a09b9f68f2854332ccb960746c68412c257b74d81da66f5eb8c0121c45c9295c

Analysis

user interaction
yes
max time kernel
63s
max time network
65s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/08/2026, 04:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Millida-Launcher_1.0.66_x64-setup.exe
Size 15.0MB
Sample260802-fe1kxsdb93
SHA256 a09b9f68f2854332ccb960746c68412c257b74d81da66f5eb8c0121c45c9295c
MD5 3e86d7c829ed985fe55ad1f2a781d165
SHA1 02d51b84b518611414880108fba2a1e449899c20
SHA512 f9509248c8d06dc9b9207a4a23edd6121e429c9c16e3fd0f2ded7baa7435e5c81ecab24c7d7e189443118510b5d312af54b4468afd3f7f412e88cf69c9a37b09
SSDEEP 196608:LTYx0zSyFsVPDHVUn2oSNJxDGw78mR8iMfWFLBEqIUSgrQLAGiIvS/cfmHA6IZZZ:LUQrFIzQZGPbmWbEqIRgW1inEfSWJYG
TLSH
T158F633668C6D9096D1F789700C77B9EC3DBA0AE540E233CA5ED7685E0B6B0AFF193411
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3996	millida-launcher.exe

Loads dropped DLL 7 IoCs

pid	Process
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	millida-launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	millida-launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	millida-launcher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Millida-Launcher_1.0.66_x64-setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301197909366260"	msedgewebview2.exe

Modifies registry class 16 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	Millida-Launcher_1.0.66_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell\open\command	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\URL Protocol	Millida-Launcher_1.0.66_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell\open\command	Millida-Launcher_1.0.66_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\URL Protocol	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\DefaultIcon	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\DefaultIcon	Millida-Launcher_1.0.66_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\",0"	Millida-Launcher_1.0.66_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell	Millida-Launcher_1.0.66_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	Millida-Launcher_1.0.66_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\shell\open	Millida-Launcher_1.0.66_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe,0"	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\millida	Millida-Launcher_1.0.66_x64-setup.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	millida-launcher.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3564	Millida-Launcher_1.0.66_x64-setup.exe
3564	Millida-Launcher_1.0.66_x64-setup.exe
3996	millida-launcher.exe
3996	millida-launcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2192	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	3564	Millida-Launcher_1.0.66_x64-setup.exe
Token: SeImpersonatePrivilege	3564	Millida-Launcher_1.0.66_x64-setup.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3996	millida-launcher.exe
3996	millida-launcher.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3996	millida-launcher.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 3996 wrote to memory of 2192	3996	millida-launcher.exe	83
PID 2192 wrote to memory of 2244	2192	msedgewebview2.exe	84
PID 2192 wrote to memory of 912	2192	msedgewebview2.exe	85
PID 2192 wrote to memory of 912	2192	msedgewebview2.exe	85
PID 2192 wrote to memory of 912	2192	msedgewebview2.exe	85
PID 2192 wrote to memory of 2680	2192	msedgewebview2.exe	86
PID 2192 wrote to memory of 4032	2192	msedgewebview2.exe	87
PID 2192 wrote to memory of 4032	2192	msedgewebview2.exe	87
PID 2192 wrote to memory of 2308	2192	msedgewebview2.exe	88
PID 2192 wrote to memory of 2308	2192	msedgewebview2.exe	88
PID 2192 wrote to memory of 2308	2192	msedgewebview2.exe	88
PID 2192 wrote to memory of 4252	2192	msedgewebview2.exe	89
PID 2192 wrote to memory of 4252	2192	msedgewebview2.exe	89

C:\Users\Admin\AppData\Local\Temp\Millida-Launcher_1.0.66_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Millida-Launcher_1.0.66_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3564
- C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe
  "C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Modifies trusted root certificate store through registry
  - Modifies registry class
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3996
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3996.2508.12829377922947566266
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2192
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x16c,0x170,0x174,0x148,0x17c,0x7ffdb62db078,0x7ffdb62db084,0x7ffdb62db090
      4⤵
      PID:2244
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1780,i,13289368376402715139,8833754141679180208,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
      4⤵
      PID:912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2016,i,13289368376402715139,8833754141679180208,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
      4⤵
      PID:2680
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1772,i,13289368376402715139,8833754141679180208,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:13
      4⤵
      PID:4032
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3544,i,13289368376402715139,8833754141679180208,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
      4⤵
      PID:2308
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=1.0.66 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3920,i,13289368376402715139,8833754141679180208,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:12
      4⤵
      PID:4252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

millida-launcher.exe

Path C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe
Size 29.0MB
SHA256 ce8b629348fe052335a781121cdc6ea204c6d6402b410358e6b0243190d42f31
MD5 dc42f0cdca415a28454e805cc6004553
SHA1 e952c87c92913b5fabe162ce1d4fd2fdaf1801b8
SHA512 a0b67a9d43dcd772c69f3449d577aa5753d2227e5bec0b3b0f040fd9421bdbbc9be8916c02e311446f12979641f31327bfff398cf234cf7032db41616eddbeb1
SSDEEP 393216:x1OkZNWllbbyatGk1qF1xDaFnYyeQBf9Pb5Dqoe:x1OkZNWllbby2GkkRadd31Dqo
TLSH
T1C4677C117A5B99ACD59AC87083478AB35E2130DB0A36B9FF44C442393F7DBF46B29358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyBEAA.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsyBEAA.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyBEAA.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyBEAA.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3ccb138fa1dd6b5f1aa84fa23a431f661e818599e3879ea2b19af3d1a029f2d4
MD5 e86e5abb6d54a7dbb01f73ac12dfca42
SHA1 af348e69be48ad10e67f315d435e3eef6e6179ba
SHA512 21bd5796a6d19229400671c629c42747dc5d955cc2d927bed1f4c636fc52b80d49efc97d922b5c93884233bb0cdd8bc745d5ee2592efece0fc6f077cafef9289
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b0b62aa1c5a71e314792be1701c68ffb08276a86925b89947403cec7cbd54476
MD5 eed46babc1b3338d4be66916d0322de2
SHA1 89f37a3f7dd70e60c1e2bd46ec2f582680d75832
SHA512 8adab96d4b86591f49ab5b50c49030faf34638a9250874efe174ab9408b8f5feadecacab6c8e0c59b4314d56fa8fdb7d48f771108bf0d6259da09fc70903cabc
TLSH
T152D0123B33418174C01034370002B14A8400C11B800A810455AC8A1F1A340550907483
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 33157431d4c16aa41c0b16e6fa11ec2d63b4d9180397293d964ec9c330ea3758
MD5 f06569bfcad532d51ed6919490518afa
SHA1 5c4003bd4917e77c3b6d1c6a3e2496cff72e4727
SHA512 c5d65b4a7f827095b46b23e51fab35ea85e303a992ebbcb8e154941036d99b22c532fd52b1d9a34796a742d6b335c7244f166714442b03ba1807e508592fbbb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 45f0fd9ae63fcab66cf79b2d566a77bf3a811d41ab53f74c08235427465bcb13
MD5 7428bfbcb6dbdae5979ee723fbaf4720
SHA1 bef52ecfdd2cdcac0cd8ab7971718af1d9cf78ad
SHA512 0f1e4c62ff046448b774038d0838e346d445c4234b61254aff867b51f346d2bc1581c64aa271232e4d88558d162b65798e5759dd591f8dfae3f461708ec2ed8e
TLSH
T1EFE0468441CA231BFB08C2F12EC230183EB4D93E80C71CE0C66511B494273F6536227C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Preferences
Size 6KB
SHA256 373b6150b758f3150c6d3dec9408e0b928210efaec077d1d263f69d9c18b0925
MD5 6aed14e7f094c976daa76a99648691cb
SHA1 dcc1583a810c2f9da84567e37b0bb52e1d4b92bf
SHA512 f5439a72bab3be16eb924eba4a9c3dce3d9049ac71a75822886ba207ff1768d40d697df309d3c0105eabccddb954345e09c0280788c5ba8bd57d7fefd9207b9b
SSDEEP 192:st70UlEcfCZ8pa6G9/S+WiTebVUdfAW+M8:stQU6cd8/VcVUFv8
TLSH
T1B1D1B8025F28697B8CCFE619BA35BB42E2FA102161D51E98EBFD951C09D62DC220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe598af0.TMP

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Preferences~RFe598af0.TMP
Size 6KB
SHA256 16d524f189af9e472fd84da62b40d6d8c0447b877faae7b50135ae9ddb5627ec
MD5 d6283a705a8fb4b3dffc9b7d45a97d73
SHA1 d2578f443e39b3f631500ae75bad955aaae1b56e
SHA512 fc093b83ac19c10a764dd133d36d5bb6d914c9ffe7d214afd240375519a158145304a149ca9773cb2de9bcad1bc7f702b3d60baabeb3c6de70ea7ca41c049299
SSDEEP 192:r70UlEcfCZ8pa6G9/S+WiTGVS+wdfW5W+M8:rQU6cd8/VowZv8
TLSH
T16AD1BA025F28697B8CCFE219BA35BB42E2F6502161D41E98EBFD951C05D56DC2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 1KB
SHA256 1225336df4bcd06529f56960b256bff0f6f8cc10995b618db76a81631623a75e
MD5 dc5f20e2e4e1baefe3a44006e618c740
SHA1 dc9cdccfefed1e100dfa11c1f90f84d5cd39ceb1
SHA512 3bb71822c2661c195583e6b4ae54b4291143b8af3bffe9d3ff90d3b9d9b1989f972e7025db8be4c7cae6f735058658d7fd4ab816223979b6f78987ab8c9ab9e1
TLSH
T1D631B7B2D0947B729DCD6A84710A79A73E310066D1904F4895EF0F0C13D729CAB2AD3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 2KB
SHA256 7efb026499eb2b1f2f1e390779ac06e90642679d54c4ea21561cd8269f991367
MD5 fa87b2ece8cb2af400ccb68eabe939aa
SHA1 fd4ed794ae9754927cc274af15d96cdd73299b97
SHA512 d4dfeef6f486ac9daecfb3cf7d7580d37128545f3add65ee1638cf8051f678446ef3c9356b980622ccdf0bb8709a274ac04f6a9bbb44aefe798074af0551748f
TLSH
T1F65198737808A6778DDB5A44B90D3E637D35405199912F909ADE1F1C02D715C2702C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 3KB
SHA256 59bd012007ffaa20d6be311f341e2af6ef28fd80a1e9425651b049a9a8393d67
MD5 1f8156ee739f07cfd8db0d7f5bfc4081
SHA1 a8499aec5a3c7967fffdd97aa5535ff75b384349
SHA512 149cd3b38eb96e359f75951f1dd2682dcb9ebaac1a2afe07afdb6723dbb1cfb28416dce9d1f3e1664ba7d7ffcd85530f88618f16ba20fe1311043e452f679800
TLSH
T18971B9726568E5378EEB9E44B8493B1676714027D5D13FA4CAEE1F0C02D73D82342C1B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 4KB
SHA256 1f3eef01b97e8ce8a4062430b214a6a25b689572068900f1858c1fe262235b77
MD5 f68e760fdd0b258ae977f215caddd914
SHA1 f381dee198fa2fdbbaa79e4d9c852c563722e31d
SHA512 01d021254a1ebbcb9f52f6dca2c2803bd7ee57da76322b24dcac5506f5459f71b2f7154123cf17bb5637f1396efd2e7bace42e07977dac3c6a51bbb1fde5a93e
SSDEEP 96:zuRbNkCE3dfDBT7eMDI8Frh/cInURoDoto+5gvDbBEnLv66QZEZRTQklRa:zIbNbeBT7frooDUhilEnLVtW
TLSH
T1D291A622B568A9378DFAE944B94A3F1376A14027D5D47FE8CAED0F0C42DB2D81342D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 16KB
SHA256 c7e5b6f7c6469bc7ba456334ac65f7db5ea0790c2913f17ed95ba38366dbfe21
MD5 0b32902399ee54721b1765216b226ba1
SHA1 6288d5e42790c74fbd07a0d60c1cb83f676447ff
SHA512 df0878cf862891a54fb2ce069c6e94e1d5f30aa37b7b3a9351d23fd4e3544369f64b97b84dcb725021bcb6592695051c897da9e3d251b0e7e76b8327eb4d1ece
SSDEEP 384:zw+aQikB+z/xvxjg/qhEwNb8fhnELby9zq:7/UxvxjgC+xlE/yFq
TLSH
T150729E27656C7E2799F7F504794C079BDBB584B290C16EB84EEE1F0906C73D81302D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59309b.TMP

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State~RFe59309b.TMP
Size 1KB
SHA256 5169a3e9b6a510e7e1912e76e691da8a782bc75639ff94aabcc1a2f554ef7709
MD5 5be3ef00d5722f71f3160c4dd05c4590
SHA1 daa5ba7a2b086a1a1c82cc8df679af74373fe3c3
SHA512 7b0d56c9690e02263c73f032940b8cb93f78e87ef713e657c094d50ef4d6e2e7aef68d5c8c4907ae0840891ea0ffe3318661092214926fe04827d4c3766432ef
TLSH
T117219573C088BA76ADCD5984B21ABA8B3D20406695508F48D5DF0A0813DB1DC9B3AC37
MD5 SHA1 SHA512 TLSH

Submit Download

version_manifest_v2.json

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\version_manifest_v2.json
Size 312KB
SHA256 6dd3f69aa18df473c140cc0d718ce0944d17aa42bb8f4873224aa6d101b831d1
MD5 96e2758fcf6fe629b8592996ea922848
SHA1 faa05f1dfad8c32604c9a72b253bf1e86cf8b8b0
SHA512 d325787feb63aa46997766edd5e6b2dfe610b82e7f2de817712aa82c9e7bb7ac7176f0a4564a0d84effe780a8a636671838738c1c1ea315937ceeaafb525233a
SSDEEP 1536:KdVy1NUohDYD6eVaHyUMiHLkbJRYUZ3sRZr5lYMNhM8fO3cS:Km1NUo+D6esHM8LkbJhZ3s/5lYifO3cS
TLSH
T1D064EA64C0381D671C9460FA482A67C50B50DB1B5DA4B95A3F8CA1DC4FAF87F2673B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

achievement.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\achievement.wav
Size 1.2MB
SHA256 6acf0d241fdb9e2628b021f2f3447da8df61020e66c4a90561f77f3868459e84
MD5 05f8a3a0303c8d0001ec9830139f6bc1
SHA1 2cc0720b071e9a01f093ab03183a9442a5108ce7
SHA512 d327c92ea3143bdddd7188e7e4cce8a193b2ce7841860913bd2b46849ef366f049ce369d3c0f9f184b82bdcbd68ba132e5693fda26ced02b1886599bc2cb84af
SSDEEP 24576:7t9he3/0Yr1GzjbY58orzRSFQ8T3XgZWm03UyisB2OnIg+dbSNUIq64TG:7t9hNYgzjbhorV23XgAm03TphnSbSNMW
TLSH
T12055F1C2D011ABC058AD8A26A456DE5E07123A9BEF471B34302CEB6370D35537FA979F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

click.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\click.wav
Size 27KB
SHA256 a73a3b96e6a3eb12b2dcc37885841eb1a2eaadd7fc0829672a01592fc90a0f6a
MD5 ec749b940e8fbc5bd8d67286865ae417
SHA1 8620602d132dd9c273800c82ce271d863a753459
SHA512 a1049b2729c934cb4437a72786b4ea7324dbb2aedc1d8191383b5cb4d5f2847fd6b77be979a75f929137ba37d915a30feea4c63646c3931f9fb9c3f205ccdc0a
SSDEEP 384:6+HEAEoDB1E49fUaPAzn8X+ytPDoz4XgMwbRPU6/yXI4H7O:MAEeA4tUa4zuPDoUhwRPUFI2
TLSH
T102D23A53F400DD50C0691F368E63EB958732766AFF43672B30486B2E3CA72C5EE16A58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\close.wav
Size 43KB
SHA256 3424605f966235c494ff73b3034e2671970b9a3db65adc87c5217235829928b9
MD5 87caf028daff80d919814033f8ad2e66
SHA1 da5f5ef83e4f36cc1301dc44834adc4dbf8267e6
SHA512 b2721c4aa8a18d71f70d43492e469b7a46d2e329423d03358ce53331825c67c2d7b6b6df6c706d0498555948c9f02426d9e05896585d4d48b62cee0f44006464
SSDEEP 768:5mnXz0YraxFxw9qim3sAxpw/f1qLNSHPYruRYeuFXzY809SyC:snbaKn+xpwFHPXYTFXg3
TLSH
T16A13D063F4C10959EC9B8B7F8D10ABA10BFBBD197D0416067649FB9876EB3E0981360D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crash.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\crash.wav
Size 215KB
SHA256 72b23a23a25ab527e20051f137ac289fc23b3bb07be740348c6fc3866175fcbd
MD5 9d215070762a3d8103f273a480be3b57
SHA1 e5d5e903706451ae2f8765405101bebfcac2aabb
SHA512 6700167767c2caa6d7009ac8d56d7afe520d5469256303827b0f9c255adce5464aec2abd5daf45567bafb37f30d2c94ee82cbd61fa1607dd50b2c282ef410235
SSDEEP 3072:as1c/qUqAD3lo/A+g/nm+FI19v8QwbsdZ2iKwCHPUGKCSqLuLaW+t5RYM/5t:Vc/bqAD3qz65QRqsGiKwSUGKTYuL527
TLSH
T12824AE93F4938C01DD9B5F394522AF350677AD29FE1B520F3088BF069EA33C16B56686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delete.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\delete.wav
Size 60KB
SHA256 bcf60045b7728311c27faa4af3eac84fe68f65b1ad8ac3ac6280b84b8397f7d6
MD5 6b6f4efe0f90adec70a116934ab01754
SHA1 a79ad73e5924bbeabeaa26b601b5b8079952659e
SHA512 4a95b27efefb4f5f14bc5a1efc9c6bc5f06747f49d494fd6292642b76d6eaa48c0cac045005391db4a93905eae7784ac604549bd52254575699687a0320755d0
SSDEEP 1536:1ylTJMFOW0zf6HfYhtSNnn260WZEUcaT45chH:SJH/ewhtAn26JHT4S
TLSH
T187539D51B342D680C4304C3B8D86D6D41762BE8EDF4AA3377142AB3F7DF75628E1AA91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

error.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\error.wav
Size 34KB
SHA256 020ec3687602b1dea2b9bd28d5e81458019406e52888da454ca82ccff23b9844
MD5 212d6fdd3ca7c7c20566fb2224900ba1
SHA1 3db7cfd9e6670c43c017b52d1ddb6c41480c6348
SHA512 44be0d5f4d21e03bfad6622ecdd3daf47386cd5715386041f95da1919df000c669d1ffdf8f78cd97dc6a9244b97cf21f8185f704c63d27fc9cbceecfc9fa67f8
SSDEEP 768:KMN7BT/peWy+9h5E8R32lA8NRrkO8ij/u1tueO19tX97:/3pryshxaZN95B/0/OfN5
TLSH
T179F2AF82F6119A90C8A56D72CC52D9C44736B5EEFF43225331D0BF2B36BB181DA22A91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\install.wav
Size 150KB
SHA256 e6ff475f0be341f14ef8f0d5e790fbe37c2063625d94cc5769b3e3833569a39a
MD5 282b900b6fe419907445696fd241e91a
SHA1 df8047d4c29c62f376b7c9532cbafe58ca51c11b
SHA512 145a60d634c6d882b88a2095c735f5864fb2b27af6b70d59b5b62a49cd174dba300be88af7167f9cfd1e14b7e33ca3f1b8855874350155a892b15170a85bc7a4
SSDEEP 3072:CIQdOoPbB2tFTx6QEj8ChvX3bNm6yZJpIX9qBEuK5cBJSrc++:UdOgB2tFTxJ3QbNm6yJIXUBEn4Src++
TLSH
T135E34A527301CA11C4351E7A1D66EBD41332FE8AEF0BA36730827F6F2DBA1E19E15691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

launch.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\launch.wav
Size 276KB
SHA256 7142636232ac9b3ab7ffdfaab3deb46d92bbe429adaa7e20c0db3728e210e1ff
MD5 f310f83176a0beecd3c83e85f293b60c
SHA1 463f6ab18592aca5954ce291d8f729f406fddda1
SHA512 eb02a8cc98b65ed3a4f04f43180b8230ed6c63940b92ed8b9fbf4387969c21b2bf1adb6f9c9b02124dbcc368229afe5184071b48f2c00407ece3ea8ed2dcd15d
SSDEEP 6144:ZuUkKjdLexXNStsIKMCernL+H/QjR40Uyy:ZuBKJLA35MCJ/Qul5
TLSH
T1E854BFB2F0834A10C6EB86398E52AD214DA5B55DFE95292F308C7F0996D3300B7777AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\login.wav
Size 289KB
SHA256 6ed9f8c633cd9439cc877f4a8f0ad439c03be518952e92099b40b3adb42c878d
MD5 29681e9a670a884fcef5b5b412b075ff
SHA1 114f528219d93219fdece4a60eaf236934236e05
SHA512 6c166486b4c1a5de88bdf26e15e9a36431921b3d7d5dda2c2dde65e6daf8b7f1b766c6241a732698a5ecf1c3f184839fa293e7c37727390343da9ce58748eea7
SSDEEP 1536:tJPkqeVRGsm4UAsX5Bp+vR84Fu8YHwsc00rz6n0vkuLNJr75itIrPCG6vdcgIPT0:aLm6E5kkwsc006neYG4HZu
TLSH
T13554FE82B640C950C8564E358962DFF99336BD16BF4BA7573484BF0F7EB30D26A216C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\nav.wav
Size 15KB
SHA256 159d87d4bf946aa39171bbe8802f57c245db80cf8b93a9797665962c77ad57c4
MD5 9d06ddc4154198c5a24fd70058d27121
SHA1 11fef904055488eaf52cf41d2709757aaaba63b3
SHA512 1c06dee2f853b338b99b2c2adf4ae9c558ab5dc1bf7d4d1eee797701cc660becd9808e4ed8754c0a0e0a62ce71b25cdab19dbe0d0c54024978e9ea05396150b9
SSDEEP 192:mgwq4uhLRHVanppbKpKUyQydgyFV7jT1hiVi/K8k:vr4ulRw3yKU3yFthhi
TLSH
T1D6720793BB01C951C9290E368E22DB954732FC29FF06930774C47B1FADB31E15E62592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notify.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\notify.wav
Size 55KB
SHA256 07e14e7d28484a3df59b6137cc40573f9589e9ef07fe9fd6fdc8222625fa5990
MD5 02d05a12aedd40554a6da068b4a33364
SHA1 2a73578374b5ef691b5600e72d78ef11eb55a646
SHA512 c20f2f1b8b4dd54a8555da6b334c1a58ea122bb94b26bbb8d6477865e389065122245ad21f6883edc0572c337215ffcb0fc32f9b1def068e9d058f072895a0d9
SSDEEP 1536:zx0D+kirL2YWFOig9VEy6eG/mRR0sR5dmC:F0ixrL2YWz6VEy6p6RBdm
TLSH
T18F43B0A3F0634201D8670A3A66B3DD6106B9F85BFE25621F3444FF2872A7744BF25B85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

open.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\open.wav
Size 43KB
SHA256 01dda21e110cde5ab60511f02f15f019fb949db3c8e30fe032f24b96d645888d
MD5 f2f3b0c1acc335c26a66f85561bc11cd
SHA1 10edb71b925ca0aab6ba275423f1e508346b4e34
SHA512 f8cbb553cbad464dfb5dd03f4c08275c3d5803250bc2cadaf6571bc0a67a0111086d600785235eaa9f54501a91deb8870712f89bd5ad0a4895b8c43dd6c3c7d3
SSDEEP 768:b/mbY2a0QEwaTzqHnXfeE2CvgwwrQ6kUTrhmyY4upK53Qjcx38P:HU+HvB2xdkaMyGUhx3E
TLSH
T14413E156F465A807DC678F3699C214C455C6FE0B7F070A98250EA78270D7FD0663BB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

success.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\success.wav
Size 66KB
SHA256 e23e9d1712c4127546e82349ede32a2c55b69dcf9f75b7ab016df5a103251611
MD5 b831cb3aa8fa246a39a70289c25a7e89
SHA1 d68af28af417358957549989bca076d7f474589f
SHA512 3ee2763521af4fa2c9eede169cac648d020aa78779e294648a81ff250564a2bbe1a9ecc4dd2a5acc36325d5a573f5ff5d62bf3c18496b5ed48dfd8a46b11d2ad
SSDEEP 768:a/HY+E7++g1XndUQIkq+2WDr4itO7e8IoEcIb5vSWPQ8CvDA6cMj2V6w1ec5p9Fv:av+kPqKgpGdvl2vncwh7cdFMIlq/F
TLSH
T15A631892F201DA10C46A9E364D22DAD54332BD9AFF4757273081BB2F7DF61E28E15782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toggle.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds\toggle.wav
Size 15KB
SHA256 1f4aa2ea5f2c1fe4be41a79a57d36e87f3f8b84b05e13d38fa80923ae793e16e
MD5 8c46917a0d43524157f60ef2015cf3d0
SHA1 8103db6717f40bbdfbc48894cb7e88d6f8f7a6e3
SHA512 c4e41ecad0df72a030333e13bf4a8add3aa5212f1d64161094a7f3a9b6edd8fd760e20d072a1347eca428a9a991b4b2a9145e0132323b512d4932979a86044b0
SSDEEP 96:mgoT2/23R5OeQXQJQMSDwWbUzitIbXltXTNUiGxNonu4S1eU79i4QEiF4VxS:mgoa/2XtjmD/IzitIpyW41eO+VFoxS
TLSH
T167726E53B205CD06D9690F3A0D92EF989732BD89FF0B576B3080BB1AAD721D15E11AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/912-83-0x00007FFDD4180000-0x00007FFDD4181000-memory.dmp

Download

memory/2308-164-0x00007FFDD4180000-0x00007FFDD4181000-memory.dmp

Download