Analysis

  • max time kernel
    900s
  • max time network
    422s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/07/2026, 04:29

General

  • Target
    Arcbound.exe
  • Size 212.7MB
  • Sample260708-e4js2aay6v
  • SHA256 d2cf5f957b8de2f707b39cca5fbf91773df92720e8e43d69336f57d5cb892488
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Run Powershell to get system information.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 2 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Loads dropped DLL 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Arcbound.exe
    "C:\Users\Admin\AppData\Local\Temp\Arcbound.exe"
    1⤵
    • Checks computer location settings
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1852
    • C:\Users\Admin\AppData\Local\Temp\Arcbound.exe
      "C:\Users\Admin\AppData\Local\Temp\Arcbound.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\arcbound-launcher" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1712,i,5022732650550732120,1408510242157477464,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,16173036411082530507,16773189258345592713,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1708 /prefetch:2
      2⤵
        PID:4952
      • C:\Users\Admin\AppData\Local\Temp\Arcbound.exe
        "C:\Users\Admin\AppData\Local\Temp\Arcbound.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\arcbound-launcher" --field-trial-handle=1712,i,5022732650550732120,1408510242157477464,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,16173036411082530507,16773189258345592713,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1804 /prefetch:3
        2⤵
          PID:4160
        • C:\Users\Admin\AppData\Local\Temp\Arcbound.exe
          "C:\Users\Admin\AppData\Local\Temp\Arcbound.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\arcbound-launcher" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1712,i,5022732650550732120,1408510242157477464,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,16173036411082530507,16773189258345592713,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2868 /prefetch:1
          2⤵
          • Checks computer location settings
          PID:5012
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "set "PSModulePath=" & chcp 65001 >NUL & powershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\temp-Arcbound-Setup-1.1.9.exe' | ConvertTo-Json -Compress""
          2⤵
          • Suspicious use of WriteProcessMemory
          PID:4512
          • C:\Windows\system32\chcp.com
            chcp 65001
            3⤵
              PID:4656
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              powershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature -LiteralPath 'C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\temp-Arcbound-Setup-1.1.9.exe' | ConvertTo-Json -Compress"
              3⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:2292
          • C:\Users\Admin\AppData\Local\Temp\Arcbound.exe
            "C:\Users\Admin\AppData\Local\Temp\Arcbound.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\arcbound-launcher" --field-trial-handle=1712,i,5022732650550732120,1408510242157477464,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,16173036411082530507,16773189258345592713,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3236 /prefetch:8
            2⤵
              PID:1236
            • C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\Arcbound-Setup-1.1.9.exe
              C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\Arcbound-Setup-1.1.9.exe --updated --force-run
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:5060
            • C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\Arcbound-Setup-1.1.9.exe
              C:\Users\Admin\AppData\Local\arcbound-launcher-updater\pending\Arcbound-Setup-1.1.9.exe --updated /S
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of WriteProcessMemory
              PID:4124
              • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
                3⤵
                • Hide Artifacts: Ignore Process Interrupts
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                PID:4604
              • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                PID:3776
              • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\arcbound-launcher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                PID:4132

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                powershell.exe.log

                • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
                • Size 2KB
                • SHA256 c03c91dd74498cc33a32d616fb3050ad954ed4f57e671e2e9651aedb7b128ff3
                • MD5 SHA1 SHA512 TLSH

                StartupProfileData-NonInteractive

                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                • Size 1KB
                • SHA256 74fe42ee893585f05c6d902d82942b1288bf30c2deb226e11c46965446aebf58
                • MD5 SHA1 SHA512 TLSH

                StartupProfileData-NonInteractive

                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                • Size 16KB
                • SHA256 70348ca9aca27d4e4573d51b5fcbf22c51f3a24fa68f101f4ac8b3b8d12ce1ca
                • MD5 SHA1 SHA512 SSDEEP TLSH

                StartupProfileData-NonInteractive

                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                • Size 16KB
                • SHA256 8094c8709bb573bc8ef1758001d6f50dc670bcdb0e280cdb9dc5d0a6c040d3f6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                21bed1b8-418e-4f1c-b326-fc1f9d60b81e.tmp.ico

                • Path C:\Users\Admin\AppData\Local\Temp\21bed1b8-418e-4f1c-b326-fc1f9d60b81e.tmp.ico
                • Size 52KB
                • SHA256 20e3f996eb9a5c792f824892c842de27183e480ccd5c031bd65bf2b2cb79917f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                __PSScriptPolicyTest_minvuhjk.s05.ps1

                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_minvuhjk.s05.ps1
                • Size 60B
                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                • MD5 SHA1 SHA512 TLSH

                LICENSE.electron.txt

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\LICENSE.electron.txt
                • Size 1KB
                • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                • MD5 SHA1 SHA512 TLSH

                LICENSES.chromium.html

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\LICENSES.chromium.html
                • Size 18.6MB
                • SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
                • MD5 SHA1 SHA512 SSDEEP TLSH

                chrome_100_percent.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\chrome_100_percent.pak
                • Size 113KB
                • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
                • MD5 SHA1 SHA512 SSDEEP TLSH

                chrome_200_percent.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\chrome_200_percent.pak
                • Size 183KB
                • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
                • MD5 SHA1 SHA512 SSDEEP TLSH

                d3dcompiler_47.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\d3dcompiler_47.dll
                • Size 4.5MB
                • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dxcompiler.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\dxcompiler.dll
                • Size 24.5MB
                • SHA256 7a743a2af5b4cb59cec8c38e7fb544b87fb6547f215491634a577a03a4e83bd8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dxil.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\dxil.dll
                • Size 1.4MB
                • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\ffmpeg.dll
                • Size 3.0MB
                • SHA256 e7aec5ca86d80540ea30c5acdf0a13acb34d1d9dd0f9e78b36fb21776b711a1e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                icudtl.dat

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\icudtl.dat
                • Size 10.3MB
                • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libEGL.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\libEGL.dll
                • Size 510KB
                • SHA256 6edaea2de8f6bca40dc4cbb60a55be5ae93c2454a66474c3706953b5d1d73e26
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libGLESv2.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\libGLESv2.dll
                • Size 7.6MB
                • SHA256 49c2a50a3a43c10e258eee0d58e81be9d207ebeae206d603314f1ebc36d7567f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                af.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\af.pak
                • Size 595KB
                • SHA256 973c21a2ccc0375a016b1ba0028cc3fb2cfa4e9ab82a52217fdff342ba43fbe5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                am.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\am.pak
                • Size 966KB
                • SHA256 ab591598cac20048c2b7a2d73eb4d1ca9054f9dda153eb51855935e969c7f54d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ar.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ar.pak
                • Size 1.0MB
                • SHA256 dacb642f184b6aa20d062eae55b49101c507d7378d60e53a014a2631c0bb20bd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bg.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\bg.pak
                • Size 1.1MB
                • SHA256 e854a940ef467662ee733bcf5c5aac0f5aef8d006200af173b4f840ab9f6d3ff
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bn.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\bn.pak
                • Size 1.4MB
                • SHA256 2465ef35bd984ed78c1a0ffff00713facada7ca0d419104716eafb149187d9f8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ca.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ca.pak
                • Size 670KB
                • SHA256 7f9a90bc5821548acd42546604c18d525b3b00f87094739ab95b5683d08aa79c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                cs.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\cs.pak
                • Size 696KB
                • SHA256 94c119305964dd203e4335ef1676f373d56fad9e27ae6e11987d790b2b3f5a41
                • MD5 SHA1 SHA512 SSDEEP TLSH

                da.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\da.pak
                • Size 626KB
                • SHA256 f097260d271900ebb3a6a68e42e49005d3441026904462c3b306c87e21f2d640
                • MD5 SHA1 SHA512 SSDEEP TLSH

                de.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\de.pak
                • Size 671KB
                • SHA256 1eec5b0a6d7a2888127c1a490d40497e2913460b96c4334815e278bc882802e9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                el.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\el.pak
                • Size 1.2MB
                • SHA256 f9715c939e27d6da75c89866aac6de5fe9f25baef524d85db2fd812750cc43b1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                en-GB.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\en-GB.pak
                • Size 542KB
                • SHA256 acefd35ede3e9dde3c91880bba726546cfb8e543712b7c7167b53867a0f155e7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                en-US.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\en-US.pak
                • Size 548KB
                • SHA256 a02518efe75c630a1b5419af5ffdb1b16636b939139bccd7710e37f36ad9d55c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es-419.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\es-419.pak
                • Size 661KB
                • SHA256 818f06880dc921662f0685d8f79d85f76ab7b5490deb7497208f307ba9c6d42e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\es.pak
                • Size 658KB
                • SHA256 5228d6bbac5909cf285aceeac65c042462c6da99b957f03f5c4070763bcba583
                • MD5 SHA1 SHA512 SSDEEP TLSH

                et.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\et.pak
                • Size 601KB
                • SHA256 c7364bca48cec7994e40a3169d465d6af04a66becbadccff24c9fa74d9410cbb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fa.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\fa.pak
                • Size 995KB
                • SHA256 d840449c2aa71835bfaa739156c5ad00c4d0709557e129e4c87ae8ca38c4d960
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\fi.pak
                • Size 612KB
                • SHA256 6b09e983a58aca1a3b4bdfe35f4c8d37a568feda3ed680e14b24395ba04d880c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fil.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\fil.pak
                • Size 694KB
                • SHA256 c5335e3b4468ebafd55fdbe77553a3838bfb6a1fd5a5ed0396598a0e96e7792d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\fr.pak
                • Size 716KB
                • SHA256 06acba3cbd3f4e7cca4fa2103c5d71e8f6de3a7530717b0c72b454bd670be503
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gu.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\gu.pak
                • Size 1.4MB
                • SHA256 897b9ed176073cd0e8a39004158a2ad9877bc69f79cf260e029937fc9c556f95
                • MD5 SHA1 SHA512 SSDEEP TLSH

                he.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\he.pak
                • Size 871KB
                • SHA256 b777e7ede2e0ba88186a1a6dcacbcc918e7983c2027922f92994f937a1f0327e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\hi.pak
                • Size 1.5MB
                • SHA256 966845384bd7213dd03e87a80655cdcb2bb02d180e778fa0583e86edcdba73cc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\hr.pak
                • Size 670KB
                • SHA256 30d7259b46052fa6735cab8a6d4cba682df021e68998a4b3723248a5b806eacd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hu.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\hu.pak
                • Size 717KB
                • SHA256 3bf2106670f2a461ec3454d790bf94010079e4e683d24aabd4a19e8d89e333c9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                id.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\id.pak
                • Size 592KB
                • SHA256 4d003b8e85f4daea7c28c4f6854d46a62b32abe9973e6df764e2882b4472ea64
                • MD5 SHA1 SHA512 SSDEEP TLSH

                it.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\it.pak
                • Size 648KB
                • SHA256 3e241f9341c9593ecbe3a2a74a5249e8d737962741b51fe60143e3529470d716
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ja.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ja.pak
                • Size 791KB
                • SHA256 03427863b47fcde8164855a13d01f09cfcf27bf9ea59d6abf74f2f7b255fb1ef
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kn.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\kn.pak
                • Size 1.6MB
                • SHA256 1dc837117f2b3dc69fc36c1c199addc999d5fb5a131072680796accd25e33b8c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ko.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ko.pak
                • Size 671KB
                • SHA256 e43762e4f3b00819c2c5570ed292a6d42e53bbb00220c3f76a6aa0d502a76060
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lt.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\lt.pak
                • Size 729KB
                • SHA256 1cf37f7eafa0612186eebb76406767518f9b5dba12872bc3170b9a309c5050cd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lv.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\lv.pak
                • Size 726KB
                • SHA256 01913d9951959803c419816189ba5517568b1f36f70c539549713c4579105be9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ml.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ml.pak
                • Size 1.6MB
                • SHA256 98c8ecff32021c532167cbd7e60b714c6dd8e240a3527af141da9d3916ea7d4f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\mr.pak
                • Size 1.3MB
                • SHA256 962928ac0c648b426dbd5dc930528900935acca4b336be6cf3fd911e99ef400f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ms.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ms.pak
                • Size 624KB
                • SHA256 7b5ecc027a33e3123596cacfe6d4a8b33c8185c6d90d65aceb686aaaa234c5c0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\nb.pak
                • Size 598KB
                • SHA256 c4bfbb6dfa8c2f38caa27f77b58a5a373792284032d998f48469b2d8f050b084
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\nl.pak
                • Size 623KB
                • SHA256 1f9f8fdf67a93b571823fcdbf4f6c1132663a92bf199fcd8b3554a1404138182
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\pl.pak
                • Size 696KB
                • SHA256 1c328e8286098d6758aae4562ad0465094bf38477035475ea3b7ce9729c59518
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-BR.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\pt-BR.pak
                • Size 652KB
                • SHA256 76af448316964d70f5ca6ea2d3d10dfdda055521d981c0342c8eb2df1aace27d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-PT.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\pt-PT.pak
                • Size 656KB
                • SHA256 8ecd368ebcf0c4cbd3decb1709c1e6cda9ebd75dc4c3d0869b86dcf959c15565
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ro.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ro.pak
                • Size 681KB
                • SHA256 bb8cb9b4b9708cba17c6a1b00d448c500ecb1658019fd2451868603c68251e92
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ru.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ru.pak
                • Size 1.1MB
                • SHA256 4f7ef4e041932011eabc4d2dc8f8544106f57ee62c023e6b6a9a3a3ac23a7cc2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sk.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\sk.pak
                • Size 708KB
                • SHA256 9494cb93b7dd65cef73072d315c7c031005a3783594fdf43fe96d9e531f5cda7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\sl.pak
                • Size 678KB
                • SHA256 b50824ca2479dc29b404a8e2c252a9a791f444ba10b839d09b684b52cbb7b4b4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\sr.pak
                • Size 1.0MB
                • SHA256 02224e36d8d12e79c22e573425b5e7b2505e1f68d8be4cebada710a9c0ebdb00
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sv.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\sv.pak
                • Size 605KB
                • SHA256 ba098c7e48f588677686e8c4353432ef185ed4d659bd43d0b1bc76029b36aa30
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sw.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\sw.pak
                • Size 640KB
                • SHA256 c806d266dacc573c6f2a852bbba1cf1980063f08a803e6a0f5783c1418b4c16d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ta.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ta.pak
                • Size 1.6MB
                • SHA256 cc82344df7ec4fefc02fc36f5d1af7286b27f4c267477bffbb0ac4f4fefab901
                • MD5 SHA1 SHA512 SSDEEP TLSH

                te.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\te.pak
                • Size 1.5MB
                • SHA256 f354b638c25843ec70a625d98066d1e291d6567830a327a308262f7872739f43
                • MD5 SHA1 SHA512 SSDEEP TLSH

                th.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\th.pak
                • Size 1.3MB
                • SHA256 72495fa1c87e6009499c3c478eb8ff1dc295e4fa8e1e97c915c4334cd48df45f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\tr.pak
                • Size 651KB
                • SHA256 d42ef3d1bfd531ef93d1e30e34d0c9a9fad37d08aa26fb61930d67ef31e5a471
                • MD5 SHA1 SHA512 SSDEEP TLSH

                uk.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\uk.pak
                • Size 1.1MB
                • SHA256 2b3e02603e4d06b513b59db0d262971c8ec9e7f85233c6862f52e72bbc4e0afc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ur.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\ur.pak
                • Size 981KB
                • SHA256 0f5565df4484d9c0ed2f3033156e876aa8ff25406fb5a628ba12dc2588d5f7b9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\vi.pak
                • Size 774KB
                • SHA256 b5ae891cb2c1b98e01b7b819946849b7f1530b2991584b74045766f566ab739a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                zh-CN.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\zh-CN.pak
                • Size 554KB
                • SHA256 d9ba93569044c34fdc3aea0a0be892e0b6eab8a71e3008bc854924bd5efcd19a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                zh-TW.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\locales\zh-TW.pak
                • Size 547KB
                • SHA256 217b6776de0fc342d2ba3259aef9c5a6d9747f20942791be4e5fa16cb412b970
                • MD5 SHA1 SHA512 SSDEEP TLSH

                resources.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\resources.pak
                • Size 6.4MB
                • SHA256 741b7aebbec65ed7af754530e77b45ea4274e8f7c012c4396de789563a1183a5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                app-update.yml

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\resources\app-update.yml
                • Size 157B
                • SHA256 7664ce2ac1fe3ef97e168eecaa35feca2eeccda110ae2456cd7874c8e724547b
                • MD5 SHA1 SHA512 TLSH

                app.asar

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\resources\app.asar
                • Size 7.9MB
                • SHA256 e6dc50236f3530b26bcf9e92f0e61b6b9a20c0c850af863e6a6dfa058f4f7be7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                elevate.exe

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\resources\elevate.exe
                • Size 120KB
                • SHA256 3048d6d229b3461aed7d7549d5a62bf249b3c49fd5487f4d46ccbbbbf6817a24
                • MD5 SHA1 SHA512 SSDEEP TLSH

                snapshot_blob.bin

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\snapshot_blob.bin
                • Size 333KB
                • SHA256 ed719d078977be84118c45420df70a0cc46dd32ae326559c9e6d9a909aeda099
                • MD5 SHA1 SHA512 SSDEEP TLSH

                v8_context_snapshot.bin

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\v8_context_snapshot.bin
                • Size 698KB
                • SHA256 c321440b5b893fabf4cb983c46c325e6b1959536b7c98a3f1f0200df8ad61a33
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vk_swiftshader.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\vk_swiftshader.dll
                • Size 5.4MB
                • SHA256 d50b5ed41356b540e1f1d3525837effd4045220cb4efbfc2b913fd7d7edd0999
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vk_swiftshader_icd.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\vk_swiftshader_icd.json
                • Size 106B
                • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                • MD5 SHA1 SHA512 TLSH

                vulkan-1.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\7z-out\vulkan-1.dll
                • Size 932KB
                • SHA256 35b0d20574fd7f4c8b959e4789cd75950a37cc6106119f89210d086e7f15b47e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                StdUtils.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\StdUtils.dll
                • Size 100KB
                • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                System.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\System.dll
                • Size 12KB
                • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                • MD5 SHA1 SHA512 SSDEEP TLSH

                WinShell.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\WinShell.dll
                • Size 3KB
                • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                • MD5 SHA1 SHA512 TLSH

                nsExec.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\nsExec.dll
                • Size 6KB
                • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nsis7z.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsx5664.tmp\nsis7z.dll
                • Size 424KB
                • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                • MD5 SHA1 SHA512 SSDEEP TLSH

                AbsceneOfShark-forge-1.20.1-1.0.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\AbsceneOfShark-forge-1.20.1-1.0.jar
                • Size 276KB
                • SHA256 226ab161baad4f69d246825b1e8d24d1e4062a5a28d1f36aad5adfbe0d144672
                • MD5 SHA1 SHA512 SSDEEP TLSH

                AdvancementPlaques-1.20.1-forge-1.6.9.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\AdvancementPlaques-1.20.1-forge-1.6.9.jar
                • Size 203KB
                • SHA256 537f84f1153369d61878965846a8ead7c5eae3a6ad917b04c02521ad76182ad2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Anatashesha-forge-1.20.1-1.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Anatashesha-forge-1.20.1-1.1.jar
                • Size 458KB
                • SHA256 1e14181f577598d0525f991725ba46953e557af4d9c0e71355405b5906a3b889
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Bookshelf-Forge-1.20.1-20.2.15.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Bookshelf-Forge-1.20.1-20.2.15.jar
                • Size 335KB
                • SHA256 7980d4a0beed1dcd2c283cf65f3c93f6b0085833f3ac490014979c95f1dfaf67
                • MD5 SHA1 SHA512 SSDEEP TLSH

                CasinoCraft_1.20.1_v25.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\CasinoCraft_1.20.1_v25.jar
                • Size 2.0MB
                • SHA256 470aede4e24e074c29637fe92ae822aa0f71d787f62e7c352f4c647632ef6a16
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Clumps-forge-1.20.1-12.0.0.4.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Clumps-forge-1.20.1-12.0.0.4.jar
                • Size 19KB
                • SHA256 1d1cfcf386f182b1d0bdbe4bd4fc57b96234e8c7468e95e1575ad4dd6433243a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Connector-1.0.0-beta.48+1.20.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Connector-1.0.0-beta.48+1.20.1.jar
                • Size 4.8MB
                • SHA256 6226500de5d240d44244d8f35b402148667cc37a75d63d0e55800e049c82905c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                CustomNPCs-1.20.1-GBPort-Unofficial-1.20.1.20260227.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\CustomNPCs-1.20.1-GBPort-Unofficial-1.20.1.20260227.jar
                • Size 10.3MB
                • SHA256 3756bed8a2b8b2a45fd8ba8aab2be54b0ea3d2e258819426f65e00a5f83ef4d9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                CustomStartingGear-1.20-2.0.3.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\CustomStartingGear-1.20-2.0.3.jar
                • Size 22KB
                • SHA256 7c50129c62cd5f6298a5ba4e5ff15cc147f809bde961c7ef646fc5efd6588ec7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                DistantHorizons-2.4.5-b-1.20.1-fabric-forge.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\DistantHorizons-2.4.5-b-1.20.1-fabric-forge.jar
                • Size 24.2MB
                • SHA256 e29c5d6a47ce40ec174f96104ac3639605de30e3811b39907de7070feb230cc2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                EnchantmentDescriptions-Forge-1.20.1-17.1.21.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\EnchantmentDescriptions-Forge-1.20.1-17.1.21.jar
                • Size 65KB
                • SHA256 909d1941d4ef6e4b7336738ee31380d6e1117c3c22feb70b64fed47f1cba2b07
                • MD5 SHA1 SHA512 SSDEEP TLSH

                FTBQuestsOptimizer-forge-2.0.5-1.20.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\FTBQuestsOptimizer-forge-2.0.5-1.20.1.jar
                • Size 13KB
                • SHA256 64e446ffd05d4a05a0855ff7165c1cf5ced96845073909c48cff116db6aaa664
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Iceberg-1.20.1-forge-1.1.25.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Iceberg-1.20.1-forge-1.1.25.jar
                • Size 131KB
                • SHA256 91ad6b459e0c7a16a9f3dc90230248a696600ceec6646aa23263559b8648dbc3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ImmediatelyFast-Forge-1.5.4+1.20.4.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\ImmediatelyFast-Forge-1.5.4+1.20.4.jar
                • Size 526KB
                • SHA256 da781a31b2c8d8a845ed48c89b6463f1df3f2c655de10d8d4f5bed8123ff68a8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JJKF Final.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JJKF Final.jar
                • Size 1.9MB
                • SHA256 aa061aa6d8f1aea8a1135486b3be4e3362ea82ae8b6c6781e26cd37c0eb0f937
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JJSK4.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JJSK4.1.jar
                • Size 29.4MB
                • SHA256 0d9edeb12af676d64f1554d749bd76643f2048a38bcbdab0a063d0d63797d2b3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Jade-1.20.1-Forge-11.13.2.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Jade-1.20.1-Forge-11.13.2.jar
                • Size 539KB
                • SHA256 31949971a7a8d5a5bc95ad9d400cbedfd2d65ffbfb3cea7c0b2fa3b47431a0a5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JapanProps_1.20.1_0.0.3.3.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JapanProps_1.20.1_0.0.3.3.jar
                • Size 6.4MB
                • SHA256 a797b2b8e16410ee2a17813dfb5068c3a5bdad39995ff8776736df3089dfc888
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JujutsuCraft-ver49.1-forge-1.20.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JujutsuCraft-ver49.1-forge-1.20.1.jar
                • Size 15.8MB
                • SHA256 ee48b4e81a9d1b909c1a02dbed3deeecd84f32138adc393c904ab3aeea0b2c73
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JujutsuCraftVisualEffects-1.6JJCfor43v-forge-1.20.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JujutsuCraftVisualEffects-1.6JJCfor43v-forge-1.20.1.jar
                • Size 21.7MB
                • SHA256 bcb0a4b67ee7a3e6d1ac6ca4e05aae145f19e806de627e89ff9af15caf3016d0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JujutsuTweaks-4.8-48.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JujutsuTweaks-4.8-48.jar
                • Size 330KB
                • SHA256 a9b4622e6b47a82e998347dab0adf8e08839801c221b81800164462c6b036689
                • MD5 SHA1 SHA512 SSDEEP TLSH

                JustEnoughResources-1.20.1-1.4.0.247.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\JustEnoughResources-1.20.1-1.4.0.247.jar
                • Size 269KB
                • SHA256 311d3a83db489d27b96cd15deb690ce64c78cffb552c25c3dff85956a14ec09e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LegendaryTooltips-1.20.1-forge-1.4.5.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\LegendaryTooltips-1.20.1-forge-1.4.5.jar
                • Size 53KB
                • SHA256 15521ab414b92f60e75bdd49724eb65bb6aa8b3d6f72c157cc261011d58d625e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Lets_Forge_Pirates_[1_20_1]_3_10_1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Lets_Forge_Pirates_[1_20_1]_3_10_1.jar
                • Size 983KB
                • SHA256 3a15bb8234d6491cdca325e3550e4422f47198317e6c05fef8549b027bc9fc36
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Lucky77_1.20.1_v04.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Lucky77_1.20.1_v04.jar
                • Size 226KB
                • SHA256 dc3fd253e7bb2b4f8dc90aa27aa8c74176e49d46dcb26c6ca5c291c769201b98
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Mantle-1.20.1-1.11.104.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Mantle-1.20.1-1.11.104.jar
                • Size 1.5MB
                • SHA256 6052e47c3981064bd5213728eaa3c5418289f6f85b07a1cd4dd1505239248838
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ModernJapanCity-Forge-1.20.1-1.0.8.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\ModernJapanCity-Forge-1.20.1-1.0.8.jar
                • Size 5.3MB
                • SHA256 94aee9dd78ff53eab28a914a1aa32e776979d8f12a51b8a782fd6e280fb8c0b5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                MouseTweaks-forge-mc1.20.1-2.25.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\MouseTweaks-forge-mc1.20.1-2.25.1.jar
                • Size 74KB
                • SHA256 6c27d16aa715ac6613a55fc463739e2c7b78279e4e4c4cede299e4a2d4a70f08
                • MD5 SHA1 SHA512 SSDEEP TLSH

                NeonLight-1.4.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\NeonLight-1.4.jar
                • Size 1.5MB
                • SHA256 fdb5dc7a656361805c6f3dd4c039554611d5e1ec4b4fc2f64c77071dbac23992
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ParCool-1.20.1-3.4.3.3.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\ParCool-1.20.1-3.4.3.3.jar
                • Size 1.1MB
                • SHA256 2ddef8752b5a1428035b95f29e62c81e33b80d37851681e1b928d8a01615c6e7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ParCool-CompatibilityAddon-1.20.1-3.4.1.5-1.1.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\ParCool-CompatibilityAddon-1.20.1-3.4.1.5-1.1.jar
                • Size 23KB
                • SHA256 f7cf79f065b076f03ca42e7abb33cb00aa3ed8ca0743296dc25549c2efbc3871
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Particle_Spawner-1.20.x-(v.1.2.0).jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Particle_Spawner-1.20.x-(v.1.2.0).jar
                • Size 5.2MB
                • SHA256 a1f1386fb0f43b6720379d2a3b93956f545d3743a481888864a8537ae938f87c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Pehkui Auto Resize-1.0.0.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Pehkui Auto Resize-1.0.0.jar
                • Size 7KB
                • SHA256 ace65bed87c36fb60b3bcc503301fa4ffc00dab79708ea4022729c601999a474
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Pehkui-3.8.2+1.20.1-forge.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Pehkui-3.8.2+1.20.1-forge.jar
                • Size 655KB
                • SHA256 54210f454c166f65a1bcbbfe4ea52e6f73e07844a793c7132f1af4076a0f42fc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Prism-1.20.1-forge-1.0.5.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Prism-1.20.1-forge-1.0.5.jar
                • Size 50KB
                • SHA256 b1a576f920faeb2175f693e3ee7ba9e5ff0bcf0e404da29f1824ea3c66efd240
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Searchables-forge-1.20.1-1.0.3.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\Searchables-forge-1.20.1-1.0.3.jar
                • Size 75KB
                • SHA256 c1a76e93886210574d3f298c0461241fb711e52ac22c7a04d3236840f29e6576
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ShoulderSurfing-Forge-1.20.1-4.22.5.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\ShoulderSurfing-Forge-1.20.1-4.22.5.jar
                • Size 260KB
                • SHA256 ddc06314ff70c22a8e321f7bb4dd491acb504dd7db3966311b26d958b7004ea6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                SmartBrainLib-forge-1.20.1-1.15.jar

                • Path C:\Users\Admin\AppData\Roaming\Arcbound\minecraft\mods\SmartBrainLib-forge-1.20.1-1.15.jar
                • Size 353KB
                • SHA256 665f65f77cc36379a9ae11c09db5d9efa1ad4f8d017edc8f65903ff27cacdb1d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                default.dic

                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                • Size 2B
                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                • MD5 SHA1 SHA512

                index

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\DawnGraphiteCache\index
                • Size 256KB
                • SHA256 2d904c7552a1f5c44d600dc9653179a630a607d9be88f408a13f2e650dadfabd
                • MD5 SHA1 SHA512 SSDEEP

                data_0

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\GPUCache\data_0
                • Size 8KB
                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                • MD5 SHA1 SHA512 SSDEEP

                data_1

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\GPUCache\data_1
                • Size 264KB
                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                • MD5 SHA1 SHA512 SSDEEP

                data_2

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\GPUCache\data_2
                • Size 8KB
                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                • MD5 SHA1 SHA512 SSDEEP

                data_3

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\GPUCache\data_3
                • Size 8KB
                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                • MD5 SHA1 SHA512 SSDEEP

                Network Persistent State

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Network\Network Persistent State
                • Size 111B
                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                • MD5 SHA1 SHA512 TLSH

                Network Persistent State~RFe5954ae.TMP

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Network\Network Persistent State~RFe5954ae.TMP
                • Size 59B
                • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                • MD5 SHA1 SHA512 TLSH

                Preferences

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Preferences
                • Size 57B
                • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                • MD5 SHA1 SHA512 TLSH

                Preferences~RFe58c8d9.TMP

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Preferences~RFe58c8d9.TMP
                • Size 93B
                • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
                • MD5 SHA1 SHA512 TLSH

                CURRENT

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Session Storage\CURRENT
                • Size 16B
                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                • MD5 SHA1 SHA512

                MANIFEST-000001

                • Path C:\Users\Admin\AppData\Roaming\arcbound-launcher\Session Storage\MANIFEST-000001
                • Size 41B
                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                • MD5 SHA1 SHA512

                memory/2292-271-0x00000202D48F0000-0x00000202D4AB2000-memory.dmp

                memory/2292-293-0x00000202D41F0000-0x00000202D440C000-memory.dmp

                memory/2292-270-0x00000202BC040000-0x00000202BC062000-memory.dmp

                memory/2292-289-0x00000202D4FF0000-0x00000202D5518000-memory.dmp

                memory/2292-292-0x00000202BB2C0000-0x00000202BBD81000-memory.dmp

                memory/3776-535-0x00000000077D0000-0x00000000077E1000-memory.dmp

                memory/3776-534-0x0000000007860000-0x00000000078F6000-memory.dmp

                memory/3776-526-0x0000000070600000-0x000000007064C000-memory.dmp

                memory/3776-524-0x0000000005C90000-0x0000000005FE4000-memory.dmp

                memory/4132-557-0x0000000070760000-0x0000000070AB4000-memory.dmp

                memory/4132-549-0x0000000070600000-0x000000007064C000-memory.dmp

                memory/4132-547-0x0000000006190000-0x00000000064E4000-memory.dmp

                memory/4604-509-0x0000000007730000-0x0000000007754000-memory.dmp

                memory/4604-503-0x0000000007190000-0x00000000071AE000-memory.dmp

                memory/4604-508-0x0000000007700000-0x000000000772A000-memory.dmp

                memory/4604-478-0x0000000004BF0000-0x0000000004C26000-memory.dmp

                memory/4604-510-0x0000000070D00000-0x0000000071054000-memory.dmp

                memory/4604-506-0x0000000007510000-0x000000000752A000-memory.dmp

                memory/4604-505-0x0000000007B50000-0x00000000081CA000-memory.dmp

                memory/4604-504-0x00000000071C0000-0x0000000007263000-memory.dmp

                memory/4604-490-0x0000000005BC0000-0x0000000005F14000-memory.dmp

                memory/4604-507-0x0000000007580000-0x000000000758A000-memory.dmp

                memory/4604-481-0x0000000005AE0000-0x0000000005B46000-memory.dmp

                memory/4604-482-0x0000000005B50000-0x0000000005BB6000-memory.dmp

                memory/4604-495-0x0000000070600000-0x000000007064C000-memory.dmp

                memory/4604-494-0x00000000067A0000-0x00000000067D2000-memory.dmp

                memory/4604-493-0x00000000061F0000-0x000000000623C000-memory.dmp

                memory/4604-480-0x0000000005210000-0x0000000005232000-memory.dmp

                memory/4604-479-0x0000000005300000-0x0000000005928000-memory.dmp

                memory/4604-492-0x00000000061D0000-0x00000000061EE000-memory.dmp