Analysis

  • user interaction
    yes
  • max time kernel
    1798s
  • max time network
    1440s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    12/10/2026, 16:50

General

  • Target
    sample.html
  • Size 9KB
  • Sample261012-vchpnaeb87
  • SHA256 8e763df89543dc72b37672955df5aad9c46a9a20a7200f33407cac01115d8a6d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 47 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops Chrome extension 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

  • Drops file in System32 directory 51 IoCs
  • Drops file in Windows directory 23 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Kills process with taskkill 3 IoCs
  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • NTFS ADS 4 IoCs
  • Suspicious behavior: AddClipboardFormatListener 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 51 IoCs
  • Suspicious use of SetWindowsHookEx 21 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4964
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0x50,0x114,0x7ffc6f01c728,0x7ffc6f01c734,0x7ffc6f01c740
      2⤵
        PID:1260
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,8149881763062297780,16875425541806148903,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2144 /prefetch:11
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:2124
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,10789681096895124538,2905980073649448961,262144 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1940 /prefetch:2
        2⤵
          PID:1720
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,14394719144394555391,15405162709632991236,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2252 /prefetch:13
          2⤵
            PID:3464
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2944,i,4781538324116234732,9662237149167110995,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2972 /prefetch:1
            2⤵
              PID:2952
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2940,i,13805154896114560184,16113723849799552322,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2936 /prefetch:1
              2⤵
                PID:3660
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5164,i,1821122747051575164,17181723616264084837,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5168 /prefetch:14
                2⤵
                  PID:3428
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5416,i,18140416609041995790,6710195465773155719,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5520 /prefetch:1
                  2⤵
                    PID:2488
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3588,i,116571230532191517,11400769732291671620,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5468 /prefetch:1
                    2⤵
                      PID:1288
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4284,i,12326523205365861229,13246434535139449163,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3952 /prefetch:1
                      2⤵
                        PID:2316
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3136,i,7132040923552867286,13598906210966724280,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2920 /prefetch:1
                        2⤵
                          PID:1556
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5772,i,5676312931294876326,4623871361697115008,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5764 /prefetch:1
                          2⤵
                            PID:3844
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,4936393933993129134,10552888165478680552,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5636 /prefetch:14
                            2⤵
                              PID:1736
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,10516951369140162113,275531615710467820,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5848 /prefetch:14
                              2⤵
                                PID:3804
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,17360027637547819912,14257756661260936587,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5824 /prefetch:14
                                2⤵
                                  PID:3172
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5460,i,10709579651996349026,3677701600784012608,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5736 /prefetch:1
                                  2⤵
                                    PID:4432
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3104,i,7203751542364319146,5915772567410679996,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3068 /prefetch:1
                                    2⤵
                                      PID:3700
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5576,i,15125992491583221561,4739463658896251942,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5812 /prefetch:1
                                      2⤵
                                        PID:4928
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5928,i,12040668608024618870,6502415939498015128,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5944 /prefetch:12
                                        2⤵
                                          PID:3220
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,4692881694597443179,12945270487310034704,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5964 /prefetch:14
                                          2⤵
                                          • Modifies registry class
                                          PID:552
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5516,i,14343689050325358773,2942940661300051323,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5784 /prefetch:1
                                          2⤵
                                            PID:3356
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6316,i,14472505988099044381,7336604298183727598,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6292 /prefetch:1
                                            2⤵
                                              PID:504
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6476,i,2502347362288065536,5107679425933360401,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6484 /prefetch:1
                                              2⤵
                                                PID:3608
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6792,i,213363654903037895,13135105550861915394,262144 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=980 /prefetch:10
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:3248
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6784,i,8320783898645346368,13298637956240674839,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6776 /prefetch:14
                                                2⤵
                                                • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                • NTFS ADS
                                                PID:3184
                                              • C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe
                                                "C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"
                                                2⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Modifies registry class
                                                • Suspicious use of WriteProcessMemory
                                                PID:1472
                                                • C:\Windows\SysWOW64\TaskKill.exe
                                                  TaskKill /IM elyprismlauncher.exe /F
                                                  3⤵
                                                  • System Location Discovery: System Language Discovery
                                                  • Kills process with taskkill
                                                  PID:1036
                                                • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Suspicious behavior: AddClipboardFormatListener
                                                  PID:1212
                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                              1⤵
                                                PID:3552
                                              • C:\Windows\system32\svchost.exe
                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                1⤵
                                                  PID:4324
                                                • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"
                                                  1⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Suspicious behavior: AddClipboardFormatListener
                                                  PID:1592
                                                • C:\Windows\System32\rundll32.exe
                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                  1⤵
                                                    PID:408
                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                    1⤵
                                                    • Modifies registry class
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:848
                                                  • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"
                                                    1⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Suspicious behavior: AddClipboardFormatListener
                                                    PID:4528
                                                  • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\StopTrace.MTS"
                                                    1⤵
                                                    • Suspicious behavior: AddClipboardFormatListener
                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:4164
                                                  • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\SubmitCopy.aiff"
                                                    1⤵
                                                      PID:2096
                                                    • C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE
                                                      "C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" /s "C:\Users\Admin\Downloads\UnblockConnect.ppsm" /ou ""
                                                      1⤵
                                                      • Checks processor information in registry
                                                      • Enumerates system info in registry
                                                      • Suspicious behavior: AddClipboardFormatListener
                                                      • Suspicious use of SetWindowsHookEx
                                                      PID:3828
                                                    • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
                                                      "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /n "C:\Users\Admin\Downloads\LockRegister.xlt"
                                                      1⤵
                                                      • Checks processor information in registry
                                                      • Enumerates system info in registry
                                                      • Suspicious behavior: AddClipboardFormatListener
                                                      • Suspicious use of SetWindowsHookEx
                                                      PID:3704
                                                    • C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe
                                                      "C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"
                                                      1⤵
                                                      • Executes dropped EXE
                                                      • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                      • Reads the TCP/IP host and domain name from the registry
                                                      • System Location Discovery: System Language Discovery
                                                      • Modifies registry class
                                                      • NTFS ADS
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:4560
                                                      • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe" /S _?=C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:3896
                                                        • C:\Windows\SysWOW64\TaskKill.exe
                                                          TaskKill /IM elyprismlauncher.exe /F
                                                          3⤵
                                                          • System Location Discovery: System Language Discovery
                                                          • Kills process with taskkill
                                                          PID:2432
                                                      • C:\Windows\SysWOW64\TaskKill.exe
                                                        TaskKill /IM elyprismlauncher.exe /F
                                                        2⤵
                                                        • System Location Discovery: System Language Discovery
                                                        • Kills process with taskkill
                                                        PID:4392
                                                      • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe
                                                        C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe /install /passive /norestart
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4420
                                                        • C:\Windows\Temp\{8661F434-1644-451F-BDB9-35E802224F09}\.cr\vc_redist.x64.exe
                                                          "C:\Windows\Temp\{8661F434-1644-451F-BDB9-35E802224F09}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728 /install /passive /norestart
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:8
                                                          • C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe
                                                            "C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4B221FAD-3F8C-4AA7-9050-EE4C78061783} {17D1C113-8E3D-488D-89B3-F2BC9E1C6B71} 8
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Adds Run key to start application
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies registry class
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3864
                                                            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1208 -burn.embedded BurnPipe.{A541020E-89C0-4036-8EB2-FC7C3213914B} {70E035C2-5C0C-45F5-8D8D-8705C508A629} 3864
                                                              5⤵
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:2840
                                                              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1208 -burn.embedded BurnPipe.{A541020E-89C0-4036-8EB2-FC7C3213914B} {70E035C2-5C0C-45F5-8D8D-8705C508A629} 3864
                                                                6⤵
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:1252
                                                                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{63E04238-6A5B-4CE1-94EE-62FB658E95CF} {0B539035-4A63-443F-B866-28B671DA19C0} 1252
                                                                  7⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Modifies registry class
                                                                  PID:2556
                                                      • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"
                                                        2⤵
                                                        • Executes dropped EXE
                                                        • Reads the TCP/IP host and domain name from the registry
                                                        • Checks processor information in registry
                                                        • Modifies system certificate store
                                                        • Suspicious behavior: AddClipboardFormatListener
                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4680
                                                        • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exe
                                                          C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exe --check-only --dir C:/Users/Admin/AppData/Roaming/ElyPrismLauncher --debug
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • Suspicious behavior: AddClipboardFormatListener
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4208
                                                          • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                            C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe --version
                                                            4⤵
                                                            • Executes dropped EXE
                                                            • Suspicious behavior: AddClipboardFormatListener
                                                            PID:592
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:3912
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:4752
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx6144m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • Checks processor information in registry
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:5392
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          PID:4836
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:2688
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:3792
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:2660
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          PID:4272
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:3912
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:4624
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:3180
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • Checks processor information in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:4936
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:2500
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          PID:5976
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:6124
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:1212
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:6132
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • Checks processor information in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:2828
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          PID:5360
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:5412
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:5404
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:3232
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          PID:5240
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:5716
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:5156
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:4424
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3(1)/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • Checks processor information in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:4968
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:480
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:5904
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:2660
                                                        • C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                          C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Checks processor information in registry
                                                          PID:2580
                                                    • C:\Windows\system32\vssvc.exe
                                                      C:\Windows\system32\vssvc.exe
                                                      1⤵
                                                      • Checks SCSI registry key(s)
                                                      PID:2432
                                                    • C:\Windows\system32\srtasks.exe
                                                      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                      1⤵
                                                        PID:4572
                                                      • C:\Windows\system32\msiexec.exe
                                                        C:\Windows\system32\msiexec.exe /V
                                                        1⤵
                                                        • Enumerates connected drives
                                                        • Drops file in System32 directory
                                                        • Drops file in Windows directory
                                                        • Modifies data under HKEY_USERS
                                                        • Modifies registry class
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:1652
                                                      • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                        "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:3892
                                                        • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                          "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261012175449.log" /install
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:2752
                                                          • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                            "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261012175449.log" /install
                                                            3⤵
                                                            • Executes dropped EXE
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2908
                                                            • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                              "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{DBB8C5B3-08CB-4501-8BCE-4CAD373430FF} {A44F7FDB-9FC7-40C4-AF68-72ADA5B1E8E3} 2908
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Adds Run key to start application
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              PID:2544
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                        1⤵
                                                        • Drops Chrome extension
                                                        • Enumerates system info in registry
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                        • Suspicious use of SendNotifyMessage
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:2536
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6f01c728,0x7ffc6f01c734,0x7ffc6f01c740
                                                          2⤵
                                                            PID:5060
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,2243855116222218100,882578773797421851,262144 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1868 /prefetch:2
                                                            2⤵
                                                              PID:1656
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,76674710007665064,9073264170727945180,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:11
                                                              2⤵
                                                              • System Time Discovery
                                                              PID:2484
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2268,i,13450763588424969900,9963123462152329104,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2300 /prefetch:13
                                                              2⤵
                                                                PID:4532
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,15011542577285297801,16693394166239675854,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3384 /prefetch:1
                                                                2⤵
                                                                  PID:3632
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,14890258027473931208,3875381878099856997,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3432 /prefetch:1
                                                                  2⤵
                                                                    PID:2004
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4528,i,14687682157186956875,2616847622793991180,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4552 /prefetch:1
                                                                    2⤵
                                                                      PID:4840
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4560,i,5433843359552106882,8150013160082467523,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4696 /prefetch:14
                                                                      2⤵
                                                                        PID:1560
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5276,i,5123069836605411626,16740411310080089732,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5296 /prefetch:1
                                                                        2⤵
                                                                          PID:4652
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,4608383261061148177,7208406130525164958,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5456 /prefetch:14
                                                                          2⤵
                                                                            PID:948
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,15711129171869299771,3689078609392969322,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5600 /prefetch:14
                                                                            2⤵
                                                                              PID:3912
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,17254342946910100187,16952284679460843754,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5488 /prefetch:14
                                                                              2⤵
                                                                                PID:3460
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,14854293693773470235,10711231428766956431,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5900 /prefetch:14
                                                                                2⤵
                                                                                  PID:3912
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5692,i,3260242307299691486,7419277662615518217,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5260 /prefetch:1
                                                                                  2⤵
                                                                                    PID:6060
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5640,i,12303888867681695519,571318470806036094,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5540 /prefetch:9
                                                                                    2⤵
                                                                                      PID:6068
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,2418954433159807891,6216217906939610037,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5340 /prefetch:14
                                                                                      2⤵
                                                                                      • NTFS ADS
                                                                                      PID:5592
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6736,i,16929071954315055979,6725342693505153851,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5316 /prefetch:14
                                                                                      2⤵
                                                                                      • NTFS ADS
                                                                                      PID:5700
                                                                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                    1⤵
                                                                                      PID:872
                                                                                    • C:\Windows\system32\svchost.exe
                                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                      1⤵
                                                                                        PID:3256
                                                                                      • C:\Windows\system32\svchost.exe
                                                                                        C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                        1⤵
                                                                                          PID:1896
                                                                                        • C:\Windows\system32\AUDIODG.EXE
                                                                                          C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC
                                                                                          1⤵
                                                                                            PID:5508
                                                                                          • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                            "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                            1⤵
                                                                                            • Network Service Discovery
                                                                                            PID:5904
                                                                                          • C:\Windows\system32\OpenWith.exe
                                                                                            C:\Windows\system32\OpenWith.exe -Embedding
                                                                                            1⤵
                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                            PID:5948
                                                                                          • C:\Windows\system32\svchost.exe
                                                                                            C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                            1⤵
                                                                                            • Checks processor information in registry
                                                                                            • Modifies registry class
                                                                                            PID:4980
                                                                                          • C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
                                                                                            "C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
                                                                                            1⤵
                                                                                              PID:4736

                                                                                            Network

                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                  Replay Monitor

                                                                                                  Loading Replay Monitor...

                                                                                                  Downloads

                                                                                                  e5c2111.rbs

                                                                                                  • Path C:\Config.Msi\e5c2111.rbs
                                                                                                  • Size 19KB
                                                                                                  • SHA256 dfe4d99ee1f2b531bf2fc81300fe8af6a8427e631516469b81aee05a672d0205
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  e5c211d.rbs

                                                                                                  • Path C:\Config.Msi\e5c211d.rbs
                                                                                                  • Size 19KB
                                                                                                  • SHA256 946a5ad5e8c77feeead1d08ddee89369d5e04981377ebe9db11f7f53fff29eb0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  e5c2124.rbs

                                                                                                  • Path C:\Config.Msi\e5c2124.rbs
                                                                                                  • Size 21KB
                                                                                                  • SHA256 4a63008486e168684714128d8e3f803c4c71b468022d95a5c6ae959401993484
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  e5c2133.rbs

                                                                                                  • Path C:\Config.Msi\e5c2133.rbs
                                                                                                  • Size 21KB
                                                                                                  • SHA256 5376b5def5b9683b1842dd2fcb1fe93a65a90d54c145c2742d67abb8f5ebca77
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  vc_runtimeMinimum_x64.msi

                                                                                                  • Path C:\ProgramData\Package Cache\{43B0D101-A022-48F4-9D04-BA404CEB1D53}v14.44.35211\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
                                                                                                  • Size 208KB
                                                                                                  • SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  39c09daf-03c6-44b3-bfaf-93b0062b1bef.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\39c09daf-03c6-44b3-bfaf-93b0062b1bef.tmp
                                                                                                  • Size 131KB
                                                                                                  • SHA256 dfa5d7deeb1e119d53d551d13ce5d3f783db97729e078f2f3ec51091e5430f42
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  409ee53a-351b-49f5-8e8e-5a2b4ee940d8.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\409ee53a-351b-49f5-8e8e-5a2b4ee940d8.tmp
                                                                                                  • Size 131KB
                                                                                                  • SHA256 2c3df6faacf376cff48e1073176496344e4a218a2c411f031b69c00a00605b6b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  4107ac91-33f0-4147-834d-5b34e641d657.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4107ac91-33f0-4147-834d-5b34e641d657.tmp
                                                                                                  • Size 304KB
                                                                                                  • SHA256 aa6195c844ef70fdd791c5ff3f64fca786a739d057311cc6c7a7b8bb14a5196d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  72f98d53-1a30-431f-9667-2472c79e7f48.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\72f98d53-1a30-431f-9667-2472c79e7f48.tmp
                                                                                                  • Size 304KB
                                                                                                  • SHA256 094ab10f933d8ca9d28020d5eb3820ecb981c5a52abfbb25a2dfe49d910622e3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  8df91869-456b-4074-b429-e455f6185f91.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8df91869-456b-4074-b429-e455f6185f91.tmp
                                                                                                  • Size 130KB
                                                                                                  • SHA256 b687fd1cb1883838fb4992c39718f63121e97f2a716f1fcdc91b4ac815c11812
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  92bc4753-1e2a-4c7a-b787-71de0a86ba8a.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\92bc4753-1e2a-4c7a-b787-71de0a86ba8a.tmp
                                                                                                  • Size 131KB
                                                                                                  • SHA256 f604fe914e66a8e067d92cafd79db623df81756f62c998d9fdf68e606f6799c8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  settings.dat

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                  • Size 40B
                                                                                                  • SHA256 c2d38f87b82351e56999bfb338a328be7b5543d7f35e87e2f4aca52ecd6b616e
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  07c19ef8-3933-4ad5-a305-d8f647b7049a.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\07c19ef8-3933-4ad5-a305-d8f647b7049a.tmp
                                                                                                  • Size 14KB
                                                                                                  • SHA256 8fa00b70fdd0028d44d603b2021a5c2861741ffe544de99879dd8ddeb1635905
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  24675d5b-7d1d-4ced-911b-a044c9d63afd.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\24675d5b-7d1d-4ced-911b-a044c9d63afd.tmp
                                                                                                  • Size 13KB
                                                                                                  • SHA256 801080e9d05128ea2c20704d84e5d0f05a1ba72891468452100582dcbc3dbef7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  2f656602-d6e3-44dc-bb99-a1b0cd58f81f.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2f656602-d6e3-44dc-bb99-a1b0cd58f81f.tmp
                                                                                                  • Size 13KB
                                                                                                  • SHA256 49d9e3e239757797f035f69da73e5993f69c9c30a13844c2968e4f9ed6499eaf
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  4ee0f2bc-f127-4b63-8cf8-4a8aa6004926.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4ee0f2bc-f127-4b63-8cf8-4a8aa6004926.tmp
                                                                                                  • Size 15KB
                                                                                                  • SHA256 40caab9da13010e115a0e9c84892879386dde6eb3c5301c535a3a0c12031c4c7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  61331d8c-9307-46fd-8508-e517b9494ed9.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\61331d8c-9307-46fd-8508-e517b9494ed9.tmp
                                                                                                  • Size 14KB
                                                                                                  • SHA256 5c81e036c4c79acb2a550f49299e4636cad32679eba5bf0bdf94531c379ffa3e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  6c1b5ccd-1fbe-495e-aa76-171bf622a822.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6c1b5ccd-1fbe-495e-aa76-171bf622a822.tmp
                                                                                                  • Size 6B
                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  9cb8f005-ade9-4c06-a94e-929d8cacafc0.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9cb8f005-ade9-4c06-a94e-929d8cacafc0.tmp
                                                                                                  • Size 14KB
                                                                                                  • SHA256 a25a6c9d659f794cd0afc862e9acce3e89bb42567b566c623c5a1b9e7eeda3d7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  BrowsingTopicsState

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                  • Size 414B
                                                                                                  • SHA256 66d4a6a59426c663f6144a12142f921e4c8c53e28fa02c7dc476b3369b88ecd2
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  f_000004

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                                                                  • Size 350KB
                                                                                                  • SHA256 664f8cb63089dd85e6eeb30d585c8876832636d4426bf4727c7552259734172f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000008

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                                                                  • Size 38KB
                                                                                                  • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000009

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                                  • Size 164KB
                                                                                                  • SHA256 b7e89c947e1ac67c0bac88b110f88b415e0810f61fc15e23588fbff1808c0e9c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000a

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
                                                                                                  • Size 90KB
                                                                                                  • SHA256 3a681b8fbf264e50ab1f788250f5171bce0daedc8c5ad55155ad9583a65aa9c1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000b

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                                                  • Size 437KB
                                                                                                  • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000c

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
                                                                                                  • Size 518KB
                                                                                                  • SHA256 43872435c0d3d6eac5546d7cefea18e7ae8c62202d0215dd804f5b6baccb9915
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000d

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
                                                                                                  • Size 65KB
                                                                                                  • SHA256 8abafe0b7c96f06b43f4887b3940a642bba65509e899425df3592aa70e8a26ff
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000e

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                                                                  • Size 57KB
                                                                                                  • SHA256 161b5ac49bfd78ccba1094d852d150dbcd0d1580ba716f528a7a3ef9e2faf906
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00000f

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
                                                                                                  • Size 56KB
                                                                                                  • SHA256 a5722411c5895cdce787f73ab083b9c1d500a2aad65748af269bc418bab75e0b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000010

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
                                                                                                  • Size 44KB
                                                                                                  • SHA256 86ceedf15683b6740ac94c62cd68aa3d19c8c837c971f7dfb2e1ddf0114112d3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000011

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                  • Size 136KB
                                                                                                  • SHA256 161916b802b575dd2afbd0542a76b0c55e4f3694b8b8adedc93845cf3a489441
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000012

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                  • Size 28KB
                                                                                                  • SHA256 414517ced12e698a756ac288eee6a9c1923ed952a09e3a49cca44320d933f5eb
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000019

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
                                                                                                  • Size 24KB
                                                                                                  • SHA256 48ee55bcca98b32a5e05d98fb1673a76449c35261ae0007e93a7cd7e95b1b7fd
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00001f

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                                                  • Size 53KB
                                                                                                  • SHA256 19ecb89120f6a4cbdd3822b96d12041a720d2c20f777a630f8fd8f2139f565f8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000026

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
                                                                                                  • Size 123KB
                                                                                                  • SHA256 3e8def8613402b499a20e2975598b9f4e86c3fa0c197201e1ab5856c96fb6b15
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000027

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                                                                  • Size 73KB
                                                                                                  • SHA256 bcfb2449c8705c8fefca9c6722fb101f25034a0c48956ac979f93f33f3cd86b9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000028

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
                                                                                                  • Size 464KB
                                                                                                  • SHA256 be7d54f037c523ed06f0410cbca1c4f066ffa739608f9a7f24033cbc3d3b0380
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000032

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
                                                                                                  • Size 70KB
                                                                                                  • SHA256 14b7e3e561ecdcc3fff8ee006bd7e01637245ed7230cec98ef3b7b29afb51450
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000039

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
                                                                                                  • Size 27KB
                                                                                                  • SHA256 85d3e19dde7025a55e679ac45f60343c9765f6b7492c3bab63d7fdb0a65cde03
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000047

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
                                                                                                  • Size 34KB
                                                                                                  • SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000048

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048
                                                                                                  • Size 346KB
                                                                                                  • SHA256 a1ceb3df9fb44cafac57aa6814112f415b31d062f45029b84330a4c8b6ee2223
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000049

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                                  • Size 39KB
                                                                                                  • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000070

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
                                                                                                  • Size 96KB
                                                                                                  • SHA256 d6ab2e4e860bef8563041820a62629171382b2a790462800faed4b3ac48d7e8b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000071

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
                                                                                                  • Size 53KB
                                                                                                  • SHA256 76522cb09c91d6f8fcb3b4163ca574cbf2bba901965fa02351fd5bdff17b4fce
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000072

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                  • Size 33KB
                                                                                                  • SHA256 41ed2f0f479a93d6506a079b0bb3ecf3a12c29b607312b1db4d071e8c2ca113f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000073

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                  • Size 34KB
                                                                                                  • SHA256 98eee6fe6dc8f6341f80caf9c7e72a5241dd78188d403a12bc6aeb23a3e8c1a3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000074

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                  • Size 58KB
                                                                                                  • SHA256 d324eba6669b64868b4a4eb141fc5a5cb670832873bcd388527d688ce4c9e8e9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                  • Size 6KB
                                                                                                  • SHA256 8c7dd6a01c5a0992edaebd8bf7929b46b89934712a71afcf959f82c29170f445
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                  • Size 6KB
                                                                                                  • SHA256 3698e27b5672bcd01ecee277752d4c47c187440b911393b051b2657938a1877a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                  • Size 2KB
                                                                                                  • SHA256 b1bfeac23288ba6b07f0d88b782793a50d18f90173da8bd2c1baec0ec5f8400d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  data_1

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
                                                                                                  • Size 264KB
                                                                                                  • SHA256 aac231fbc1c4f0094615079406f1bf1539342ec615d8fb93afd30a78cc0aaa09
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2536_1502989847\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                                  • Size 593B
                                                                                                  • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  craw_background.js

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2536_1502989847\CRX_INSTALL\craw_background.js
                                                                                                  • Size 531KB
                                                                                                  • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  CURRENT

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\CURRENT
                                                                                                  • Size 16B
                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  MANIFEST-000001

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                  • Size 23B
                                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  20508f61-e74f-4b6c-82bc-761f6098cc2a.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\20508f61-e74f-4b6c-82bc-761f6098cc2a.tmp
                                                                                                  • Size 2B
                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  5b5c4870-0a73-474d-a3cf-da51b89e7bfa.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5b5c4870-0a73-474d-a3cf-da51b89e7bfa.tmp
                                                                                                  • Size 16KB
                                                                                                  • SHA256 61eb57ebd048329bcc59346d9bc8a296a6c9a217b5a211061aa4cacc4f971c97
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  63b5b116-5bf7-4c25-967c-c1ff25ecfd5f.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\63b5b116-5bf7-4c25-967c-c1ff25ecfd5f.tmp
                                                                                                  • Size 3KB
                                                                                                  • SHA256 f2e2fb981a1ed9dfc85ebc89472c54e068d59b10322f3c7c73d2e349bfa4af28
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  a3064c45-7fce-4ec8-9e76-6dd02cd1a0f3.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a3064c45-7fce-4ec8-9e76-6dd02cd1a0f3.tmp
                                                                                                  • Size 2KB
                                                                                                  • SHA256 49d936416d246276d23ac09849fa0ae4826d21a28670462675bc0309f2db51ae
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  f8dcf7c7-9d16-4735-a4c0-86a0796fbff0.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f8dcf7c7-9d16-4735-a4c0-86a0796fbff0.tmp
                                                                                                  • Size 15KB
                                                                                                  • SHA256 23e8c5965eb25b62e14c0b9420e5e40d8ceae038ca2ce67cf2c37abf3c393287
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Secure Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                  • Size 11KB
                                                                                                  • SHA256 abd6daa20de1a8efb404d2e6b18db3d1db5a951ea981436a8e6f2178407c092b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                  • Size 120B
                                                                                                  • SHA256 08c60fa6befcf60458abdcdea44c717a0d540674aafc55fa1df2f5e8c22a6523
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                  • Size 96B
                                                                                                  • SHA256 13b97477d3bcdfba27122facfe0e1379fbe5ac4ccffdedb2f769cb4fa9a068a0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                  • Size 72B
                                                                                                  • SHA256 6153b8fb66f07b6fcaa4ce82167b65125557b8ad85327ee56c2d37f3583bfb88
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                                  • Size 72B
                                                                                                  • SHA256 54fd377c0e24f6abfbc08d2d53dc1b388f93b3c04593c11a9a87acf8b67565bb
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                                  • Size 48B
                                                                                                  • SHA256 f65332d0c8c4710bc8700a1072e0e9ce0f17d6027f67f8155296f57d1ad45c8f
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  data_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_0
                                                                                                  • Size 8KB
                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  data_2

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_2
                                                                                                  • Size 8KB
                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  data_3

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_3
                                                                                                  • Size 8KB
                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                                  MANIFEST-000001

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
                                                                                                  • Size 41B
                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  a728a486-7883-40bc-a741-38b32ff2bb15.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a728a486-7883-40bc-a741-38b32ff2bb15.tmp
                                                                                                  • Size 12KB
                                                                                                  • SHA256 5cfd836643ba5b9046a13197cf293d59998881f69db6acf9db74fd1c4d6141f1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  baf5f7a5-e121-4e90-afa7-7a0612d4f8c1.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\baf5f7a5-e121-4e90-afa7-7a0612d4f8c1.tmp
                                                                                                  • Size 13KB
                                                                                                  • SHA256 689fa7ebcd17afdb7af5dc5a1328aa7884a3e268c8f1115a5f44e99cab67528e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  bccafbb5-6eaa-4cdd-8592-dd767a9467f2.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bccafbb5-6eaa-4cdd-8592-dd767a9467f2.tmp
                                                                                                  • Size 14KB
                                                                                                  • SHA256 63babd9d0619e05a0c49fbd7e0f2e3df463453157073175515285a76473a4a66
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  c0d52154-fadd-4c7b-b33b-d135e8464e82.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c0d52154-fadd-4c7b-b33b-d135e8464e82.tmp
                                                                                                  • Size 12KB
                                                                                                  • SHA256 2dd02a752bb681e3a8f33ff3a41ca7b137afaf2fb3a462a99ad2f68768f96dc4
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  aa56b22e-e9b1-404e-8e00-506bc2f52e6e.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\aa56b22e-e9b1-404e-8e00-506bc2f52e6e.tmp
                                                                                                  • Size 131KB
                                                                                                  • SHA256 7687f76fec90375abbae9d4f143fda1808cebd821e6423b4c69817f65b2ca434
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  d52f1869-e213-41ac-833b-64e8eaaa0f00.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d52f1869-e213-41ac-833b-64e8eaaa0f00.tmp
                                                                                                  • Size 131KB
                                                                                                  • SHA256 03ea84e668ebd28e7cde12e49acc7cd2973d1fa893851124b61895893706aec5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  36A59B10-6A5F-4471-98B2-293FE04486D3

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\odc.officeapps.live.com\36A59B10-6A5F-4471-98B2-293FE04486D3
                                                                                                  • Size 2KB
                                                                                                  • SHA256 a1b0b7b33e6818837aa403f7a73af14ae91ec1409cc76e312c712c8786c092f6
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  F9686701-0A9B-411B-97FE-B0B04989438B

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\odc.officeapps.live.com\F9686701-0A9B-411B-97FE-B0B04989438B
                                                                                                  • Size 582B
                                                                                                  • SHA256 19693fd00585902de63888389d3d2f48f18ff0461b7f22ae7f2ef6462f4bbc40
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  excel.exe_Rules.xml

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
                                                                                                  • Size 1.4MB
                                                                                                  • SHA256 7ce0d3bb953e59ded3b5e9233fb5958f7acd68f4a7551462a68ed1b223ac6f9d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  ~earchHoverUnifiedTileModelCache.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\~earchHoverUnifiedTileModelCache.tmp
                                                                                                  • Size 20KB
                                                                                                  • SHA256 63030d2e2e9b8ed19abc20fa2832393df44657d6a064cca09959537564168325
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Core.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Core.dll
                                                                                                  • Size 9.8MB
                                                                                                  • SHA256 b98eea394a95563879b614dbd4432ce074b0fceeb154c3bae252f4e7a9376a40
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Gui.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Gui.dll
                                                                                                  • Size 9.1MB
                                                                                                  • SHA256 28ca8b9e7d3d1c4e3cfafd6fe63877a05cf10202a240134a11f98384f01c9e37
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Network.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Network.dll
                                                                                                  • Size 1.7MB
                                                                                                  • SHA256 905e1ce3947fadaad566b6deffe345daf7f6efbc57207ea7fcdbfa77669e3de6
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6NetworkAuth.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6NetworkAuth.dll
                                                                                                  • Size 285KB
                                                                                                  • SHA256 2b2cee4bf6cd28c7c65cadc21089902062ac8c76b74340c7c205e2b5db79a4cd
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6OpenGL.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6OpenGL.dll
                                                                                                  • Size 1.9MB
                                                                                                  • SHA256 a41b71127d07924ddda67e787e8765ebf60f217817199f1becdd63f3db88847e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Svg.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Svg.dll
                                                                                                  • Size 617KB
                                                                                                  • SHA256 982a589e52680d7b525da0031eba783d3bbd77e6611cdea5cd276a2b9213f4c9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Widgets.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Widgets.dll
                                                                                                  • Size 6.3MB
                                                                                                  • SHA256 f383fb6b3f6996efe23327ff607e7298fc47ee76e8b8ef8a65f8d2e0a91707e4
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Qt6Xml.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Xml.dll
                                                                                                  • Size 156KB
                                                                                                  • SHA256 c9d4c5c5dbf8d9ef3264f27c67bbaa0cd1aac98bee2f258b4a0a19664e9f18e5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  archive.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\archive.dll
                                                                                                  • Size 716KB
                                                                                                  • SHA256 6ec805309295dca95ba00ea8c0998f1c73aa9a0f504596bbb9030a33e22161e3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  bz2.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\bz2.dll
                                                                                                  • Size 75KB
                                                                                                  • SHA256 2c8e7aed1732081a954f47997263e23717af840b512fe8b3dd421c63840a0751
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  cmark.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\cmark.dll
                                                                                                  • Size 140KB
                                                                                                  • SHA256 f6924bd7a98b0b4f31b265f704670ee51961203302c51c7904d8bd5b5d6b4b91
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  elyprismlauncher.exe

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
                                                                                                  • Size 9.3MB
                                                                                                  • SHA256 93ef3ef7d3522ce61b772dd153154b3565865a9b2dc3a38a3c960b06c511a93a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  elyprismlauncher_filelink.exe

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_filelink.exe
                                                                                                  • Size 92KB
                                                                                                  • SHA256 17defd82a3dd44ca282735b9b848f5c7bbbe9d559b22ebec2153ee6866fb25e3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  elyprismlauncher_updater.exe

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exe
                                                                                                  • Size 396KB
                                                                                                  • SHA256 96ece91095c155609ee606c7ef2379ebe887e450a55a19324f3c4ab3e8ecf52d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qsvgicon.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\iconengines\qsvgicon.dll
                                                                                                  • Size 69KB
                                                                                                  • SHA256 6221fed44f0f560a864312553c6918a536b8e2f04c7cb4e8ee5ba9445338aa96
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  icuuc.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\icuuc.dll
                                                                                                  • Size 36KB
                                                                                                  • SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qgif.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qgif.dll
                                                                                                  • Size 46KB
                                                                                                  • SHA256 4fe24916a961587173c846055a34735b904900fb75716de4fa458c203da3e7ef
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qicns.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qicns.dll
                                                                                                  • Size 54KB
                                                                                                  • SHA256 fcf2c00c959cdc7af7f7ac51e2f1158f37a76c166367bf30c4edc4e0657a835c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qico.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qico.dll
                                                                                                  • Size 44KB
                                                                                                  • SHA256 0d79934047e06591b74201d826af72f6ab595f5df4705ad7f0c234c0e2cf3a32
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qjpeg.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qjpeg.dll
                                                                                                  • Size 564KB
                                                                                                  • SHA256 004f456d513a6bfc58320652c326a023fa8fea905d26b642a561f7081442aff0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qsvg.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qsvg.dll
                                                                                                  • Size 38KB
                                                                                                  • SHA256 b34f721be6e1a451a2eea3c146b0808091577143587d9e6bc689fe8214ff47d7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qtga.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qtga.dll
                                                                                                  • Size 37KB
                                                                                                  • SHA256 c11ac719c2d7c50a4c2924ef4d439772176e00723e96f04d50d4a70163a9abda
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qtiff.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qtiff.dll
                                                                                                  • Size 431KB
                                                                                                  • SHA256 498e9259b9ec69a7f9a77e4ff796b9d2afcaa2e4c7c0a382b401f0b1c07718de
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qwbmp.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qwbmp.dll
                                                                                                  • Size 35KB
                                                                                                  • SHA256 e3a1be02183ebd3c136a4554b34689cbb9ee6699278efda6944e9faf9c02f4e3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qwebp.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qwebp.dll
                                                                                                  • Size 549KB
                                                                                                  • SHA256 3fb2f8be5b82dada607ac9133a5139c770bd210145ea2ded90e69953b21a8d4d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  JavaCheck.jar

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\JavaCheck.jar
                                                                                                  • Size 1KB
                                                                                                  • SHA256 cfa7a3b4d106fa1b15ac284badb4b09032d32bdb836cca9ec9836443bde279e0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  NewLaunch.jar

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\NewLaunch.jar
                                                                                                  • Size 13KB
                                                                                                  • SHA256 c8a2e299f421dc8377ee6a8c27e0a030cfd070c3ad8c2bf0d78adaeb37a29487
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  NewLaunchLegacy.jar

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\NewLaunchLegacy.jar
                                                                                                  • Size 23KB
                                                                                                  • SHA256 5885fd6875a37428b25e61cbbfeb3d17d14ddcadec757f45c45ed6182140da72
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  liblzma.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\liblzma.dll
                                                                                                  • Size 184KB
                                                                                                  • SHA256 0c7b305c012dd6f1c4375517f325346508aff73e412d1c93e89781eede3b897b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lz4.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\lz4.dll
                                                                                                  • Size 123KB
                                                                                                  • SHA256 beb91f7530c74a0cada9987a703370135e745f8c3a70a7feabd3f11ab0f2c2de
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lzo2.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\lzo2.dll
                                                                                                  • Size 112KB
                                                                                                  • SHA256 a6a7d85d3407146e83981492508e4c76d835d2c71f9eb14bfda7d54d47e587cc
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qwindows.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\platforms\qwindows.dll
                                                                                                  • Size 974KB
                                                                                                  • SHA256 540211565db496024246cb8a44437212e6b967f3ee7b899e888f41cc556bf041
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qrencode.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qrencode.dll
                                                                                                  • Size 47KB
                                                                                                  • SHA256 6b73a773e7f6634e89da01b9d1f1a8b79bd8e1b1e3df55ebb6d85eeb21e727af
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qt.conf

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qt.conf
                                                                                                  • Size 1B
                                                                                                  • SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  qtlogging.ini

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qtlogging.ini
                                                                                                  • Size 609B
                                                                                                  • SHA256 64e1b2dbf14930ad0fc05cd756654aeb9126e61a87a45ce862b49457691c2a64
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  qmodernwindowsstyle.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\styles\qmodernwindowsstyle.dll
                                                                                                  • Size 215KB
                                                                                                  • SHA256 f9ddcd6f6319be76ec8ea1b95e6829cdc0f9600242b6bdd07babb0185e9762ab
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qcertonlybackend.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tls\qcertonlybackend.dll
                                                                                                  • Size 100KB
                                                                                                  • SHA256 584392e25d46b6edc255e4c5849920da3e52c01172199def876284525587bb05
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  qschannelbackend.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tls\qschannelbackend.dll
                                                                                                  • Size 256KB
                                                                                                  • SHA256 4632404cb87f860e7bb811f525685509127da8d05f398aada5b2b88318e4a621
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  tomlplusplus-3.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tomlplusplus-3.dll
                                                                                                  • Size 376KB
                                                                                                  • SHA256 ea45603d9cf2de7c07acf79be2f7b31594aad818d0710b796a57ed458688cd6b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  uninstall.exe

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe
                                                                                                  • Size 484KB
                                                                                                  • SHA256 9bd0f4d4f34dd43e0711d870497b809ad7ef6b155b5e244c3b1945354d179e58
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  zlib1.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\zlib1.dll
                                                                                                  • Size 88KB
                                                                                                  • SHA256 2739ea627cef23563e5e2550522a8f126b5fd2bdbdcae12ce4e8dec097638603
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  zstd.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\zstd.dll
                                                                                                  • Size 642KB
                                                                                                  • SHA256 32b6fb4daf2e6383a6a1782de0de7d0565b3c021cfa8f0c28811282b0e607d26
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  c1c4dad4-ae58-4518-aa0c-bd105468c26a.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\c1c4dad4-ae58-4518-aa0c-bd105468c26a.tmp
                                                                                                  • Size 242KB
                                                                                                  • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  jna12727434693152989750.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna12727434693152989750.dll
                                                                                                  • Size 267KB
                                                                                                  • SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  OpenAL.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\OpenAL.dll
                                                                                                  • Size 1.9MB
                                                                                                  • SHA256 ff0671cba224947ddfd5d338ebc1f8ce502be7aea5cbd599d46cd74473dea0e3
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  SDL3.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\SDL3.dll
                                                                                                  • Size 2.8MB
                                                                                                  • SHA256 292406def58d7771919eeae8d55a79d1b42657c8e0176b0602eb97ee796786c9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  freetype.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\freetype.dll
                                                                                                  • Size 2.2MB
                                                                                                  • SHA256 fcac5b5a9a8977f1bc76eccea5e71f6c57250ca5ab8605f06906377e91b6e6b7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  jemalloc.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\jemalloc.dll
                                                                                                  • Size 391KB
                                                                                                  • SHA256 89cfeffe72f01d3634ab4adf7e1597a4a502b463c0472ebfa483b9b41f0ee130
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lwjgl.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl.dll
                                                                                                  • Size 519KB
                                                                                                  • SHA256 15b82b77f3a584b8df9e95899a908fb825cfac80a3ebd78ace0eb473a1069121
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lwjgl_opengl.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl_opengl.dll
                                                                                                  • Size 355KB
                                                                                                  • SHA256 834013019ef4fc203243a7c1d4e0b8c2c49d134ce156780a6d2af424da49d2f1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lwjgl_stb.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl_stb.dll
                                                                                                  • Size 593KB
                                                                                                  • SHA256 cfb4b0c0fc34a0efe7632e76581cba05b489059e2061c1ce164fb4c32ec79547
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  NScurl.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nslD81E.tmp\NScurl.dll
                                                                                                  • Size 6.0MB
                                                                                                  • SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  System.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\System.dll
                                                                                                  • Size 12KB
                                                                                                  • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  modern-wizard.bmp

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\modern-wizard.bmp
                                                                                                  • Size 25KB
                                                                                                  • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  nsDialogs.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\nsDialogs.dll
                                                                                                  • Size 9KB
                                                                                                  • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  nsExec.dll

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\nsExec.dll
                                                                                                  • Size 7KB
                                                                                                  • SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\bg\messages.json
                                                                                                  • Size 796B
                                                                                                  • SHA256 a114e2783d0e9b12155017323ba70838f0f82a71c7ee8dc1f115ae36991241f8
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ca\messages.json
                                                                                                  • Size 675B
                                                                                                  • SHA256 c67898b67f9c9209eafda6532b62d5789863cfb855998dd6a70e7775316cec20
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\cs\messages.json
                                                                                                  • Size 641B
                                                                                                  • SHA256 32290d69a90e6baac428b10382c99221b12773bb9a184f3b93dfb48a4f6d7a40
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\da\messages.json
                                                                                                  • Size 624B
                                                                                                  • SHA256 4977d4a053542ff66967faed6b06585dd70e68e20bfeb533b66fe3287f9655d9
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\de\messages.json
                                                                                                  • Size 651B
                                                                                                  • SHA256 a62ffab910e31531758eee48b2cc71a8857bec3021dead50b668cba3c8667053
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\el\messages.json
                                                                                                  • Size 787B
                                                                                                  • SHA256 a052c32b4fcac61152eb0adb2c260fb6a8256ad104aa0013db93e9798d41a070
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\en\messages.json
                                                                                                  • Size 450B
                                                                                                  • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\es\messages.json
                                                                                                  • Size 661B
                                                                                                  • SHA256 4db9b2721e625c18b9e05c04b31af5d9694712f1caaf6219abe34bb08e5db1c7
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\es_419\messages.json
                                                                                                  • Size 637B
                                                                                                  • SHA256 6659bc3705311d7641a73995dcfea80c7734f2f4ebbc3787b3892a240348324f
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\et\messages.json
                                                                                                  • Size 595B
                                                                                                  • SHA256 c85800bf45942fcc7fd6b1df929c25f9cc2a977a6678966bd03d4b6b69889afd
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fi\messages.json
                                                                                                  • Size 647B
                                                                                                  • SHA256 0bde54b20845124113383b6eb81e43a0f05e4eb0c44bee3c1dfac4cc5fec2836
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fil\messages.json
                                                                                                  • Size 658B
                                                                                                  • SHA256 ec002ed92359f67818b49455dfc579e140368e6a004080af022fd4f57f6b03f2
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fr\messages.json
                                                                                                  • Size 677B
                                                                                                  • SHA256 599491f8c52b945c16c441adf45bfd45afae046da07757d97c56af4de75ed3b5
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hi\messages.json
                                                                                                  • Size 835B
                                                                                                  • SHA256 8106d98c4f8da16db698444409558e29cc96735e188bfa303c333a5d99231c1d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hr\messages.json
                                                                                                  • Size 618B
                                                                                                  • SHA256 a2b2ec359a9dd9dccce02859ce1e738bd30faa4a05f1dc522893ffdf722bbc15
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hu\messages.json
                                                                                                  • Size 683B
                                                                                                  • SHA256 32a249749f12adb6a220bf9adc272c7e5d9ad5497a38b0086d961e3aba17fbc6
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\id\messages.json
                                                                                                  • Size 604B
                                                                                                  • SHA256 c6e8800450602de0f39fe9f6854472383813fb454b08abae7e25a9167ce004c3
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\it\messages.json
                                                                                                  • Size 603B
                                                                                                  • SHA256 cd891c45f7586fb4a2514205a11f260e4a6d4482fa03d901909dd9f57be0536d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ja\messages.json
                                                                                                  • Size 697B
                                                                                                  • SHA256 706312a4a2aef3317223f141eb2b82685345b7eed444f16bb4df3a272716da1f
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ko\messages.json
                                                                                                  • Size 631B
                                                                                                  • SHA256 d1467b8d037114403e8f4efc52e88c4a7feb96126be4cff883feff1084ef7e68
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\lt\messages.json
                                                                                                  • Size 665B
                                                                                                  • SHA256 7c311ab751d840d750c11553c083785813e079c1d464fe568a98c9e3ef3db96c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\lv\messages.json
                                                                                                  • Size 671B
                                                                                                  • SHA256 1fa1df2ca8516def490fb8484e9aa498acff80eef5c9258ffe42d3678e6c7ded
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\nb\messages.json
                                                                                                  • Size 624B
                                                                                                  • SHA256 2cd700aeb57d89c2e73333d0702556ee3ff3863516170f85669bc680fcbdc4e0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\nl\messages.json
                                                                                                  • Size 615B
                                                                                                  • SHA256 92be7c2dc9cfbe5a65e9ce6488d364c8d7ec19e7b67a31e4d43c1cb2b169671c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pl\messages.json
                                                                                                  • Size 636B
                                                                                                  • SHA256 e2699f98c511b18a2afb82eae9a4804b646c4ff1077d80e77c17a3943a6373c2
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                                                  • Size 636B
                                                                                                  • SHA256 6374880fdd1f8af1ee8aea6a06b73be0ab265afceb4fe6f08bde3b3989264b21
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pt_PT\messages.json
                                                                                                  • Size 622B
                                                                                                  • SHA256 c1c94f65fabaf17def98a8587711a56d61b1e5607500e9b01f2824db109f9e83
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ro\messages.json
                                                                                                  • Size 641B
                                                                                                  • SHA256 113a13900cba62fe8aed06751971c23a80a99b47f9be219cf884d57db19611d9
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ru\messages.json
                                                                                                  • Size 744B
                                                                                                  • SHA256 fbaf22ce6e16de174ced8cb5ea3098cca1c3426a2111ff33bd3e64da64ed67ab
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sk\messages.json
                                                                                                  • Size 647B
                                                                                                  • SHA256 7fa16af97e6cfc52ec6008eb679d3f30e7e0c24f9ef2d18a9228eaf4ded9d63b
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sl\messages.json
                                                                                                  • Size 617B
                                                                                                  • SHA256 18aff072ee0df7c3495045435c752a805606e6d5d462ef2321c443f1773f4b3a
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sr\messages.json
                                                                                                  • Size 743B
                                                                                                  • SHA256 7ffde34c58e7c376c042de64def6481dae32be8b70f0b18edf536290cbe0c818
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sv\messages.json
                                                                                                  • Size 630B
                                                                                                  • SHA256 b8ba77e0089b0676545ec16d32468b727812b444f90b33a7a5b748e6c36c4388
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\th\messages.json
                                                                                                  • Size 945B
                                                                                                  • SHA256 2feca577f43d97baeea464741d585892103585208fd0a935b810a03bdce83c88
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\tr\messages.json
                                                                                                  • Size 631B
                                                                                                  • SHA256 a7cb86f30c9c31fe5540282c308ba96adb4ec16ef98c87129eb88105e5bef5fc
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\uk\messages.json
                                                                                                  • Size 720B
                                                                                                  • SHA256 68aba284751eb9c856032062ef9b1651e2a1e5ce5fda0977ffc97d63ba7bed9e
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\vi\messages.json
                                                                                                  • Size 695B
                                                                                                  • SHA256 051f96ed874c11c4a13589b5f68964e4f5b03b52dda223d56524f2ca23760c04
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                                                  • Size 595B
                                                                                                  • SHA256 d804f2a040d21d7511efd5213d8e1721d64964a1a0dbb48e21622ceedc9d967e
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  messages.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                                                  • Size 634B
                                                                                                  • SHA256 c6f8c640f3353a7b9b1432a0c139c1aeec40133800e6c9b467b63991ad660308
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  verified_contents.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                  • Size 7KB
                                                                                                  • SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  craw_window.js

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\craw_window.js
                                                                                                  • Size 255KB
                                                                                                  • SHA256 5721a4b3f8e09c869a629effd350b51c9d46f0ac136717d4db6265c0ee6f9ac8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  craw_window.css

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\css\craw_window.css
                                                                                                  • Size 1KB
                                                                                                  • SHA256 10dfbd2d98950b79ee12f6b8e3885aabe31543048de56ad4fc0a5e34d0d9d4ec
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  craw_window.html

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\html\craw_window.html
                                                                                                  • Size 810B
                                                                                                  • SHA256 bb8742615e4cd996ae5d0200e443ae6a6f0b473255f03affdb8fb4660de4554d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  flapper.gif

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\flapper.gif
                                                                                                  • Size 68KB
                                                                                                  • SHA256 2b73533f47a99ffea9cc405ffafa9c4c53623f62487aebfba415945120b22040
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  icon_128.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\icon_128.png
                                                                                                  • Size 4KB
                                                                                                  • SHA256 149fc2270389655ee20da9cebb31ffde75e16e3ad371b9b907f62013ed45e705
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  icon_16.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\icon_16.png
                                                                                                  • Size 582B
                                                                                                  • SHA256 15b1cc630202324ad6b3b142a22cb1a55de8d6d9a0bcab78d5b14cd997a5ddd5
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  topbar_floating_button.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button.png
                                                                                                  • Size 160B
                                                                                                  • SHA256 d5f9234dc36e7ffa85f35b2359a4f82276f8395efa76e4553507ea990b27fc6c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  topbar_floating_button_close.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_close.png
                                                                                                  • Size 252B
                                                                                                  • SHA256 131817cd9311c03df22d769dd2ad7fa2e6e9558863a89f7e5e1657424031a937
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  topbar_floating_button_hover.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_hover.png
                                                                                                  • Size 160B
                                                                                                  • SHA256 721b7aaa9a42a54a349881615a12e3a26983aca48e173fd2f66e66aa0d725735
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  topbar_floating_button_maximize.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_maximize.png
                                                                                                  • Size 166B
                                                                                                  • SHA256 afa4ea944cbdec8543242e627ef46d5bfd3766dcac664e7e50cdeef2b352740c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  topbar_floating_button_pressed.png

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_pressed.png
                                                                                                  • Size 160B
                                                                                                  • SHA256 5c10ce0589eb115600f77381130b70ae0b7b3752614d86d4c89e857658aa222b
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  manifest.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\manifest.json
                                                                                                  • Size 1KB
                                                                                                  • SHA256 f52714812d68c577a445169d11e84df6751c2d6886bc429643072bb5d61c6c27
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  accounts.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\accounts.json
                                                                                                  • Size 5KB
                                                                                                  • SHA256 594ec3507188f4366a62e6b74e8c6ed5d57b06c4755b1a8ce1bad1f59a34946c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  34.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\assets\indexes\34.json
                                                                                                  • Size 583KB
                                                                                                  • SHA256 f226e879fbe70d3b105280b3d6d16ec1df279e7e1b426f8d9a17496640758f16
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  590470ab0f17afb73a4e41d9cb56fdbe069d275a

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\assets\objects\59\590470ab0f17afb73a4e41d9cb56fdbe069d275a
                                                                                                  • Size 229KB
                                                                                                  • SHA256 a14d2da4f452442691791c834cf55aae43f8b435a4736eea44cb327435bca20e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  248a5e6a350be6eaa54a347448f6f3c6b8cadd27

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\248a5e6a350be6eaa54a347448f6f3c6b8cadd27
                                                                                                  • Size 16KB
                                                                                                  • SHA256 13232c4850db3285b4224c9c8b6e4b5cd176de7a857444129d0725bfab3353d7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  26489b48c864dd6c3695a832996af1e939a293f9

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\26489b48c864dd6c3695a832996af1e939a293f9
                                                                                                  • Size 15KB
                                                                                                  • SHA256 003befec64413e9fd966aaebbb5cad1bd2e1c4575a89bafd47f0d96990147097
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  33987a02e4273f4df3eba499a77f4efe935a887a

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\33987a02e4273f4df3eba499a77f4efe935a887a
                                                                                                  • Size 587B
                                                                                                  • SHA256 1b6ebd1b5ae776298d2d0b89a870b65495ca176ae1903b6e25095c6da71ecd02
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  4026d3fb8923a2523f8d230a46a51a81557fc5f8

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\4026d3fb8923a2523f8d230a46a51a81557fc5f8
                                                                                                  • Size 22KB
                                                                                                  • SHA256 fb5b76f9b1c153abf85040188bd155b5d499821ea2dd4df46770e7d41d6f2960
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  4bd3584e7b69ca65f2de1f3046ab3f25a48309d1

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\4bd3584e7b69ca65f2de1f3046ab3f25a48309d1
                                                                                                  • Size 4KB
                                                                                                  • SHA256 6577355a9d1f994edea64342f01f2b2f4f37f2dcd068f2aa35dc5b42cd241adf
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  50f37587a8e91af2d9bb0c92c09ead594a3c9ade

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\50f37587a8e91af2d9bb0c92c09ead594a3c9ade
                                                                                                  • Size 4KB
                                                                                                  • SHA256 99b358c11c3e94b69b4ab9bdfe437519c334cb6d3948701c6613dd121abed150
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  571a1fb1505ed8fba07b3f2b48ff9e327cd7939f

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\571a1fb1505ed8fba07b3f2b48ff9e327cd7939f
                                                                                                  • Size 13KB
                                                                                                  • SHA256 0c75be3385e43039b0d1d48a10634bf8bad29726cef3b40a953d01344b99af24
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  84f54ad84ee2d02e1d4c5eeec5d532fdf5d9bf3c

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\84f54ad84ee2d02e1d4c5eeec5d532fdf5d9bf3c
                                                                                                  • Size 6KB
                                                                                                  • SHA256 2ff42395aa41a7e01e33a2b0427e89ab1f3d82764a33de8d3be52a503dd57a61
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  88114d7d9e6b52dc2bb69c9d9df508edaf4d6e53

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\88114d7d9e6b52dc2bb69c9d9df508edaf4d6e53
                                                                                                  • Size 9KB
                                                                                                  • SHA256 b49d8d1db390035fe0b9dcfcf8f07b498376987e7252df254b94e116acfa4809
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  8a86c44b1602a618907fb260da07a62df4132910

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8a86c44b1602a618907fb260da07a62df4132910
                                                                                                  • Size 11KB
                                                                                                  • SHA256 eb22adfb84f343128cb498140bf0274565015663711aaacafebf42fae77d213b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  8a9400f7da27e202a2246a34111c3c8f8108cb34

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8a9400f7da27e202a2246a34111c3c8f8108cb34
                                                                                                  • Size 3KB
                                                                                                  • SHA256 2d8686efe218a003d3df4b44fce8b511c80be5124e3fde61009f61dd6cb70dee
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  8c245f98542b23e0696437968ee04fd31a84ed74

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8c245f98542b23e0696437968ee04fd31a84ed74
                                                                                                  • Size 759B
                                                                                                  • SHA256 e169d7c5d5fdb71b8f3c5ae7f8ab8909e548d192ef62b08a6f942f348483362c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  965c872944cfec9a657bf93f16f815a564fe6590

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\965c872944cfec9a657bf93f16f815a564fe6590
                                                                                                  • Size 12KB
                                                                                                  • SHA256 94069d6126994bbc4f456a0a845f532ae8652211a743c34de92579782a9e5117
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  9b6601855f72bc59246b5219c2bd0c9c81aee1bb

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\9b6601855f72bc59246b5219c2bd0c9c81aee1bb
                                                                                                  • Size 1KB
                                                                                                  • SHA256 5f9480ac80578115af08964ac1da022a32f26e12e435c6630edc36a80d6abfc0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  abca1d02885121815475528cb1211609033a5760

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\abca1d02885121815475528cb1211609033a5760
                                                                                                  • Size 17KB
                                                                                                  • SHA256 1476ffa006bce135a1d999893644a7f742147e0a12ce99a1bec749f78f0efa93
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  ba96d73c587153a103f5d2f16b60b123f1dfdc49

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\ba96d73c587153a103f5d2f16b60b123f1dfdc49
                                                                                                  • Size 6KB
                                                                                                  • SHA256 0166724467fb429677514fae524f7a699a7adbfc59019d8c88a7a0316239f0a6
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  cdb147c2a082d80e2961d9f94c91340e33ebc69e

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\cdb147c2a082d80e2961d9f94c91340e33ebc69e
                                                                                                  • Size 5KB
                                                                                                  • SHA256 46efee0f765f0c38ba3781346bf8287b23ae3eb8fa9f7dc27581b61cc43176c2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  d6647f4405c698b6681d15da344b686c5aa0e123

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d6647f4405c698b6681d15da344b686c5aa0e123
                                                                                                  • Size 14KB
                                                                                                  • SHA256 00e67dcd86ad2eafe652be5a1a5bade89b6c29b62c587697b06aed02e6059d38
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  d93c71ddc3a6ea658693e5aa6f8be93877ce1355

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d93c71ddc3a6ea658693e5aa6f8be93877ce1355
                                                                                                  • Size 10KB
                                                                                                  • SHA256 bba20ffd857c2db1a17bdb018cc56ca94a74cd7876eb94b2350b612fac8a4c29
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  d96a52ef9ebed273e217eae03f26171f990152f1

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d96a52ef9ebed273e217eae03f26171f990152f1
                                                                                                  • Size 17KB
                                                                                                  • SHA256 f2ebff6bb1d573794172be261302c9b6d0fd86cf0139043cdeede17a7eb19175
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  e72a964a0e8d496fa3087c54fb7e9ce155f0b4ac

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\e72a964a0e8d496fa3087c54fb7e9ce155f0b4ac
                                                                                                  • Size 487B
                                                                                                  • SHA256 e95c230cf1e850de619cf2bf09822490642ef57fc50211d86768437ab32d6538
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  e977713482bb0c22dee38fcee4e6d55af42686b2

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\e977713482bb0c22dee38fcee4e6d55af42686b2
                                                                                                  • Size 6KB
                                                                                                  • SHA256 2597500a7984f15b0735cd44be58d10d8ca2fa139e34fc4763c074549efff2f8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  elyprismlauncher.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
                                                                                                  • Size 52B
                                                                                                  • SHA256 a85a9d50bb071347303a46f4136a1c7cce8bd90981cc0827ff197039297f27ee
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  elyprismlauncher.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
                                                                                                  • Size 77B
                                                                                                  • SHA256 1d883ed7011b86d0da80c1cb36b3bc0be2ebbb25e820c368d06f9d675228cc6b
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  elyprismlauncher.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 d067580b24bef51b605522c557ef794393f8994b6e2af15ec619363b699cf197
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  elyprismlauncher.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 b581ebdb7bb30f991b62a87a36f3ea4864e30c98a1237d50453a5c0bab82382d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  elyprismlauncher.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
                                                                                                  • Size 128B
                                                                                                  • SHA256 a96353c87e990eeb0a402bc4556f241df92b51d7919d4fb6e2238a9d70f8faf5
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  elyprismlauncher.cfg.lock

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg.lock
                                                                                                  • Size 69B
                                                                                                  • SHA256 4c0de4ce82ec37a12af6ee4cc87946191185c1c97e40f995ec13f50d577029c8
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\af3243\instance.cfg
                                                                                                  • Size 69B
                                                                                                  • SHA256 a9830ba49eeb1ed7dc3d99f18decd6b406e4d0f567494c4d7b2801ddb6141e95
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  mmc-pack.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\af3243\mmc-pack.json
                                                                                                  • Size 273B
                                                                                                  • SHA256 ae769ca6377c8987e583a4e7cb7bd1f3719a06e46b340a7c1006c37188f29c2f
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\b27f88\instance.cfg
                                                                                                  • Size 69B
                                                                                                  • SHA256 d2e42a316e480f5a17087e482d27648bfd79468dd0d04f6047f75d0712b469b6
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
                                                                                                  • Size 128B
                                                                                                  • SHA256 4908d831f60d717eb9fbb806262a19ae5072f7aeb522ba600d3e9681ffb0c62b
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
                                                                                                  • Size 101B
                                                                                                  • SHA256 2b5d1c4862984b8080b08554da8425859ef62a8ae1d0404dd9a40d7ad49bba57
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
                                                                                                  • Size 246B
                                                                                                  • SHA256 1e8653ef38643f6f3ee76da19b8a3bfd5cfa6facf1a97c57faab1124ef174a54
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 eaeaf37045e701d3457339b4da43d520f2f73fb0005bf2c1229a1819967615c0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 f8a86e8f47fbec533334f4a10e3d98c633d11d67c101926be3a17ae71ea0640e
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 6222328ef9180817650f21090e39c9e36ae4b96ae8e6403f30fda5433258672a
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 0c8315e5816711252a36bfeec4bdac78649c7973b5990d62465bd2da230c1f40
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 c2e7395243b82f53d1a2cf3e5f7868cd23946bbf1fbc6deda6cbfb1783ad2615
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 9085348196a2a2319311940b688a65cb69c36e3715d7cd448ac985dde08e91ea
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 7947bbe4002b0e9d053c9d87f7f1fb374ca6583a50d4ea69335cbde6ea0142eb
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 ef6e71661a8ef73c2c5af7d2222c63926bdf1476e90a9c90c4cf6af2228e965f
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 4313793d81d6a3efc5e790875a177fab52926b06d377fc034e85468030130b95
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 1KB
                                                                                                  • SHA256 b8ff5f1ea8e09f490817ea3d29ffb8c277b0c64a9e219b5e9d66a214386c211a
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instance.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
                                                                                                  • Size 101B
                                                                                                  • SHA256 43c28092f566a9dccd343bdcf1d263c5cf5bf9a784b06c191793a24006c53b77
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  fabric-advancement-api-v1-1.0.0+38c7a2d55d-47ca37f6845087c8.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-advancement-api-v1-1.0.0+38c7a2d55d-47ca37f6845087c8.jar
                                                                                                  • Size 69KB
                                                                                                  • SHA256 4e58d2f35b8b349949691b123033ba7158a921d351cfbe0d1376c4b2b4c90c15
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-api-base-2.0.6+fcdff87f5d-911714d21467d390.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-api-base-2.0.6+fcdff87f5d-911714d21467d390.jar
                                                                                                  • Size 58KB
                                                                                                  • SHA256 e3b64039e8f261cc24a5013cb8b442cf368f08afa28d01ecdf97f3ccdeb7b63c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-api-lookup-api-v1-2.0.24+3434d6d95d-1365061b0d161c01.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-api-lookup-api-v1-2.0.24+3434d6d95d-1365061b0d161c01.jar
                                                                                                  • Size 106KB
                                                                                                  • SHA256 0ec468396a47cd8ba892294b2c230d4ce31558b6bb9653ff4d886f699f340e67
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-biome-api-v1-20.1.0+c6aa69a85d-4015b454b712d70b.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-biome-api-v1-20.1.0+c6aa69a85d-4015b454b712d70b.jar
                                                                                                  • Size 199KB
                                                                                                  • SHA256 64bb6654ff4ad498f792766b343b280bb811d3fa6a6fc7d5812405217aba519e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-block-api-v1-3.1.0+0ae6f9115d-df20dc5ee66c5229.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-block-api-v1-3.1.0+0ae6f9115d-df20dc5ee66c5229.jar
                                                                                                  • Size 47KB
                                                                                                  • SHA256 0a9d70f750662a5417d2cbab5835173671a155478ae68a8b7875443a8b26e5de
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-block-getter-api-v2-2.0.9+3434d6d95d-17b6beec7ea6b7f5.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-block-getter-api-v2-2.0.9+3434d6d95d-17b6beec7ea6b7f5.jar
                                                                                                  • Size 36KB
                                                                                                  • SHA256 6ee8e9e475874df839974c3f80807aaaf845cd833b027500519ad4ce551d332d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-command-api-v2-3.1.2+fcdff87f5d-3af650bb94aa4431.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-command-api-v2-3.1.2+fcdff87f5d-3af650bb94aa4431.jar
                                                                                                  • Size 75KB
                                                                                                  • SHA256 58072787b5b5d171a7e65b1eb7a9c006bd48b940e12c870d7b23e0d5173cf2c9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-content-registries-v0-15.+74ed1ea55d-6daeda255ea77519.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-content-registries-v0-15.+74ed1ea55d-6daeda255ea77519.jar
                                                                                                  • Size 156KB
                                                                                                  • SHA256 f25c676005d542fe8d0ea742a2eb98cba964218d774f6e17e0ae82ad0ce87889
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-convention-tags-v2-4.10.3+6b5b47fd5d-95125f640f04dcc0.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-convention-tags-v2-4.10.3+6b5b47fd5d-95125f640f04dcc0.jar
                                                                                                  • Size 637KB
                                                                                                  • SHA256 2ddeb51ad366da4225de9e9f113030ed55d7527c08c25950172d8a246a6c2fda
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-crash-report-info-v1-1.0.7+fcdff87f5d-4892b3c1b665487.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-crash-report-info-v1-1.0.7+fcdff87f5d-4892b3c1b665487.jar
                                                                                                  • Size 28KB
                                                                                                  • SHA256 81a9a1db48de260919e4220d0c2cf6362083475ebd803f14e341516d42a26d5a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-creative-tab-api-v1-5.0.2+fcdff87f5d-c345ec684804aed9.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-creative-tab-api-v1-5.0.2+fcdff87f5d-c345ec684804aed9.jar
                                                                                                  • Size 103KB
                                                                                                  • SHA256 b865c563ee0b02e5bf5b40c29e57c6b6533c6f6f56e97fdbcb004eadca3be9db
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-data-attachment-api-v1-2.+b9b88df45d-f47372822cfd61aa.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-data-attachment-api-v1-2.+b9b88df45d-f47372822cfd61aa.jar
                                                                                                  • Size 270KB
                                                                                                  • SHA256 722f3a092f668ae7bc5fee1ae6337f72eca0cef7c14bf3daba5218499bdbcd69
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-data-generation-api-v1-27+5be2453c5d-3e4dbc517780b0d5.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-data-generation-api-v1-27+5be2453c5d-3e4dbc517780b0d5.jar
                                                                                                  • Size 451KB
                                                                                                  • SHA256 fc431fedf521f4ebcb3f28655fb9006cb5feba348ac2891bb116011ff86057a2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-debug-api-v1-1.0.4+3434d6d95d-501201e4ab5f7f66.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-debug-api-v1-1.0.4+3434d6d95d-501201e4ab5f7f66.jar
                                                                                                  • Size 51KB
                                                                                                  • SHA256 e9806c1b6a5d4aecb8029fac497d43766b2c9612df6b925cc9e9d994c28834ba
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-dimensions-v1-5.1.19+47f74c985d-8da159b8856cd08a.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-dimensions-v1-5.1.19+47f74c985d-8da159b8856cd08a.jar
                                                                                                  • Size 59KB
                                                                                                  • SHA256 ced046d84afdc22fd85c2a6e7420099ca2c86156669b064ed9a5c4e98d81f7ae
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-entity-events-v1-6.0.4+3434d6d95d-a5c6f055e814f73e.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-entity-events-v1-6.0.4+3434d6d95d-a5c6f055e814f73e.jar
                                                                                                  • Size 167KB
                                                                                                  • SHA256 67af73392b583a8ce56693a769cdc2c0ea16b7970d30a80c0216d58df45465d5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-events-interaction-v0-5.3+b9b88df45d-29487a77c863aca5.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-events-interaction-v0-5.3+b9b88df45d-29487a77c863aca5.jar
                                                                                                  • Size 148KB
                                                                                                  • SHA256 e507339676f4ae1a6468bdac128e077e6022a702aedeea07232573eacb20207f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-game-rule-api-v1-4.0.10+3434d6d95d-bad78c55982f9239.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-game-rule-api-v1-4.0.10+3434d6d95d-bad78c55982f9239.jar
                                                                                                  • Size 124KB
                                                                                                  • SHA256 5cbd6be7ed872b3aa2e10695ec8f0740c408de69caa264028623edc8be6e4961
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-item-api-v1-14.7.0+cf6bc2db5d-a4efffd76e34370e.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-item-api-v1-14.7.0+cf6bc2db5d-a4efffd76e34370e.jar
                                                                                                  • Size 212KB
                                                                                                  • SHA256 5128bd7b303de8aef6dc03ee1ad39c2a8ba98320c251f3674787761222b99bf8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-key-mapping-api-v1-2.0.8+3434d6d95d-a0c9ba042f6d554b.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-key-mapping-api-v1-2.0.8+3434d6d95d-a0c9ba042f6d554b.jar
                                                                                                  • Size 29KB
                                                                                                  • SHA256 00dc27fe09cca1b1af6346be12a86df4e49d33717dfbe74af4efca5673eb6b7d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-lifecycle-events-v1-4.1.9+ffef5f675d-b54f254bc663e591.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-lifecycle-events-v1-4.1.9+ffef5f675d-b54f254bc663e591.jar
                                                                                                  • Size 210KB
                                                                                                  • SHA256 fc47f06fa9ce4145ad925164a6eccc436f7ff504cf7d1e766a15699b82cd3e74
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-loot-api-v3-4.0.8+4068fd645d-a1989ce77061284a.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-loot-api-v3-4.0.8+4068fd645d-a1989ce77061284a.jar
                                                                                                  • Size 89KB
                                                                                                  • SHA256 ff225924d0569f113f25bb4c51c9e8ceb2b73ed6198499c81b862d4186fb719f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-menu-api-v1-2.0.28+ed66f0a35d-7f5ecce40a49cbac.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-menu-api-v1-2.0.28+ed66f0a35d-7f5ecce40a49cbac.jar
                                                                                                  • Size 52KB
                                                                                                  • SHA256 ca22f06ef29de5d45ae930d6d84da39045321df62005d1c6e124e077331a1d07
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-message-api-v1-7.0.10+3434d6d95d-2bd0c2513363578e.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-message-api-v1-7.0.10+3434d6d95d-2bd0c2513363578e.jar
                                                                                                  • Size 92KB
                                                                                                  • SHA256 ab4e1143c20301463348612d1b440878ae2eacd60f66112ce187c6c4c841156d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-model-loading-api-v1-8.0.+fcdff87f5d-c5db57590397f77b.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-model-loading-api-v1-8.0.+fcdff87f5d-c5db57590397f77b.jar
                                                                                                  • Size 225KB
                                                                                                  • SHA256 1479d2a6fc9c44c0038311ad64a51dd01d2a9509547501576ab68eec2885464c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-networking-api-v1-6.3.9+b9b88df45d-2fb15feef6111363.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-networking-api-v1-6.3.9+b9b88df45d-2fb15feef6111363.jar
                                                                                                  • Size 544KB
                                                                                                  • SHA256 bd9df58c724f7b476d930814665f5f3ac3849d8442293fbdf54197b8c718b478
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-object-builder-api-v1-24.+3434d6d95d-d52d8bdf1e8677e2.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-object-builder-api-v1-24.+3434d6d95d-d52d8bdf1e8677e2.jar
                                                                                                  • Size 138KB
                                                                                                  • SHA256 2807750229fa894ea8164d6573952600cb7c8040a05ea8a540ff81a566c2366d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-particles-v1-5.0.25+3434d6d95d-3155cb1f33b9b26f.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-particles-v1-5.0.25+3434d6d95d-3155cb1f33b9b26f.jar
                                                                                                  • Size 112KB
                                                                                                  • SHA256 9b1e98a48b6ee647ba66fcdf23cc6280b32b2e2d27c22d44f7fee75cee4fcc75
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-permission-api-v1-1.0.8+fcdff87f5d-92eb5805185bd053.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-permission-api-v1-1.0.8+fcdff87f5d-92eb5805185bd053.jar
                                                                                                  • Size 93KB
                                                                                                  • SHA256 d8e13a6fe81674be65163bbee6422892562d0d6265275f6c0e280b0c7385493a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-recipe-api-v1-10.0.9+b9b88df45d-703f6354514767fd.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-recipe-api-v1-10.0.9+b9b88df45d-703f6354514767fd.jar
                                                                                                  • Size 222KB
                                                                                                  • SHA256 dbce796a60c770f24b1ceffbca038a7d9871073e78fda6886d15c94c9d999ec5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-registry-sync-v0-8.0.2+1ca9f6365d-c274ebd63decda21.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-registry-sync-v0-8.0.2+1ca9f6365d-c274ebd63decda21.jar
                                                                                                  • Size 337KB
                                                                                                  • SHA256 ad2e7ab538ba920561572f09b8cef4264ac6af8aa4a703a3b39c242fdbbd37f1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-renderer-api-v1-17.0.15+79385d0b5d-81cfa71d64ab6e80.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-renderer-api-v1-17.0.15+79385d0b5d-81cfa71d64ab6e80.jar
                                                                                                  • Size 284KB
                                                                                                  • SHA256 412f1e3ea00f5af9babd52ebd388081f9f380c84b71935ff441f41936caed860
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-renderer-indigo-9.1.23+b9d63e335d-ffd0c2573bad5c54.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-renderer-indigo-9.1.23+b9d63e335d-ffd0c2573bad5c54.jar
                                                                                                  • Size 220KB
                                                                                                  • SHA256 f46066891737dc270ed9892cb514d92d72a8012c71f4f27cbb20167aad512776
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-rendering-fluids-v1-6.0.6+3434d6d95d-c539f1f0f4f2f37b.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-rendering-fluids-v1-6.0.6+3434d6d95d-c539f1f0f4f2f37b.jar
                                                                                                  • Size 48KB
                                                                                                  • SHA256 35b2f33dd1db506a8d6eda598e8f263a773a418e8453d3c18986cb4136536165
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-rendering-v1-27.0.14+901a437c5d-8887c5c030b47e50.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-rendering-v1-27.0.14+901a437c5d-8887c5c030b47e50.jar
                                                                                                  • Size 482KB
                                                                                                  • SHA256 0dab025d36a81dee8d4c6d0f785d3e41765a7e939a4e594f146a6749ede91d6e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-resource-conditions-api-v+0d124ae85d-edda27c7f6e699da.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-conditions-api-v+0d124ae85d-edda27c7f6e699da.jar
                                                                                                  • Size 135KB
                                                                                                  • SHA256 a1b65f27ac0a4697d15c9c52c2fd71a49629e2e6f0b9e46b33588139c27686ab
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-resource-loader-v0-3.3.26+4fc5413f5d-ac05d69aa1db9f01.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-loader-v0-3.3.26+4fc5413f5d-ac05d69aa1db9f01.jar
                                                                                                  • Size 39KB
                                                                                                  • SHA256 a3b0cb0cb626b19e6d03422916554c133cca5c9db091b237f7513e86f429c7e0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-resource-loader-v1-3.0.4+ba0d6c0d5d-fa2ece4c7e852692.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-loader-v1-3.0.4+ba0d6c0d5d-fa2ece4c7e852692.jar
                                                                                                  • Size 283KB
                                                                                                  • SHA256 b62fa7d0bf67982ab1f6feafc88899e05a877a5215bf3d91e0b1b51c46ec2f89
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-screen-api-v1-5.2.4+48607d035d-2559d10e2d0219b2.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-screen-api-v1-5.2.4+48607d035d-2559d10e2d0219b2.jar
                                                                                                  • Size 162KB
                                                                                                  • SHA256 2d940d1633d86a6cbe5efb559becde9d17fa6aedb2311add7cda1aa02769665a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-serialization-api-v1-2.0.+74ed1ea55d-75c6be97f1d2d0cf.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-serialization-api-v1-2.0.+74ed1ea55d-75c6be97f1d2d0cf.jar
                                                                                                  • Size 36KB
                                                                                                  • SHA256 0af4f059a581626bbe5680c9f3f84aeb6d603d9ee654714bfbc32e31e9a3a693
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-sound-api-v1-2.0.7+3434d6d95d-34a65b24c9a26380.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-sound-api-v1-2.0.7+3434d6d95d-34a65b24c9a26380.jar
                                                                                                  • Size 25KB
                                                                                                  • SHA256 1a5ed88972366eb2f68df816d9c907686274649407e77100d92fd0cdf5c989b6
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-tag-api-v1-2.1.10+fcdff87f5d-f2433599535fddf1.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-tag-api-v1-2.1.10+fcdff87f5d-f2433599535fddf1.jar
                                                                                                  • Size 106KB
                                                                                                  • SHA256 472e3a97e3b11c72ac8fc54b425f8e7130b861fa8b8e0b64a66ab6833353056a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-transfer-api-v1-8.0.25+fcdff87f5d-f45cc0e461e7cb5d.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-transfer-api-v1-8.0.25+fcdff87f5d-f45cc0e461e7cb5d.jar
                                                                                                  • Size 452KB
                                                                                                  • SHA256 f7d81e91f0f326dff6a393738b623a60bbe0afae86dc6c70431e103fa97edbd6
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-transitive-access-widener+52268a0e5d-defeb479a8839027.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-transitive-access-widener+52268a0e5d-defeb479a8839027.jar
                                                                                                  • Size 79KB
                                                                                                  • SHA256 71ea7cdf8b94cde75d3f6ddd0ab66370e3b1e40dc05558338df929ca514c918b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  mixinextras-0.5.5-cd81fe35163f5828.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\mixinextras-0.5.5-cd81fe35163f5828.jar
                                                                                                  • Size 710KB
                                                                                                  • SHA256 5da883dc4bfb16e4ceca3f16d8c4ad937bdfb1ce337ed5ba15472d4d81dd6242
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  sodium-options.json.tmp

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\config\sodium-options.json.tmp
                                                                                                  • Size 744B
                                                                                                  • SHA256 b865bdf247d5fb138f297871a43c4a1e84053e8a65904ed2c7a31f2600978df2
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  icon.png

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\icon.png
                                                                                                  • Size 2KB
                                                                                                  • SHA256 247dfe5bf4e6c33acadbc90e91a28d74ea25f0c1471264de2ddc0ca1a6ee7bbd
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  appleskin.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\appleskin.pw.toml
                                                                                                  • Size 669B
                                                                                                  • SHA256 b9deef65143a425882189bd1fd86f41f194cd64e5814f929ee5bf324b0c7dbaa
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  fabric-api.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\fabric-api.pw.toml
                                                                                                  • Size 618B
                                                                                                  • SHA256 03b54528239df8ec7db638fcd0e12ed311f49859fef69111886c86c73fa3b9fb
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  fabric-language-kotlin.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\fabric-language-kotlin.pw.toml
                                                                                                  • Size 1KB
                                                                                                  • SHA256 4537dd26f923c0c3f47056a5ee4d8d1ff64ae47a1762ed6a7294254ade16e5ff
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  immediatelyfast.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\immediatelyfast.pw.toml
                                                                                                  • Size 662B
                                                                                                  • SHA256 370930260aa756514e74fb0c0d81ad7a000b0a69a9de812b81ada0b2e6fd8a5d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  iris.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\iris.pw.toml
                                                                                                  • Size 692B
                                                                                                  • SHA256 2f789753e3ff9e19e0a0419ea47b6a224d1ef9263e406f7643b8dc3a38a1e7d0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  lithium.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\lithium.pw.toml
                                                                                                  • Size 642B
                                                                                                  • SHA256 27dffe58020a4fe1163e3f8d8393eceb3b0a005ed5eb057d795faee12987fb81
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  reeses-sodium-options.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\reeses-sodium-options.pw.toml
                                                                                                  • Size 860B
                                                                                                  • SHA256 e73004eba177ca9f9d3ebdf29214e6129bc1f41cc0bc6cf3afff6c8c74f8b34d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  sodium.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\sodium.pw.toml
                                                                                                  • Size 651B
                                                                                                  • SHA256 8726b0c4ec1a3db84c18be2dcd6f2d240e566fccb2447564126af4425f9ea242
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  xaeros-minimap.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\xaeros-minimap.pw.toml
                                                                                                  • Size 764B
                                                                                                  • SHA256 cdd37e8d8125fed6719a99d1ae238bfaf77fbbe6d3ebd1f9a0865a960f999b7a
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  xaeros-world-map.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\xaeros-world-map.pw.toml
                                                                                                  • Size 768B
                                                                                                  • SHA256 e9f90e3bc280e86b48684cc9d473a591cc1128eec04c75c0ab4fa589b1e285ec
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  yacl.pw.toml

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\yacl.pw.toml
                                                                                                  • Size 718B
                                                                                                  • SHA256 e59b5312948f3a64fea58e6f2afb95e87361c78a6338b5f42ed89c282693d2a0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  ImmediatelyFast-Fabric-1.17.1+26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\ImmediatelyFast-Fabric-1.17.1+26.3.jar
                                                                                                  • Size 97KB
                                                                                                  • SHA256 4b346661cd0811d98a6df8c9faeb8fafd9326ab88248430e8bec845ef1ff6dca
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  appleskin-fabric-mc26.3-3.0.10.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\appleskin-fabric-mc26.3-3.0.10.jar
                                                                                                  • Size 175KB
                                                                                                  • SHA256 cb05087c39f0d860611aa1fae7cf63560214d1b71378a7c903c18dc370b5c3ce
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-api-0.162.0+26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\fabric-api-0.162.0+26.3.jar
                                                                                                  • Size 1.7MB
                                                                                                  • SHA256 8626c189b702f466800b1c8ddac6203cf8a1e0bdaee75a5f9a33b18c2baa81b1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  fabric-language-kotlin-1.14.2+kotlin.2.4.21.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\fabric-language-kotlin-1.14.2+kotlin.2.4.21.jar
                                                                                                  • Size 7.8MB
                                                                                                  • SHA256 fbdbf5286ab9d65fedb49e6e01c15e338ae303eb7b9d8c7423d0a9bcfe526ef9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  iris-fabric-1.11.7+mc26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\iris-fabric-1.11.7+mc26.3.jar
                                                                                                  • Size 2.7MB
                                                                                                  • SHA256 83ab4d3013dd56ac05ae503a2f596968911001c4ef3d82c59c5c79e64c34dd98
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  lithium-fabric-0.26.2+mc26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\lithium-fabric-0.26.2+mc26.3.jar
                                                                                                  • Size 893KB
                                                                                                  • SHA256 0be5b17ef9f6e9244cd07b24b227553a73aec0cf93158cf28099f3094c167f1b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  reeses-sodium-options-fabric-2.2.5+mc26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\reeses-sodium-options-fabric-2.2.5+mc26.3.jar
                                                                                                  • Size 252KB
                                                                                                  • SHA256 b692acb0f84d7477deae48e2ba0908e1913c0d87db53daa4d23cbe646e9028f0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  sodium-fabric-0.9.3-alpha.1+mc26.3.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\sodium-fabric-0.9.3-alpha.1+mc26.3.jar
                                                                                                  • Size 1.8MB
                                                                                                  • SHA256 a8f1e82847d3640c20dded44b08829c5987a055de83c99d62c33cd7bd06a1c54
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  xaerominimap-fabric-26.3-26.6.0.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\xaerominimap-fabric-26.3-26.6.0.jar
                                                                                                  • Size 2.1MB
                                                                                                  • SHA256 0cccafa29181e704bfc888c7063a19b29c82eb9883ec1a7d8f02c5ed8f931a3d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  xaeroworldmap-fabric-26.3-1.47.0.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\xaeroworldmap-fabric-26.3-1.47.0.jar
                                                                                                  • Size 1.4MB
                                                                                                  • SHA256 2cd3cedde12121958bb3fc500b8cca3fecf6b9517287f74f00ab961531a546d8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  yet_another_config_lib_v3-3.9.7+26.3-fabric.jar

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\yet_another_config_lib_v3-3.9.7+26.3-fabric.jar
                                                                                                  • Size 1.1MB
                                                                                                  • SHA256 c52d41d444522d9abba994cd4c4ee2e71a065d7c31010f92a9959b80ccb4b0f5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  mmc-pack.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\mmc-pack.json
                                                                                                  • Size 1KB
                                                                                                  • SHA256 e620147081aa6d382bce51ac7244a1d387b618f4f9a8a698633950b7a729a50c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  instgroups.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\instgroups.json
                                                                                                  • Size 52B
                                                                                                  • SHA256 0dd2a2f647bd2d34e72ba82fe690d52b8cb0d36a57cf0c59c119e241d0c478d0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  javaw.exe

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                                                                                  • Size 39KB
                                                                                                  • SHA256 38ac81b6ef29e4f29235902fe56385e3c2e4f216f728baff9512aae4e5c7bc67
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  default_US_export.policy

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\conf\security\policy\unlimited\default_US_export.policy
                                                                                                  • Size 146B
                                                                                                  • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  ADDITIONAL_LICENSE_INFO

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\ADDITIONAL_LICENSE_INFO
                                                                                                  • Size 48B
                                                                                                  • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  ASSEMBLY_EXCEPTION

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\ASSEMBLY_EXCEPTION
                                                                                                  • Size 43B
                                                                                                  • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  LICENSE

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\LICENSE
                                                                                                  • Size 32B
                                                                                                  • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  metacache

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\metacache
                                                                                                  • Size 54KB
                                                                                                  • SHA256 554d5fbdb3d3b4f633df983bac695e0d53c708f49e3f9dfee2c875b8dbe89812
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  prismlauncher_update.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
                                                                                                  • Size 83B
                                                                                                  • SHA256 e26a49f69f3bea5d0a393e4da353e3377d0ad694a5ddcc9b714562ba2ec548ae
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  prismlauncher_update.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
                                                                                                  • Size 43B
                                                                                                  • SHA256 4d844e34567cedeaec227d547d75b35c0d8eb20224ad4d336a16f98c9edf95f9
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  prismlauncher_update.cfg

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
                                                                                                  • Size 60B
                                                                                                  • SHA256 176cbd69f347e1708cee88ceb1451603d7a74f6a26d561654b2d331a3172f9c7
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  index_v2.json

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\translations\index_v2.json
                                                                                                  • Size 28KB
                                                                                                  • SHA256 138acf884a8689b8ce6d070d76ad5491a004aa97fc680cbc5d38d67a344b64ad
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  mmc_en_GB.qm

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\translations\mmc_en_GB.qm
                                                                                                  • Size 336KB
                                                                                                  • SHA256 752d19cdee3a74839ebafab6cf56480d035fb22c40003fef374c1dc1b9cd6da5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  index.dat

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
                                                                                                  • Size 257B
                                                                                                  • SHA256 5a8567fd40c54fca6983e0f189bb90f2cfbd9e22109e6acfdd1020690d4de135
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  vlc-qt-interface.ini

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
                                                                                                  • Size 77B
                                                                                                  • SHA256 48af172b922baa706b2778d3500377c47a5021d7b0cafe6961e24a9b04347e3d
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  vlc-qt-interface.ini

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
                                                                                                  • Size 76B
                                                                                                  • SHA256 4c337446ccf0e16007e9fd9e03e2b4e8363558a282840310ed75ff0e1881e5df
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  vlc-qt-interface.ini.lock

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock
                                                                                                  • Size 18B
                                                                                                  • SHA256 6a6ac66d11a49682984a9ab7bb4ffa1e3f9a15e564c0566171a6c2a105212c05
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  vlcrc.4164

                                                                                                  • Path C:\Users\Admin\AppData\Roaming\vlc\vlcrc.4164
                                                                                                  • Size 94KB
                                                                                                  • SHA256 ec45f6e952b43eddc214dba703cf7f31398f3c9f535aad37f42237c56b9b778e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  1e198d1c-5bd7-42da-b647-9f2244f36026.tmp

                                                                                                  • Path C:\Users\Admin\Downloads\1e198d1c-5bd7-42da-b647-9f2244f36026.tmp
                                                                                                  • Size 15KB
                                                                                                  • SHA256 a128c4a4fbb60114f63708af24eeb7f2119058197c8940fc00c1fcb1a62a5481
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  PineconeMC-Windows-MSVC-Setup-11.1.1.exe

                                                                                                  • Path C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe
                                                                                                  • Size 22.7MB
                                                                                                  • SHA256 828294fcd8c71c33c307dc7971936a5b8801dd02e32ddc6648e87cb4a92f5562
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  PineconeMC-Windows-MSVC-Setup-11.1.1.exe:Zone.Identifier

                                                                                                  • Path C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe:Zone.Identifier
                                                                                                  • Size 1KB
                                                                                                  • SHA256 5b07b69d29a1c9054fb302372de6ef2941cc384c10cd7a1492492ef5027ccb73
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  ~$UnblockConnect.ppsm

                                                                                                  • Path C:\Users\Admin\Downloads\~$UnblockConnect.ppsm
                                                                                                  • Size 165B
                                                                                                  • SHA256 1176a0c9b71c5a4992774717d673027786db7e377e3d40a8a0606853e63afeb5
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  desktop.ini

                                                                                                  • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                  • Size 190B
                                                                                                  • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  BootstrapperApplicationData.xml

                                                                                                  • Path C:\Windows\Temp\{265B01B8-E037-43FE-9041-A04C5587BD13}\.ba\BootstrapperApplicationData.xml
                                                                                                  • Size 14KB
                                                                                                  • SHA256 8c81100f594e3d0bc51e5571e0046f016086207c1c382d45708c30e1d732b648
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  wixstdba.dll

                                                                                                  • Path C:\Windows\Temp\{265B01B8-E037-43FE-9041-A04C5587BD13}\.ba\wixstdba.dll
                                                                                                  • Size 215KB
                                                                                                  • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  logo.png

                                                                                                  • Path C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.ba\logo.png
                                                                                                  • Size 1KB
                                                                                                  • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  VC_redist.x64.exe

                                                                                                  • Path C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe
                                                                                                  • Size 670KB
                                                                                                  • SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  license.rtf

                                                                                                  • Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\license.rtf
                                                                                                  • Size 9KB
                                                                                                  • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  thm.wxl

                                                                                                  • Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\thm.wxl
                                                                                                  • Size 2KB
                                                                                                  • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  thm.xml

                                                                                                  • Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\thm.xml
                                                                                                  • Size 8KB
                                                                                                  • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  memory/1212-1124-0x00007FF784D00000-0x00007FF785649000-memory.dmp

                                                                                                  memory/1212-1125-0x00007FFC591F0000-0x00007FFC59837000-memory.dmp

                                                                                                  memory/1592-1230-0x00007FFC5ED70000-0x00007FFC5F3B7000-memory.dmp

                                                                                                  memory/1592-1231-0x00007FF784D00000-0x00007FF785649000-memory.dmp

                                                                                                  memory/2096-1310-0x00007FFC5CF50000-0x00007FFC5CF61000-memory.dmp

                                                                                                  memory/2096-1307-0x00007FFC5CF70000-0x00007FFC5CF9D000-memory.dmp

                                                                                                  memory/2096-1294-0x00007FFC6EA60000-0x00007FFC6EA82000-memory.dmp

                                                                                                  memory/2096-1295-0x00007FFC65780000-0x00007FFC657AB000-memory.dmp

                                                                                                  memory/2096-1296-0x00007FFC5D530000-0x00007FFC5D8C0000-memory.dmp

                                                                                                  memory/2096-1297-0x00007FFC6F590000-0x00007FFC6F5A4000-memory.dmp

                                                                                                  memory/2096-1298-0x00007FFC6F530000-0x00007FFC6F541000-memory.dmp

                                                                                                  memory/2096-1299-0x00007FFC5D450000-0x00007FFC5D522000-memory.dmp

                                                                                                  memory/2096-1300-0x0000020476510000-0x00000204767A6000-memory.dmp

                                                                                                  memory/2096-1301-0x00007FFC5D0C0000-0x00007FFC5D1A8000-memory.dmp

                                                                                                  memory/2096-1302-0x00007FFC5CFD0000-0x00007FFC5D0B3000-memory.dmp

                                                                                                  memory/2096-1303-0x00007FFC63550000-0x00007FFC63591000-memory.dmp

                                                                                                  memory/2096-1304-0x00007FFC65750000-0x00007FFC6577F000-memory.dmp

                                                                                                  memory/2096-1305-0x00007FFC6F2A0000-0x00007FFC6F2B8000-memory.dmp

                                                                                                  memory/2096-1306-0x00007FFC5CFA0000-0x00007FFC5CFC6000-memory.dmp

                                                                                                  memory/2096-1293-0x00007FFC73040000-0x00007FFC73059000-memory.dmp

                                                                                                  memory/2096-1308-0x00007FFC6E5A0000-0x00007FFC6E5BA000-memory.dmp

                                                                                                  memory/2096-1309-0x00007FFC5F660000-0x00007FFC5F671000-memory.dmp

                                                                                                  memory/2096-1292-0x00007FFC749E0000-0x00007FFC749F1000-memory.dmp

                                                                                                  memory/2096-1314-0x00007FFC5CC20000-0x00007FFC5CC45000-memory.dmp

                                                                                                  memory/2096-1315-0x00007FFC52AB0000-0x00007FFC52CF5000-memory.dmp

                                                                                                  memory/2096-1312-0x00007FFC5CCA0000-0x00007FFC5CD38000-memory.dmp

                                                                                                  memory/2096-1291-0x00007FFC5E2B0000-0x00007FFC5E566000-memory.dmp

                                                                                                  memory/2096-1290-0x00007FFC6F2C0000-0x00007FFC6F2F4000-memory.dmp

                                                                                                  memory/2096-1289-0x00007FF7ECA40000-0x00007FF7ECB38000-memory.dmp

                                                                                                  memory/2096-1313-0x00007FFC5CC50000-0x00007FFC5CC9F000-memory.dmp

                                                                                                  memory/2096-1311-0x00007FFC5CD40000-0x00007FFC5CF4B000-memory.dmp

                                                                                                  memory/3828-1345-0x00007FFC3E9D0000-0x00007FFC3E9E0000-memory.dmp

                                                                                                  memory/3828-1344-0x00007FFC3E9D0000-0x00007FFC3E9E0000-memory.dmp

                                                                                                  memory/3828-1343-0x00007FFC3E9D0000-0x00007FFC3E9E0000-memory.dmp

                                                                                                  memory/4164-1265-0x00007FFC5D530000-0x00007FFC5D8C0000-memory.dmp

                                                                                                  memory/4164-1258-0x00007FF7ECA40000-0x00007FF7ECB38000-memory.dmp

                                                                                                  memory/4164-1276-0x00007FFC5CF70000-0x00007FFC5CF9D000-memory.dmp

                                                                                                  memory/4164-1277-0x00007FFC6E5A0000-0x00007FFC6E5BA000-memory.dmp

                                                                                                  memory/4164-1284-0x00007FFC52AB0000-0x00007FFC52CF5000-memory.dmp

                                                                                                  memory/4164-1278-0x00007FFC5F660000-0x00007FFC5F671000-memory.dmp

                                                                                                  memory/4164-1280-0x00007FFC5CD40000-0x00007FFC5CF4B000-memory.dmp

                                                                                                  memory/4164-1281-0x00007FFC5CCA0000-0x00007FFC5CD38000-memory.dmp

                                                                                                  memory/4164-1282-0x00007FFC5CC50000-0x00007FFC5CC9F000-memory.dmp

                                                                                                  memory/4164-1283-0x00007FFC5CC20000-0x00007FFC5CC45000-memory.dmp

                                                                                                  memory/4164-1279-0x00007FFC5CF50000-0x00007FFC5CF61000-memory.dmp

                                                                                                  memory/4164-1270-0x00007FFC5D0C0000-0x00007FFC5D1A8000-memory.dmp

                                                                                                  memory/4164-1267-0x00007FFC6F530000-0x00007FFC6F541000-memory.dmp

                                                                                                  memory/4164-1266-0x00007FFC6F590000-0x00007FFC6F5A4000-memory.dmp

                                                                                                  memory/4164-1264-0x00007FFC65780000-0x00007FFC657AB000-memory.dmp

                                                                                                  memory/4164-1260-0x00007FFC5E2B0000-0x00007FFC5E566000-memory.dmp

                                                                                                  memory/4164-1261-0x00007FFC749E0000-0x00007FFC749F1000-memory.dmp

                                                                                                  memory/4164-1275-0x00007FFC5CFA0000-0x00007FFC5CFC6000-memory.dmp

                                                                                                  memory/4164-1259-0x00007FFC6F2C0000-0x00007FFC6F2F4000-memory.dmp

                                                                                                  memory/4164-1262-0x00007FFC73040000-0x00007FFC73059000-memory.dmp

                                                                                                  memory/4164-1263-0x00007FFC6EA60000-0x00007FFC6EA82000-memory.dmp

                                                                                                  memory/4164-1268-0x00007FFC5D450000-0x00007FFC5D522000-memory.dmp

                                                                                                  memory/4164-1274-0x00007FFC6F2A0000-0x00007FFC6F2B8000-memory.dmp

                                                                                                  memory/4164-1273-0x00007FFC65750000-0x00007FFC6577F000-memory.dmp

                                                                                                  memory/4164-1272-0x00007FFC63550000-0x00007FFC63591000-memory.dmp

                                                                                                  memory/4164-1271-0x00007FFC5CFD0000-0x00007FFC5D0B3000-memory.dmp

                                                                                                  memory/4164-1269-0x000002E565E20000-0x000002E5660B6000-memory.dmp

                                                                                                  memory/4528-1241-0x00007FFC5EC40000-0x00007FFC5F287000-memory.dmp

                                                                                                  memory/4528-1240-0x00007FF784D00000-0x00007FF785649000-memory.dmp

                                                                                                  memory/4528-1244-0x0000028DE8280000-0x0000028DE8C4A000-memory.dmp

                                                                                                  memory/4736-17498-0x000001AFDFFD0000-0x000001AFDFFD8000-memory.dmp

                                                                                                  memory/4736-17497-0x000001AFDFFA0000-0x000001AFDFFAA000-memory.dmp

                                                                                                  memory/4736-17496-0x000001AFC59F0000-0x000001AFC5A1C000-memory.dmp

                                                                                                  memory/4736-17500-0x000001AFE1600000-0x000001AFE16A8000-memory.dmp

                                                                                                  memory/4736-17501-0x000001AFE1250000-0x000001AFE1272000-memory.dmp

                                                                                                  memory/4736-17502-0x000001AFE1230000-0x000001AFE1244000-memory.dmp