Analysis
- user interaction
yes - max time kernel
795s - max time network
899s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
07/10/2026, 18:45
General
- Target MillidaLauncherSetup (1).exe
- Size 1.8MB
- Sample261007-xej2lsdt7x
- SHA256 046b8e68ac8a639b95bfd93c65199ec57b037901cdec20b6734fd0e8c2de6241
Malware Config
Signatures
- Family: CrypVault
Ransomware family which makes encrypted files look like they have been quarantined by AV.
- A potential corporate email address has been identified in the URL 10 IoCs
- Executes dropped EXE 2 IoCs
- Loads dropped DLL 7 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Network Share Discovery 1 TTPs
Attempt to gather information on host network.
- Drops file in Program Files directory 64 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies trusted root certificate store through registry 1 TTPs 2 IoCs
A root certificate was added, modified, or removed in the trusted certificate store registry paths.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 5 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks processor information in registry 2 TTPs 20 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 6 IoCs
- Modifies registry class 27 IoCs
- Modifies system certificate store 2 TTPs 1 IoCs
- Suspicious behavior: EnumeratesProcesses 11 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
- Suspicious use of AdjustPrivilegeToken 12 IoCs
- Suspicious use of FindShellTrayWindow 10 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup (1).exe"C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup (1).exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-2132-0\millida-launcher-setup.exe"C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-2132-0\millida-launcher-setup.exe" /S /R2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe"C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe"3⤵
- Executes dropped EXE
- Adds Run key to start application
- Checks whether UAC is enabled
- Modifies trusted root certificate store through registry
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5208.5136.177125154912964405024⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff9a785b078,0x7ff9a785b084,0x7ff9a785b0905⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1720,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:25⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:35⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2340,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3684,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3704,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2248,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4628,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4556,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4796,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3104,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4584,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4844,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4816,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4824,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4632,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:85⤵
- Modifies registry class
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4672,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4972,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.187 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4680,i,16087034099197273803,18172832590865574975,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:85⤵
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://millida.net/auth/launcher?code=JPMX-QFWP4⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ff9a35fc188,0x7ff9a35fc194,0x7ff9a35fc1a05⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,17243343275597365137,6994148127138146357,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:35⤵
- A potential corporate email address has been identified in the URL
- System Time Discovery
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,13903767517066906735,14635668390071951728,262144 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:25⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,14700001763543176771,8376941997587959201,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18203611166335593042,2161758906297675638,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,6667333113354657563,15399082098178345462,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4076,i,527155365661161041,13237496436615919799,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4088,i,3627926658370794765,10651936949440768993,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:25⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,16699649324628808293,12030232856314548103,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,14313921530225942001,16998797200587068256,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,13831426668994853734,14762121967135469874,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,6773793894574244267,2502931897021750546,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5876,i,4938814588693831897,17450247964380560049,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,2084627280838273997,3085811754935865831,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6692,i,16522797139953253128,3164588979380397765,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6896,i,1685678462074516586,3651240852924895264,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,9669265708427208771,15687610441745881602,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,8479624343269386625,14332631220445526228,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,15110910737441494908,17404795556102571474,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7068,i,2779757454333874233,14204043583651399568,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,15110910737441494908,17404795556102571474,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4796,i,17007434115375154109,3393614013342443444,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6936,i,11737222710207031281,1624987460179754981,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7708,i,10128434819733755301,2528123181634066266,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7888,i,17475714678801153676,16639216326048142665,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7904 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8096,i,2711239147551122907,12239778492182298532,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6932,i,14480306308012949665,18118701639235810322,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,8783481522016396155,8453447282629000021,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8108,i,11313437546242563266,3964613355147000057,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8128,i,534293432156095527,9362176011665336860,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8156,i,12974148832194251660,13971786801399148550,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8644 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,17938806408727088182,233476292270605809,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8492 /prefetch:85⤵
- Modifies registry class
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7500,i,10656417953880741458,8029807458707911755,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,531253101681760237,11404881426577115223,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5532,i,1918358123063407524,17799046760160509423,262144 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,3609763552440465231,3530138283400378570,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,6399507701462828330,8968527077899259648,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,1132074772852603519,15237530638947718609,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,5591620880374380142,3247960826147318327,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7344,i,13862365428784794487,15515312566641538019,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,13149999234063224567,7643150586059574759,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=1184 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5396,i,8047523645662523650,7682668774432636123,2097152 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,12581678787872042220,1883346295545379151,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7880,i,15127306830820322263,2363621717467733964,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7356,i,17682854204045211686,4846762278727479009,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7880,i,1500681754311372502,6686995464941104396,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3996,i,7600679332522747655,16750693317387929644,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,15831074882373299008,1424138678018530755,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,4349414190352464072,7145622331365245011,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,6998041037222473717,5724111778782586776,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7328,i,13948667110875019804,16215107814646796354,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7372,i,9525460169481788823,13596368478735715858,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:85⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,11672729627132148935,380861346794978595,524288 --field-trial-handle=2944,i,14509180604106518602,12740057290157157575,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:85⤵
-
-
-
C:\Windows\system32\where.exe"where" java4⤵
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version4⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" -version4⤵
-
-
C:\Users\Admin\AppData\Roaming\net.millida.launcher\java\25~14583a57d6381\bin\java.exe"C:\Users\Admin\AppData\Roaming\net.millida.launcher\java\25~14583a57d6381\bin\java.exe" -version4⤵
-
-
C:\Users\Admin\AppData\Roaming\net.millida.launcher\java\25~14583a57d6381\bin\MillidaLauncher.exe"C:\Users\Admin\AppData\Roaming\net.millida.launcher\java\25~14583a57d6381\bin\MillidaLauncher.exe" -Xmx3072M -XX:+IgnoreUnrecognizedVMOptions -Dfile.encoding=UTF-8 -Dsun.stdout.encoding=UTF-8 -Dsun.stderr.encoding=UTF-8 -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=50 -XX:+DisableExplicitGC -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1 -XX:+AlwaysPreTouch -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\assets\log_configs\client-1.21.2.xml -Dlog4j2.formatMsgNoLookups=true -Dauthlibinjector.yggdrasil.prefetched=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 -javaagent:C:\Users\Admin\AppData\Roaming\net.millida.launcher\agents\authlib-injector.jar=https://api.millida.net/v2/yggdrasil -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xss1M --sun-misc-unsafe-memory-access=allow --enable-native-access=ALL-UNNAMED -Djava.library.path=C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\versions\26.1.2\natives -Djna.tmpdir=C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\versions\26.1.2\natives -Dorg.lwjgl.system.SharedLibraryExtractPath=C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\versions\26.1.2\natives -Dio.netty.native.workdir=C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\versions\26.1.2\natives -Dminecraft.launcher.brand=MillidaLauncher -Dminecraft.launcher.version=0.1 -cp C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\at\yawk\lz4\lz4-java\1.10.1\lz4-java-1.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\azure\azure-json\1.4.0\azure-json-1.4.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\github\oshi\oshi-core\6.9.0\oshi-core-6.9.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\google\code\gson\gson\2.13.2\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\google\guava\failureaccess\1.0.3\failureaccess-1.0.3.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\google\guava\guava\33.5.0-jre\guava-33.5.0-jre.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\ibm\icu\icu4j\77.1\icu4j-77.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\microsoft\azure\msal4j\1.23.1\msal4j-1.23.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\authlib\7.0.63\authlib-7.0.63.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\brigadier\1.3.10\brigadier-1.3.10.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\datafixerupper\9.0.19\datafixerupper-9.0.19.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\jtracy\1.0.37\jtracy-1.0.37.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\jtracy\1.0.37\jtracy-1.0.37-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\logging\1.6.11\logging-1.6.11.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\com\mojang\text2speech\1.18.11\text2speech-1.18.11.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\commons-codec\commons-codec\1.19.0\commons-codec-1.19.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\commons-io\commons-io\2.20.0\commons-io-2.20.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-buffer\4.2.7.Final\netty-buffer-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-codec-base\4.2.7.Final\netty-codec-base-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-codec-compression\4.2.7.Final\netty-codec-compression-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-codec-http\4.2.7.Final\netty-codec-http-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-common\4.2.7.Final\netty-common-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-handler\4.2.7.Final\netty-handler-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-resolver\4.2.7.Final\netty-resolver-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.2.7.Final\netty-transport-classes-epoll-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-transport-classes-kqueue\4.2.7.Final\netty-transport-classes-kqueue-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.2.7.Final\netty-transport-native-unix-common-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\io\netty\netty-transport\4.2.7.Final\netty-transport-4.2.7.Final.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\it\unimi\dsi\fastutil\8.5.18\fastutil-8.5.18.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\net\java\dev\jna\jna-platform\5.17.0\jna-platform-5.17.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\net\java\dev\jna\jna\5.17.0\jna-5.17.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\apache\commons\commons-compress\1.28.0\commons-compress-1.28.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\apache\commons\commons-lang3\3.19.0\commons-lang3-3.19.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.25.2\log4j-api-2.25.2.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.25.2\log4j-core-2.25.2.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.25.2\log4j-slf4j2-impl-2.25.2.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\jcraft\jorbis\0.0.17\jorbis-0.0.17.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\joml\joml\1.10.8\joml-1.10.8.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-freetype\3.4.1\lwjgl-freetype-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-freetype\3.4.1\lwjgl-freetype-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-freetype\3.4.1\lwjgl-freetype-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-freetype\3.4.1\lwjgl-freetype-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.4.1\lwjgl-glfw-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.4.1\lwjgl-glfw-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.4.1\lwjgl-glfw-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.4.1\lwjgl-glfw-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.4.1\lwjgl-jemalloc-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.4.1\lwjgl-jemalloc-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.4.1\lwjgl-jemalloc-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.4.1\lwjgl-jemalloc-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-openal\3.4.1\lwjgl-openal-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-openal\3.4.1\lwjgl-openal-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-openal\3.4.1\lwjgl-openal-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-openal\3.4.1\lwjgl-openal-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.4.1\lwjgl-opengl-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.4.1\lwjgl-opengl-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.4.1\lwjgl-opengl-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.4.1\lwjgl-opengl-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-stb\3.4.1\lwjgl-stb-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-stb\3.4.1\lwjgl-stb-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-stb\3.4.1\lwjgl-stb-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-stb\3.4.1\lwjgl-stb-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.4.1\lwjgl-tinyfd-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.4.1\lwjgl-tinyfd-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.4.1\lwjgl-tinyfd-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.4.1\lwjgl-tinyfd-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl\3.4.1\lwjgl-3.4.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl\3.4.1\lwjgl-3.4.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl\3.4.1\lwjgl-3.4.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\lwjgl\lwjgl\3.4.1\lwjgl-3.4.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\slf4j\slf4j-api\2.0.17\slf4j-api-2.0.17.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\ow2\asm\asm-analysis\9.10.1\asm-analysis-9.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\ow2\asm\asm-tree\9.10.1\asm-tree-9.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\org\ow2\asm\asm-util\9.10.1\asm-util-9.10.1.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\net\fabricmc\sponge-mixin\0.17.4+mixin.0.8.7\sponge-mixin-0.17.4+mixin.0.8.7.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\libraries\net\fabricmc\fabric-loader\0.19.5\fabric-loader-0.19.5.jar;C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\versions\26.1.2\26.1.2.jar "-DFabricMcEmu= net.minecraft.client.main.Main " net.fabricmc.loader.impl.launch.knot.KnotClient --username asasadsd222211 --version 26.1.2 --gameDir C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\profiles\Minecraft2612 --assetsDir C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\assets --assetIndex 30 --uuid 4374ea6cff2a4f298c94d6c4a479b2be --accessToken 93b5350275974fff9bec5d35debdc7ab2d5427f70e984ca4a2e22e8ccd789cb3 --clientId millida --xuid 0 --versionType release4⤵
-
-
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"2⤵
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1980 -prefsLen 27100 -prefMapHandle 1984 -prefMapSize 270279 -ipcHandle 2076 -initialChannelId {ab0ba466-ebae-4108-8eb7-40186dce84e9} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu3⤵
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27136 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {37f46f20-ed06-4d1d-9750-50828419c233} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket3⤵
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3792 -prefsLen 27325 -prefMapHandle 3796 -prefMapSize 270279 -jsInitHandle 3800 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3808 -initialChannelId {072a8cc1-9a19-4e60-968f-a51470eb6fe6} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4004 -prefsLen 27325 -prefMapHandle 4008 -prefMapSize 270279 -ipcHandle 4116 -initialChannelId {616e3af8-7397-4afb-9118-4f0f1d359a3a} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd3⤵
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3832 -prefsLen 34824 -prefMapHandle 3844 -prefMapSize 270279 -jsInitHandle 3800 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4268 -initialChannelId {b170175c-9985-4e7d-ad2f-2b7e99d1f510} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4808 -prefsLen 35012 -prefMapHandle 4832 -prefMapSize 270279 -ipcHandle 4888 -initialChannelId {daa8c1b5-1057-4cf1-a21d-bbe3f091d81c} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5184 -prefsLen 32952 -prefMapHandle 5180 -prefMapSize 270279 -jsInitHandle 5176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5188 -initialChannelId {271cfcce-cf49-49d8-ae37-443e11e8b614} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5332 -prefsLen 32952 -prefMapHandle 5336 -prefMapSize 270279 -jsInitHandle 5340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5348 -initialChannelId {42fec9a8-1dd3-4e73-b303-5e5d013e5c9c} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5512 -prefsLen 32952 -prefMapHandle 5516 -prefMapSize 270279 -jsInitHandle 5520 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5528 -initialChannelId {e316a013-7f3d-4c5e-b7d5-a72e03f028b2} -parentPid 1224 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1224" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab3⤵
- Checks processor information in registry
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2Replay Monitor
Loading Replay Monitor...
Downloads
verified_contents.json
keys.json
manifest.fingerprint
Filtering Rules
Filtering Rules-AA
Filtering Rules-CA
LICENSE
Part-DE
Part-ES
Part-FR
Part-IT
Part-NL
Part-RU
Part-ZH
adblock_snippet.js
manifest.fingerprint
crl-set
manifest.fingerprint
Advertising
Analytics
CompatExceptions
Content
Cryptomining
Entities
Fingerprinting
LICENSE
Social
Staging
TransparentAdvertisers
Advertising
Analytics
Content
Cryptomining
Entities
Fingerprinting
LICENSE
Social
Staging
manifest.fingerprint
verified_contents.json
hyph-af.hyb
hyph-be.hyb
hyph-bg.hyb
hyph-cs.hyb
hyph-cu.hyb
hyph-cy.hyb
hyph-da.hyb
hyph-de-1901.hyb
hyph-de-1996.hyb
hyph-de-ch-1901.hyb
hyph-el.hyb
hyph-en-gb.hyb
hyph-en-us.hyb
hyph-es.hyb
hyph-et.hyb
hyph-eu.hyb
hyph-fr.hyb
hyph-ga.hyb
hyph-gl.hyb
hyph-gu.hyb
hyph-hr.hyb
hyph-hu.hyb
hyph-hy.hyb
hyph-it.hyb
hyph-ka.hyb
hyph-kn.hyb
hyph-la.hyb
hyph-lt.hyb
hyph-lv.hyb
hyph-ml.hyb
hyph-mn-cyrl.hyb
hyph-mul-ethi.hyb
hyph-nl.hyb
hyph-or.hyb
hyph-pa.hyb
hyph-pt.hyb
hyph-ru.hyb
hyph-sk.hyb
hyph-sl.hyb
hyph-sq.hyb
hyph-sv.hyb
hyph-ta.hyb
hyph-te.hyb
hyph-tk.hyb
hyph-uk.hyb
hyph-und-ethi.hyb
manifest.fingerprint
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
model.markov
passwords.txt
ranked_dicts
surnames.txt
test.txt
us_tv_and_film.txt
manifest.fingerprint
protocols.json
Microsoft.CognitiveServices.Speech.core.dll
manifest.fingerprint
verified_contents.json
widevinecdm.dll
widevinecdm.dll.sig
manifest.fingerprint
crs.pb
ct_config.pb
kp_pinslist.pb
manifest.fingerprint
nav_config.json
domain_actions.dll
deny_domains.list
deny_etld1_domains.list
deny_full_domains.list
automation.js
classification.js
extraction.js
travel-facilitated-booking-bing.js
travel-facilitated-booking-kayak.js
autofill_bypass_cache_forms.json
edge_autofill_global_block_list.json
regex_patterns.json
v1FieldTypes.json
arbitration_metadata.txt
llm_user_input_extractor_config.json
office_endpoints_list.json
smart_switch_list.json
LICENSE
verified_contents.json
sets.json
verified_contents.json
safety_tips.pb
typosquatting_list.pb
0073d44b-90d1-4847-936b-06e19a9107e9.tmp
27387439-adb8-4631-a0b1-0443f62babc7.tmp
3092912b-ac2d-48e8-9a28-587cfe864fba.tmp
545641cc-3bef-4d9a-a6e2-ba74cfcc7bcd.tmp
7011619f-1fa2-4874-88a2-2caf38c03376.tmp
74dca2d1-51d3-4a2a-9f9a-e9f3e08b3e75.tmp
7a211a37-f8d8-450c-9d3d-3a6fc1a33a08.tmp
7dae2ad6-ad41-4fde-8cc4-f235d52c989d.tmp
872fb822-ae55-4f7e-955a-cb9de08c55a4.tmp
928f054e-76ae-4f1f-b9e3-d3b370344575.tmp
997b2868-ec67-4593-8d09-ac64cebe43ab.tmp
9c161828-bee5-437e-99c1-8da119d8ff31.tmp
manifest.json
settings.dat
settings.dat
0334f370-0ec5-426a-84ec-811e2bbbc914.tmp
037f4676-f4a6-4654-b868-2509c5e3b7d3.tmp
13a81782-c387-426f-9b4d-2b16ea2d8090.tmp
2852b0f1-6b2f-4e5a-af4c-3d3eb686bfda.tmp
4a1fd558-2492-431e-b173-25703f5c67ba.tmp
4f081267-b575-4642-81d4-10a2a827e2c4.tmp
6959d9d3-534a-46d6-93a2-ebbfb341f13b.tmp
938b60d8-2c63-4821-9511-6f097974f05d.tmp
95492924-ef6e-45f7-bbe8-401bfa9cbed9.tmp
LOG
LOG.old
LOG.old
f_000066
f_000067
f_000068
f_000069
f_00006a
f_00006b
f_00006c
f_00006d
f_00006e
f_00006f
f_000070
f_000071
f_000072
f_000073
f_000074
f_000075
f_000076
f_000077
f_000078
f_000079
f_00007a
f_00007b
f_000081
f_000082
f_000083
f_000084
f_000085
f_000086
f_000087
f_000088
f_000089
f_00008d
f_00008f
f_000093
f_000095
f_000097
f_000098
f_00009a
f_00009c
f_00009d
f_0000a0
f_0000a3
f_0000a8
f_0000a9
f_0000aa
f_0000ab
f_0000ac
f_0000bc
f_0000bd
f_0000be
f_0000c7
f_0000d5
f_0000e9
f_0000ec
f_0000ee
bf872b7fe706b547_0
temp-index
temp-index
temp-index
temp-index
the-real-index
81f208bf-30bf-40b7-9bda-be108c604138.tmp
dasherSettingSchema.json
MANIFEST-000001
38baa6c5-ad4f-468e-afe1-6e9d97b899fb.tmp
51f0eea8-2185-4dcf-97d7-4281966e639f.tmp
7d1f4ad9-2d98-4ba1-b078-e79f198d2c77.tmp
8c034fd6-b4a2-4698-874a-213c48b4c2fe.tmp
cf1284fd-85a4-4e35-bc18-f1e991bd4e9e.tmp
e249670c-7ddd-4de5-96f9-4d33086a2b28.tmp
temp-index
temp-index
the-real-index
temp-index
temp-index
the-real-index
temp-index
the-real-index
temp-index
temp-index
the-real-index
todelete_623cd082b6202da0_0_1
index.txt.tmp
index.txt.tmp
index.txt.tmp
index.txt.tmp
index
index.txt
index.txt.tmp
67a473248953641b_0
f1cdccba37924bda_0
f1cdccba37924bda_1
temp-index
the-real-index
sync_diagnostic.log
index.txt
index.txt.tmp
a51f57d1-8426-483a-8dd2-2f5172b3d672.tmp
ac9982a5-dfce-4fff-9325-8ed946c1e1c8.tmp
dd8ac1d9-1f9f-4138-ac31-d3af13978171.tmp
e9a4f77f-45bc-4495-9e50-8b301bb5ed13.tmp
ef1492aa-a069-4310-a7b3-4ec8e9f20469.tmp
f8975304-dc08-482b-b23c-b53303bc0940.tmp
manifest.json
OperationConfig
b1d504b4-4903-4816-864d-69bc4bfef056.tmp
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
RevisitationBloomfilter
manifest.json
manifest.json
manifest.json
a2f3fb41-85af-4068-97fa-0091239e915a.tmp
b689285f-0c4f-462b-b01d-d97e52bc4d87.tmp
bc27184a-4b97-4633-89c7-3ad2d38fa4ca.tmp
09e26ee0-41de-4cc0-bbab-4fbdf3e582ac.tmp
18e88402-40ba-460c-82b6-9473e8d51299.tmp
3bde4618-8891-4b71-829f-f1f8d0e03e64.tmp
659a18a3-0876-4132-b19d-733b9df68732.tmp
6a4ae339-5703-4272-9660-27b9559b5db4.tmp
729837fb-2d3d-41b7-95ec-5be7125d49f3.tmp
b96661fa-15a5-4c68-86b9-474967a89c57.tmp
c5be4af6-b23f-482c-b086-c9d3460665c5.tmp
cd9975f4-6581-4301-9b19-0924c51ef661.tmp
d0b39ba7-ebf2-41fb-89d0-fde88be69627.tmp
decd81e6-b3e2-40cd-9592-380431e5773b.tmp
e2ad1bef-3e18-4b54-a203-c50bcf3f8261.tmp
ef875e2d-babe-4bd2-9369-59cd208b3371.tmp
e924d4fd-f8f1-437c-93e5-649af01a5aad.tmp
ef096feb-2dbc-4185-9971-0c8e06493ecc.tmp
5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
uninstall.exe
millida-launcher-setup.exe
activity-stream.contile.json
activity-stream.discovery_stream.json
15622
16591
18845
24169
24589
27218
6313
AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
E9338C5CCF1E2FCF149487351399F198A4F9FCD6
webext.sc.lz4
webext.sc.lz4
1165958b-de13-4ec9-9fa6-c99ce8d458cf.tmp
392b1046-2f58-4396-966c-2f1256dc2c1b.tmp
590d0c10-1cea-4cd3-b307-b4120880eecb.zip
System.dll
nsis_tauri_utils.dll
messages.json
content.js
ecfdc0ee-ddbe-4b5c-893e-136a63e1e37c.tmp
tmpaddon
tmpaddon
tmpaddon
1004895b-1f14-4860-8d27-80b89fb1c650.tmp
1f3d9dee-b373-4590-b31d-78f6eac55f76.tmp
2a664b7a-2aa4-41a1-be83-3849525ad86e.tmp
484a986a-9d4f-49e7-8ea7-5bf1d5b725e1.tmp
57a1bc27-6a69-4a31-92bd-90336a81d54a.tmp
manifest.fingerprint
manifest.json
manifest.json
settings.dat
settings.dat
throttle_store.dat
1b5189c1-a99f-49a2-962b-ce83744463e3.tmp
3bad0746-2843-458d-b684-8c55e06ca0a0.tmp
8755ab09-16bc-4c19-9d61-54e80058451f.tmp
f_000002
f_000009
f_00000b
temp-index
the-real-index
index
data_0
data_1
data_2
data_3
04c2246d-3688-49c2-9b9d-bde2bd43a58e.tmp
0da119f5-b32c-4ce5-a628-aa5447239d27.tmp
1ba2fe03-7f1d-4469-aab8-c1afd29563d0.tmp
31d0d3fd-c60f-44f3-a709-9d0eada7f31a.tmp
44ac7790-47d5-4fab-81c8-1083ee8b012a.tmp
499b23cc-907b-4b16-9ca6-ca7f6e5e1245.tmp
4f68ad99-339c-4036-b993-ba03c25fceea.tmp
734cc7ff-5416-474a-843c-cd2b405b8a13.tmp
8c3499c8-4a91-49ad-8049-54fb1ed4d888.tmp
9ca4b32f-3446-4173-915c-27ce9ab44f9e.tmp
Network Persistent State
SCT Auditing Pending Reports
TransportSecurity
a8f152da-2d18-4613-8fea-63710802da39.tmp
c138868e-2d60-4fbd-86b5-17ebc2d7821d.tmp
d8f1f7fd-bfb4-4a67-a75d-ac55524a0561.tmp
d9042bc8-5ce1-484e-8395-a02c39061ef4.tmp
dbe71575-67df-49a2-ad2b-cedbea1ddbdd.tmp
e5203a9a-2b48-404e-bd19-06d1bb9f1e32.tmp
e8a6082f-0292-4bf0-ae00-c8c10b033ec5.tmp
ff73a629-87cb-48ea-9556-388917ac6514.tmp
Preferences
MANIFEST-000001
CURRENT
be4b8d88-5432-40c4-b29d-ab03b8f4dae9.tmp
Local State
manifest.json
manifest.json
manifest.json
Other
manifest.json
manifest.json
manifest.json
manifest.json
c0584270-8651-4cae-bcf8-be1a27612a11.tmp
cf1969c4-91a6-4bfb-aac7-77fb6b883bbc.tmp
d15f9a45-c44a-430b-90e3-309d2d096197.tmp
ed98b605-5a8e-4fde-8e1f-9a7d581a5990.tmp
hyph-as.hyb
hyph-hi.hyb
hyph-nb.hyb
manifest.json
default.dic
6824f4a902c78fbd.customDestinations-ms
8602SLA3AXS00BWCDTHV.temp
DV56L94324W12673L9OK.temp
E82NKR4VP6OJQN8KSE3X.temp
QZ7ERENRWWN0250DG3BJ.temp
T86FHZDRMZT6CF9YZ7VF.temp
X9VPRO3XKR9EB6S3OKCB.temp
Millida Launcher.lnk
addonStartup.json.lz4
broadcast-listeners.json
broadcast-listeners.json
compatibility.ini
store.json.mozlz4
data.safe.bin
data.safe.tmp
data.safe.tmp
data.safe.tmp
data.safe.tmp
data.safe.tmp
data.safe.tmp
data.safe.tmp
events
events
0e8ff1e6-d37b-46bd-b0b0-e7895257aa1c
42a57aca-8c85-4a00-bc7c-3f79d981a3a5
92cf8572-3267-43f6-8eef-ce8f53feb2eb
c2b6aeb5-306e-4338-8b5b-2ec177599b3c
c4eb8418-fff6-47bd-84ee-e95db0a82585
fe7741e2-a42f-4790-817b-a181fa2ec13c
extension-preferences.json
extensions.json
gmpopenh264.dll
gmpopenh264.info
LICENSE
manifest.json
widevinecdm.dll
widevinecdm.dll.sig
prefs-1.js
prefs-1.js
prefs-1.js
prefs.js
prefs.js
prefs.js
prefs.js
search.json.mozlz4
data.safe.tmp
sessionCheckpoints.json
sessionCheckpoints.json
recovery.jsonlz4
recovery.jsonlz4
recovery.jsonlz4
data.safe.tmp
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
3870112724rsegmnoittet-es.sqlite
targeting.snapshot.json
xulstore.json
authlib-injector.jar
api-ms-win-core-console-l1-1-0.dll
api-ms-win-core-console-l1-2-0.dll
api-ms-win-core-datetime-l1-1-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-fibers-l1-1-0.dll
api-ms-win-core-fibers-l1-1-1.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
api-ms-win-core-libraryloader-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-memory-l1-1-0.dll
api-ms-win-core-namedpipe-l1-1-0.dll
api-ms-win-core-processenvironment-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-crt-conio-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-environment-l1-1-0.dll
api-ms-win-crt-filesystem-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-multibyte-l1-1-0.dll
api-ms-win-crt-private-l1-1-0.dll
api-ms-win-crt-process-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-crt-time-l1-1-0.dll
api-ms-win-crt-utility-l1-1-0.dll
awt.dll
dt_socket.dll
extnet.dll
fontmanager.dll
freetype.dll
instrument.dll
j2gss.dll
j2pcsc.dll
j2pkcs11.dll
jaas.dll
jabswitch.exe
jaccessinspector.exe
jaccesswalker.exe
java.dll
java.exe
jvm.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
javaaccessbridge.dll
javajpeg.dll
javaw.exe
jawt.dll
jdwp.dll
jfr.exe
jimage.dll
jli.dll
jrunscript.exe
jsound.dll
jsvml.dll
jwebserver.exe
keytool.exe
kinit.exe
klist.exe
ktab.exe
lcms.dll
management.dll
management_agent.dll
management_ext.dll
mlib_image.dll
msvcp140.dll
net.dll
nio.dll
prefs.dll
rmi.dll
rmiregistry.exe
classes.jsa
classes_coh.jsa
classes_nocoops.jsa
classes_nocoops_coh.jsa
jvm.cfg
millida-mod-variants.json
590470ab0f17afb73a4e41d9cb56fdbe069d275a.5208-115.part
lz4-java-1.10.1.jar
azure-json-1.4.0.jar
oshi-core-6.9.0.jar
gson-2.13.2.jar
failureaccess-1.0.3.jar
guava-33.5.0-jre.jar
icu4j-77.1.jar
msal4j-1.23.1.jar
authlib-7.0.63.jar
blocklist-1.0.10.jar
brigadier-1.3.10.jar
datafixerupper-9.0.19.jar
jtracy-1.0.37-natives-windows.jar
jtracy-1.0.37.jar
logging-1.6.11.jar
patchy-2.2.10.jar
text2speech-1.18.11.jar
commons-codec-1.19.0.jar
commons-io-2.20.0.jar
netty-buffer-4.2.7.Final.jar
netty-codec-base-4.2.7.Final.jar
netty-codec-compression-4.2.7.Final.jar
netty-codec-http-4.2.7.Final.jar
netty-common-4.2.7.Final.jar
netty-handler-4.2.7.Final.jar
netty-resolver-4.2.7.Final.jar
netty-transport-classes-epoll-4.2.7.Final.jar
netty-transport-classes-kqueue-4.2.7.Final.jar
netty-transport-native-unix-common-4.2.7.Final.jar
netty-transport-4.2.7.Final.jar
fastutil-8.5.18.jar
jna-platform-5.17.0.jar
jna-5.17.0.jar
jopt-simple-5.0.4.jar
commons-compress-1.28.0.jar
commons-lang3-3.19.0.jar
log4j-api-2.25.2.jar
log4j-core-2.25.2.jar
log4j-slf4j2-impl-2.25.2.jar
jorbis-0.0.17.jar
joml-1.10.8.jar
jspecify-1.0.0.jar
lwjgl-freetype-3.4.1-natives-windows-arm64.jar
lwjgl-freetype-3.4.1-natives-windows-x86.jar
lwjgl-freetype-3.4.1-natives-windows.jar
lwjgl-freetype-3.4.1.jar
lwjgl-glfw-3.4.1-natives-windows-arm64.jar
lwjgl-glfw-3.4.1-natives-windows-x86.jar
lwjgl-glfw-3.4.1-natives-windows.jar
lwjgl-glfw-3.4.1.jar
lwjgl-jemalloc-3.4.1-natives-windows-arm64.jar
lwjgl-jemalloc-3.4.1-natives-windows-x86.jar
lwjgl-jemalloc-3.4.1-natives-windows.jar
lwjgl-jemalloc-3.4.1.jar
lwjgl-openal-3.4.1-natives-windows-arm64.jar
lwjgl-openal-3.4.1-natives-windows-x86.jar
lwjgl-openal-3.4.1-natives-windows.jar
lwjgl-openal-3.4.1.jar
lwjgl-opengl-3.4.1-natives-windows-arm64.jar
lwjgl-opengl-3.4.1-natives-windows-x86.jar
lwjgl-opengl-3.4.1-natives-windows.jar
lwjgl-opengl-3.4.1.jar
lwjgl-stb-3.4.1-natives-windows-arm64.jar
lwjgl-stb-3.4.1-natives-windows-x86.jar
lwjgl-stb-3.4.1-natives-windows.jar
lwjgl-stb-3.4.1.jar
lwjgl-tinyfd-3.4.1-natives-windows-arm64.jar
lwjgl-tinyfd-3.4.1-natives-windows-x86.jar
lwjgl-tinyfd-3.4.1-natives-windows.jar
lwjgl-tinyfd-3.4.1.jar
lwjgl-3.4.1-natives-windows-arm64.jar
lwjgl-3.4.1-natives-windows-x86.jar
lwjgl-3.4.1-natives-windows.jar
lwjgl-3.4.1.jar
slf4j-api-2.0.17.jar
cloth-basic-math-0.6.1-17ea6dce277cc3b8.jar
conditional-mixin-0.6.3-371dd4ded000e1fe.jar
dynamic_fps_common-3.11.7-61e418f4f28d137a.jar
fabric-api-base-2.0.3+ece063234c-7170855526725e7a.jar
fabric-api-lookup-api-v1-2.0.12+d5a053b64c-11931c803ba7caf5.jar
fabric-biome-api-v1-18.0.5+2fa62b4e4c-91a113d6e1a8d752.jar
fabric-block-api-v1-3.0.2+ec56b6014c-8e4f408cac5274d0.jar
fabric-block-getter-api-v2-2.0.6+ec56b6014c-a4bae47622890f49.jar
fabric-command-api-v2-3.0.5+e2bdee784c-f07ba647759974b1.jar
fabric-content-registries-v0-11.+af8a297c4c-adb5206d5cb75ea8.jar
fabric-convention-tags-v2-4.6.2+4f11f7994c-3a6f22fb7969575f.jar
fabric-crash-report-info-v1-1.0.+9f78a5a84c-589ea3e139733e37.jar
fabric-creative-tab-api-v1-5.0.1+a981f2874c-233f9aedf65e813f.jar
fabric-data-attachment-api-v1-2.+44a0bd1d4c-bd450e2a93fd9769.jar
fabric-data-generation-api-v1-24+cda368334c-ddf352a72877550f.jar
fabric-debug-api-v1-1.0.1+c792624d4c-e7b2a11f20cc44b.jar
fabric-dimensions-v1-5.1.7+ad343a8d4c-309502a012d22ab8.jar
fabric-entity-events-v1-5.0.2+e2bdee784c-8923e8bf92c6fc2f.jar
fabric-events-interaction-v0-5.2+07b380be4c-e54494ae5c4b89bd.jar
fabric-game-rule-api-v1-4.0.5+d871b99e4c-b4b954e27c19e509.jar
fabric-item-api-v1-14.3.0+6d1aaa724c-b25a5b1dcd203334.jar
fabric-key-mapping-api-v1-2.0.4+e2bdee784c-94183d5383f49dbf.jar
fabric-lifecycle-events-v1-4.1.1+df84eb3d4c-63499046adf8894e.jar
fabric-loot-api-v3-3.0.12+00a1fba64c-2f2e8ccc3d79d7b5.jar
fabric-menu-api-v1-2.0.15+d871b99e4c-c2d27358267cb06d.jar
fabric-message-api-v1-7.0.5+dae8ce3e4c-465cf38ca78d40f2.jar
fabric-model-loading-api-v1-8.0.+c80601bb4c-9abef45cb485317d.jar
fabric-networking-api-v1-6.3.2+a217cccf4c-d7440dfbab3486ab.jar
fabric-object-builder-api-v1-23.+abb459f14c-92416158e540ef1a.jar
fabric-particles-v1-5.0.16+b61fef434c-cb37388926bfefb5.jar
fabric-permission-api-v1-1.0.3+5730ecca4c-94619de7287ab90a.jar
fabric-recipe-api-v1-9.0.17+be4b75ae4c-b19d3d1ffc2bce47.jar
fabric-registry-sync-v0-7.1.1+2fa62b4e4c-172a932ca417732c.jar
fabric-renderer-api-v1-13.0.8+c80601bb4c-a1f03506fbbd9e57.jar
fabric-renderer-indigo-8.1.5+1403e82c4c-a472dc26b1773394.jar
fabric-rendering-fluids-v1-6.0.1+d871b99e4c-8f520b6e33edd3fd.jar
fabric-rendering-v1-23.3.1+e9207d814c-2b7121476e642e4d.jar
fabric-resource-conditions-api-v+83dd0ba34c-5d1b45c85b372054.jar
fabric-resource-loader-v0-3.3.17+4fc5413f4c-f86e8dbe6b21b166.jar
fabric-resource-loader-v1-2.0.10+7c44c7324c-65f8e5beb976946f.jar
fabric-screen-api-v1-5.1.0+981dd9b24c-b107b5782844bb35.jar
fabric-serialization-api-v1-2.0.+11a26f314c-a2fd2b7a702c2efe.jar
fabric-sound-api-v1-2.0.4+11a26f314c-42b9522d355d1e8f.jar
fabric-tag-api-v1-2.1.1+371cf5db4c-afb91ea3461e417c.jar
fabric-transfer-api-v1-8.0.6+357ea7334c-b94d431c97859974.jar
fabric-transitive-access-widener+3ff549fb4c-818ce7c12b988ad2.jar
mixinextras-0.5.5-cd81fe35163f5828.jar
mixinsquared-0.2.0-928210a9dd2fedd4.jar
net_lenni0451_reflect-1.6.2-5aedc814774d9589.jar
net_lostluma_battery-2.1.0-4b6b4d294938878.jar
transition-1.0.25-298c18134036d6.jar
trender-1.0.17-dcb16c387dd6f36f.jar
sodium-options.json.tmp
millida-content.json
millida-content.json
millida-content.json
millida-content.json
millida-content.json
millida-content.json
millida-settings.json
millida-settings.json
millida-settings.json
ImmediatelyFast-Fabric-1.15.3+26.1.jar
cloth-config-26.1.154.jar
dynamic-fps-3.11.7+minecraft-26.1.0-fabric.jar
entityculling-fabric-1.11.2-mc26.1.jar
fabric-api-0.155.3+26.1.2.jar
ferritecore-9.0.0-fabric.jar
lithium-fabric-0.24.7+mc26.1.2.jar
millida-mod-fabric-26.1.2-0.2.9.jar
moreculling-fabric-26.1.2-1.7.3.jar
sodium-fabric-0.9.2+mc26.1.2.jar
options.txt
version_manifest_v2.json.5208.2.tmp
26.1.2.jar
glfw.dll
jemalloc.dll
jna9435430491974870206.dll
lwjgl.dll
lwjgl_tinyfd.dll
playtime.json
profiles.json
secrets.bin
achievement.wav
case_burst.wav
chest_card.wav
chest_crack.wav
chest_epic.wav
chest_gold.wav
chest_hit.wav
chest_open.wav
chest_rare.wav
click.wav
close.wav
crash.wav
delete.wav
error.wav
install.wav
login.wav
nav.wav
notify.wav
toggle.wav
ui-prefs.json
ui-prefs.json
ui-prefs.json
ui-prefs.json
ui-prefs.json
ui-prefs.json
Millida Launcher.lnk
memory/840-509-0x00007FF9C8340000-0x00007FF9C8341000-memory.dmp
memory/840-510-0x00007FF9C7940000-0x00007FF9C7941000-memory.dmp
memory/2076-545-0x00007FF9C7D00000-0x00007FF9C7D01000-memory.dmp
memory/5984-697-0x0000023C54F10000-0x0000023C54F1C000-memory.dmp
memory/5984-687-0x0000023C54F60000-0x0000023C54F63000-memory.dmp
memory/5984-716-0x0000023C54FE0000-0x0000023C54FE3000-memory.dmp
memory/5984-717-0x0000023C54FD0000-0x0000023C54FD6000-memory.dmp
memory/5984-714-0x0000023C54FC0000-0x0000023C54FC9000-memory.dmp
memory/5984-713-0x0000023C54FD0000-0x0000023C54FD5000-memory.dmp
memory/5984-711-0x0000023C54FB0000-0x0000023C54FB8000-memory.dmp
memory/5984-750-0x0000023C5D880000-0x0000023C5D88D000-memory.dmp
memory/5984-710-0x0000023C54FC0000-0x0000023C54FC4000-memory.dmp
memory/5984-749-0x0000023C5D890000-0x0000023C5D897000-memory.dmp
memory/5984-746-0x0000023C5D870000-0x0000023C5D87D000-memory.dmp
memory/5984-745-0x0000023C5D880000-0x0000023C5D887000-memory.dmp
memory/5984-777-0x0000023C51BB0000-0x0000023C51BB1000-memory.dmp
memory/5984-743-0x0000023C5D860000-0x0000023C5D864000-memory.dmp
memory/5984-804-0x0000023C620D0000-0x0000023C620D4000-memory.dmp
memory/5984-719-0x0000023C54FF0000-0x0000023C54FF4000-memory.dmp
memory/5984-802-0x0000023C620A0000-0x0000023C620A4000-memory.dmp
memory/5984-720-0x0000023C54FE0000-0x0000023C54FE8000-memory.dmp
memory/5984-801-0x0000023C620C0000-0x0000023C620C2000-memory.dmp
memory/5984-799-0x0000023C620B0000-0x0000023C620B2000-memory.dmp
memory/5984-797-0x0000023C62080000-0x0000023C62088000-memory.dmp
memory/5984-722-0x0000023C5D800000-0x0000023C5D806000-memory.dmp
memory/5984-723-0x0000023C54FF0000-0x0000023C54FFC000-memory.dmp
memory/5984-725-0x0000023C5D810000-0x0000023C5D813000-memory.dmp
memory/5984-726-0x0000023C5D800000-0x0000023C5D806000-memory.dmp
memory/5984-728-0x0000023C5D820000-0x0000023C5D822000-memory.dmp
memory/5984-796-0x0000023C620A0000-0x0000023C620A4000-memory.dmp
memory/5984-708-0x0000023C54FA0000-0x0000023C54FAC000-memory.dmp
memory/5984-707-0x0000023C54FB0000-0x0000023C54FB6000-memory.dmp
memory/5984-705-0x0000023C54F80000-0x0000023C54F84000-memory.dmp
memory/5984-685-0x0000023C54F50000-0x0000023C54F52000-memory.dmp
memory/5984-699-0x0000023C54F80000-0x0000023C54F85000-memory.dmp
memory/5984-688-0x0000023C54F40000-0x0000023C54F46000-memory.dmp
memory/5984-690-0x0000023C54F70000-0x0000023C54F74000-memory.dmp
memory/5984-691-0x0000023C54F60000-0x0000023C54F68000-memory.dmp
memory/5984-729-0x0000023C5D810000-0x0000023C5D814000-memory.dmp
memory/5984-731-0x0000023C5D830000-0x0000023C5D832000-memory.dmp
memory/5984-733-0x0000023C5D840000-0x0000023C5D848000-memory.dmp
memory/5984-734-0x0000023C5D820000-0x0000023C5D82F000-memory.dmp
memory/5984-736-0x0000023C5D850000-0x0000023C5D852000-memory.dmp
memory/5984-737-0x0000023C5D840000-0x0000023C5D844000-memory.dmp
memory/5984-739-0x0000023C5D860000-0x0000023C5D868000-memory.dmp
memory/5984-740-0x0000023C5D850000-0x0000023C5D85F000-memory.dmp
memory/5984-742-0x0000023C5D870000-0x0000023C5D872000-memory.dmp
memory/5984-783-0x0000023C5DFE0000-0x0000023C5DFE4000-memory.dmp
memory/5984-784-0x0000023C5DFD0000-0x0000023C5DFD8000-memory.dmp
memory/5984-704-0x0000023C54FA0000-0x0000023C54FA2000-memory.dmp
memory/5984-702-0x0000023C54F90000-0x0000023C54F92000-memory.dmp
memory/5984-786-0x0000023C5DFF0000-0x0000023C5DFF2000-memory.dmp
memory/5984-789-0x0000023C62080000-0x0000023C62085000-memory.dmp
memory/5984-700-0x0000023C54F00000-0x0000023C54F0A000-memory.dmp
memory/5984-683-0x0000023C54F30000-0x0000023C54F36000-memory.dmp
memory/5984-792-0x0000023C62090000-0x0000023C62092000-memory.dmp
memory/5984-790-0x0000023C5DFE0000-0x0000023C5DFE9000-memory.dmp
memory/5984-682-0x0000023C54F40000-0x0000023C54F43000-memory.dmp
memory/5984-681-0x0000023C54F30000-0x0000023C54F31000-memory.dmp
memory/5984-680-0x0000023C54F20000-0x0000023C54F21000-memory.dmp
memory/5984-424-0x00007FF9C7D00000-0x00007FF9C7D01000-memory.dmp
memory/5984-693-0x0000023C54F80000-0x0000023C54F82000-memory.dmp
memory/5984-694-0x0000023C54F70000-0x0000023C54F74000-memory.dmp
memory/5984-696-0x0000023C54F00000-0x0000023C54F06000-memory.dmp