBA7822C60909B3030F857
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 8009f3a028664c89408cb7e89b4c591afe0f1c42107b79c3cc554c35f50408b4
MD5 4f7e88135c805d19838ef90fee8eeeb2
SHA1 e0c36f8d12a3790fb56f0da4087a1cd83932a134
SHA512 8d9e37e136e93c5e07f161b269d99a95fdc48ce2b6a7b8426a688fff3398da685c6225beee50771c8b04dc6af60fe46f95a42ee1477ec50e2f079e4eb044216b
TLSH
T1D7319253D6BEF93B24390D6B5D947D192D7AF933418264F4DBA7816C50909B3030F857
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe58ef7c.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity~RFe58ef7c.TMP
Size 1KB
SHA256 0e56fbd03681746a54f8197d1257008e762c6e878c54708bf31f7a0f8c0095ae
MD5 74aa9d973e606a945712fab7d4802efe
SHA1 1c485108ece979bb2114d8c27274934821854ed6
SHA512 3e1b38a631a5fdc9634e2866bcc6ff23b6fe00b48527ea4362c583cd1e43d84d41c872b85119b5a81c11dcf8498fa419ffdfcd200d710049d411cebd7f10de12
TLSH
T185316153D6BEF93724390D6B5D947D192D7AF932418264F5DBA7822C60909B3030F857
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 0841714dd71292198221408459824808089da334c3f15a4d0751f401634fe196
MD5 6ef10f4f508eb9f9040a46dfbca102f4
SHA1 5f40f9d6bfc24a3cbaf7db71bfd49aab00308866
SHA512 3eca7daf840a06b686dcf348b56d3915ae0aac4642b44f8a296a6e65664fbad5cc5babf1bed0b28d934a36728ed9d0409eb28dab12b24d26894ea4fa8512534b
SSDEEP 192:stV0oVIfGZ8pabK9N/S+WiT16lGgQBVBMM65o6ZtaIV3jV/Tz4TSVVj+MC:stuoVIp5/VsNQ5SzBFvC
TLSH
T1D4029653AE786A7F0CC6E929B521F72DE2E510275AD40EC4BBFC8A0C04D65DC650AC4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 848820d569a42332e1d37e170b2e1d78405b48ba41441dbf3a6e76cce85110bf
MD5 27b2c6ee520ef7901b8feed63aa1f646
SHA1 0c0a2d18f369ba5b6f106fa62774a85e96d36f55
SHA512 ee5aec7e5118923a848dde0b4e65821a8ca210da4a3eeb1a291be62f739bd022e5b25b08db35a0d033456fee3f6194d1ab52e35327f0a8faee24ca5abbb40980
SSDEEP 192:stV0oVIfGZ8pabK9U/S+WiT16lLRqBtxvm65o6MtRIr3jV8T5NTmVmj+MC:stuoVIpo/Vszq0QzubvC
TLSH
T1BC029553AE782A7F0CC6E925B425F73DF2E6006B5AD40ED5ABFC8A0C04D69EC6507C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 1a8f189e2443a04810d8af78cc3b9d97baf6289a0f68b6cd1bada5139bca67ba
MD5 631f7d8f6735d0ca301d5aa23d1e3ef9
SHA1 2910de4399aa54c6353ad103557e4afae5854336
SHA512 17f7fac78c32c2cb943a977691ca56498f55fba91e9c2e59708385901a0675571fadaef9bc9ff8575da6b717032b42344115e99a243ce129a7d63a831f052a5d
SSDEEP 192:stV0oVIfGZ8pabw9m/S+WiT16lTYqBh5TvdS865o6dvtJIFD3jVdDTfaqeTIVejK:stuoVIpQ/Vsaq7FloH0DzzDLlwvC
TLSH
T18F02A743AB782ABB4CD7E936B420F72DE2E600265AD40ED5BBFC8A1C04D65DD6506C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 190bb4760940726fae3412daba175ddd99d3c462cc9d3ae74f16448e53113b7e
MD5 04035eeb2a6662c76b65df31e5b721e6
SHA1 c6d479ec7701056735a1608d75748a98765f3185
SHA512 d9945b1cc1094de313a506ce940152fabe41b08383af87c79e373b0faf57897dca2966a6a855ed4e2e1efb80c9060bb337175f7d82b1dd78626ffa498c2d5fc9
SSDEEP 192:stV0oVIfGZ8pabt9t/S+WiT16lqOrkB9ecy65o6XutTCIc3jVcTOPTDVbj+MC:stuoVIpm/VslrkwC3zmCvC
TLSH
T12002A743AA782ABB4CC7E925B424FB2DE2E500675AD40FD4BBFCCA0C04D6ADC6506C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 706e7aa02058a05bffad3b53ba065c6e482a6533137ab01b7c2a9e913f98044a
MD5 ce900ff0a52001a5bac2d5c6a294f12d
SHA1 4e74f3dd97b6c454464859b703170cbdf94fc77d
SHA512 33c3f709bfee5feaec4217cf9f5a73f91be8624aea739ef8b3de2c921921c6a2a8c3bb9ac35a5883fa505513da08cb6279e3637c6214ba369418f326d5448ca2
SSDEEP 192:stV0oVIfGZ8pab499/S+WiTcqAQsCwBQFmo65o6VIf3jV+TwyTkVRj+MC:stuoVIpP/V5ACwdwzgCvC
TLSH
T195028643AF386ABB4CC6D939F825FB2DE2E600275AD40E94ABFCC90C04D69DD6506C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 462c3789a154c86e0d81aa04fa9c111d2d960f6ac4415ca7a99509b82f8a5d0f
MD5 1a2a17ee02b96a6f7cf5314239d1a9e1
SHA1 723191d3addf1653507c2b8d5497c3a6240a2ab0
SHA512 efdb8c8440adff5e9553cbacfded8fee95e16ca86121c1eeff8880a924e5a52b4872be0e0786b8af6d114ce5a1b9a2c34a0049220ffb538ec402ac556503ee4a
SSDEEP 192:stV0oVBfGZ8pab499/S+WiTe8HsCwBQFmo6xVIf3jV+TwyTkV7Kj+M8:stuoVBpP/V99w/wzg6ov8
TLSH
T144028643AF386ABB0CC6D939B825FA2DE2E600275ED40EC5ABFC850C04D69DC6506C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 8KB
SHA256 2426f87aeb9a2f3ac7acd364ce69653cf61381d2d1880e8b2c18ed3f7c330e11
MD5 1a3fe78c7e416b511e78c3e79d061597
SHA1 77de24e81792aa7b14cbc2faef665319bd9dd9bf
SHA512 98fc816bc6caeefdacb5ba584eab2a704f26c12b5c935e04a7993e9a6f8cef5728f0535390ac38402a9aee98705fea45a444a8b344b21d8cee84d947bc0abccf
SSDEEP 192:stV0oVIfGZ8pabn94/S+WiT16lVzaB87kg65o6BtLIw3jVsTFy/T8NVoj+MC:stuoVIpd/VsvanbzG5tCvC
TLSH
T198028743AE782EBF4CC6E929B525F72DE2E500676AD40ED4A7FC860C00D65EC7506C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58dc32.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences~RFe58dc32.TMP
Size 7KB
SHA256 407a6731b29e8411eeca064f7e0ebf5223f82df286b77917eb3ac5875e791740
MD5 0a0842e8313a45f698397497143e502a
SHA1 ffbf870f06d58502989ce2fa8839aea0b586401c
SHA512 5d110321659bdb48b99700eb6897b7b41719b0ed4bc96f9063673b63fab203c1b432674d470da0fbe26a33523634a1579e78335ebc21c61c396adebb0d444d4e
SSDEEP 192:rV0oVBfuZ8pFb499/S+WiTTofsCwBQFmo6xVIf3jV+TwyTkVllj+M8:ruoVBhq/VAVw/wzgkpv8
TLSH
T1B4F17543AF786ABB0CCAD929B525F62DE2F600275ED40E95ABFC890C04D69DC6506C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 16KB
SHA256 b9ba8b70261363d42a3206f5ce525379c609a603d1e9285b5ed8a6f58eb4a9ee
MD5 c8c533b08808ba266001be33458129aa
SHA1 f08cc8304c6fc7fca7f868f178bf8bd8410ece5a
SHA512 d78a44b73d26f1f32c62721c74bd0cf2cec35e6b46d5f092dfbdbeedc6029b010ce7106da7db7c6eb99fac5ca08d0f6dfb06b9c3a9ca3333eb25724fba41546e
SSDEEP 384:zdfTPLdSWCUkEaV8DNYi0qnSXaqZvLNbL5MhnqetjjuQ:1TRMUVai1SKqvt5MhqsjD
TLSH
T1D072BE63AC78EA1B0CFA9919F617360BA9B9D15AC6D52F0DDCED1F0D03C26980B16C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 2KB
SHA256 322b179c52ebca1ceb639ae43b2e5740137c8039a86a89eeeef48d4bb7f53e49
MD5 144e058c9d8744cc9257d73173703f0c
SHA1 d599f2e4d4a043bf4852cb787380655f6d037f5c
SHA512 5054b84910ae6f86d13c518eadeeb8d1b5577f6f1a24777e47c5141132ab558638c29dd0bf7944b334cff9ae664c82decd1b900365fe06e70f928fae2fee644a
TLSH
T10E51C733B91C6B3B4DF29948BE0A3F17693551679B611F5485ED0B0C01DB55C2B0AC27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 3KB
SHA256 64f4263fa331d135553159921ee00f7a10e737b2ca600b201f4c66a8e6aa57bf
MD5 8942b03331a0f60da4e0444a80f4fd93
SHA1 ebaaed50a42aa9fca0b830226c401102e4fbf914
SHA512 d833afeef6fb9f673aa4bf4b737944a24f2f928a8b4212259bb2d75d0175e7e6ad2ff96192e05389ae4c3604ff30fe2b83f43cbce98adbb4c6a00f479db9928e
TLSH
T1A0719633B968AA2B4DF3DD44B9853B0A76A55137EA913F98C5EC0F0C01DB3981756C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 4KB
SHA256 65790c18a5ce36a7c7e0a38bb52d89b4b2843fb3d83beaf4f301722de977c4c9
MD5 86c68c5057e0ebcfd13aeedfaa33580d
SHA1 71258fa748c3a9492309ddc1fd6c5b95b16bf241
SHA512 da5d06c94d1ebbde102afdf5612dec92eb406eaee64d2e78dc004c575f2a569b23f6608e2d0cc3ec2f8d3410023fcbbda4b2fdc73f84eed7dba6dbaac55bcdeb
SSDEEP 96:zuCkMNkCE85KfduMhbc8Frh/cInURoDoto+5xgDeBlDHB64vZb03T7elia:zdkMNbL50uMh/ooDUhAexHP0j+
TLSH
T11991B623B978AA3B4DF2D949B9453F0B76A59027D6952FACC9EC0F0C02D7298174AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 1KB
SHA256 bee0f5219dfcf1532342749cacc51771aeec17e609637078d2805099a73b858b
MD5 bcaca2e8d9813b44971b14691a0e8bea
SHA1 a523244502a9c61936ac3f7ae2aa45433eca1527
SHA512 eeff309cd4145a8d22a313a74c4512ae5309b5c77e245515a4d7f19eb0e771ae775d9284b25e6d97143a7150bb240a2f2fac602e47cf704b37126ebb75096406
TLSH
T15B316533E5982F765CE16985B61A7B4B2D20606BD7114E4C91ED4B0C02E759CAD6EC32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5888e2.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State~RFe5888e2.TMP
Size 1KB
SHA256 dde212bcece040a0055a86536b7bc666357c29c7c061905da415103c8521fa9d
MD5 1dc52282a41cf2c0c9fc7ca0270440fe
SHA1 48089510246c5b3b6957c5fc845593eb85e9d34f
SHA512 bd0c2ea7128dba0eedf34cc2a335784038374f322f508aa051ed4e4647c58f91acc7f14407247ac43bc2e69e2f57c84da04e0e78626231ecec74dd3e26835dd1
TLSH
T1D7211233E4D86B765CD15891B2167A8B2D60A16B97104E0CD1DD474D02EB59C9E6EC32
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Trust Protection Lists\1.0.0.34\manifest.fingerprint
Size 66B
SHA256 f96cf59ef5cdf10cdebb367e16c6736d188af934062a8721eb9d60539556a2a9
MD5 0f487a41f1bb9a49dfc5814815dc8b1e
SHA1 39e5af8034fab47bdfbaa2a66455c74185756f0a
SHA512 bbbd1619eead82c70cdc0f72867db2ffdd4a45cb908c81e852eec8c1293bcafb90c554bc3d51afab7fd7e478efc15aa9ad90fe1b56a01d0012ecee493184d36a
TLSH
T1B0A0024A47C1F51A80D137495D771D41C91755E1BEDF91481A929F2266379C0586C454
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl60F9.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsl60F9.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl60F9.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl60F9.tmp\nsis_tauri_utils.dll
Size 30KB
SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
MD5 fc4691e51cdfac476b2fc63bbe951e82
SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
TLSH
T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Modrinth App.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Modrinth App.lnk
Size 1KB
SHA256 0cbbfeceab5cd88d876b389290167634bff2dee31b53c8e7ce7bb5f54d80ccbf
MD5 0e3345dfa435bb93581908ba49ef2975
SHA1 8c1ff3baf610eddf41483cb91beb83279bd60c7c
SHA512 d0d040e151b51443588b6d89748ae2ccdc3f6e304eed15d89286f749ee460c7042d24eddb1eb94ced91cb0cfe5ecd1ea33e15c7aca5d9319a4bc1fa84d9291c6
TLSH
T17A21F004F6812FD1D695D2394AE72721A53DB820F3549B1C4021D28D6C7764B5D4EF6F
MD5 SHA1 SHA512 TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\VCRUNTIME140.dll
Size 117KB
SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
MD5 caf9edded91c1f6c0022b278c16679aa
SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
TLSH
T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\java.dll
Size 143KB
SHA256 944950f43d989198c4295598b4261b7bc5cdb78b4e6b9fe4e2ab2e59e02d5d05
MD5 5cf13acc1c2d57f9a8db3c50cbf0660e
SHA1 37ba9660ed729836e9400f838fa10f67786d1c08
SHA512 a10d56e53279d28de1e756d8d4f30c0afd0d2ba8d5063a50e6bad4ff5cd8e6fdad5254b6e0fb1068640688d1b1ddeb8c1ccc62050c77e230a974aaa78e1aa98c
SSDEEP 3072:vqTpe1UQt4Vmd3XVy4rTFdaLLWgo30FTALXBr5VRcWLw:kpy17LQeGd
TLSH
T1F2E33A0BB30640A6F81AB6B8701A810BD37A7465512C93FE43E58A4F8F6F7317E97791
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\javaw.exe
Size 48KB
SHA256 dadce3cb4b3b2db860b2c19fe3129bc1848a95ad4794d27ff9c10819438d6113
MD5 24a4087a268f027cbdbd806ef6c27726
SHA1 5bf26cdc3a66556fc9f7091f1fccec67a6488ad4
SHA512 c8920c09b6881ed1ce5258733736c853e0b4f7bda3a905836d894e58b463df8b58d0803940b958f9b1a5a20b829deaf974a730938c0d4bb91d8cc8d36261012d
SSDEEP 768:fuP2kM5R2TyJ5R3s8D/bkt5Ruz3Vb3iv5kYi4D5ALNb:GXM5RdJ5R3sozkt5RA3iv5k74s
TLSH
T123237D87AA182C81F42F84B05497792645B4BC032FD172FB7DCAF21E0971391A9276EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\jli.dll
Size 90KB
SHA256 83f06052bfa87f13b73e4fee78390b4b7382b989bba715c284583055b9453edc
MD5 5fad95416aa68411987db2ed5ec16723
SHA1 a661bab1821b267e10e90b22cd9a40d3e1387143
SHA512 1d189c1e5b87785acd5225fa5b74e1d52fd372125f2bbe81426cf9a4c9a9eced0f214a5937eb2d7a6c4593002f454ad7aa3beb9d11f55c1b32431e2792c57db1
SSDEEP 1536:w2QpzmTObzmlXq1cpXhg2dcq4IOownqeqthshR6n7s:pQuObzea1cpX3dcJowndqchUnw
TLSH
T1EB938D9653A010F1DE7784B9D6A0950BD3F1B456275183CF136C88EA0FA37613E2DBE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\msvcp140.dll
Size 561KB
SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
MD5 72f3d84384e888bf0d38852eb863026b
SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
TLSH
T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\server\jvm.dll
Size 12.1MB
SHA256 9e93fe5309470bd10152c21e581576aa540717dc848065e4523503ae76583108
MD5 102d00051574b70de45445e09fd758f2
SHA1 cc45a16c199d87967dfd4d02a9c2197699054c78
SHA512 6d5294a86edac30c5e446e10c06bcea79c5fc00bec4ef97046fd9269b8c9d76ccd224b827f609eef702ebd2f077d404f8af026a64d7a8ef09d240fd27d0f833d
SSDEEP 393216:Uyn1KliztW6QR/H70RHp8z+IicUduHxnoYu4R22st+aMSdZyi9SanWDd2AxhOMEN:UjW
TLSH
T15ED68D4AABB480D4C82BE178CA5B5907D3F2B0649374D7CB11B48649AF5BBF5263E730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\bin\vcruntime140_1.dll
Size 48KB
SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
MD5 2bd576cbc5cb712935eb1b10e4d312f5
SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
TLSH
T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\legal\java.desktop\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\legal\java.desktop\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\legal\java.desktop\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\java_versions\zulu17.66.19-ca-jre17.0.19-win_x64\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

forge-installer-extracts-1.20.1-47.4.20-client.lzma

Path C:\Users\Admin\AppData\Roaming\ModrinthApp\meta\libraries\com\modrinth\daedalus\forge-installer-extracts\1.20.1-47.4.20\forge-installer-extracts-1.20.1-47.4.20-client.lzma
Size 2.6MB
SHA256 0d8b0e32e24fb27f91c15315b8167542b270f41f17bdfc609c0b90f4c3eb3c55
MD5 f4cda2cacdb837f3519ae302f0fff96d
SHA1 d40e2ad0e68dd890f2398535e68ac4b0abee8a44
SHA512 237b1a3bc4f980a7eae3e304e1b847caeeefc22df080519cd0d493af1ab675110cad47e4e068f62d6802efeffd3c6ee4ed7139efea83dd3b5fc674e46f74ac84
SSDEEP 49152:olSlgtZR8yyyud/w0QAvCBLQGuf8qyLn9E2v4aLd1FhmaGM+53HxyWptYwaQa:3WZRZA8QMbbhmsm3RyWpty
TLSH
T101D533E1C67354750486C2C14C082F27582F7EBF994CDF9D95C4EA9CA2A3512FBAF928
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Modrinth App_0.13.10_x64-setup.exe

Path C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe
Size 13.5MB
SHA256 bcb4b59752b6a67cd5b5b9b61639aae974f55a2084a7d44c5ecef976d42e09b7
MD5 16c2dedf77eb141c6b97fb763e7d318f
SHA1 b7f4e08d1cdcf174d7b86233595cc1b710ca2fc1
SHA512 6a72239d9ec6c930346354708462a7e077b1b4726fac273ee5dfb9084b2e1fada4b21eef1be4df3b87bed69c156e600e705b1f0a2eedfecb9035d4d97f6fcf6a
SSDEEP 393216:0RWjP5Q1RmrZCWSIGyOUH96hVVV9PGvhzF:0RWjKaSLyhIVVV9uvlF
TLSH
T122E6332C52885FF3EE4E99319D4A68AFB56A415A4B7DAB83437233F64CE8104D0153FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Modrinth App_0.13.10_x64-setup.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\Modrinth App_0.13.10_x64-setup.exe:Zone.Identifier
Size 168B
SHA256 568d4ca0eaf315c5d6fc9dabc6f288989d9c243e2177870150c44830cca14c1c
MD5 7344b58387da8176c718fee40a924406
SHA1 303bc5d2c7f1cca7a58fe46944c8e129d08e21f5
SHA512 0a8f4debaedc44cb1e4cd6f7dbaf6ff0a00ca07997e22db4aafce53e351d43e1aede99ccc88e62b77c08524ebc94265e3ad3530e25879146d1e540c9cfcef2ba
TLSH
T12AC08C876835C220077862E04BADEA1CA9A713AD8CF680F49CC080436A4442AC8A012A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1164380071\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1278637600\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1459547013\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_146519263\edge_checkout_page_validator.js
Size 1009KB
SHA256 9960614ae3d67b2a2b2b1bb1fdd6a427f4d103835e50e45f2e2cf3b1c540fa44
MD5 f4cf71ceaf44655238e8f6e445479361
SHA1 4d184496decd453261423d11a681bb925d1c466f
SHA512 c6af515da4c1eaa6689c829be6a99602f148090989c7f8b5aa5cd0620ca73d8b217ba266b188aa72bd219f863c86fb00d6e48758278346f5959f2c5169c1e382
SSDEEP 24576:cs4ymRAbsvvG3kJ6ARjiQixwaErn9VUfWEo0EQ1Xp8C9T0dK/vzHEiJsfaG81E9/:cs4ymRAgvvG3kJ6ARjiQixwaErn9VUfq
TLSH
T15F252B84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C68CADA0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_146519263\manifest.json
Size 146B
SHA256 1d4f529025d274699f815657573b828ae880ae0d44ee0b0ce66a6a273f2bddff
MD5 94e3a47681712a13578f122b3158c015
SHA1 376442061baa7018ee9e784d991798fc9f302b31
SHA512 6974139805e18959c2ad2a71727705f1c5268ee598b8864833732e042beffe2416db033180b8d01bf8bb3b2b901d4ccbb090dd677ecded939aa3d07797ba05b2
TLSH
T12FC09B73C931AC71157507D449F59745EB74574BF511B1563730018D4B3D57550606D1
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1511603148\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1511603148\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1731187508\LICENSE
Size 499B
SHA256 55064d7d8fecdd90ba36cebaff34f05583c183b34686b17b40b974442fc07523
MD5 d8a9bfce875f2081d41dbb18dc618b14
SHA1 5bc4e44bd455d8838fc382b5a5525aff1a117e4b
SHA512 643b0befb7244283f08188fafb2e7f96cdf82353d06ca5c0b25ad0157eabe786809677c876faf3b12888a8c3ce38e97c8090505b06c514370a16c955db3fd8ee
TLSH
T14DF09E7EBA224772459603C7011540D47B1707FAF25422D1B358C1E4276E27982FF184
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1731187508\_metadata\verified_contents.json
Size 1KB
SHA256 823f4c1b200082df810d789bef9f02f04dcea5019b5595139d2fe8c02bc9556e
MD5 f5b59f173b8bbf9a9876a51a7498c5c0
SHA1 d2da77f47a834a5c51c106e450ad88c290443861
SHA512 6566e6671b4737e8763e47d43edbb8cd4ab028a4b0ad3b57f48c317df8a04c3da8418180010fb2f926c742fd0acf1cffda25714bb1d2de5e5ca188f22fce6827
TLSH
T12D31B592C88032197528933128A836491F0E11FAA6BB5315A4C9C94FE6FD209CBD3D4F
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1731187508\_platform_specific\win_x64\widevinecdm.dll
Size 18.9MB
SHA256 bf7d46b38690e50462fecbc14530cd903d1486fa493b49d9e71d6cc44ac25a4b
MD5 ed635abb5a117c0792998ffdea157fc1
SHA1 4846b94261aa459b0c66390b44c43089112b9925
SHA512 0766c45e967ecd4b79b301212860d5fee16a6db263d862d6466ddb60efea975595872ff202b54cf84645a5588a7d513e35f7c5465b3fda4425af8823626dd86b
SSDEEP 393216:ID9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C57:bGD+l8VmuZ/S24/junfSFwUqYg4s
TLSH
T16A17E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1731187508\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 3d01ea299dbfa7dd3dcd5959aa70234e18e825136c33c9079b1e50db4c8a89fb
MD5 b59c2035b47784521c779a6420c7af2d
SHA1 32ed9377e3c0c7633b6431e0e873c4871e55e127
SHA512 b235efb3df0114ac4929871b2cdd879f419a4a874508fac586a69417eb7de3367ec6c162d879c51b50758004c300c30888abbcd73a59fc339b72f4dfb024bba0
TLSH
T1DD210BF4F02454CD5D2085520834DD1BDE715AD03E9589BB009BC16D19EE3D21F8A53C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_1923306752\manifest.json
Size 118B
SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
MD5 4687681b420a5c580fe40870ed6af32c
SHA1 1aa40f91b2ed8c5ea38cb30b81c87a9ac7e21e6f
SHA512 5ced299552785894df9aa86f0cb5d9c057cf73753f81112ef91a8b8dbc6147913e39c27b6327613bc41c447ed230fbbc74881db79853d38e365685132e618762
TLSH
T170B092B00C1AA43B22C09320ECA0668683F84218E8421B1A098036481F882B880362B2
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_2049233552\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_353981722\manifest.json
Size 52B
SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
MD5 50ba36034cb8b97ce52eb941d76e9103
SHA1 a8757a3700f2af777ce5efc382010d2619f51491
SHA512 001110c3e45514a09cf6f60ca14855524e83ac15cf56776cf3005e016464dc6584b107c63842328a7c1738cc7f2154d8689f84d913b9b8199367699c3f9085aa
TLSH
T1FC900260082491171AC10E506570F8859391661A95851D1D0445154802A646CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

Filtering Rules-AA

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Filtering Rules-AA
Size 2.3MB
SHA256 95beb1f39b4cd5b29f5ebaced4a33753fb0bb876f078ed3de041f12be16cec5c
MD5 b91a6cf79bedefedcb5603d3477cc3ed
SHA1 b3512a426a6a613f8cdf7f9ae3a0d02b700d1843
SHA512 9d85945f7f963fd9277adc20a0af459e8bb5904ef7038584e510ebd041b3029bf24ecae2047b24ecfa853154beef7e2bc5bd34ff8d90aeda000fbcdde741341d
SSDEEP 12288:DUoPNPlfiCBGkqNEWymqMD2N3FRgVfFRg3oFRgHsFRg/sFRg7dFRgImFRgJ1FRgs:JNhiSGkqdT5+9
TLSH
T189B51BF69947509145B9631938ADB2C82B14A28147ECCBF2EBB4C4AA2791DC737C05FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules-CA

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Filtering Rules-CA
Size 11KB
SHA256 65aa171487dca70aad69973d0459c6a4b0882fcc6223bdfb53cd9ab711c5b125
MD5 40b3ba01a09be340fdf879f97b31c867
SHA1 b6ac58d1653c1b76e0e9898b17cfea3e6b56de94
SHA512 97f82f162588a761a13a2efd38d2c9518954400c7898cdd12923ce26e90818d94310b4a9f2a2cb2f55f5101c9a2e177dc1b14de8c9486eafc910271e2991dea9
SSDEEP 96:MKSlCviF3P2DoTc+cTKSlCviF3P2Do3lTKSlCviF3P2DoT:MaviVucryaviVualTaviVuC
TLSH
T17C3275333E488D6792A4C1A0DC92752C9E3087D98C9CBEC31235B9776BD1E6A508B5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-DE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-DE
Size 305KB
SHA256 367ad4a5699a69499d13e8bf9ed5e8bab3573e3731ff8127178e539735ba46a8
MD5 fa08e85d713ad46803e924d443e4bf7e
SHA1 bbcce20f5ce73be4b34cf5c43d6f71bb4ae2c5ff
SHA512 884314e04cab57c9907f90525a4fea7710fdff5e47db4500c03d4dc6c5491a3f4df4868620a2a1817444ee75bfc913e79f9a414e3a68108deb7abab700ae9f85
SSDEEP 6144:7FjHKfRBie5M0SPtVRY7od0x6qNgKWIescUHVTl1dKcJEtmmt4l843NWKOb2P5+S:5T41N/IuscpL1Kxa
TLSH
T10264C693296AFAB12A320E7D600A1C4C5322F111C2C7DDD9F775C98DD1E468BBAC16F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ES

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-ES
Size 137KB
SHA256 55e005c8aea4180093fcb56f4ddeb9fc763892d8cf1fcc840f612a7531b7ed18
MD5 6e8f660d075254a08948dc3517304256
SHA1 bc8abaa82d6d555ee9482c568a1d661453fbc956
SHA512 cc3484fe628e4242eeec2ce969c51e817ec9ab3feecec8d8097f43a319c9dc226771eefe63316d8ec2ad895f23ed4603c4836faa49369db785580455ecf21f37
SSDEEP 3072:NiZ3EhHST197h/6Jl06bBeS1G56asSnGpFrUboki9a8jRU+Zw1:/RxbR1EnYpLv/Vy
TLSH
T166D30D55AADCA8B55A73102C64D9254C911772D082CECDE4FB6686CECAE05CF3BA03FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-FR

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-FR
Size 528KB
SHA256 56e80041432156be4f08bac11e3494f2f06f65b61a60b7dcb61d15debb7b318c
MD5 6804859c589fa0ce46529c3a53b882d6
SHA1 70ffd62bb826e29500d36bbdd7c8d9c6895e2d1d
SHA512 3a659c284f55d203fded7f2754673e55a43d2c131b4790fcfe374af138158a690b5a330d4e720348c03aabb561b0aee7d818dcc111698c05ecd99c239d07735c
SSDEEP 6144:zfi0kH6u1I6c2Qiw934vv8gxK2SzX6rDVu9cBwZp0CiEksn7p0heBB6pHIgnb3hc:aT43+R5I7p0ABaIgne
TLSH
T114B45D136619F9F11FB31E3D640B5C088235B2A183E3EDD5EA67C14DD4E468FB9A02B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-IT

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-IT
Size 216KB
SHA256 e1552312fc16e0f279e72f7eb4189a47e0beb36733220b0ef605f66defcc5fa7
MD5 268f6a3c0990d434175268cf09cfa6ad
SHA1 464e10c57c536e6bb55a326a48469246a9241505
SHA512 5154048a794227c45b950ec2d2ca378f9e7a9542b9fc79c1fef1f1615e97a263168927d883967b06f8b52227a47e3ac75ac7061b25400ebaa63e4536a368d50a
SSDEEP 6144:1quRAGty7QiWYIeezuu2CGiXTyRl+XPWRq14T/KfY:HRZtQl+XPWRS4T/5
TLSH
T16524E9176A54EDBE4E22156CA09F5E0C7225758182C7CED4F3D5C08DE5F827A2BA03EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-NL

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-NL
Size 79KB
SHA256 935465fc40adbb4ae89ba37542ed37609014666c67fdf5115927809d69144b41
MD5 65126d1e76de4f0872e6cfa96609beba
SHA1 95268d3b2134894040afd0530d062a3b836f63c7
SHA512 0c6dd17cf622ad1a1a4ddc43fdc6f36567a98309e145e16d95edf38e9b21905867b28865bee591b52eecaa371138ac436eee6d18ff8d78f4c8f7031ba4e7ad84
SSDEEP 1536:x3ACbKFpRTfKGy7Dpj+u9huKCe/MELfmoRyQpnokj:x3ACbYpxfKGy7Dpj++hu8/L7moRyQpnv
TLSH
T14A83D70AAD68F8754A331D2FA4990D1C9625B600C7CAFDC4E725908EC9F52DF2AD07ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-RU

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-RU
Size 1.2MB
SHA256 f8abf856660805e271d9d2033accf4f8cc43b19b7662fc2b96f56739229a90fe
MD5 e946014ae78f059f0698731a745a3f00
SHA1 afeb8dc2d86d2763b69f97717e454a7c6b8a267a
SHA512 3c699d3205c3a000c13d20411a0e958f2107f62d813591652cfc573f9a29647badfb1703e499a8896644f1485ecc19cdcaca0c6bd5ec1e5e328339c95784cfa3
SSDEEP 12288:4o9g8Q9u1Xku8Uc24wpDs2zGFtyKnVgLxB7rsvAyLuQCdj9/CwYJWj0Ek0ozM/vQ:4Oe9u1Xn1KFtyKnKq1CvH0Ra3Rnkd
TLSH
T1F44560137254F9F04F734E7E549A9C089275B1A083D7EDC5CA29C19C98F2A9FFA402B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ZH

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\Part-ZH
Size 686KB
SHA256 9645edd48b978354345b657bacb3f30be1f450300856a82ba4d5dbf1236c7c9e
MD5 3e8cbee42dcb97db0df88cb96643e3fc
SHA1 94cd9e2bc876e04bfd2f311cdc160b6ae1d3c9f3
SHA512 319c69fcba623a0fea9ba4e1dcfabe3e9bd47f31dce7146e317835331217730fb61d0449abe7e66b1bc6f06a50c12269f7f09dbb633c85b4fd8dcc7b21c95304
SSDEEP 12288:g3gaBN1zyZzxT04duSeYXzhW+svzgAfk+XTAdXUd84nT4x09/xSE8Y:CgaBN1zyZzxT0N9YVW+sv8Afk+XTAdXy
TLSH
T114E491132168FCF51EB21E7D284B6D48813A76A047E3ECC6D62BD54ED6F025F39A01B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock_snippet.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\adblock_snippet.js
Size 2KB
SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
MD5 f5c93c471485f4b9ab45260518c30267
SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
TLSH
T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5064_876112410\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1090512628\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1131521659\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1250803733\manifest.fingerprint
Size 66B
SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
MD5 c28ffa45708f10e3a35143ed2708782f
SHA1 84a03f2615333c9311dbf79d6f58f56b5c009163
SHA512 beac0eacff45a152eb2a50f4d72db2933b8f8ba97e6f0a9f6811abe866fef5c7c83068151915dbdffaccaee5d0cd335d182671f44dbab6da2222266ff8a28ff0
TLSH
T169A022F3F000F02030022F8A80203C00C8A23BA80C8020808000BEE0200322A3A0C820
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1250803733\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1472846501\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1472846501\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1519162499\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_1925948066\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_2009577957\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_706485139\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_706485139\_metadata\verified_contents.json
Size 1KB
SHA256 c50e8b66b9c681cbc2fa16cb2d8fd7cc934df1a7863dcf4f0ebedf6a5b78638d
MD5 449dd45bb3743ba9d74d22e229d240b9
SHA1 5416597a6279971cb80324d89a19eaf15c8ed112
SHA512 fedd551f65c62f157240c1dc360efe0d5b9793a34ed71291d6ea4c65a7f0cda6c32f0f2608ce4bcbc61591acdae76d9d4a610337d9d35eadd10f80bd43544e4d
TLSH
T16031F956010CE1DA3A8F13B90FFEEE12D35F10D2A2E525316AC6571EE0DA746D2315A1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5872_947105726\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

memory/236-289-0x0000027B6D550000-0x0000027B6D5FF000-memory.dmp

Download

memory/496-145-0x000001E68C120000-0x000001E68C1CF000-memory.dmp

Download

memory/1000-893-0x000001F538130000-0x000001F5381DF000-memory.dmp

Download

memory/1548-574-0x00000000009C0000-0x0000000000C4B000-memory.dmp

Download

memory/2108-35-0x00000273AF530000-0x00000273AF5DF000-memory.dmp

Download

memory/3880-77-0x000002108B6E0000-0x000002108B78F000-memory.dmp

Download

memory/4256-742-0x00007FFF61320000-0x00007FFF61321000-memory.dmp

Download

memory/4456-960-0x0000028618AB0000-0x0000028618B5F000-memory.dmp

Download

memory/5276-637-0x00007FFF61320000-0x00007FFF61321000-memory.dmp

Download

memory/5276-959-0x0000023E822A0000-0x0000023E822C9000-memory.dmp

Download

memory/5872-921-0x000002B749000000-0x000002B7490AF000-memory.dmp

Download

memory/6768-5998-0x000002CC7FF80000-0x000002CC7FF8C000-memory.dmp

Download

memory/6896-5973-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5972-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5971-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5974-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5962-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5964-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5963-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5970-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5969-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download

memory/6896-5968-0x00000233B6C70000-0x00000233B6C71000-memory.dmp

Download