5ad65afcc1c3900feea554da5b71ec9b5d87c7300cdeb91c8225ec34f8817d1f

Analysis

user interaction
yes
max time kernel
299s
max time network
306s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 16:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Modrinth App.exe
Size 37.6MB
Sample260821-t4mx1stdqd
SHA256 5ad65afcc1c3900feea554da5b71ec9b5d87c7300cdeb91c8225ec34f8817d1f
MD5 166952b1800dcd816abef5b1bae15882
SHA1 be855d515d726f3ba05750c1f8d11291ffddb5f3
SHA512 98965ecef393cca4940b8d0fe341e3d5b3827dba69ae618a7e50846f5d8e2871efb469a7d2141556e489c2f101ae97451e2b55eb5ccbd3a66d792599babf2f65
SSDEEP 393216:28Tv2qRh0F3uJC5rUXuGCA/hgWYxc7PaodYwFQ2pILZV2BAOwd2AbITegtF7e0:xTeQh0Fj6YehAzOwd2MDqy0
TLSH
T1D587AF03F6A280E8D0AEC4B9835AD633EB767C89453472BF5BE44B212F19F506B1D359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1824731832\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_595115840\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1824731832\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1552003850\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1552003850\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1989734943\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_175854544\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\adblock_snippet.js	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1552003850\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_175854544\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_595115840\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_759525372\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_759525372\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_759525372\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_397694268\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_1689554803\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-en-gb.hyb	msedgewebview2.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Modrinth App.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5412	msedgewebview2.exe
5412	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2916	msedgewebview2.exe
2916	msedgewebview2.exe
2916	msedgewebview2.exe
2916	msedgewebview2.exe
2916	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe
4868	Modrinth App.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 2916	4868	Modrinth App.exe	91
PID 2916 wrote to memory of 4724	2916	msedgewebview2.exe	92
PID 2916 wrote to memory of 6632	2916	msedgewebview2.exe	93
PID 2916 wrote to memory of 6632	2916	msedgewebview2.exe	93
PID 2916 wrote to memory of 6632	2916	msedgewebview2.exe	93
PID 2916 wrote to memory of 6632	2916	msedgewebview2.exe	93
PID 2916 wrote to memory of 5416	2916	msedgewebview2.exe	94
PID 2916 wrote to memory of 4680	2916	msedgewebview2.exe	95
PID 2916 wrote to memory of 4680	2916	msedgewebview2.exe	95
PID 2916 wrote to memory of 4680	2916	msedgewebview2.exe	95
PID 2916 wrote to memory of 5852	2916	msedgewebview2.exe	96
PID 2916 wrote to memory of 5852	2916	msedgewebview2.exe	96
PID 2916 wrote to memory of 5852	2916	msedgewebview2.exe	96
PID 2916 wrote to memory of 5852	2916	msedgewebview2.exe	96
PID 2916 wrote to memory of 5852	2916	msedgewebview2.exe	96
PID 2916 wrote to memory of 5080	2916	msedgewebview2.exe	97
PID 2916 wrote to memory of 5080	2916	msedgewebview2.exe	97
PID 2916 wrote to memory of 5080	2916	msedgewebview2.exe	97
PID 2916 wrote to memory of 5080	2916	msedgewebview2.exe	97
PID 2916 wrote to memory of 5080	2916	msedgewebview2.exe	97
PID 2916 wrote to memory of 1316	2916	msedgewebview2.exe	98
PID 2916 wrote to memory of 1316	2916	msedgewebview2.exe	98
PID 2916 wrote to memory of 1316	2916	msedgewebview2.exe	98
PID 2916 wrote to memory of 1316	2916	msedgewebview2.exe	98
PID 2916 wrote to memory of 1316	2916	msedgewebview2.exe	98
PID 2916 wrote to memory of 1708	2916	msedgewebview2.exe	99
PID 2916 wrote to memory of 1708	2916	msedgewebview2.exe	99
PID 2916 wrote to memory of 1708	2916	msedgewebview2.exe	99
PID 2916 wrote to memory of 1708	2916	msedgewebview2.exe	99
PID 2916 wrote to memory of 1708	2916	msedgewebview2.exe	99
PID 2916 wrote to memory of 6924	2916	msedgewebview2.exe	100
PID 2916 wrote to memory of 6924	2916	msedgewebview2.exe	100
PID 2916 wrote to memory of 6924	2916	msedgewebview2.exe	100
PID 2916 wrote to memory of 6924	2916	msedgewebview2.exe	100
PID 2916 wrote to memory of 6924	2916	msedgewebview2.exe	100
PID 2916 wrote to memory of 1836	2916	msedgewebview2.exe	102
PID 2916 wrote to memory of 1836	2916	msedgewebview2.exe	102
PID 2916 wrote to memory of 1836	2916	msedgewebview2.exe	102
PID 2916 wrote to memory of 1144	2916	msedgewebview2.exe	103
PID 2916 wrote to memory of 1144	2916	msedgewebview2.exe	103
PID 2916 wrote to memory of 1144	2916	msedgewebview2.exe	103
PID 2916 wrote to memory of 3888	2916	msedgewebview2.exe	104
PID 2916 wrote to memory of 3888	2916	msedgewebview2.exe	104
PID 2916 wrote to memory of 3888	2916	msedgewebview2.exe	104
PID 2916 wrote to memory of 4276	2916	msedgewebview2.exe	105
PID 2916 wrote to memory of 4276	2916	msedgewebview2.exe	105
PID 2916 wrote to memory of 4276	2916	msedgewebview2.exe	105
PID 2916 wrote to memory of 5412	2916	msedgewebview2.exe	106
PID 2916 wrote to memory of 468	2916	msedgewebview2.exe	107
PID 2916 wrote to memory of 468	2916	msedgewebview2.exe	107
PID 2916 wrote to memory of 468	2916	msedgewebview2.exe	107
PID 2916 wrote to memory of 3280	2916	msedgewebview2.exe	108
PID 2916 wrote to memory of 3280	2916	msedgewebview2.exe	108
PID 2916 wrote to memory of 3280	2916	msedgewebview2.exe	108
PID 2916 wrote to memory of 4872	2916	msedgewebview2.exe	109
PID 2916 wrote to memory of 4872	2916	msedgewebview2.exe	109
PID 2916 wrote to memory of 4872	2916	msedgewebview2.exe	109
PID 2916 wrote to memory of 1884	2916	msedgewebview2.exe	110
PID 2916 wrote to memory of 1884	2916	msedgewebview2.exe	110
PID 2916 wrote to memory of 1884	2916	msedgewebview2.exe	110
PID 2916 wrote to memory of 6856	2916	msedgewebview2.exe	111
PID 2916 wrote to memory of 6856	2916	msedgewebview2.exe	111
PID 2916 wrote to memory of 6856	2916	msedgewebview2.exe	111

C:\Users\Admin\AppData\Local\Temp\Modrinth App.exe
"C:\Users\Admin\AppData\Local\Temp\Modrinth App.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4868.5224.4241155881831592262 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2916
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView /prefetch:4 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x108,0x194,0x7ff9507f5fd8,0x7ff9507f5fe4,0x7ff9507f5ff0
    3⤵
    PID:4724
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1728 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:6632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2168 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:5416
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3508 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 /prefetch:1
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4056 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 /prefetch:1
    3⤵
    PID:5080
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4328 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 /prefetch:1
    3⤵
    PID:1316
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4464 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 /prefetch:1
    3⤵
    PID:1708
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4632 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551 /prefetch:1
    3⤵
    PID:6924
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5196 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:1836
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5396 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:1144
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5224 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:3888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5268 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:4276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5256 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5412
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5032 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:468
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2756 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4900 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5292 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:1884
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.18.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5328 --field-trial-handle=1640,i,14395696592072517222,2899394536776885569,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7b1de0f62987752130ffe3cd07aa6c7411e18551
    3⤵
    PID:6856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0ae03665548424d701095a55b04626d6258da1b9a4acf69c3a1ef4f6d1c5b3fd
MD5 762724aa81e9a2fe5f4457f34b9cec15
SHA1 f5e6f086a7bfe6d41f675a2a4dd2357b7eaa0143
SHA512 7b90c93665a62083ba92ef698c0a0c3837a2b44455faa8559bc2bdf2b27cd8b5e0b6c3aa153e829315e149ff41969573aa51c38cb8631964751c7236e08178a6
TLSH
T12DD0121B33510DB4C71020331202790A2401C55B500581005438C51D1A0806C0D02481
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0dd02dfcd07d592a8a4b475ce2408d10c13c18474d89e0cc2a3daa7655675bb5
MD5 de2535996392a28fd0120778a98629f9
SHA1 142caeb97e53416ec7e8256386e795d7f5f3ac4a
SHA512 3d93bcb1363a0ba68d7c716c354ebb215a5efb47957769f3a4798edcd8dcbfd7ede5f29b942ff60087491f240831bf4b7a877a186c177935003a2386de1394f4
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

69d4f443-906e-4e1d-ba6d-b1fa9478115b.tmp

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\69d4f443-906e-4e1d-ba6d-b1fa9478115b.tmp
Size 7KB
SHA256 985eb3f6262ccb40f358860d05be24b5cad883637a0054db71d6c5b4762f49c1
MD5 1347c5e304459a6215b53ca2ed533c0a
SHA1 7df8beae203ed2845097abb00cb23e41a7ce3748
SHA512 385fce3eef8bb82f9d83b38cf52ee30e0a7bc96523714b033086f0778fbefdc3a49c6f19af09704fd1fed093121101a3f729a0bf670eb61b5ec82ae8a46174f3
SSDEEP 192:st46VoYOoknFjsV+Fd3lfahQtbPIQgVQgTQzWMjvBG6K:st46VoYAsGzUQ96vKK
TLSH
T17FF173035A747EBF0CCAF125F929B61BE2EA103264D51E89EBF9852C04DB5DC7202C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Cache\Cache_Data\f_000018
Size 76KB
SHA256 c6c6e7087637e3028a39056f30fb86e3bb0ccc19167050e197caed29b1b6a522
MD5 22ce7dffa6cc79da718e5b4702f7b0ce
SHA1 656b6c9c6d82083f1794649b73050e57645a05f7
SHA512 76d0fc476cafc0890ffd13420f63258a33c9c3e68324ce60ec144c6280dc4d3a1183aa08993bd749f70f1f700f36a2b30bb77d7478188425208610ccdcb25773
SSDEEP 1536:KyVnAwBzE6PPzTrucokoYciE2Tymj4iZtsu3icSjHPGSqDlvaasqX5:ppVPPzTrfokCiEWJ53icGvklypqX5
TLSH
T15173124875B0E42233AC62158C34A572987BA34179CF718FCB5A7DA81743E7A247DF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 2246a8404628bc79ad5b55db67ef3d8c88435feed16a101586b7d86419f51813
MD5 b7d7079dc24bd4842d4e41089861af8e
SHA1 2b8985251705c323fda85f00ec8b7b2700546964
SHA512 3134f0d9befeba1cce1d52f43fe36777ec9fc8b777594cc18025532d441d929c87495e1270d7e9313b076ab8eda67bcf8c966a8d366f839306fd2063c1fb5f04
TLSH
T1B7F0A02098AF4897CF658EBC06DD086475702145CE875E1BC5303872AE5BF49C301403
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 936B
SHA256 4ca46e319e227578146ca3c167433d7f8df44c2ae6859b00726a66c2bc99538e
MD5 fc226618b00de740d0424bdb2b78a945
SHA1 33e6fd73f5c1d6eabdb8f4bd782b8cb9e9cdf88f
SHA512 49d76e41d12fae6d7238359453c825ccb6c4941de5aaa193e0a8ec42d4a2b5763145a7801cfe96922b36004946f6fdeb8d633a134f29b4cec28791738e64e9ae
TLSH
T1AA117B5404BE47B7DB978D3845FFC96479B026454A435EDBC1782F726D8774A930A007
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c7cb.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59c7cb.TMP
Size 48B
SHA256 7b1712a241d04560a3a3e7cd04b35d4c10494baa76a500332610aeb9bb2efbc8
MD5 e01e86d92ab27007feda204ecc5d1d56
SHA1 256894ea47fe02aaaf4447c6b0c99f12764b66e3
SHA512 04fcd9232798d78e75d94383481213353839368dc90f96a722271c7ad685b1ff4a486d4686a9fee7de0b0e053e4a3d00fd22d16e3ce895cb9b25e32619b4c3b5
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 6KB
SHA256 96cc99131690c8d3eefe0993810b4cfc919165ae40021b30fe05660227bf9712
MD5 643169400fdd1b20fbd7509a5b370cec
SHA1 81be80115cd2583d0b7404a105251e40e8334d43
SHA512 bf5c312957d921f8b06a999dc5723a751e9026400bb68a4158d1616815a9d71c1f7e876b25a29bb92793c38485aeb920d25ad9c77a5cd31fbeeb7b2c2101ba77
SSDEEP 192:DE/7JV4uP1es7SJRYvBVZ4k2s6jWbYCsysy0pGiat1ftV:DE/7JV4uP1es7SJRYvHZ4k2s6jWbYCsc
TLSH
T136D17EE383F4862D8D6166F43A252A1BCD2D091497383D2B8DD6AFA797D14B1E211A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State
Size 8KB
SHA256 7756674d5e5aaeadc256670b19b0df262e4579f302fc803d8f2e3fc4720994e7
MD5 89ccbe6da32ea98c8963fa3c56f265e6
SHA1 0818d12dc46afc7c31d4f9ccbd96ec646b23727d
SHA512 9a3f44b4d3e0a1996a7c05c4f0dd2b861e74591b04aa021aeec1c6ec66694a5ee38d4ba88959954465f27fb2759b568867b60366b3b8db749bf76b8a98a87b21
SSDEEP 192:DE/7JV4uP1es7SJRYvBVZ4k2YCtJVjsIbpRbsfQsyJ1DIlRsn7havzT2hoiOI9UV:DE/7JV4uP1es7SJRYvHZ4k2YCtJVjsIY
TLSH
T1DE026EE387F49A2D8D2192F43A262E1FCD6D0524972C7D3B89C5AF6793D1471E212A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State~RFe5a7764.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\Network Persistent State~RFe5a7764.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 11e471661a44b191e5ab624a3d0ada25b73704912f189238be0c943592c3b1d8
MD5 2036b2bec956f058a703b39ac5d1cfd9
SHA1 42192f9ae662092af0f03a1ce730338e9c8ee618
SHA512 011f34bfd6f3789ca4fb5292c7e944464b2f8a7023107e61e40c3172a65d3291323fe573ba34b20fafa5e675b18621c52074e4f62b234011c6471d079b3b8e12
TLSH
T15741786396BEFC2B247D49EA3E46BC091979F0350181D8F5DB97916CA0825B76706433
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 ce8611f4162966c3fe9a6c3a24850369f939263d909174cdfc4d386eb657b1b9
MD5 153ffabe31ae056e753ef920cbc3f249
SHA1 c629df924057d74c4530f44fda32aa9063d657ec
SHA512 fdb39838c097916bd64976e64c3a98c0ce22ae6faec9f5b6ed85e005ac94af619875a8264eb103ac64c1a0543ca7c37b797043dabb0a52eaab348cd57addce2a
TLSH
T1BF41786396BEFC2B247D49EA3E46BC091979F0350181D8F9DB97916CA0825B76702033
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 8eb2f781c99058cdd61392d8ab55dbdf72c0df7a584714c6e8feb0ec59726498
MD5 25636a4daa67de6045b763279483c38a
SHA1 5d39cb4621a429930e5af91d79cfa7faf8be9c8a
SHA512 95ee46262e5bcf6937f8ba4e279b2c9a673a37853c580d12d0d21445142d0cf9b1c206a321120830e5bebb4885db5a87a6864c0d67707e5b9a8b4be9f0df1bbb
TLSH
T1C241786396BEFC2B207D49FE3E46FC091979F4350181D8F5DA97916CA0825B76702033
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 27092c7ef6841d9dacb2a2536df639333665601ef9952684d89a2f140339de43
MD5 faf3b827ae23a09b1f26c622af11de56
SHA1 a9721fa81e4c36ed2fca2295490829bef5267c6b
SHA512 bf8c788642568382c4abcb5f26af510b50b5d7f2b508f8359517554ff25fc8b6dac82fa0485ef0588703e27edd1fce23f6bc66a3c54d7f67208333b7c644e265
TLSH
T1E841786386BFFC2B207D49EF3E49BC0919B9E436019198F5DA97916CB0825FB2702433
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 23d691a7a453888fc1de10f40af352c7f2e101216d186743ac33e491ce7caeb4
MD5 6fb742b035fad0c08a7e54792b08af24
SHA1 87a9f4b9e489517e87579e8836ffd0c8fa658328
SHA512 0460e11f45dc3516a92fa0a1873c3054d93dc84c48cf6537a368aafeeeaab7aea1dd276e745498eb3afdecd93a52ea528f9c02586a97aff8d8b43346fe8531ad
TLSH
T1A0417863C6BEFC2B607D4AAA3F4ABC09197AE435018198F5DE97916CB0825B72706473
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 e02d569365a99c7ea0e92fb361f01f9300059dfefa59c725c6c65c9c5d2877d0
MD5 971e3743cee0e03ad78c6ed33b2bcb38
SHA1 75f7834d14e0af2678f485f13e318c52b4700bcf
SHA512 b1dc510f9d26f7de491836115bd575146cd5feace6f676285dc31955f2655b1496ecaa6e1fc502ec847b754f00dbc85edc979009c66b8d939d4607eaed63c34a
TLSH
T12D41AB63D5BEFC2B247D49EA3E56BC081A79F431018198F5DE97912CB0925B72706073
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5ac7b6.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Network\TransportSecurity~RFe5ac7b6.TMP
Size 1KB
SHA256 e8a4f09a59257c7f77d262b45bf39b00438c3f3eaa89838bd8d00aed06bacc70
MD5 7ed81bb7e5f13ff2a1b7540e296b94ed
SHA1 02def906e21206ed875df9c15cd6efe016ecd0fb
SHA512 aa0d83fc9acbe52e8f2bebed011a54789ac86bc7f6435bf11fe3b1630081414820ef523ce15cc3fd62648792b30aa755405c4ab89a42179e8061af6b88841bca
TLSH
T16931486386BEFC2B607D49EF3E45FC0D1A79E431019194F6DE97912CA0925BB5B06073
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 9KB
SHA256 e4fb3c8fbbca5a44137865edd06ef73eff92d2223c4e67c46dce4cb3d6183245
MD5 664fd9003ed85fc6a4cb39414398ab92
SHA1 079a298f547b0ac0d8d8748bf2f17e92b09dcfa3
SHA512 09f9491abbe06258e168c4132381d3097df20e753f3f68713f352e74300b6962480297bdb7ab20766e37c27406ef8bf4d61a8df8ce2e97ec6ec7655acc2c303b
SSDEEP 192:st4yaYOok6FFsV+FdjoAQZ2wsA/qaC2e7YTHI7IvIaeVBTvmGA8TKv2G6K:st4yaYJsGyAjwXSEKL9K
TLSH
T1A41232479AB42EBF0CDAE129F824F22ED3DA153668D41E85EFF8891C04DB5EC6111C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Preferences
Size 9KB
SHA256 65ad8912da4f82d2b13a6d27f9a08c11421a9e0f9ba6649010d53bd346087efc
MD5 a8f5017a9424352fc4a25119e96e1d52
SHA1 9c4f1e5d076c4a9718729c7f25414a54da5741d1
SHA512 9983f9034d0165bb3c28b450c4a2566b24a4640096e4ac9d767ef0b499f613ecab279fcfeb8f6ddd6d7e71748a4251e5eb7a7051efa13f25ba8e388e0359de67
SSDEEP 192:st4yoYOok6FFsV+Fdj3HZ2wsA/qaC2e7YTHI7IvIaeVBTvmGA8TKvwG6K:st4yoYJsGZswXSEKLvK
TLSH
T16F1232479AB82EBF0DDAE125F824F22ED3DA153664D41E85EFF8891C04DB5ED6101C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 2KB
SHA256 d3db17c257e83c7132e493e8f30b684aed39b83eef330e4f57adac622d8b43a4
MD5 326894c43e418a54453384b23bad7ac3
SHA1 bdfdd56690a86dff9090c467f6eac441d09ee5ec
SHA512 e21152346786ce82bbb8a9c1974be74adfa11fbe59f672646806dd468d6cd8cc8f1cca79555f08518ac2152e4853fd0a57b51254a2227b405e78c07efced6ced
TLSH
T1CB5163337954AA37CAF6A604BA462B279F3A50A2DA511F55EBDD0B0D00D769C2B01C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 14KB
SHA256 32cebb40de4887e6f939db7cbe47d36844f47ed5754617eda338e7253c7ed068
MD5 046bf3838dfea1e049890024fe270099
SHA1 0652c190352c50e3b73e7b2e74a755206fa92d4f
SHA512 51fbbc3854a14973913a2e845c948f5be97fe576d8606f95044b00952d2becf855b22adfbe3aa6219574195e3b2b14018bdcb540043a65cc9ad1e57c2bdde4ce
SSDEEP 192:0DFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4kTNBSe2eoDUhIcRgL:u+aQikB+z/xvxjg/qhE3NBSZ0+Iw9z/
TLSH
T15F628D2765687D379AF7F6047A49074BDBB9987290C26AB88EFD1F0D06C73D8134281B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State
Size 3KB
SHA256 288b7b447b7032a111335a456e8c1a5f6f51898b881db422b5bfe9b589684728
MD5 f2554d0737b7336b3b73c1143349be84
SHA1 cd600cd414142caa34f035a1e7094a6f98553dd5
SHA512 6706a0095c88ef287d44cb93945f836f4bc13a8888c67503ee650a95a07f78471824debfe88d466bb0aa20ad1b6fc836a66d188cc51766e5ca2d0d1a1011d23d
TLSH
T1B161A7376974A93B8EF3DA05B986271ABB695023E5813F99DAEC0F0D00D73C81341C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe596102.TMP

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\Local State~RFe596102.TMP
Size 1KB
SHA256 d0e550880a4a761c5c9578603580f4f017192dce8438b8014cd0247028715c9d
MD5 659b717b7b981630088b087d07b08ca1
SHA1 f2d8da62c68427d5cca70a6f6bd7dae553fe157c
SHA512 96588e5fb35da3a4e49e458d836ba3fca866a9a0488c135bf0a87df640d7438938dfd0f6dc29e16778244be4505a07f8eda1accf711e0b15f4a5f0e0d21b83fd
TLSH
T110214273B4A85B33DEA6B246B213661F6F355062C1514F44E6DE4B0E01E719C9A2583B
MD5 SHA1 SHA512 TLSH

Submit Download

b9c69564-0de4-43fe-b251-716252a7ee0e.tmp

Path C:\Users\Admin\AppData\Local\ModrinthApp\EBWebView\b9c69564-0de4-43fe-b251-716252a7ee0e.tmp
Size 3KB
SHA256 bcf23550a81508e471a18f3bd5c0ed8a57e8286610d56e5be782b008536c208f
MD5 a3d224662a35d4dba7d32a9d0de71762
SHA1 4d67cf6ffbfe8fd69cf75aae91a5594b125ad664
SHA512 8aeb62c3ae11f6b3e006cf1dbf25da7d2cc188ac54b45b968d61039916f323577653ceb185ed9ebd88c8568ccb97721381fdca0884dc69df36f1fe6ace7bd7ce
TLSH
T1C17174336574A93B8EF2E505B9462B07ABA95067D9913F99DAEC0F0D01D73C82341C2B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2916_311741320\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1836-327-0x00007FF971570000-0x00007FF971571000-memory.dmp

Download

memory/1836-326-0x00007FF972730000-0x00007FF972731000-memory.dmp

Download

memory/5412-734-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-739-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-735-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-737-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-738-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-736-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-730-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5412-728-0x0000029E576E0000-0x0000029E576E1000-memory.dmp

Download

memory/5852-97-0x00007FF972AD0000-0x00007FF972AD1000-memory.dmp

Download

memory/6632-26-0x00007FF972AD0000-0x00007FF972AD1000-memory.dmp

Download