Analysis
- user interaction
yes - max time kernel
1798s - max time network
1440s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
12/10/2026, 16:50
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win11-20260911-en
General
- Target sample.html
- Size 9KB
- Sample261012-vchpnaeb87
- SHA256 8e763df89543dc72b37672955df5aad9c46a9a20a7200f33407cac01115d8a6d
- MD5 493ab703c45940b60e6573a2259c1ca2
- SHA1 8b161103405067da0f35b64db486c8d5feb84b9a
- SHA512 eac5c309eb97b7823216dfd6d0fd931ca930619d5e8083747128319f70687e498c9d11f9a1a84e40bb29ccc232d0e1ad2f22bdd1571200920ef02d7f22cfd616
- SSDEEP 96:GhQChwr0vBE3MaRwyl2mmXnXnyPPPTznkCBCW2tfc8UpSZ9P1g2ygD/HfM4nUpO0:GbwCMp+GtPPPXn1Betf3HCo/Hfta
- TLSH T1F122B6DB10F5367B1792458179263F27AFD24123C1446C2879BD4BBE9FA8DC9C8170AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 145 2124 chrome.exe - Executes dropped EXE 47 IoCs
pid Process 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 1212 elyprismlauncher.exe 1592 elyprismlauncher.exe 4528 elyprismlauncher.exe 4560 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 3896 uninstall.exe 4420 vc_redist.x64.exe 8 vc_redist.x64.exe 3864 VC_redist.x64.exe 3892 VC_redist.x64.exe 2752 VC_redist.x64.exe 2908 VC_redist.x64.exe 4680 elyprismlauncher.exe 2544 VC_redist.x64.exe 4208 elyprismlauncher_updater.exe 592 elyprismlauncher.exe 3912 javaw.exe 4752 javaw.exe 5392 javaw.exe 4836 javaw.exe 2688 javaw.exe 3792 javaw.exe 2660 javaw.exe 4272 javaw.exe 3912 javaw.exe 4624 javaw.exe 3180 javaw.exe 4936 javaw.exe 2500 javaw.exe 5976 javaw.exe 6124 javaw.exe 1212 javaw.exe 6132 javaw.exe 2828 javaw.exe 5360 javaw.exe 5412 javaw.exe 5404 javaw.exe 3232 javaw.exe 5240 javaw.exe 5716 javaw.exe 5156 javaw.exe 4424 javaw.exe 4968 javaw.exe 480 javaw.exe 5904 javaw.exe 2660 javaw.exe 2580 javaw.exe - Loads dropped DLL 64 IoCs
pid Process 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1212 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 1592 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe 4528 elyprismlauncher.exe - Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce" VC_redist.x64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce" VC_redist.x64.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 53 camo.githubusercontent.com 86 raw.githubusercontent.com - Drops Chrome extension 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\manifest.json chrome.exe - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\N: msiexec.exe -
pid Process 5904 GameBarPresenceWriter.exe - Drops file in System32 directory 51 IoCs
description ioc Process File created C:\Windows\system32\mfc140cht.dll msiexec.exe File created C:\Windows\system32\mfc140enu.dll msiexec.exe File created C:\Windows\system32\msvcp140.dll msiexec.exe File created C:\Windows\system32\vcruntime140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140ita.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140jpn.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140rus.dll msiexec.exe File created C:\Windows\system32\mfc140esn.dll msiexec.exe File created C:\Windows\system32\mfc140rus.dll msiexec.exe File opened for modification C:\Windows\system32\vcruntime140.dll msiexec.exe File created C:\Windows\system32\msvcp140_2.dll msiexec.exe File created C:\Windows\system32\vcamp140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140cht.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140enu.dll msiexec.exe File created C:\Windows\system32\mfc140jpn.dll msiexec.exe File opened for modification C:\Windows\system32\vcamp140.dll msiexec.exe File created C:\Windows\system32\concrt140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140kor.dll msiexec.exe File created C:\Windows\system32\mfc140kor.dll msiexec.exe File created C:\Windows\system32\mfcm140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140chs.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_2.dll msiexec.exe File created C:\Windows\system32\vccorlib140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140deu.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140esn.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140fra.dll msiexec.exe File created C:\Windows\system32\mfc140deu.dll msiexec.exe File created C:\Windows\system32\msvcp140_1.dll msiexec.exe File created C:\Windows\system32\msvcp140_atomic_wait.dll msiexec.exe File created C:\Windows\system32\msvcp140_codecvt_ids.dll msiexec.exe File created C:\Windows\system32\vcomp140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140u.dll msiexec.exe File created C:\Windows\system32\mfc140.dll msiexec.exe File created C:\Windows\system32\mfc140chs.dll msiexec.exe File created C:\Windows\system32\mfc140u.dll msiexec.exe File created C:\Windows\system32\vcruntime140_threads.dll msiexec.exe File opened for modification C:\Windows\system32\mfcm140.dll msiexec.exe File created C:\Windows\system32\mfc140fra.dll msiexec.exe File created C:\Windows\system32\mfc140ita.dll msiexec.exe File created C:\Windows\system32\mfcm140u.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_1.dll msiexec.exe File opened for modification C:\Windows\system32\concrt140.dll msiexec.exe File opened for modification C:\Windows\system32\vcomp140.dll msiexec.exe File opened for modification C:\Windows\system32\mfcm140u.dll msiexec.exe File opened for modification C:\Windows\system32\vcruntime140_1.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_atomic_wait.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_codecvt_ids.dll msiexec.exe File opened for modification C:\Windows\system32\vccorlib140.dll msiexec.exe File created C:\Windows\system32\vcruntime140_1.dll msiexec.exe - Drops file in Windows directory 23 IoCs
description ioc Process File created C:\Windows\Installer\e5c211f.msi msiexec.exe File created C:\Windows\Installer\e5c210c.msi msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File opened for modification C:\Windows\Installer\MSI236E.tmp msiexec.exe File created C:\Windows\SystemTemp\~DFB9E2673CE3411789.TMP msiexec.exe File opened for modification C:\Windows\Installer\MSI27A6.tmp msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\e5c211e.msi msiexec.exe File created C:\Windows\SystemTemp\~DFB7A3E5576B4B274E.TMP msiexec.exe File created C:\Windows\SystemTemp\~DFB61B9E6D993A35CE.TMP msiexec.exe File opened for modification C:\Windows\Installer\e5c210c.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File created C:\Windows\SystemTemp\~DF2E3F5B9B65EF8F8B.TMP msiexec.exe File created C:\Windows\Installer\SourceHash{43B0D101-A022-48F4-9D04-BA404CEB1D53} msiexec.exe File created C:\Windows\SystemTemp\~DFC1F229253F6E7560.TMP msiexec.exe File created C:\Windows\Installer\SourceHash{86AB2CC9-08BD-4643-B0F9-F82D006D72FF} msiexec.exe File created C:\Windows\SystemTemp\~DF91980E7F43E89AF4.TMP msiexec.exe File opened for modification C:\Windows\Installer\e5c211f.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI290E.tmp msiexec.exe File created C:\Windows\Installer\e5c2134.msi msiexec.exe File created C:\Windows\SystemTemp\~DF472768A020B2A346.TMP msiexec.exe File created C:\Windows\SystemTemp\~DF397E5DC696613748.TMP msiexec.exe File opened for modification C:\Windows\Installer\MSI24C7.tmp msiexec.exe - Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe:Zone.Identifier chrome.exe File created C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe:Zone.Identifier PineconeMC-Windows-MSVC-Setup-11.1.1.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname elyprismlauncher_updater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain elyprismlauncher_updater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain javaw.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname elyprismlauncher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain elyprismlauncher.exe - System Location Discovery: System Language Discovery 1 TTPs 16 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TaskKill.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TaskKill.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TaskKill.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vc_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vc_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language uninstall.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2124 chrome.exe 2484 chrome.exe - Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 00000000040000006cf6ca0d1164196c0000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff0000000027010100000800006cf6ca0d0000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed35000000ffffffff0000000007000100006809006cf6ca0d000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff350000000000000005000000ffffffff000000000700010000f8ff1a6cf6ca0d000000000000f0ff350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1d6cf6ca0d000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe - Checks processor information in registry 2 TTPs 64 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 elyprismlauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz javaw.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ elyprismlauncher.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\ javaw.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 POWERPNT.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\ javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe - Enumerates system info in registry 2 TTPs 12 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS POWERPNT.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily POWERPNT.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU POWERPNT.EXE Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Kills process with taskkill 3 IoCs
pid Process 2432 TaskKill.exe 4392 TaskKill.exe 1036 TaskKill.exe - Modifies data under HKEY_USERS 9 IoCs
description ioc Process Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A msiexec.exe - Modifies registry class 64 IoCs
description ioc Process Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Net msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\ElyPrismLauncher\\elyprismlauncher.exe\" \"%1\"" PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\URL Protocol PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Net msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\InstanceType = "0" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\PackageName = "vc_runtimeMinimum_x64.msi" msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Media msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8A567BD6FA501A947AD1F646E53EEC14 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} VC_redist.x64.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Language = "1033" msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1 msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\SourceList\Media msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1805035633-626948184-3225555471-1000\{292CD31C-71D3-4AEF-A382-A633638C5A88} svchost.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\shell\open PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\prismlauncher\URL Protocol PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8800A266DCF6DD54E97A86760485EA5D msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Version = "237799819" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\DeploymentFlags = "3" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14 VC_redist.x64.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\prismlauncher\shell\open\command PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53\101D0B34220A4F84D940AB04C4BED135 msiexec.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\elyprismlauncher PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\ = "{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}" VC_redist.x64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}v14.44.35211\\packages\\vcRuntimeAdditional_amd64\\" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} VC_redist.x64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9CC2BA68DB8034640B9F8FD200D627FF msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\ProductName = "Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211" msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\MICROSOFT.VS.VC_RUNTIMEMINIMUMVSU_AMD64,V14\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13} VC_redist.x64.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\elyprismlauncher\URL Protocol PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\prismlauncher PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\DisplayName = "Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211" msiexec.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Clients = 3a0000000000 msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\URL Protocol PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\prismlauncher PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\Dependents VC_redist.x64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\PackageCode = "51C7A0D0D899AA345AE972FBABA82567" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Assignment = "1" msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53 msiexec.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\prismlauncher\URL Protocol PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Net msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\AdvertiseFlags = "388" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9CC2BA68DB8034640B9F8FD200D627FF\Provider msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle VC_redist.x64.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\elyprismlauncher\shell\open\command PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\Servicing_Key msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF msiexec.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\MICROSOFT.VS.VC_RUNTIMEADDITIONALVSU_AMD64,V14\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13} VC_redist.x64.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1805035633-626948184-3225555471-1000\{8B8DDC70-25D8-4EC6-A112-3FA84BB9337F} chrome.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\shell\open\command PineconeMC-Windows-MSVC-Setup-11.1.1.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\curseforge\shell\open\command PineconeMC-Windows-MSVC-Setup-11.1.1.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{43B0D101-A022-48F4-9D04-BA404CEB1D53}v14.44.35211\\packages\\vcRuntimeMinimum_amd64\\" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\ = "{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\SourceList\Net msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle VC_redist.x64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Version = "14.44.35211" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Media\1 = ";" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9CC2BA68DB8034640B9F8FD200D627FF\VC_Runtime_Additional msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1 msiexec.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\elyprismlauncher\shell PineconeMC-Windows-MSVC-Setup-11.1.1.exe - Modifies system certificate store 2 TTPs 2 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E\Blob = 5c0000000100000004000000000800000b000000010000005400000053007400610072006600690065006c006400200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f007200690074007900200013202000470032000000090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000002500000030233021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c06200000001000000200000002ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f57f0000000100000016000000301406082b0601050507030306082b060105050703041400000001000000140000007c0c321fa7d9307fc47d68a362a8a1ceab075b271d000000010000001000000054e2cd85ba79cda018fed9e6a863aa467e00000001000000080000000080826f22e7dc01030000000100000014000000b51c067cee2b0c3df855ab2d92f4fe39d4e70f0e2000000001000000e1030000308203dd308202c5a003020102020100300d06092a864886f70d01010b050030818f310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e3132303006035504031329537461726669656c6420526f6f7420436572746966696361746520417574686f72697479202d204732301e170d3039303930313030303030305a170d3337313233313233353935395a30818f310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e3132303006035504031329537461726669656c6420526f6f7420436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100bdedc103fcf68ffc02b16f5b9f48d99d79e2a2b703615618c347b6d7ca3d352e8943f7a1699bde8a1afd13209cb44977322956fdb9ec8cdd22fa72dc276197eef65a84ec6e19b9892cdc845bd574fb6b5fc589a51052894655f4b8751ce67fe454ae4bf85572570219f8177159eb1e280774c59d48be6cb4f4a4b0f364377992c0ec465e7fe16d534c62afcd1f0b63bb3a9dfbfc7900986174cf26824063f3b2726a190d99cad40e75cc37fb8b89c159f1627f5fb35f6530f8a7b74d765a1e765e34c0e89656998ab3f07fa4cdbddc32317c91cfe05f11f86baa495cd19994d1a2e3635b0976b55662e14b741d96d426d4080459d0980e0ee6defcc3ec1f90f10203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e041604147c0c321fa7d9307fc47d68a362a8a1ceab075b27300d06092a864886f70d01010b050003820101001159fa254f036f94993b9a1f828539d47605945ee128936d625d09c2a0a8d4b07538f1346a9de49f8a862651e62cd1c62d6e95204a9201ecb88a677b31e2672e8c9503262e439d4a31f60eb50cbbb7e2377f22ba00a30e7b52fb6bbb3bc4d379514ecd90f4670719c83c467a0d017dc558e76de68530179a24c410e004f7e0f27fd4aa0aff421d37ed94e5645912207738d3323e3881759673fa688fb1cbce1fc5ecfa9c7ecf7eb1f1072db6fcbfcaa4bfd097054abcea18280290bd5478092171d3d17d1dd916b0a9613dd00a0022fcc77bcb0964450b3b4081f77d7c32f598ca588e7d2aee90597364f936745e25a1f566052e7f3915a92afb508b8e8569f4 elyprismlauncher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E elyprismlauncher.exe - NTFS ADS 4 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\download.htm:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\download (1).htm:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe:Zone.Identifier chrome.exe File created C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe:Zone.Identifier PineconeMC-Windows-MSVC-Setup-11.1.1.exe - Suspicious behavior: AddClipboardFormatListener 9 IoCs
pid Process 1212 elyprismlauncher.exe 1592 elyprismlauncher.exe 4528 elyprismlauncher.exe 4164 vlc.exe 3828 POWERPNT.EXE 3704 EXCEL.EXE 4680 elyprismlauncher.exe 4208 elyprismlauncher_updater.exe 592 elyprismlauncher.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 3248 chrome.exe 3248 chrome.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 1652 msiexec.exe 2536 chrome.exe 2536 chrome.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 4936 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 2828 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe 4968 javaw.exe - Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 4164 vlc.exe 4680 elyprismlauncher.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
pid Process 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe Token: SeShutdownPrivilege 4964 chrome.exe Token: SeCreatePagefilePrivilege 4964 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 8 vc_redist.x64.exe - Suspicious use of SendNotifyMessage 51 IoCs
pid Process 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4964 chrome.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 4164 vlc.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe 2536 chrome.exe - Suspicious use of SetWindowsHookEx 21 IoCs
pid Process 848 MiniSearchHost.exe 4164 vlc.exe 3828 POWERPNT.EXE 3828 POWERPNT.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 3704 EXCEL.EXE 5392 javaw.exe 5392 javaw.exe 5948 OpenWith.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4964 wrote to memory of 1260 4964 chrome.exe 82 PID 4964 wrote to memory of 2124 4964 chrome.exe 83 PID 4964 wrote to memory of 3660 4964 chrome.exe 87 PID 4964 wrote to memory of 3660 4964 chrome.exe 87 PID 4964 wrote to memory of 1720 4964 chrome.exe 84 PID 4964 wrote to memory of 1720 4964 chrome.exe 84 PID 4964 wrote to memory of 3464 4964 chrome.exe 85 PID 4964 wrote to memory of 3464 4964 chrome.exe 85 PID 4964 wrote to memory of 2952 4964 chrome.exe 86 PID 4964 wrote to memory of 2952 4964 chrome.exe 86 PID 4964 wrote to memory of 3428 4964 chrome.exe 91 PID 4964 wrote to memory of 2488 4964 chrome.exe 93 PID 4964 wrote to memory of 2488 4964 chrome.exe 93 PID 4964 wrote to memory of 1288 4964 chrome.exe 94 PID 4964 wrote to memory of 1288 4964 chrome.exe 94 PID 4964 wrote to memory of 2316 4964 chrome.exe 95 PID 4964 wrote to memory of 2316 4964 chrome.exe 95 PID 4964 wrote to memory of 1556 4964 chrome.exe 96 PID 4964 wrote to memory of 1556 4964 chrome.exe 96 PID 4964 wrote to memory of 3844 4964 chrome.exe 97 PID 4964 wrote to memory of 3844 4964 chrome.exe 97 PID 4964 wrote to memory of 1736 4964 chrome.exe 98 PID 4964 wrote to memory of 3804 4964 chrome.exe 99 PID 4964 wrote to memory of 3172 4964 chrome.exe 100 PID 4964 wrote to memory of 4432 4964 chrome.exe 101 PID 4964 wrote to memory of 4432 4964 chrome.exe 101 PID 4964 wrote to memory of 3700 4964 chrome.exe 102 PID 4964 wrote to memory of 3700 4964 chrome.exe 102 PID 4964 wrote to memory of 4928 4964 chrome.exe 103 PID 4964 wrote to memory of 4928 4964 chrome.exe 103 PID 4964 wrote to memory of 552 4964 chrome.exe 105 PID 4964 wrote to memory of 3220 4964 chrome.exe 104 PID 4964 wrote to memory of 3220 4964 chrome.exe 104 PID 4964 wrote to memory of 3356 4964 chrome.exe 106 PID 4964 wrote to memory of 3356 4964 chrome.exe 106 PID 4964 wrote to memory of 504 4964 chrome.exe 107 PID 4964 wrote to memory of 504 4964 chrome.exe 107 PID 4964 wrote to memory of 3608 4964 chrome.exe 108 PID 4964 wrote to memory of 3608 4964 chrome.exe 108 PID 4964 wrote to memory of 3248 4964 chrome.exe 109 PID 4964 wrote to memory of 3184 4964 chrome.exe 110 PID 4964 wrote to memory of 1472 4964 chrome.exe 111 PID 1472 wrote to memory of 1036 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 112 PID 1472 wrote to memory of 1212 1472 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 115 PID 4560 wrote to memory of 3896 4560 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 136 PID 3896 wrote to memory of 2432 3896 uninstall.exe 137 PID 4560 wrote to memory of 4392 4560 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 140 PID 4560 wrote to memory of 4420 4560 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 142 PID 4420 wrote to memory of 8 4420 vc_redist.x64.exe 143 PID 8 wrote to memory of 3864 8 vc_redist.x64.exe 144 PID 3892 wrote to memory of 2752 3892 VC_redist.x64.exe 154 PID 2752 wrote to memory of 2908 2752 VC_redist.x64.exe 155 PID 3864 wrote to memory of 2840 3864 VC_redist.x64.exe 156 PID 2840 wrote to memory of 1252 2840 VC_redist.x64.exe 157 PID 1252 wrote to memory of 2556 1252 VC_redist.x64.exe 158 PID 4560 wrote to memory of 4680 4560 PineconeMC-Windows-MSVC-Setup-11.1.1.exe 159 PID 2908 wrote to memory of 2544 2908 VC_redist.x64.exe 160 PID 4680 wrote to memory of 4208 4680 elyprismlauncher.exe 163 PID 4208 wrote to memory of 592 4208 elyprismlauncher_updater.exe 164 PID 2536 wrote to memory of 5060 2536 chrome.exe 166 PID 2536 wrote to memory of 1656 2536 chrome.exe 167 PID 2536 wrote to memory of 1656 2536 chrome.exe 167 PID 2536 wrote to memory of 2484 2536 chrome.exe 168 PID 2536 wrote to memory of 4532 2536 chrome.exe 169 - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4964 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0x50,0x114,0x7ffc6f01c728,0x7ffc6f01c734,0x7ffc6f01c7402⤵PID:1260
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,8149881763062297780,16875425541806148903,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2144 /prefetch:112⤵
- Downloads MZ/PE file
- System Time Discovery
PID:2124
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,10789681096895124538,2905980073649448961,262144 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1940 /prefetch:22⤵PID:1720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,14394719144394555391,15405162709632991236,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2252 /prefetch:132⤵PID:3464
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2944,i,4781538324116234732,9662237149167110995,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2972 /prefetch:12⤵PID:2952
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2940,i,13805154896114560184,16113723849799552322,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2936 /prefetch:12⤵PID:3660
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5164,i,1821122747051575164,17181723616264084837,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5168 /prefetch:142⤵PID:3428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5416,i,18140416609041995790,6710195465773155719,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5520 /prefetch:12⤵PID:2488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3588,i,116571230532191517,11400769732291671620,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5468 /prefetch:12⤵PID:1288
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4284,i,12326523205365861229,13246434535139449163,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3952 /prefetch:12⤵PID:2316
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3136,i,7132040923552867286,13598906210966724280,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2920 /prefetch:12⤵PID:1556
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5772,i,5676312931294876326,4623871361697115008,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5764 /prefetch:12⤵PID:3844
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,4936393933993129134,10552888165478680552,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5636 /prefetch:142⤵PID:1736
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,10516951369140162113,275531615710467820,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5848 /prefetch:142⤵PID:3804
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,17360027637547819912,14257756661260936587,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5824 /prefetch:142⤵PID:3172
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5460,i,10709579651996349026,3677701600784012608,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5736 /prefetch:12⤵PID:4432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3104,i,7203751542364319146,5915772567410679996,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3068 /prefetch:12⤵PID:3700
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5576,i,15125992491583221561,4739463658896251942,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5812 /prefetch:12⤵PID:4928
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5928,i,12040668608024618870,6502415939498015128,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5944 /prefetch:122⤵PID:3220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,4692881694597443179,12945270487310034704,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5964 /prefetch:142⤵
- Modifies registry class
PID:552
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5516,i,14343689050325358773,2942940661300051323,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5784 /prefetch:12⤵PID:3356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6316,i,14472505988099044381,7336604298183727598,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6292 /prefetch:12⤵PID:504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6476,i,2502347362288065536,5107679425933360401,2097152 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6484 /prefetch:12⤵PID:3608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6792,i,213363654903037895,13135105550861915394,262144 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=980 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:3248
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6784,i,8320783898645346368,13298637956240674839,524288 --field-trial-handle=1952,i,14235646162675025425,10256826521480159071,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6776 /prefetch:142⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:3184
-
-
C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1472 -
C:\Windows\SysWOW64\TaskKill.exeTaskKill /IM elyprismlauncher.exe /F3⤵
- System Location Discovery: System Language Discovery
- Kills process with taskkill
PID:1036
-
-
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:1212
-
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:3552
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4324
-
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:1592
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:408
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:848
-
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
PID:4528
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\StopTrace.MTS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4164
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\SubmitCopy.aiff"1⤵PID:2096
-
C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" /s "C:\Users\Admin\Downloads\UnblockConnect.ppsm" /ou ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3828
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /n "C:\Users\Admin\Downloads\LockRegister.xlt"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3704
-
C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe"1⤵
- Executes dropped EXE
- Subvert Trust Controls: Mark-of-the-Web Bypass
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
- NTFS ADS
- Suspicious use of WriteProcessMemory
PID:4560 -
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe"C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe" /S _?=C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3896 -
C:\Windows\SysWOW64\TaskKill.exeTaskKill /IM elyprismlauncher.exe /F3⤵
- System Location Discovery: System Language Discovery
- Kills process with taskkill
PID:2432
-
-
-
C:\Windows\SysWOW64\TaskKill.exeTaskKill /IM elyprismlauncher.exe /F2⤵
- System Location Discovery: System Language Discovery
- Kills process with taskkill
PID:4392
-
-
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exeC:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe /install /passive /norestart2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4420 -
C:\Windows\Temp\{8661F434-1644-451F-BDB9-35E802224F09}\.cr\vc_redist.x64.exe"C:\Windows\Temp\{8661F434-1644-451F-BDB9-35E802224F09}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\vc_redist\vc_redist.x64.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728 /install /passive /norestart3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:8 -
C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe"C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4B221FAD-3F8C-4AA7-9050-EE4C78061783} {17D1C113-8E3D-488D-89B3-F2BC9E1C6B71} 84⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3864 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1208 -burn.embedded BurnPipe.{A541020E-89C0-4036-8EB2-FC7C3213914B} {70E035C2-5C0C-45F5-8D8D-8705C508A629} 38645⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2840 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1208 -burn.embedded BurnPipe.{A541020E-89C0-4036-8EB2-FC7C3213914B} {70E035C2-5C0C-45F5-8D8D-8705C508A629} 38646⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1252 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{63E04238-6A5B-4CE1-94EE-62FB658E95CF} {0B539035-4A63-443F-B866-28B671DA19C0} 12527⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2556
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"2⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:4680 -
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exeC:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exe --check-only --dir C:/Users/Admin/AppData/Roaming/ElyPrismLauncher --debug3⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of WriteProcessMemory
PID:4208 -
C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exeC:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe --version4⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
PID:592
-
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3912
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4752
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx6144m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint3⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:5392
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
PID:4836
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2688
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3792
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2660
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
PID:4272
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3912
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4624
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3180
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint3⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:4936
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2500
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
PID:5976
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:6124
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:1212
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:6132
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint3⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2828
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
PID:5360
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5412
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5404
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3232
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
PID:5240
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5716
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5156
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4424
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:StackShadowPages=32 -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx2048m -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:+PerfDisableSharedMem -XX:+UseZGC -XX:-ZUncommit -Djava.library.path=C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/instances/26.3(1)/natives -cp C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.3/lwjgl-freetype-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.3/lwjgl-freetype-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.3/lwjgl-freetype-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.3/lwjgl-freetype-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.3/lwjgl-jemalloc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.3/lwjgl-jemalloc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.3/lwjgl-jemalloc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.3/lwjgl-jemalloc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.3/lwjgl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.3/lwjgl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.3/lwjgl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.3/lwjgl-openal-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.3/lwjgl-openal-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.3/lwjgl-openal-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.3/lwjgl-openal-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.3/lwjgl-opengl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.3/lwjgl-opengl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.3/lwjgl-opengl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.3/lwjgl-opengl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-arm64/3.4.3/lwjgl-sdl-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows-x86/3.4.3/lwjgl-sdl-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl-natives-windows/3.4.3/lwjgl-sdl-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-sdl/3.4.3/lwjgl-sdl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.3/lwjgl-shaderc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.3/lwjgl-shaderc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.3/lwjgl-shaderc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.3/lwjgl-shaderc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-arm64/3.4.3/lwjgl-spng-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows-x86/3.4.3/lwjgl-spng-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng-natives-windows/3.4.3/lwjgl-spng-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spng/3.4.3/lwjgl-spng-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.3/lwjgl-spvc-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.3/lwjgl-spvc-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.3/lwjgl-spvc-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.3/lwjgl-spvc-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.3/lwjgl-stb-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.3/lwjgl-stb-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.3/lwjgl-stb-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.3/lwjgl-stb-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.3/lwjgl-vma-natives-windows-arm64-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.3/lwjgl-vma-natives-windows-x86-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.3/lwjgl-vma-natives-windows-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.3/lwjgl-vma-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.3/lwjgl-vulkan-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/lwjgl/lwjgl/3.4.3/lwjgl-3.4.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/brigadier/1.3.11/brigadier-1.3.11.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy/1.14.38/jtracy-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.14.38/jtracy-natives-windows-1.14.38.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-buffer/4.2.16.Final/netty-buffer-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-base/4.2.16.Final/netty-codec-base-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-compression/4.2.16.Final/netty-codec-compression-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-codec-http/4.2.16.Final/netty-codec-http-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-common/4.2.16.Final/netty-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-handler/4.2.16.Final/netty-handler-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-resolver/4.2.16.Final/netty-resolver-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.16.Final/netty-transport-classes-epoll-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.16.Final/netty-transport-classes-kqueue-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.16.Final/netty-transport-native-unix-common-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/joml/joml/1.10.9/joml-1.10.9.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/intermediary/26.3/intermediary-26.3.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.4+mixin.0.8.7/sponge-mixin-0.17.4+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.5/fabric-loader-0.19.5.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/by/ely/authlib/10.0.77-ely.2/authlib-10.0.77-ely.2.jar;C:/Users/Admin/AppData/Roaming/ElyPrismLauncher/libraries/com/mojang/minecraft/26.3/minecraft-26.3-client.jar org.prismlauncher.EntryPoint3⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:4968
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:480
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5904
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2660
-
-
C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exeC:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/ElyPrismLauncher/jars/JavaCheck.jar3⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2580
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:2432
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:21⤵PID:4572
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:1652
-
C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3892 -
C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261012175449.log" /install2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2752 -
C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261012175449.log" /install3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{DBB8C5B3-08CB-4501-8BCE-4CAD373430FF} {A44F7FDB-9FC7-40C4-AF68-72ADA5B1E8E3} 29084⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2544
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops Chrome extension
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6f01c728,0x7ffc6f01c734,0x7ffc6f01c7402⤵PID:5060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,2243855116222218100,882578773797421851,262144 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1868 /prefetch:22⤵PID:1656
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,76674710007665064,9073264170727945180,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:112⤵
- System Time Discovery
PID:2484
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2268,i,13450763588424969900,9963123462152329104,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2300 /prefetch:132⤵PID:4532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,15011542577285297801,16693394166239675854,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3384 /prefetch:12⤵PID:3632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,14890258027473931208,3875381878099856997,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3432 /prefetch:12⤵PID:2004
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4528,i,14687682157186956875,2616847622793991180,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4552 /prefetch:12⤵PID:4840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4560,i,5433843359552106882,8150013160082467523,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4696 /prefetch:142⤵PID:1560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5276,i,5123069836605411626,16740411310080089732,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5296 /prefetch:12⤵PID:4652
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,4608383261061148177,7208406130525164958,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5456 /prefetch:142⤵PID:948
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,15711129171869299771,3689078609392969322,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5600 /prefetch:142⤵PID:3912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,17254342946910100187,16952284679460843754,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5488 /prefetch:142⤵PID:3460
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,14854293693773470235,10711231428766956431,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5900 /prefetch:142⤵PID:3912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5692,i,3260242307299691486,7419277662615518217,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5260 /prefetch:12⤵PID:6060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5640,i,12303888867681695519,571318470806036094,2097152 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5540 /prefetch:92⤵PID:6068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,2418954433159807891,6216217906939610037,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5340 /prefetch:142⤵
- NTFS ADS
PID:5592
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6736,i,16929071954315055979,6725342693505153851,524288 --field-trial-handle=1872,i,896091374018605025,6322799904672084310,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5316 /prefetch:142⤵
- NTFS ADS
PID:5700
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:872
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3256
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵PID:1896
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC1⤵PID:5508
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:5904
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:5948
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Checks processor information in registry
- Modifies registry class
PID:4980
-
C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications1⤵PID:4736
Network
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Discovery
Browser Information Discovery
1Network Service Discovery
1Peripheral Device Discovery
2Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e5c2111.rbs
- Size 19KB
- SHA256 dfe4d99ee1f2b531bf2fc81300fe8af6a8427e631516469b81aee05a672d0205
- MD5 c0f5256882c4bce99c6006b7939e2dcd
- SHA1 2df2eb0dd187c6fb51a73adaf62e6c66d5842474
- SHA512 137ee528cc78604ab16457e7bf45e13035b9bb8bc1af9e7a334d57e9ac263f96341d49fc9d956180a58c029b1aed89c02bfd59759c52929adba39b53f13e618b
- SSDEEP 192:1NRA1kRa15dXcFUADIc1f+W+y4+ogPHl7:1NRA6RaTeC81f/c0l7
- TLSH T156920C42A680C9D2D8766B31CD631F657B76DBD5A350438B40DC90308F93BCA2F9D69D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Config.Msi\e5c211d.rbs
- Size 19KB
- SHA256 946a5ad5e8c77feeead1d08ddee89369d5e04981377ebe9db11f7f53fff29eb0
- MD5 19d48f5dbe147edb0123fb3f3936761c
- SHA1 d295cab991fcae1e0252aa6225796dfeaa78a586
- SHA512 3060e0aaac5ee9f5c1eaa55ea4b1cba31fd93e14accb1d7718989313bd59595556afd7dbe5799ed7fe0bb34532dd03f53edbcaa4d17e5d1dfdd8778da3456636
- SSDEEP 384:1OOGnJXMjZ7Up+BFqiO6F1gJK0uJK0GoaOD8Lfv/8c3zMZxq+nNwzQ6R:1OOGnJXMjZ7Up+BFItKFKx
- TLSH T12C92CB026640C5E3D8A62B70DD4B67243BB5D7CAA355A38B41DCC1708FA77CA7F8D24A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Config.Msi\e5c2124.rbs
- Size 21KB
- SHA256 4a63008486e168684714128d8e3f803c4c71b468022d95a5c6ae959401993484
- MD5 b221ff6bc7ec2056869e8d1d8c555e37
- SHA1 582ebe9ed923bc2e2af124efbec621c32416b6a9
- SHA512 9b1837efbc82bb5f5d7839627e73798ecb99067b48f91646ca68d6609540c483cb09dfac8d84776ef83f27c9175e690b822eb34e00312d564e3520e8fc9faae6
- SSDEEP 384:4XRdGRrnAKxNAUhUC7xJjrMNYPzIbSfog4V0MzsJWzBkP:4BkTAKhkm7
- TLSH T10EA20E03768099E3C86227B1DD671BA57B73D7D99360434B10ECD1388F633C72E5AA9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Config.Msi\e5c2133.rbs
- Size 21KB
- SHA256 5376b5def5b9683b1842dd2fcb1fe93a65a90d54c145c2742d67abb8f5ebca77
- MD5 c7fc4460899df63fd161658fd109ca16
- SHA1 2dd0bc632717553a1d6de38a2f3edcfb0cc2a5ea
- SHA512 f150f49577660eebf21550594d1565a8b463c523cc7bc0d34fa39c6c0842c2df617a30ef01f250acabfe5f32d41641d2ac028e5157e0ff595c17b3aec5f32cfc
- SSDEEP 384:4rqvDIAZxEth/phSYjK4WbJGwazsalckU72eC6jJkE5KDJ9UJ9sr76c+0dWg:4sDIAZxEth/phSYujbJpTaIWr76/0dP
- TLSH T18AA2FE42BA40D6D3D8A62B70CD975B2437B5D3DAA755434B00CC90348F937DA2F9AACB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Package Cache\{43B0D101-A022-48F4-9D04-BA404CEB1D53}v14.44.35211\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
- Size 208KB
- SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
- MD5 23626831f9a05572c6ebd133e5ffc4b0
- SHA1 ad044cdf938a5532aa270c6bc687db95d803fe10
- SHA512 1b45ea55e7278ec61f0689b70794f371d56eb2787c22106ebec38d17f1670441a853849460249d08380053bc8b2fae0285845b47ad62670029639d5de5ace10c
- SSDEEP 3072:o9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriTA:+laZeKFxCnBheIdlu
- TLSH T1A3249E12B5808033DAFE1A311578DB615F3D7E608F54899B6364B6AC1E717C08F3AAB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\39c09daf-03c6-44b3-bfaf-93b0062b1bef.tmp
- Size 131KB
- SHA256 dfa5d7deeb1e119d53d551d13ce5d3f783db97729e078f2f3ec51091e5430f42
- MD5 b91614b55f11a6ced3182becceac0eaf
- SHA1 2e396b1f027285b03cc03041589eb47dae994115
- SHA512 17da5df994c4cb568335037f0a766f926c95ef057cd30d3a9bce58f8be71aefabcd135eb2f2b2ee9fb1c8dee41e4702037fb5fd4ef6c9be2519cf4b3b135bcfd
- SSDEEP 3072:rWlH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:6rt4fLJ0L6nGJxi3bzqapJjt
- TLSH T18CD302F0C1E06C6ACBFBFE4155756E948E71D5C689CDBE2409F98C4802CEA794A13E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\409ee53a-351b-49f5-8e8e-5a2b4ee940d8.tmp
- Size 131KB
- SHA256 2c3df6faacf376cff48e1073176496344e4a218a2c411f031b69c00a00605b6b
- MD5 fb47e3eb5ff00a2f1cf69d77426e403b
- SHA1 db39d89f1c204997378a0eba77dfd4ab1093d412
- SHA512 7f3af9f567b5fbc8fc6cf06ca51ed9c7a2b951415ad7e492920edf52d12dc8f2fb8b045cbdaa7e3d691375c0d2a62b2b5dfadcdeab64fe872c029f087a8bc635
- SSDEEP 3072:hbH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:h5t4fLJ0L6nGJxi3bzqapJjt
- TLSH T1B1D312F0C1E06C7ACBFBEE4155756E948EB1D5C689CDBE2005FA8D1806CEA354A13E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4107ac91-33f0-4147-834d-5b34e641d657.tmp
- Size 304KB
- SHA256 aa6195c844ef70fdd791c5ff3f64fca786a739d057311cc6c7a7b8bb14a5196d
- MD5 f3ae7fffe8852c82baca33bfde26360c
- SHA1 67881ccffe8a6b434b9991aced30be12221120b8
- SHA512 9c6c445831dd67a3297de9a6b221e79b35f1ecf6d8b51e83042f4fe3caec249be5d5d6cbe6a3c28b3e83a5a3c75d98580aa5b1d1a78970656c58513a31cbceae
- SSDEEP 6144:I4i+sn0j0cy6USkhDzvySwhIMtlMkYsUEt4fLJ0L6nGJxi3bzqapJjq:I4i+syy6aPySBMtl3YsLWXUx8zvpJW
- TLSH T15D641271DEB0A932CBABF62415281F449F71C8C5D4C96EF400FD8E06569BB3A8817D67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\72f98d53-1a30-431f-9667-2472c79e7f48.tmp
- Size 304KB
- SHA256 094ab10f933d8ca9d28020d5eb3820ecb981c5a52abfbb25a2dfe49d910622e3
- MD5 a9d8101797fb62a97baa2682c40105b1
- SHA1 2e295b5675b70fdc748bca211f6cfbbe966fcc58
- SHA512 b1cf8fc0c689ca0a7379493443c0474b22106f200401385a67e1d788e6b6edd79f7f43f93424b9a3d1cc687f2fe0294edd0e26deafb743920e697b855b132bee
- SSDEEP 6144:J4i+sn0r0cy6USkhDzvySwhIMtlMkYsUEt4fLJ0L6nGJxi3bzqapJjq:J4i+s2y6aPySBMtl3YsLWXUx8zvpJW
- TLSH T1B7641271DEB0A932CBABF62415281F449F71C8C5D4C56EF400FD8E06569BB3A8817D67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8df91869-456b-4074-b429-e455f6185f91.tmp
- Size 130KB
- SHA256 b687fd1cb1883838fb4992c39718f63121e97f2a716f1fcdc91b4ac815c11812
- MD5 559482bc6efbb29edcff8e281f108377
- SHA1 cbe9a1134fe5cd52f2048771966c0d60c556518e
- SHA512 a78cbe2aae55df1a26b6c99c8235c277e10f4b00ef76bea53cb0980f652236cbdc781823515ab0697c5f9d45a8449ec51fbb299d4e84f4204a8be5cf961390c6
- SSDEEP 3072:YH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:wt4fLJ0L6nGJxi3bzqapJjt
- TLSH T140D302F0C1E06C7ACBBBEE4155795E948F71D5C689CDBE2405F9881806CEA354E13E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\92bc4753-1e2a-4c7a-b787-71de0a86ba8a.tmp
- Size 131KB
- SHA256 f604fe914e66a8e067d92cafd79db623df81756f62c998d9fdf68e606f6799c8
- MD5 120643e1f18c2942eeb7e2d500881157
- SHA1 facbd7e1dffe410a6753fd3c478f58440f3cebc4
- SHA512 90aa0bdad2f8362befd38d0aa426363675cf00df7ff06b0f4056a85d3d4bb36bff74f9bb0ab864698d14c7698bb64bbf4426e415c8354607214763ec80fd6fd5
- SSDEEP 3072:kWlH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:Rrt4fLJ0L6nGJxi3bzqapJjt
- TLSH T19BD312F0C1E06C6ACBFBFE4155756E948E71D5C689CDBE2409F98C4802CEA794A13E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
- Size 40B
- SHA256 c2d38f87b82351e56999bfb338a328be7b5543d7f35e87e2f4aca52ecd6b616e
- MD5 cbb406e5a6547660dd649cbcb9ac0c65
- SHA1 81ac4fc6ccc7886eae1b71c82690e5d694c611a9
- SHA512 09cb3b6b83d66eb67ac4823ffb5dd7e30f20864cafc49300981a8f58d8e99912ebbb0da24e72d73e8b0af401f43880f2b3a8cc75ae8080d463a2849df67283f7
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\07c19ef8-3933-4ad5-a305-d8f647b7049a.tmp
- Size 14KB
- SHA256 8fa00b70fdd0028d44d603b2021a5c2861741ffe544de99879dd8ddeb1635905
- MD5 04058aba249ad2b773b09d0187d9999f
- SHA1 3177af675a10f3e3689ee11b1175b6eb33b3c4ae
- SHA512 949e272fdf595bb5343abded823702627f3cbd93860c4dce2697f99ee41c1bd1d7d8301eaf8b7550e765bb15d78a2af47f431e76287b6a3de7e09b77f1574c3d
- SSDEEP 192:BRBecBhW5QVMUv7xp4TPRpVWaOCRGlgPPP9qHsb+WNn4ibLl/ZtzHlF2f2hSkwke:BR8mhWWMQ1CLXVcYswFtDP2uhSExE
- TLSH T14D62C72AB868267B5CE7D629FA65B756D7F6142630903E84EAFCCD2C11D76CC2313807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\24675d5b-7d1d-4ced-911b-a044c9d63afd.tmp
- Size 13KB
- SHA256 801080e9d05128ea2c20704d84e5d0f05a1ba72891468452100582dcbc3dbef7
- MD5 0f66c76e461ead6ea582bdd6bc2f880f
- SHA1 336593d0dc1352428cfee91aac794852742aa909
- SHA512 12e19c8050450b434544153cfcd0e5a304251d3a528ffb48f9011e0ff13314eac0dad0d7dfe01cce93085ea9788e5095c8304eb035a7265885ba6ddbba2c7f75
- SSDEEP 192:BRBecBzW5QVxv7xpAPRp2u/GlgPe9qHsb+WNnSggl/ZSdmnYjE2hSkwkTjbZVyI4:BR8mzWWh1UX8swUfYPhSE7E
- TLSH T16352B62EB918267B5CE7D629FA65B756DBF6102230903E84EAFCCD2C11D75CC2217807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2f656602-d6e3-44dc-bb99-a1b0cd58f81f.tmp
- Size 13KB
- SHA256 49d9e3e239757797f035f69da73e5993f69c9c30a13844c2968e4f9ed6499eaf
- MD5 5f4fa50546a5ecc3b8c8e8aa8a29ce9d
- SHA1 c3346ba9b8d40293a2e5ced5d2263e3d19b587b5
- SHA512 93ac56f831f834f513695da2c7645f5480d696de505773d8af045f0c691b4c27a744d8102fc174e58c2e2f77adbfcc6fa20f0fc01577befc5bc79702548e300e
- SSDEEP 192:BRBecBhW5QVjv7xp4TPRpVWaOCRGlgPmP9qHsb+WNn4yl/ZtzEH2hSkwkTZbZVyN:BR8mhWWb1CLXVcjsw1DEWhSExE
- TLSH T1C952C52AB858267B5CE7D629FA65B756DBF6102630903E84EAFCCD2C11D76CC2317807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4ee0f2bc-f127-4b63-8cf8-4a8aa6004926.tmp
- Size 15KB
- SHA256 40caab9da13010e115a0e9c84892879386dde6eb3c5301c535a3a0c12031c4c7
- MD5 eceedc7868a41be9774ed9b9dd5588e9
- SHA1 1b237778e5abacdff2f1bfe8335b246a6b4f311c
- SHA512 4021149d22704a154b42ba268c2d457c35faae9bc3dc85f3124115dac9da2350a54b6b69c8e84ca9f32bb67586cc920ffd68d14caec08a5967cada5f5a20deb9
- SSDEEP 192:9RBecBhL5zHv7Bp4TPRpVWyCOCeGlgPipnP9qHsb+WNnIKDfAXbLkl4KkDlF2y28:9R8mhL1PNCLXVf6swALAyb2xhSEjE
- TLSH T16162D76AB864267B8CE7D629F965B756D7F6142270D02E84EAFCCD2C11D76CC2307807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\61331d8c-9307-46fd-8508-e517b9494ed9.tmp
- Size 14KB
- SHA256 5c81e036c4c79acb2a550f49299e4636cad32679eba5bf0bdf94531c379ffa3e
- MD5 f40a45e9088c659361d724dbbacc5e21
- SHA1 871ad1eaf67f2ed27d7162192c852244c9f62538
- SHA512 513c7dc26744a4a6c75f724792b969297c9f7bbdbc29733a2f2209bad7033e814ee1179d3f351fe2ddc38d38f765727fca8dc5493b39cc9a6be040a86ba23114
- SSDEEP 192:BRBecBhG5Q+MUv7Bp4TPRpVWyCOCeGlgPipnP9qHsb+WNn7fAXbLl/ZKkDlF2Q2y:BR8mhGtMQNCLXVf6swsLtZb2fhSExE
- TLSH T19E62C66AB868267B4CE7D629F965B756D7F6142260D03E84EAFCCD2C11D76CC2207807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6c1b5ccd-1fbe-495e-aa76-171bf622a822.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9cb8f005-ade9-4c06-a94e-929d8cacafc0.tmp
- Size 14KB
- SHA256 a25a6c9d659f794cd0afc862e9acce3e89bb42567b566c623c5a1b9e7eeda3d7
- MD5 4d4ee5b5abcc1a134df94ba9042fe34b
- SHA1 d638193337878e2da9af1b48cbb68aa48a51f760
- SHA512 cc397e5218930b6e4b4c165ec0ad6e563c784c6d79b1cfe7d2f2a0263f063d33160b234ef730dfb9663c9d718f15d30980cef19d237da8691ab22022e72b6915
- SSDEEP 192:BRBecBhW5Q+MUv7Bp4TPRpVWyCOCeGlgPiuP9qHsb+WNn7fAXbLl/ZKkDlF2Q2hk:BR8mhWtMQNCLXVflswsLtZb2fhSExE
- TLSH T18E62C52AB868267B4CE7D629FA65B756D7F6142261D03E84EAFCCD2C11D76CC2307807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 66d4a6a59426c663f6144a12142f921e4c8c53e28fa02c7dc476b3369b88ecd2
- MD5 b83b4fe6c332208b15975c5af474bb46
- SHA1 a8f2a93764b7eb7a87c7a72ecbdc388e97518bf5
- SHA512 569bcff5c1536a535b7513a6b62a7a6eba3cc1dd3fe7e3080b9c32853f26fb6d69d3447d5d13a9a57141f978a6bfc0d881dcc353eead7208fe97c02927342b78
- TLSH T1D0E02BB6C925EC3708FD1B1854550A46EB1153272640894F7A3D8019CFB07370196C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
- Size 350KB
- SHA256 664f8cb63089dd85e6eeb30d585c8876832636d4426bf4727c7552259734172f
- MD5 e47a748accb3133776203b3865292205
- SHA1 c68f2e0302feb551ed11026f3f031e8b49a50aa2
- SHA512 563d0c56dd9ede699f5dd48e764c5e6e7f37dfc455efb38ee72562ed1fdc058f8dcddb77e421014015883078c524c60064526450d4b6adecba059caa1f602293
- SSDEEP 6144:R62yzs24dIjTPdTCgdRxyECLDRWpI6NBeifIA66zI2cDqnSRSu1VZGWW:R6/zr4WndRxko+6rgAI2tnSRn1Op
- TLSH T1A5742327189CE7E94BDFEFFAF075997890D24548CA9DAB23D8B89290441C802D60DE1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
- Size 38KB
- SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
- MD5 9436affc97843765a966b3568fa7e5ec
- SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
- SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
- SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
- TLSH T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
- Size 164KB
- SHA256 b7e89c947e1ac67c0bac88b110f88b415e0810f61fc15e23588fbff1808c0e9c
- MD5 3c99e89d26675f841b27722fddfc71cf
- SHA1 6cf0adcf0605239b771c6d2a527aa6a932e594c0
- SHA512 425237147f3b7707ef899619962cfed33e9a920f1ea20d981d3cfa7f6c45fbb7c313772f67b10f403d1df95daa02b1227b76fd9adaa0153459ebb36588c1d354
- SSDEEP 3072:13veKJQM9vsXMCYNVOAar5BRoRdG0p1/NCdE79BFc4GyF4GChnCtT2YYQ8OIiR1:Qb2vFXjOAar5B6O0B9B241chn2gi1
- TLSH T1FAF312DAA77AC26F4E01EB56BAD3E6D17C7CCF4C06718280CBB546044F94A3D01AA65F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
- Size 90KB
- SHA256 3a681b8fbf264e50ab1f788250f5171bce0daedc8c5ad55155ad9583a65aa9c1
- MD5 a82c56021fa1c02af41e27c396dd387b
- SHA1 65bdf545666d91c8dbacef45d34a5add5c04b2e1
- SHA512 1245d7496c2805231398ab3bd2574449f0044cbf2da2405303486c7978a5b8de76337554ccf2f03e03571e8be97e748dd222b4de77c28172be44d1662cc822f0
- SSDEEP 1536:HUgqo+8qPfl/zzd36qH8bkmVT5OwO4KTCeE17ExHyfaxHbiKox7QM5Kyij2w7/aP:0TvPtbzdqqH8bkMtO4TlladbSxlwya2R
- TLSH T18E93120EF80F9D7CC81F2A39A370A4CB7546A53D97A750E0CA819D5DB4094E07436C7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
- Size 437KB
- SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
- MD5 15d9ce7fe8b446c91cc0598983dde50a
- SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
- SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
- SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
- TLSH T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
- Size 518KB
- SHA256 43872435c0d3d6eac5546d7cefea18e7ae8c62202d0215dd804f5b6baccb9915
- MD5 d9247d690cb5c13534194423fb7bf9db
- SHA1 eb6eb5271de483ea6171e554a4cf6975fe55b9d9
- SHA512 f10a64cac4cc9cd178f1360f97428a7060183ae0bcd36efe0aa1c89effd675623b927d313e4e0be04b7efd601ed0194666654cc075e4412af79e9a1e05d30055
- SSDEEP 12288:0bupBw0Fhoh2PvOIm7G2TyGh4BrIbR7hQlfVlPMo4Y13G4D:/BjrtmIma2CKRlQlfwYIc
- TLSH T189B423304E1966DF9DA02E331F7AFDF3E5A181420CF591C7389A9F6A542949768F3388
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
- Size 65KB
- SHA256 8abafe0b7c96f06b43f4887b3940a642bba65509e899425df3592aa70e8a26ff
- MD5 ad99804eb918e47966a54237c1c3347a
- SHA1 a7aeae40522797146c0aa5f8fdda72e7c2e6094d
- SHA512 943353395e85ebcf292931349020013171dcbe02f6a5906b50e3fa7d4d181180fa31020327db915ee78b47904918226bdd37bf0840295aa8a8289537a87bf2ce
- SSDEEP 768:oPC9ZiZXfXOXkzbSoy+t08X2Do/HNGvsjUlEwGSoGux2ATaK46KPjPLa/H0gTYzM:T9+POXkTqH0tGvsIqwxK2N6yzIU18fyk
- TLSH T1556302D1C986B44A897F368D25B3577C5F41297F4E980FCE8886B829A3200D3ADC5E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
- Size 57KB
- SHA256 161b5ac49bfd78ccba1094d852d150dbcd0d1580ba716f528a7a3ef9e2faf906
- MD5 705ee1868dd8cacccdbb6cde0ec6dd33
- SHA1 71d62796451aa14da232c21799db11562c864ff4
- SHA512 404f2a66e1748192e85d6441248fb8f9351cd9ebe2382d5dd5c8c0fb984955de92392e67c634269ce4386b59b144cb963fd0c916de465e3276ac311350abe2d8
- SSDEEP 1536:nRHpiwl54jZKP/k4q7ddJFHoPtsYeL4rFKq:nLHD4tKZqJDFolsFskq
- TLSH T1664301CE9CB5155851E15A7FD3AC92BA58D132D88E621BA47BAAD00E0FCC34B3607F71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
- Size 56KB
- SHA256 a5722411c5895cdce787f73ab083b9c1d500a2aad65748af269bc418bab75e0b
- MD5 ea9f4d6b132b9cd9f6861abb8da2aa1f
- SHA1 bd09a085d1997eb5397a98be463f6a8bc2df586a
- SHA512 54c3c17d07817ee799f1edda0d374b8aa70c0d9b6506f571c5b423f67c6bc288ecbd128963f5a431429f7c66dba57b4eafbc4ac499ef7120a3f4efeacf316121
- SSDEEP 1536:JFvRZ0dxyE+ov9D9IB5wtcl6mFTkDZg5Ef6hCY4p:JNRZ0bYobKTky5G6hUp
- TLSH T16D4302F420580B199DE33AFFBFBA8C52D1E23C2C52559E431CF2D6D5D54C22B696B248
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
- Size 44KB
- SHA256 86ceedf15683b6740ac94c62cd68aa3d19c8c837c971f7dfb2e1ddf0114112d3
- MD5 654c05f21f81a0a5342668c92e8b45da
- SHA1 dcd6ac1e13cb17ea4783322a4435e1c8b624374c
- SHA512 1970c68ba0f9106aee311dddd89b71cc4b866bd62ebdf8d8380b42b88d07e16b3afe8869b224a1427b072c4e8a1ba411f8fcbf8cbc267e4e6e21315880ec56e2
- SSDEEP 768:LeT1DRJQAfNGY2RAvu8tZ6Cot03pv2nzPG8XziIqWjRUSJzyG79O+UJ6XPj37:K1FJZRZ6Cu0BGz+8DzqWjS+7j37
- TLSH T1B813F133EFA44E398568DE0AE3913F5A5DFD49DA09CD99D368C241BACE46CE1530C0E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
- Size 136KB
- SHA256 161916b802b575dd2afbd0542a76b0c55e4f3694b8b8adedc93845cf3a489441
- MD5 20b6b8ac1773654f831f0ee80cb09837
- SHA1 31f21601fa18bca65290139df7d38990b7c9191a
- SHA512 1c394115917aeba3af43085c231737894e043e2ea63e5257115790caf13368e835f6fe734fe66e55cdf5cdafc58a082c17012d53c5d4e6106b399e6764d58775
- SSDEEP 3072:tXG1uPx6UmmRRui5v/GwjGTaxxsHw2qU9qWJt2I7W:tXGoxAuRuEX/jVfsQOcWyI7W
- TLSH T113D3231D714578E2CE7909C5E0F22965A973F7151C0D882B9C8BEF15F36BA4A8E8CC93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
- Size 28KB
- SHA256 414517ced12e698a756ac288eee6a9c1923ed952a09e3a49cca44320d933f5eb
- MD5 4300662e9d6032cd67a3142d52aebe17
- SHA1 d96b402aecae4b56d8a83fa2eb86929b4c843600
- SHA512 3f16d4c295fe4c3a00288b49734e8ea41e4c852128b69b45379ad3b0adb1be2a9327aef74f2482f1053bd25e4ea90cf42eeaeab877e9b190fbe8a8a25879edf4
- SSDEEP 768:LZuhFhuhpm3lnth/iTbk1yvypNiLLnOJLyJF2L:Lc0sltxHymBLK2L
- TLSH T1B2D2E01E35FEFF923B979CEB20CB335657EB812DB0DBE185A6A84940830D5E986040D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
- Size 24KB
- SHA256 48ee55bcca98b32a5e05d98fb1673a76449c35261ae0007e93a7cd7e95b1b7fd
- MD5 e69515c3706adba2a9c1ce297d85cef6
- SHA1 f2f971655fc69432d41afc6126de205c014a17a4
- SHA512 6e11cf7eb45ec4633a3e9ec667f0c58ffefcc802f686bc8a48eeac1a691a38b000c7d876d2ae5d6a192494e5121909aca47b0035e80b3d07bfa3eaccd5dfcb8a
- SSDEEP 384:r9tYHHbmpsXVaUeX7DDSe9atjG0vpMJWP17NqDY5ZYxG3rSa7A3oH1OrRgjYSrNQ:3qbosFISewtjSMP1JqDRa0YHiRWu
- TLSH T137B2D14E5E18F49B6FBF40F5FF35411E9B9F1005B9F9CB69282D01051A1DDA20AAA2CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
- Size 53KB
- SHA256 19ecb89120f6a4cbdd3822b96d12041a720d2c20f777a630f8fd8f2139f565f8
- MD5 6359419967e866698b514c70c31ebd88
- SHA1 48d753f12e1b929f140be6109b520416f70a9467
- SHA512 ce58a45d637a67f20daab1f575c4cd7e031407847b94d896800b62576072092fd0ffa9e62832fb5f2e40a32cdce2d547edd2d32994ca2dd0d7aa35508417ef85
- SSDEEP 1536:+uCeL1HnS5xGCPLeGKBgiWHbYWV0RKeH96phF8Hi:XJCPLeGKvWH0M0vHml
- TLSH T1AB33029F444567BF6ECE7C6A713B5E1EEB61BCA2E29D3221584A724E4839344C070F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
- Size 123KB
- SHA256 3e8def8613402b499a20e2975598b9f4e86c3fa0c197201e1ab5856c96fb6b15
- MD5 8e6c9a2471c6ff388ed2cb8a924788c0
- SHA1 0c52e7b14ac56ee7ad2518711fbf1871774541ad
- SHA512 1611a1e7b8e5c363a3c57867c569c38e12df91296428e381233e99427e14016886ef0d6bd767a2b130f773f261f130f1b918520f961e9ccfb701fbda22b29bfb
- SSDEEP 3072:dBHk3Gy4RBVRVEvnyi8ilerRUj9qUS+IOZ32xCVrrfqKxm8:d50GyWBXmvnyvil6RUjPZ32xCBlm8
- TLSH T11DC312513ADE4453021CA83B5CC456B636E1BF9A5C829849D6BB07511083FFFA2AEDF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
- Size 73KB
- SHA256 bcfb2449c8705c8fefca9c6722fb101f25034a0c48956ac979f93f33f3cd86b9
- MD5 e759a70432d89e7af434565b8086ece1
- SHA1 0db971f9d6594c303e3f98bc34249b327c944e9e
- SHA512 a0aea5ee7e14ebbd97caa5f136ea634e80f4178c06b9b8740a2d9e297e46678400ab4abd79f5c2cebf95b83c37f2bee61473043a9cc63b7b22b79298e2a1102d
- SSDEEP 1536:8NcmaYWta4RJtrFoYdgt3Coss+dyHapV/bVNAcFzMPhKqX8AMJuf+jO:8NPbZWFUD6XL3zMPV8AM8YO
- TLSH T1B37302A25685BCFADA2B249999C64DCA307FEB995EF4C63D9E403D102DFCF134DA0408
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
- Size 464KB
- SHA256 be7d54f037c523ed06f0410cbca1c4f066ffa739608f9a7f24033cbc3d3b0380
- MD5 d55b2b6461ac259447df55f72580e13b
- SHA1 964876f0c0bb65027cc24063469ea6437edc8de5
- SHA512 92a728d45194bbc6e6c7a0376153bfe280a6f1c6073ab45d69c890b3afae6ee219c7c59add8be557a10a6ca50ee421c818d74f7473cf5645dd12727e3053ec4a
- SSDEEP 12288:D0ER0VKwFzgqj79rxh9Z3Ay1LLpNaqDpzHhVOK1wSO5lEM81:DbBuJ79/91LTDJHLO5uMc
- TLSH T1E3A423BC05B0D543BF7931E67F874A82BF6E2C154D1AAAE48B41288CE48B8D53C17D5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
- Size 70KB
- SHA256 14b7e3e561ecdcc3fff8ee006bd7e01637245ed7230cec98ef3b7b29afb51450
- MD5 5d1b342e1770ff9da1a471f9cde9bf85
- SHA1 cfe6125f0366c03ec1889ecb92282521db850506
- SHA512 569ed499a86d9b98925e7089f471afb2d024f44150f00825ffacade246e415a965d6f073f89132521c5786ad8100d87c42ec74899d1e8bc9e8e9ed7c7b4ba935
- SSDEEP 1536:R7Cx9ZzywX1U44VOMRT0JzdshSc+rkHc3y0FNEEk3JCtItHE1OyJ+2dq:R7Cxnyw1T4V5RT0OAc+4H6kEtItKbdq
- TLSH T1146302A776302F872496EB1C0F1E116D8A4EC4CD19937A2FFEB45B3972452363A4B243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
- Size 27KB
- SHA256 85d3e19dde7025a55e679ac45f60343c9765f6b7492c3bab63d7fdb0a65cde03
- MD5 bffcbbab9064375aded4daa38e6ab526
- SHA1 4b9d4990711f9a46cead4af533093e5703b0c981
- SHA512 154ffa1e5448ec3564bcf4656c2881be443c72e576c884a58c856efe769f0cd319ad5c01268d471ca63431bc7846787a3cd9128b5478f2e2c222dc0ef7e09beb
- SSDEEP 768:w028QEdh5tE9xIAeKK8Gh2230OW8DFh7E3o:w028Q+CLWLCWpEY
- TLSH T13FC2F13E92E3DF8F91A96AC4CC1308D18B369FF350D402ED11CA6D50E5696A6F46CB8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
- Size 34KB
- SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
- MD5 5591ff4b466999e32aec305d8474ac9e
- SHA1 22e393341dcefff9d1d67520eb83688cb904ae1a
- SHA512 04dcd2ebe34c90d7cf4e92800c4f69d7632bd45949f1c64a74256f627cc79c6ab0bf61adab871aeea10daee06e8d528c7002c39aba4f6a68b35e7aa4b03501b5
- SSDEEP 768:gnBd63kaD1qJ9skOECPJ6K6LNJmuZEo1Vb:SBE0aDE7s4Y6bjp1F
- TLSH T1D4F202276B7F59F1263821E4251C30D17E3D2FE3D40114CAEE8CA58C53390926AEE966
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048
- Size 346KB
- SHA256 a1ceb3df9fb44cafac57aa6814112f415b31d062f45029b84330a4c8b6ee2223
- MD5 807f8ed795ff77a6c52f008ff70e789e
- SHA1 d2c5b378d4c9e95c777a2b2767248cc4ad57eb05
- SHA512 9ab714adadd47d5e4124250693f0bc2366fb520fa9148d5980bc80be30880fe9d42b57c815be020acbbdaff434bd0209888b1050bb269ea06030c9dd97638703
- SSDEEP 6144:gK5i8M8Z3iE2CPijzOflx7Dcya48kFcUl0hFvpBuEHAWwuIySTPxtBJyS4Nmir+R:gKA83iEF7nFzlk5uZuIySTDBJyJLrFiT
- TLSH T1707423104324319ED4DF2DBD4C016ACABAF2899E18D3E6DD0CB1F1E69257C1FA626B17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
- Size 39KB
- SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
- MD5 9a01b69183a9604ab3a439e388b30501
- SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
- SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
- SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
- TLSH T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
- Size 96KB
- SHA256 d6ab2e4e860bef8563041820a62629171382b2a790462800faed4b3ac48d7e8b
- MD5 a7c818514d219009f4f4a1c74f1552dc
- SHA1 491dbcc1b22e55b98a18604ed6ecba06fdf003ba
- SHA512 e6d592d065287f4a97484d817b572130192e5da375902b03bc2f74c63fdf606b564b7790e79bef5f4cbb4d073fe0a87863e16b4a317ef2e7299d815b526b142b
- SSDEEP 1536:QdHHtdSZi40xa5kX1lUBHQ/Ef8dkf1oh73baOwio/fFTdI+LueBZxFEUmn:QZNKv0Ue2BYI1oWOwbFTd3CeBLFRw
- TLSH T14AA301E910FFD9B27ECF193A60182F931722880DC1EE45B6CEF49D2EE411E494A11B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
- Size 53KB
- SHA256 76522cb09c91d6f8fcb3b4163ca574cbf2bba901965fa02351fd5bdff17b4fce
- MD5 4c3466901e5d5570ba4199e40182b351
- SHA1 fb04831e64883324d742965f0a7e6ae0e3b0b6a7
- SHA512 84d2977c16283daed2dd1c49cc0609dce56e3be6a1558af5c4285912034244f2f3d2d05548dd95e8b73331d67d03f877af007de042c92793133d2d91862b692e
- SSDEEP 1536:E5mzCX9Gyxf/+w1QXSo7hEMG1QhrBOVHRsdmtw2:ymz2xxa542R4jsQq2
- TLSH T13443F1065DF8E1CD612BF4701E0D5A15423972846B8C0FC471DFF21EA8ABB76B65ACE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
- Size 33KB
- SHA256 41ed2f0f479a93d6506a079b0bb3ecf3a12c29b607312b1db4d071e8c2ca113f
- MD5 952efc85366ecef838e2c3caaec9d18b
- SHA1 4df7b7df04ff2d5d387a14cf2b6d43aeb0ff187f
- SHA512 351a4d401aab40c9866b406d3713715f99b20d8f9516b902432ea4e93cbedb03bbc044c522de9dc6606f9c965d482b2c36f5984272157d0bbf93ffaa51ac3ecd
- SSDEEP 768:GF3z6RWndWAM9oDQQhqKw8walWZxdTJ/aXOrcrTSg/JvS:GB3dgSDPhr7lcxdRaXOrc3d/RS
- TLSH T138E2F241957AE830F7809573AB017FB878626D52E7A5C348C54DACBEBDC290EA01852C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
- Size 34KB
- SHA256 98eee6fe6dc8f6341f80caf9c7e72a5241dd78188d403a12bc6aeb23a3e8c1a3
- MD5 160aaade5f510bcdf0fc5dd908593fd9
- SHA1 002323eff6831ecbd11aaa536be31a974c43fa7e
- SHA512 75581946156934b58300ee802aee83490bfa9f1b90575f8d15518e7f602e283d1ff74d0038dca34b61a711476dab4465ce16aa0c7a5ec16bc1a3fe536d004366
- SSDEEP 768:rdCoyo+Sx+f51BF3PLytWAKvwcDlz3rvy:rMLtKWAUwy3rvy
- TLSH T1EEF2F1356E62EF9BAA782FD46912AF75C86FF90648D00DC2D0C061FE4CB7D06218645B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
- Size 58KB
- SHA256 d324eba6669b64868b4a4eb141fc5a5cb670832873bcd388527d688ce4c9e8e9
- MD5 a8361b7949835867bd14eebc007d86c5
- SHA1 9106c868cf8357af07a7a176d4604683719c64f4
- SHA512 39eaa569597fdc668156c72b9d760bdfd546f891aa8ef2ac60a99dee5e9d369654dbf5c1563d453447251761a00e8ab250714d3bfd52f0888bfc564c81807d0b
- SSDEEP 768:B0Lq+tDmXnDmMTMUDJor49WSGpY7BV5JT7h925YyD4/I5pYvL2cu/6m3RFGB5Iu:BMuXDp4UVo0B7j7hA5YyDITKcw+5Iu
- TLSH T1734302824D22B6A78E7CEDE7452C4F599FCC110B007D13E8BA99D81E8765A183E5F27C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 6KB
- SHA256 8c7dd6a01c5a0992edaebd8bf7929b46b89934712a71afcf959f82c29170f445
- MD5 6cea175cf360019e8a4bafd152c97c36
- SHA1 0711dfdde1aa371077aa1c4af51da1aaae38e895
- SHA512 af1fb587320050618d932f928312f24607bf61057d74e318f9daca19d8f1fdb92d6f2e7183c8c4042703e51166271910a8f9d0813097eb2499c3b3d3251edf14
- SSDEEP 96:/tHdRgUXqdrCRomXd4gBmV8XjTTb1z77/L/ClcZlR/1QAekjlISlyCxPu/n3nylE:lmdrCR93TJz62X/npN0iXf1QYCfn
- TLSH T1F7D12AE679B1822DDB7874B8DCE66C41F7B0C9B34D170E2AB54CB1BE85527D12C39824
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 6KB
- SHA256 3698e27b5672bcd01ecee277752d4c47c187440b911393b051b2657938a1877a
- MD5 8d83ddde20548a593bea7600a7025baf
- SHA1 8a514d3129eb725412037fec0630d7f1f2852153
- SHA512 016c36ed9dcd3466a8de1c7b3c588840a3676336f1036dd2da2a980bf1dd4aa882ce52532407015a1abd5e3358f83b01c741c5dfe366a4ba383866514f44690b
- SSDEEP 96:PpuqIoz7DluLSL3AIVuD1ElRgdRkOBHZ/eeXVSATYlgbsUQmY5mmHL/NeY0VX4eo:Pp3DVWEodi6Z/pFhTYUJaL/Rq3Y
- TLSH T102D129E679B0422DDB7871789CE29C01F370C9B34D171E2AF64CB2BE45A23D11C39824
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 b1bfeac23288ba6b07f0d88b782793a50d18f90173da8bd2c1baec0ec5f8400d
- MD5 609c157bab650041d632c8ab436ee751
- SHA1 f763860c40cc50e8cfa9e646bcafc7abe709a66e
- SHA512 4da1d42c6de7cffebccc5b7eefbf3544091d359a46b2e23e5d1c23065df483b991a8e5f65d36faa62ddc79969e3fbe03edd8c5a44d1445051f94301e94471de8
- TLSH T1A55122F5BAB0423DDF78B4BC5D36AC033A9011774A361B5D7A84B2AE55A33E0250DDB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 aac231fbc1c4f0094615079406f1bf1539342ec615d8fb93afd30a78cc0aaa09
- MD5 5a5e40186425cb25a44fd34261e5c466
- SHA1 0ae295b04d5a7068e2cdd8ae5d1b328cc5ad3962
- SHA512 7f7678f0602ddc5c8827b4fab2f0bcd37f58396d0276d5212e7d759923fc74334c4f961eb918f3b14cd22d340b1a0d3c5f6187610849102b643811c9f505df8c
- SSDEEP 3:MsEllllkEthXllkl2zExllf50K//l:/M/xT02zgZ
- TLSH T12B440205BB850406C52110304422835003A0D8140912674324516852AC895801C00405
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2536_1502989847\CRX_INSTALL\_locales\en_GB\messages.json
- Size 593B
- SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
- MD5 91f5bc87fd478a007ec68c4e8adf11ac
- SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
- SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
- TLSH T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2536_1502989847\CRX_INSTALL\craw_background.js
- Size 531KB
- SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
- MD5 6eebed29e6a6301e92a9b8b347807f5f
- SHA1 65dfb69b650560551110b33dcba50b25e5b876de
- SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
- SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
- TLSH T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\20508f61-e74f-4b6c-82bc-761f6098cc2a.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5b5c4870-0a73-474d-a3cf-da51b89e7bfa.tmp
- Size 16KB
- SHA256 61eb57ebd048329bcc59346d9bc8a296a6c9a217b5a211061aa4cacc4f971c97
- MD5 e7350644878fdec6f21b8d3b667331ea
- SHA1 9546ccfd4d227d3cfced8668aa1b51d012f6efae
- SHA512 c70e943cf40430af087a20682991604f832255763083beb5dd837e45d7ef4e5a6daaa7d692a97bf9027c975226143b64072c8ac2da9614c0323e36d1a971ec47
- SSDEEP 384:DLhWtxwNJJ5yJmu+IHuNs+jnJIyjVoJBmOmjPLuSh/AwEC7aqGIFIKIzklFuU5I1:zem/+OGV5K2IXqGJiz
- TLSH T14272DBF783E4CA2DDA1156F09B14AE2FCE290528432C3C76C9E4BE5793E2572E25174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\63b5b116-5bf7-4c25-967c-c1ff25ecfd5f.tmp
- Size 3KB
- SHA256 f2e2fb981a1ed9dfc85ebc89472c54e068d59b10322f3c7c73d2e349bfa4af28
- MD5 c379e31fde53ee9435b328a44c56eb6c
- SHA1 f22a33f0fddea56d81b167deb83486ef72ad677e
- SHA512 1eaa7197f6811c08f3d79617cc87d1895a2cbfea4c698225b11c2f16b6e964b335a04d405152ca3c4661a8c9f3f30ccdf346ea792570daffe1b408e3046ac77c
- TLSH T120617DD7E67A742B103B08A72D68B80929BEB4717151D4F8DED783ADA0C69F71B12422
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a3064c45-7fce-4ec8-9e76-6dd02cd1a0f3.tmp
- Size 2KB
- SHA256 49d936416d246276d23ac09849fa0ae4826d21a28670462675bc0309f2db51ae
- MD5 729a6c1c453f2628152520007fb3ea21
- SHA1 0607120eee556792e2e51d69fc20e50afbfc39b3
- SHA512 7895c736897577c31128fc4eb9e106275ebcd9c3363b0f78af6260780787d464f8134507307f14b4e75c1cd43d6c862531813a2cd19864442d98b86aff081f0e
- TLSH T182518CD7E67AA42B103B48B72D24B80929BEE4B27151D4F4DED783BCA0C69F71713422
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f8dcf7c7-9d16-4735-a4c0-86a0796fbff0.tmp
- Size 15KB
- SHA256 23e8c5965eb25b62e14c0b9420e5e40d8ceae038ca2ce67cf2c37abf3c393287
- MD5 4b344f0b078d3eb80b55554ac5790b0e
- SHA1 b2b32141aafb130f15b9d32d0acebd168bcb1429
- SHA512 b2c05ec2fa909586b72fba8f54648fe0bd721000e85bead7c578ddc80b779d4b361646882b5df865911ecf7270a88a4208d553aadaa6cae19bb7ed71c35e195b
- SSDEEP 384:DqUsY5Jf0JwnJpZsZkqhsSXDFUZghDaSh/AwEnN7aBGIGIKINIisPBfMffNLHNNa:o6GL5V+gld8
- TLSH T1E462CFE3C7D8852D89521AF45B147E1FCE1D0A18932C3C6AC8E4BF5B93E2431E25275E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 11KB
- SHA256 abd6daa20de1a8efb404d2e6b18db3d1db5a951ea981436a8e6f2178407c092b
- MD5 42120140355b12765ba9657c841e9bee
- SHA1 ce7e475b4029003b3c935b546de18f510441386b
- SHA512 6409499e03bc29a98239958666ce4d65919525a1e2bc13cd4107305eb01fa9c78dc76e63347d2d793a993f53c024dd4ca4cf42079a1d37654c407ef10b4f465c
- SSDEEP 192:e9OI24K6vOIz7KxkXqK4I40pUZNCgVLHrKHfFKslHlOI/XzKD/qOIP+ErUkKNb7S:hzjdQ7KxkXqKf/pUZNCgVLH2HfgslgSp
- TLSH T18A32D927948D9E3F0FDCD509CC167F4BACB5029673684D2496FF9C0803A67CA514A6EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 120B
- SHA256 08c60fa6befcf60458abdcdea44c717a0d540674aafc55fa1df2f5e8c22a6523
- MD5 24cfa4990e85aa635ca8d69f50dbb0a9
- SHA1 8cdb01bbb577b3e1da3588fd2e9caa65778793bc
- SHA512 e7156f44d482ae1304080d87e27e4e2403a5f38b7589285085d076be62bd76ab7988fd0b01bf30d591dce88b8d943f85910dc1dcf4a03d0a0e4a8a7d7100046f
- TLSH T1C8B01200804B5600C800D6F02555208F26004F318100330297D06996C8870E41151612
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
- Size 96B
- SHA256 13b97477d3bcdfba27122facfe0e1379fbe5ac4ccffdedb2f769cb4fa9a068a0
- MD5 6d4b31ec6274a6e9d914c99069ae2426
- SHA1 d885a0fca4838fa5709547e7e668511d3f83f0c7
- SHA512 55cdde1405859ee2e5b20400a8d330e9d6392f7c293ae21deacc525ba10a0439df37eba4a7b104f5d211c0bb77a30a574c244d4b37e2a9bd915cea6e0e2ddd9a
- TLSH T1EFB02282A023B383C2208332AEC2028033E28E308B8B883328B30038C0333830302200
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
- Size 72B
- SHA256 6153b8fb66f07b6fcaa4ce82167b65125557b8ad85327ee56c2d37f3583bfb88
- MD5 9feffcd154ac0285fade1fbfa1383210
- SHA1 7b5594704474e746b1196cc7b567f6c7310487b5
- SHA512 4e62f1b0fed464ceb9d1706b4c428b1e1bf7f55c152d534e9ea95d8357e42653e50f86b8d9defe2f0d47a5016fa3b53067f1a71e43792de455a6dc04e7ce3d55
- TLSH T102A002D066529202D11107F4DA9506D87359AB790B434B0674941054C8A03474101380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
- Size 72B
- SHA256 54fd377c0e24f6abfbc08d2d53dc1b388f93b3c04593c11a9a87acf8b67565bb
- MD5 56d95aa4a8811d01c304a90575e1ccab
- SHA1 6d268e077545f2682567e1abe6d6b84bd1fd8b90
- SHA512 640c51aeba12d180e74bd6edaf76d89e8f9786cffc9fa1653e1f756824729ddb8c71e8d647980143dc478d63b441999c9630ac182d5f6306c53b3d943cf608d0
- TLSH T1E8A0025471C80413CE104570786B464513435C143650E7134991254DC99B1D0C551266
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
- Size 48B
- SHA256 f65332d0c8c4710bc8700a1072e0e9ce0f17d6027f67f8155296f57d1ad45c8f
- MD5 0fbc0e3c0e9acf5e0921169e23d1ab72
- SHA1 a5ecdbce95eddcb7ad42f4e4e5736f883ff611d5
- SHA512 507da960ce3b0e39a43df08ec4f2a0b190eb5c692cc3f7144a1776cabfb7de03c375659609cb4056e0e2766452346dc2118cf10c6257388f2987188f11fa19eb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a728a486-7883-40bc-a741-38b32ff2bb15.tmp
- Size 12KB
- SHA256 5cfd836643ba5b9046a13197cf293d59998881f69db6acf9db74fd1c4d6141f1
- MD5 eed0e28fa04f2d7086f7b3b638c5568f
- SHA1 82f4b4e9a77c224be0e301954c3df71d06ac475c
- SHA512 7fde4345b2f56176ca02c70477c49ee1a221c53dc4d0753e157440b35e8a357817d1bfbdcf6e4a092dc37b8f5296a6c0722501ebb56a44800b296f98b70a1473
- SSDEEP 192:BRBGW5QVwv7xpAPRp2up+E9qHsb+WNnl/Zk62a42hSkwkTwbZVyIsnAUge:BRcWWs1UXxswh72aHhSEme
- TLSH T10242B42DB918667B4CEBD229FE657753DBF6102120943E80EAFCC92C21D75CC2217807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\baf5f7a5-e121-4e90-afa7-7a0612d4f8c1.tmp
- Size 13KB
- SHA256 689fa7ebcd17afdb7af5dc5a1328aa7884a3e268c8f1115a5f44e99cab67528e
- MD5 446b488814d22c79c6b238239530ae27
- SHA1 d4021dbace4131971ee5147af54806266ba3bd20
- SHA512 5557813b7371a7014b27ef24b55a56f85298b3aed1b491fe77a7a3ce0e51a740635567ee3ec89fba1f32063218e49e04342c98b4ff012bedd7268c16e5b35c3d
- SSDEEP 192:BRBecBhW5QVFv7xpAPRp2uRGlgP99qHsb+WNnSggl/ZSdmnYjE2hSkwkTjbZVyI4:BR8mhWW11UXtswUfYPhSE7E
- TLSH T1CD52B72EB918267B5CEBD629FA65B756DBF6102230943E84EAFCCD2C11D75CC2217807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bccafbb5-6eaa-4cdd-8592-dd767a9467f2.tmp
- Size 14KB
- SHA256 63babd9d0619e05a0c49fbd7e0f2e3df463453157073175515285a76473a4a66
- MD5 e628581129656748d6c3d7b06efcbfb2
- SHA1 5d901cbeb4c66168e38df7049decba87796d015f
- SHA512 870bb4f5a6472c93581258043959d856cc040676f9903dd556409a0b068474e19f41114387382d78971e8292e6a5404611bfe8ee4d0e1e175c55b0e46f2e6412
- SSDEEP 192:BRBecBhW5QVMUv7Bp4TPRpVWaOCeGlgPuP9qHsb+WNn4ibLl/ZKkDlF2Q2hSkwke:BR8mhWWMQNCLXVc2swFtZb2fhSExE
- TLSH T18062D72AB868267B4CE7D629FA65B756D7F6142231D03E84EAFCCD2C11D76CC2207807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c0d52154-fadd-4c7b-b33b-d135e8464e82.tmp
- Size 12KB
- SHA256 2dd02a752bb681e3a8f33ff3a41ca7b137afaf2fb3a462a99ad2f68768f96dc4
- MD5 705987f6a09da686489b18422bf6511c
- SHA1 f6a54360a4720f59f2e6e461aeb4e1b7a7c8de93
- SHA512 6ad3445437837467530c553e94db9e552e394e25e84261d35a879e1c3696effbd2d821945a2628725ad93b9c8b56bb08059026db303f4f93476a047eefd08a14
- SSDEEP 192:BRBecBzW5QVxv7xpAPRp2u/GlgPe9qHsb+WNnSggl/Z4OeC42hSkwkTwbZVyIsnR:BR8mzWWh1UX8swUbeCHhSEme
- TLSH T12E42A72EB958267B5CE7D229FA65B756DBF6102630943E80EAFCCD2C11D75CC2217807
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\aa56b22e-e9b1-404e-8e00-506bc2f52e6e.tmp
- Size 131KB
- SHA256 7687f76fec90375abbae9d4f143fda1808cebd821e6423b4c69817f65b2ca434
- MD5 5faede5dd34a533f25cd008aafaa1123
- SHA1 ebd1e1c70be53f27829f3d183c166115e5989bfc
- SHA512 ae26df797ecfea9a47c1ea7777d015d825a5a6201b3a042c43cb0cf2c9db43dfccc1db68f69ab40c698fc4a31c247a939a2b9c9a15d49e4cc8e631901e491056
- SSDEEP 3072:9SbH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:45t4fLJ0L6nGJxi3bzqapJjt
- TLSH T13AD302F0C1E06C6ACBFBFE4155756E948E71D5C649CDBE2409F98C4802CAA794A13E73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d52f1869-e213-41ac-833b-64e8eaaa0f00.tmp
- Size 131KB
- SHA256 03ea84e668ebd28e7cde12e49acc7cd2973d1fa893851124b61895893706aec5
- MD5 3aaa3f107a2e8732ac0b9c8cb753fe86
- SHA1 7cb023642a399cba4c6af8fe6ec0ace20a000106
- SHA512 18b773bd7f5c0df32674a244ee58bd61ff37a6910fa4986dbadb2ca1c9726c8352e7c5dded7071c2ccdab7988ef95743487f000f5153570a43a675136c4c9b7b
- SSDEEP 3072:wbH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjt:w5t4fLJ0L6nGJxi3bzqapJjt
- TLSH T1C5D302F0C1E06C7ACBFBEE5145756E948EB1D5C689CDBE2005FA8C1806CEA354A13E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\odc.officeapps.live.com\36A59B10-6A5F-4471-98B2-293FE04486D3
- Size 2KB
- SHA256 a1b0b7b33e6818837aa403f7a73af14ae91ec1409cc76e312c712c8786c092f6
- MD5 82220d7f99bc22a30d546ce452c133f2
- SHA1 e69e26e6f48d93fd93db729e40890fd833604f91
- SHA512 8756b541786b92ecd205914dd07e6f34cf57603f134b390e8389451a283fec824c1e2c135cc338e30e9cc7df2486449a7a370179d2daac336d99c69ffca3e1e3
- TLSH T1BA5139D9A925507FC8BF2537C21AAF7DB87844230A60108DB898281548C5AE8B7CBCA3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\odc.officeapps.live.com\F9686701-0A9B-411B-97FE-B0B04989438B
- Size 582B
- SHA256 19693fd00585902de63888389d3d2f48f18ff0461b7f22ae7f2ef6462f4bbc40
- MD5 6a85e5a112dffa179332e368f270f941
- SHA1 dc4a809a35e9cd20d897707eee56355e7fc8a96f
- SHA512 3f37f8be0fda9edd38747a8cae532cfe9e844345b59a8c694c70d9ce84d8f558483b16fa9119f0efe82a203abfe7fd71333c5cd81b611c46eb15d61912d62cbe
- TLSH T123F041DF6E3269AF4C48017E8123C03389B7022E0E7A306820822F7E240388220EA794
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
- Size 1.4MB
- SHA256 7ce0d3bb953e59ded3b5e9233fb5958f7acd68f4a7551462a68ed1b223ac6f9d
- MD5 9790a9414f9a8f7b93cfdabd6777bd19
- SHA1 64bcc90ca0dc9cf4444e193792099c27c604955e
- SHA512 bdd3164aed44fb66c9fe9f02f4cd09b6f1c02ff9d7f86df880ff01b824bccf685f1378847b5d3deb4676e9f70f234bfcee6f9915a6f585c3492c7aa6aa13de09
- SSDEEP 6144:LqfYEGBv9vrPoc6fm50eki2bkILZLlSq1E38OBZ:JB1vLoc6fm50eki2bkILZLlSq1E38On
- TLSH T1A565DF84E0D365136B39E61193A29EEEEFB541A39AC46140305D27BB9F37CC90D4BA73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\~earchHoverUnifiedTileModelCache.tmp
- Size 20KB
- SHA256 63030d2e2e9b8ed19abc20fa2832393df44657d6a064cca09959537564168325
- MD5 a131b1ecf25ac7360815b9e3ea9863fc
- SHA1 75367ff6fe22b71b324c27ff8b507c84b729c9fb
- SHA512 0f9d37a2832dab2c366c3864173ebdaa49e3e37a8a6b5f55dad499a3a587158a92878941ad8908d5487af28cf360a3d31280260114c8d460297181b3e0395b98
- SSDEEP 384:VJWJQVMa12krtuVmqhbfQOVjeQ8RJopfPgh4VjUS2WD5PFm5N+GDa50fRsca3a:j+QVMWr+l8RJyXgSVjUS2yKN+GDa50fh
- TLSH T1F592387436F41359F3B29F759EF1A95A643AB866AC00DB4D0162028D0977D92CDB0F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Core.dll
- Size 9.8MB
- SHA256 b98eea394a95563879b614dbd4432ce074b0fceeb154c3bae252f4e7a9376a40
- MD5 8119eae4c693c51b6760094df8515a9c
- SHA1 f7195e76416b8242c8d087a60f4ec9f9290672d6
- SHA512 0a7a795ea6d781ed53609b696ab98f7789b993052697f991eef1c9d756d924a1b8a829d7fe9c0dd9e8f3ff6858cdfd3ed15d872c1c1e885b1cd270b031b2882b
- SSDEEP 98304:4VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3c/:WWPBSMKFdu9CwJsv6t6mSStZ/3u
- TLSH T1E4A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Gui.dll
- Size 9.1MB
- SHA256 28ca8b9e7d3d1c4e3cfafd6fe63877a05cf10202a240134a11f98384f01c9e37
- MD5 bf3ef92f9e109770a7effc3f623caa17
- SHA1 3dca2e5b640731c88921b26380c3af740b9a9b44
- SHA512 20ed40767f103a393e6ec7777d20bf484ccff1f08fbb698dc8d9b856e169d6cc31c2fe69893529d75feed6da5b6f82bc21a1a6b69a53096d0efd386daf1b29a2
- SSDEEP 98304:n17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmeL:36ie6ZZTdtQiYBNMVPTmE
- TLSH T192A68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Network.dll
- Size 1.7MB
- SHA256 905e1ce3947fadaad566b6deffe345daf7f6efbc57207ea7fcdbfa77669e3de6
- MD5 db8f3337ef680c805b0c49504cea7ab2
- SHA1 9348cfb2f237047c638b231faf7714ac97e919e3
- SHA512 aaa0cda6c228b54a96c9c6d5b24f1345609f61627788f0e67329d68d515cb38393691aa78e140d1da34dcea1ee4a4ddf6074c31a199d6239ea2b34898ddc0f24
- SSDEEP 12288:D9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1mil:+83gxGmFRiJJ51rJq9OvdDhOi+75mXIM
- TLSH T135856B57A3A441D6D46ED13DCB4B8A0BF772700483669BDF02658A152F73BE22B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6NetworkAuth.dll
- Size 285KB
- SHA256 2b2cee4bf6cd28c7c65cadc21089902062ac8c76b74340c7c205e2b5db79a4cd
- MD5 489b1972f4c7b330515b4739de58ad95
- SHA1 077934747efdf78732e1ac4a900ac1d03a091f0e
- SHA512 1f2dc46edea7651a23493bed86154b0f8f87c51a36778fbd3862c87a8e3f2b3add3ec4e779a0b6a346b6da66587f49b98fae7342854ea0381ea28c21150b386b
- SSDEEP 3072:nPntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBe:v/+B5N5Bqcf215PdpToyyiuGux9Bfm
- TLSH T1A1542917A3A20DC2DC2BC179CA5B8613E6B374004752DBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6OpenGL.dll
- Size 1.9MB
- SHA256 a41b71127d07924ddda67e787e8765ebf60f217817199f1becdd63f3db88847e
- MD5 a29a79ca0a5bd2a88c09b43c9a7f95d3
- SHA1 98ba5b9b7a4493085603c5416419c6f3f397a3c6
- SHA512 35868eca9195b3d8738a8e84e1263d067141ef3823499cda32e8a33902bd7f229bd06d0a57080e8bc1c8138f37d77f1432eb2f455b36927aa6437c28301f1a0a
- SSDEEP 12288:XyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9QS:QaYum9V/feRzDYucGLY93
- TLSH T19995FFD5624AB622C976E2BE930F057E60F3AD57C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Svg.dll
- Size 617KB
- SHA256 982a589e52680d7b525da0031eba783d3bbd77e6611cdea5cd276a2b9213f4c9
- MD5 07f4bfaabb00650a39f46072d517554c
- SHA1 75269c10d4eff23559355a0e00b4543d9b9a6328
- SHA512 e01335f2d79fc7b1222645ccf196bc6c138a2e0cd72056455de9a65a62f3b39c89ce43c0cfd3b4b566960c46acc0c2996f360e35c62824bf87ee7137e5fca467
- SSDEEP 6144:Z10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZ+:Z10e+NH0xb7rZmIRWWZmCRmc0mx51Gs
- TLSH T173D45C67B3A60785D4AAD13CCB5B8422EBB370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Widgets.dll
- Size 6.3MB
- SHA256 f383fb6b3f6996efe23327ff607e7298fc47ee76e8b8ef8a65f8d2e0a91707e4
- MD5 10cae5e4a928d4f4c027a2a689916144
- SHA1 b48b2719f4fefdbfece73addc2e3efb5f32bd3da
- SHA512 5e4adcb58564346b38fccc96fb992d9069a9cbc2c5b47c6cd5781abbc718634e14237e219a58210e7e9bfc21a02bd1e35efa8321b5bfc0bdec0322cc8c560e8b
- SSDEEP 98304:JLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTY8:5NqDaGvqxgiJajFxHJpd9tozE2XJzr
- TLSH T1C3666B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Xml.dll
- Size 156KB
- SHA256 c9d4c5c5dbf8d9ef3264f27c67bbaa0cd1aac98bee2f258b4a0a19664e9f18e5
- MD5 6bb91e7ecb5b3cd133e6e91b9b6ccfaf
- SHA1 b60655124cb6e94bc4fe2a856368d25bc4cd8c46
- SHA512 473ddf110e42c592864777d9fc3344580a349336c820e4895fa42e90ef576f274e160946fe0019790d8835cf20f89736a77483ccb88015636da83888b62a88a4
- SSDEEP 1536:Z7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNqN7ug:ZrfA7QIm/VWRcDXIDa29YjAPqNP
- TLSH T157F34B877368428AD46AC278C91B091EFB73705057629BEF82648A392F67FC27D7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\archive.dll
- Size 716KB
- SHA256 6ec805309295dca95ba00ea8c0998f1c73aa9a0f504596bbb9030a33e22161e3
- MD5 c3e1eb5f8d812f90c01c12624f6e4f81
- SHA1 668043a57390ac0f6bd98b044fffb9ebc582f9e8
- SHA512 44449e55e266b6c5cb4f1cd583bc0360c2c6b0a22bc51af3ff4cca7196a8025f2cbe56de59bd3f4ebb739769539caac6d729d2d217402b7ee597d89b1fa98f05
- SSDEEP 12288:hMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcUzics:ySFVwT75qEtXm8KgQNjVTNjzxwjnar
- TLSH T1ADF48D82BBF40668E977C1348546AA27F3F1F0551760DBDF06A487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\bz2.dll
- Size 75KB
- SHA256 2c8e7aed1732081a954f47997263e23717af840b512fe8b3dd421c63840a0751
- MD5 f3b2983e8b6070ea851fc6534f29ddaf
- SHA1 fc19898ca2158dbc1ddc16b13ea564e136e4d51c
- SHA512 7627667d94f0c7a76e9b5c4564445bfec16558041221a779ccdb24bf778ac7c402d4e18bdf12bc1c59d4dc92c78d949ccac317449f9d31677871c08f80ec9db7
- SSDEEP 1536:3BVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLs+ti8y:VuxAUhbrYVLsGVy
- TLSH T1C1734B40B6A3FBBDCAABC0385623074BFF35FD680B1117BF3560967A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\cmark.dll
- Size 140KB
- SHA256 f6924bd7a98b0b4f31b265f704670ee51961203302c51c7904d8bd5b5d6b4b91
- MD5 a6db3b23021c85412e467f3b18598be7
- SHA1 89ef37aa6e4483de0bcd30ea0d8262c2a860f3dc
- SHA512 9befbae7d5dccb4446a4884119a54e02f5f32a8762cba28666912460773f3a4ec6c66f84fa4906abb921de9b5e4bb72c7b34b08f0ea2e6b6b61ae32891c757ac
- SSDEEP 3072:g5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIis+:cWcBSGsvVlFVtaOmROEis+
- TLSH T161E34A96F5BC0066CC1BE07D4D2EE596E3BAB2173310C2E716400E65B9E7BE27636352
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
- Size 9.3MB
- SHA256 93ef3ef7d3522ce61b772dd153154b3565865a9b2dc3a38a3c960b06c511a93a
- MD5 50e832d10ecaccd7f3628d8c0a163101
- SHA1 2c70957fd49dbc17f43a5e33a049248db5ed4a0d
- SHA512 8bbc373988f40c64505f64471d0c60b9866f08d6cf9bdd1baea0f879831b2ae3440f3ae545f956c75e6db8659ffe266b1d23f5f6182a629c898a9ad292e34d5b
- SSDEEP 49152:D9x/MDDfANGYiDSLd9pbQjFp3zuS0Bw4V+p8pOZBtrW3SglXQxPvVVOsBKbn5iVb:D96m924VwAOELlPG6cn+HPiSklsQ4HK
- TLSH T157A6AE2F93AA03E4D178C13DC6DA9A4AE1723803432056DB751DADA74F376E26E7CB14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_filelink.exe
- Size 92KB
- SHA256 17defd82a3dd44ca282735b9b848f5c7bbbe9d559b22ebec2153ee6866fb25e3
- MD5 66b25120e5cb0cd9d34f352bcf06eb9a
- SHA1 11cd8e779316eb4a088f6aafce10d4e432932a58
- SHA512 e2d9a05df5032914985d546ff0b15dd860a673d74a605e5123bee1e6597a628b21977c15d9c7bb91fc916d8606c9e16f97b0bbdd3133b89124cedf8efdd04c4f
- SSDEEP 1536:wo2dNJ6CZxOnFWg1GRSWR99xPPoMkbu0rXEP0Ef:UJ6zFWg1GRSWRhLSu0cf
- TLSH T126934A7F766901E8F275D1BDCB9B5656E337705C07209BFF03014AAA0E226E99E3CA05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher_updater.exe
- Size 396KB
- SHA256 96ece91095c155609ee606c7ef2379ebe887e450a55a19324f3c4ab3e8ecf52d
- MD5 99773ebd2ed1c5602cf0aa6503244013
- SHA1 b156a0c194a0fa55fbdeb6b81e683f72ee13b86a
- SHA512 8309498e45dda071c072785decd3cc613e558806abf27d46759a0dbf7f5119c28fbc85d160111d78c8b7891cbc2172e01de729ccd91d562ca9fb48bb09da4b1a
- SSDEEP 6144:Wt4pWHdhZTlAojV5ysDaOxM+yBxXCLDX382Y5OQXYBQSttIu306szAlYtBb8HkEM:Wt4eZTlAoxRSoN0RH
- TLSH T1CE84392EEA5501E5F866D07DC7AFC612D17370CD43A2C6EB062D8D262E271E9BD3CA44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\iconengines\qsvgicon.dll
- Size 69KB
- SHA256 6221fed44f0f560a864312553c6918a536b8e2f04c7cb4e8ee5ba9445338aa96
- MD5 977a909b6d3ea33173e67f363ab63f16
- SHA1 ed82a046b6a1f7154400efad44e99e06a434f657
- SHA512 de30d97acdd124a512f0db3331d5352fed13be2cb0d7ced89cba703e016754bc703b2185e6af06c54b385cff989bafd53dc7f39e7a567b2e0ebfe8532a06a080
- SSDEEP 1536:KAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbg7u0O:Va6jmZh9poUhDu2o5bB+imfbgfO
- TLSH T125637C1367A81449DC2BC63DC367861BEE72B4146761EBDF13A1C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\icuuc.dll
- Size 36KB
- SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
- MD5 e9f9397709df3528c75c1d19fd64767e
- SHA1 2d392c946c58203679cd33aa463041639e9fcf91
- SHA512 304a41711e6247f6dedf50697c8429a92732bd8104f94dbc5589eb60700d50a835643f16d391d11850d48bf3309ec8f4e170e2ddefe776b5459b2ba3682f8bd3
- SSDEEP 768:/CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mr:K/prGPh7tm8T9Z
- TLSH T1D3F2D60DC8084F61D3A7DB3F697D392F1922099ABF69FBB8EEB4C99441D520D20B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qgif.dll
- Size 46KB
- SHA256 4fe24916a961587173c846055a34735b904900fb75716de4fa458c203da3e7ef
- MD5 c933629492717032aff2bc52c2829edf
- SHA1 3df3ba7f3bef412caf9dc309ab1634443922fc90
- SHA512 d763864e416bc5db12412b67534d07fb597145a5b479b3be527a17079fc1fd82acb4ca6eb77e8d0e764d17140581604076f9aa050b678d72cc4a8b3eb1ccf423
- SSDEEP 768:nGXTVMV6wdBj3lpVt/MSsk2OIEUcsohX7cocVW/5YiuiI5ALkZZ:QTVMkw3j3fDpP2pcsEX7cnWx7ulZ
- TLSH T157238C83ABA044D4D4638234D9964E2BEBB6B6244B92C7DF4221862D1F337C13E7D769
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qicns.dll
- Size 54KB
- SHA256 fcf2c00c959cdc7af7f7ac51e2f1158f37a76c166367bf30c4edc4e0657a835c
- MD5 d3c5d0ef185418015689d97a2c888797
- SHA1 b5aee11416ba575427ecc61ce39b408c26217f1a
- SHA512 a825c7ba279bb390a3f055cb786d544993eb1e795cc084c58c1321cf6f3063b6b2a600bd3fc9db49aa20c5206ce63a0475ed1cdc4caf6c19c6c2ca289fcf27db
- SSDEEP 1536:EOy2+up1dsYzCqj7JkO4eX6sOSVBpTJt7uia:zN+uGYzn7JosOSVBLtpa
- TLSH T190437C07D3918285D417CAB8D54A8A3BD772B4011B928BDF0265C92D2F733E27EBE794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qico.dll
- Size 44KB
- SHA256 0d79934047e06591b74201d826af72f6ab595f5df4705ad7f0c234c0e2cf3a32
- MD5 7ad9178bbe3dc7276dc37682e012436f
- SHA1 db52b71eea1a577719e10365ad96b51fa6229010
- SHA512 e1fd52179926d7228fa465be42ec863cb026dbfac72a3341a1f026f178c70f2fcb04f8537231d88435becf29b83514d6cee35d0954d1180f21e2eea3f14e633e
- SSDEEP 768:LrYUBUjz9OXYC2x5XtuPvHeTLXwWs5Yiui7H5ALtl:JBUjz9OIP5duPvHeTLXwWW7u/l
- TLSH T101237B9396780489E927C678D8834E32EAB6F1605B92C7CF1265861E1F337C23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qjpeg.dll
- Size 564KB
- SHA256 004f456d513a6bfc58320652c326a023fa8fea905d26b642a561f7081442aff0
- MD5 20152eb4b41cf308240b1768bc49f337
- SHA1 c93e5807adc9c70b9604ae679547bf84874fb2cb
- SHA512 4956448be2b65c6d633403315559d9fd5f7a67090f36187c7b76957574d3c0c15ae26e941a9891e0762c81e7b28ba6079d9362a59232ff8ad7353a25658c2ffb
- SSDEEP 6144:Gg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbb:HfrS9ECMre3
- TLSH T1EAC42942F6B51841C7A68878DE1AC966DB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qsvg.dll
- Size 38KB
- SHA256 b34f721be6e1a451a2eea3c146b0808091577143587d9e6bc689fe8214ff47d7
- MD5 7ee3b5552503b27a6ad2776a8fca2fcb
- SHA1 546a8bd11cd2f7aeaf37e3f971056247bfcbcc94
- SHA512 44e4b59ecb02a15e818fdc4fe2bfab26a7b70d88a724882bdba40d99ce41cf8352f93455432ede60142d57d1f5dcdcfed21beddccf5b02e51177b7677f8b2b24
- SSDEEP 768:8Si7nr/w0rAkuV2O4L5blG7uK5gSK5YiuiVi5AL9:8rr/w2AkuV2O4L5blG7uK5nI7uor
- TLSH T157036A47DB681846E427C2B4E84A4E2AE973F5514B62D7CF6262822D1F733C13D7C39A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qtga.dll
- Size 37KB
- SHA256 c11ac719c2d7c50a4c2924ef4d439772176e00723e96f04d50d4a70163a9abda
- MD5 95291482f2dd14c88fa989dda454a90e
- SHA1 049589088f2194553e14ffd26b2f6546a5d4ba36
- SHA512 ff433baadda95c72dc1b8bf8575aa28e8a4a309195ccfe709b74cdc23d65140959c6718e982df674bcaf90acd970b246010ce93a6d8591debd4cb1054959b958
- SSDEEP 768:pkK60f5ksBejVX47kqfNZF5YiuiFPi5ALEA:C+usB8VX47kqfNZL7uIPiA
- TLSH T1D3038D53DE541C45D427C678A5829E1AEA72F1208B62D3CF6298835E0F773C13DBD3A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qtiff.dll
- Size 431KB
- SHA256 498e9259b9ec69a7f9a77e4ff796b9d2afcaa2e4c7c0a382b401f0b1c07718de
- MD5 217ec1613178742e4b8c285fd12617a1
- SHA1 224d488963d0c1686e1b2087327118b45a3ad2ca
- SHA512 f1c8673f8554cb4798c26136799af4d09a7455aa52716af28adbe66d0ebc87bf05d61a5142dc45aefe4b25a31729d550b74c184c58cb203df585e65df11c19d4
- SSDEEP 6144:q7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhV:069ZYmmGq/Q3DbnzGo
- TLSH T107949405DED049ABD872813955E7C612F2B3F4453B12CB8B9698B1353F127D029AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qwbmp.dll
- Size 35KB
- SHA256 e3a1be02183ebd3c136a4554b34689cbb9ee6699278efda6944e9faf9c02f4e3
- MD5 365b862dffd1449269ab11704c8e5206
- SHA1 d8c88f6d5071fdb142e9b23138e8ab968433ab33
- SHA512 c688d6f1d7b972b1eade0303e529aa6a94998b24e02ab01af80d392b372acd2de366d24fd230e2931594a1005fa1762a3a8b82ce12882ff864936ccb12954044
- SSDEEP 768:NaVooyFmtxWX2xyjnl2OYomf5YiuiM5ALn:MLyExWX2xyjnl2OYomR7uQ
- TLSH T1BAF26B63DBA44881E527CAB9E4868E27DA72F5610B42D3CF2266825E1F333C13D7C795
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\imageformats\qwebp.dll
- Size 549KB
- SHA256 3fb2f8be5b82dada607ac9133a5139c770bd210145ea2ded90e69953b21a8d4d
- MD5 fbf2647d8dc1db68857d24d8924d8dab
- SHA1 8f7ac7d002113417eacb044d5de64b574dfeff8a
- SHA512 c289a111542d1313980f514bcf2f75af554a5cfc7d7d005227199eb3c96941bd34bab28651669454c83237e33c2079730b7ee5e0f32167dac2328b40cd3bcf39
- SSDEEP 12288:LWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sU:LWhBPLrLrLrLWCYNVhA6Z9mun518sU
- TLSH T1F9C46C8ED99623D8D49BC4B89AFD961BF6A53C1C434095EB17D0B9293B33BC05637B02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\JavaCheck.jar
- Size 1KB
- SHA256 cfa7a3b4d106fa1b15ac284badb4b09032d32bdb836cca9ec9836443bde279e0
- MD5 a62bce1ddad523ac0a17feeada7a1991
- SHA1 e69fe9309570819b8071fb2d3278d69316ad28ed
- SHA512 a56bf5fbce1bdb754bd87aec70282eb108e5fcc213774f5379b1e5b317b1e900438862bf3bd59cb299dd1bb7e652d8fdfd1147da234166b7007936f727453d28
- TLSH T1DB2112577FE9D036F71F94BFD6007252D52F0124955D820303C87668CD79B8A5E238CA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\NewLaunch.jar
- Size 13KB
- SHA256 c8a2e299f421dc8377ee6a8c27e0a030cfd070c3ad8c2bf0d78adaeb37a29487
- MD5 ce805425d106d2e8ce49030762decd21
- SHA1 3923ff8ceeff1d5c966fdd47e4a8b883a2a63473
- SHA512 5194e7b1b025afd476859512b6404f4fc815f592eb51d1f405bad077d0003142979c903195cb8915e604e8ede49a7c3e2da036254ff4743b40eea518f1a49ce7
- SSDEEP 384:WUjdof8bfWb0nUaqXiW1G5Eq43BMuYCmAbp:zjufcWYHE4ENxF7tp
- TLSH T122527C16FAA3C8A4F11383B942C687AB7C152980E0F161321BF1B695C82DEDD5E43FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\jars\NewLaunchLegacy.jar
- Size 23KB
- SHA256 5885fd6875a37428b25e61cbbfeb3d17d14ddcadec757f45c45ed6182140da72
- MD5 f4b2e2d9ea94f743c46816d648d09019
- SHA1 d2733ac2e6a8eee350daf77716948ad7e3cc8208
- SHA512 19f1e43351e9fcec05874e2fb136fbb2ce09eecd6d3cde439cb814631c711566e88ad9a147cca9eb5a58d440ab33361de2b6486714300a185db8cb72ad88a146
- SSDEEP 384:VwIZixuwLAkHgwnFdSoKYIaN0m1Yp0MSUDWmMM+KOy/9lTuPab:KIZ2uwLAkAwFdScImKp0MKmMFKOy/9ln
- TLSH T185B2AE67B796C891F50B873ACD4EC71B6D81100DC07C64A6ACB52BF58C9CDAE2B035E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\liblzma.dll
- Size 184KB
- SHA256 0c7b305c012dd6f1c4375517f325346508aff73e412d1c93e89781eede3b897b
- MD5 a693b7436527a983b10c2fbd128d78d0
- SHA1 466d502479b966e74835ed6a8c69d4ec904fb52e
- SHA512 912655463bc7fcd7b115784b232eb7be10ed411a0e857fe3f93406f22ea5c69ce4190951165577a4fde91003df2c6e89694dd909ece23d9fd98311d89cc3d29e
- SSDEEP 3072:s9w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNoysowfXi:s9wuf45dsgka1HudYOy3wf
- TLSH T1110418A562A5F0D5E2678C38C6678B27D3F678040310A6EF06DC937D262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\lz4.dll
- Size 123KB
- SHA256 beb91f7530c74a0cada9987a703370135e745f8c3a70a7feabd3f11ab0f2c2de
- MD5 0b93f99b5e71197a0d10e133444e1a4c
- SHA1 0da5c39856455b8463381a3dbd40356165956c34
- SHA512 b39d37fa15f684944602a02cff6a1df4316c7d7e61f4b159fc5fce8fb3b573e238be2fd98e5b229495c451330242be4b85e1c1fad2273507816145d14eade916
- SSDEEP 3072:ks8r+jQPM8eFnR6bWuzTy0A58LY1glRr:kr+j78eFnUbnTy78v/
- TLSH T1B4C36B46F7A114ACE163D0BA9ADB564BE274B8552305AFE743ACCE713E13D908E33352
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\lzo2.dll
- Size 112KB
- SHA256 a6a7d85d3407146e83981492508e4c76d835d2c71f9eb14bfda7d54d47e587cc
- MD5 7775a688357bfd6a9dcd88e843439111
- SHA1 c0fb0f5566b08555d9e4b5bc3fc64f940b24b85f
- SHA512 46e44b44e0a90dbc8d2021125971965a573648f4fb078c48badab8f9993b355836ebdb9a7b847e3d8eec283f9367337a8d78e9dc51942b88e0e73338909512b8
- SSDEEP 3072:isSxM+h7JWygE0lE6OEb/Ex0JgxiLxKkv8waG:u7MdEiE/ELES2xiLxKkvMG
- TLSH T109B35D59F1C65068D8EBC2388A5FD2C9E676B4480310ABEF16D1ED7A2F47ED58D36320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\platforms\qwindows.dll
- Size 974KB
- SHA256 540211565db496024246cb8a44437212e6b967f3ee7b899e888f41cc556bf041
- MD5 8a905bb23580027f31681253da1af590
- SHA1 25557385212adb726fff539b165aa54eb3875163
- SHA512 ebe78f485a73fe4b57c466fa58153903f261da315d470b50ae233543acd671dd0269ddca355e1a25928259e26301ea6d08fd1f132f595ba5b9985b7170dd5677
- SSDEEP 12288:3EhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYtG:3Eh5aOXfukqNl43Nh64z8l
- TLSH T139256C1B63A80255E83AC17ECE5B8713D6B3746903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qrencode.dll
- Size 47KB
- SHA256 6b73a773e7f6634e89da01b9d1f1a8b79bd8e1b1e3df55ebb6d85eeb21e727af
- MD5 64de02ddd28a6f75786cfab8aa38110e
- SHA1 6c066648b3ab8310cb66242adb20bfd908811847
- SHA512 8e3f0826376fdc65b0528dfa12ce72489f8e513d48a37e7c3b318d2d30472b091ea81349118a3aa908df674831172a307001f1a97eb52a38259a5f877e751833
- SSDEEP 768:NyXjbYUZqkAvg5Lv/xiHrWlvKUYX5V8dPTLSriqWsmeS:NWnJZv7gLP3CPTLSvnS
- TLSH T1C7237ECA7B6C01DDE5274138C197564AD2B174521B42ABCF1B90BBAE1B33FC2697B348
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qt.conf
- Size 1B
- SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- MD5 7215ee9c7d9dc229d2921a40e899ec5f
- SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\qtlogging.ini
- Size 609B
- SHA256 64e1b2dbf14930ad0fc05cd756654aeb9126e61a87a45ce862b49457691c2a64
- MD5 1eddd2468899e23d221ad133ad72987c
- SHA1 3a78cef07375961a9eef061aeb602b08764ada70
- SHA512 bdbadf26761b7bcee91b83992dc58a2f3a083aa305dc13546856f477b66f309088f1ce57107a582dda58cdea173e3d9de5d17e21b55ba0cb8ad380e33089d039
- TLSH T112F078889ACB20B814E217D0EFEFE123D0B030332A4EA3B1E8204919721CD483831E22
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\styles\qmodernwindowsstyle.dll
- Size 215KB
- SHA256 f9ddcd6f6319be76ec8ea1b95e6829cdc0f9600242b6bdd07babb0185e9762ab
- MD5 e0298bcdb3d9c8df69fccf3772c568c7
- SHA1 c92fce591be5d1b3c86065b433bfe31d00a3fd23
- SHA512 d06d42d770f9470ec05f41f12c3af4292df5ec335da10c7d36defa7da1c5b791c49d644c49ca21e1ce09197d1a451aca215c11cf4c7fc4bd8b957257190a0f9e
- SSDEEP 6144:a4vKeYVVMifp1yq9uT/ocMIhw5oL5bQ/Z/P9tlJaH9TpII:a4vSVOih8
- TLSH T195243913729612C6C967C2B8C90B5627F6733068032696FF4167DEB42F633E2BD39661
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tls\qcertonlybackend.dll
- Size 100KB
- SHA256 584392e25d46b6edc255e4c5849920da3e52c01172199def876284525587bb05
- MD5 9a342822421c994f822e1fc1eb0bb89f
- SHA1 2a4a80606b64d038db3193dcfc4af5780c754c20
- SHA512 f65c51bbc95a6e466d6cd73a6da996231ef02da1de2c895d4e33b7ca7f447a7ef576e40cb92ce6309a025a7cf890ab60250c16c35a2df2e47328599b40fdbeaf
- SSDEEP 1536:S7V2ODzyJnNUC8Qh3ye7zjmydnrWK9uyR47sPZ3ZfAWt1cBF8j1J7uJ:S70q8V8Qh3y4zjbnrwsvSBg1JG
- TLSH T134A39D07629001D6ED2AD27DCB138C07D3B9B04947629BFF42A1DA661F67BF26E3C254
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tls\qschannelbackend.dll
- Size 256KB
- SHA256 4632404cb87f860e7bb811f525685509127da8d05f398aada5b2b88318e4a621
- MD5 57c91f12230e6d29a178a580584e5b75
- SHA1 cc535fee67b288cf40a5158c03036ac8ce8d27eb
- SHA512 b47ba666669f92b3223449511597049f26b56607ec435d791776d80b23578cae72d2c02e4689dcc86802b70f7bb4de4456ef1e475deaf7a7c9f9a4a96c194f11
- SSDEEP 6144:V+VXglMW11bIQIT1eov0AkuVeT9cF07Qnc74CpNZF:8VXCX19ov0GVVFcUun
- TLSH T1E744376722900E95FC6BC078CA4BC807E6B370955762DBEF5221C85A1F63BF2B97D250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\tomlplusplus-3.dll
- Size 376KB
- SHA256 ea45603d9cf2de7c07acf79be2f7b31594aad818d0710b796a57ed458688cd6b
- MD5 e80fe98a04cb91587b6ac96c6f0e6369
- SHA1 3e4d43b387adfe7ef998d5374c11bd5cdf2cd00f
- SHA512 6306096f7bc321cca630c64671f2d51c43de55a6d31f4d74a73e08af4525c44376f8fdf45829726b332308b2545e4dfb769387a0db8ca71768d042efed956b65
- SSDEEP 6144:M80P99pO6Zds36KshHf2rHDf0oTph0lhSMXlBXBWfzvjdFJ8:wPHdVQ9Tph0lhSMXl+zR
- TLSH T144848E17FB152075C1AAC2BCEAEE4601D7B2BC89834167CF17D999A25F53BC06D3BA04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\uninstall.exe
- Size 484KB
- SHA256 9bd0f4d4f34dd43e0711d870497b809ad7ef6b155b5e244c3b1945354d179e58
- MD5 7adc61c474ce48ec7fa26c20cdaecc70
- SHA1 f1a71fe86ca67f25dae44285a12062f7bb4f7585
- SHA512 763422cebd63ddd7be41071b3173f8e1eb425cf76ee5aa7678220e8d8a825aeb1fd28c9d2ff32c5f263fe7fd3c352aab7dde70bac4078f717dd36f9e61cdd277
- SSDEEP 3072:hfr3k+o5buDC1curzOEQnsAZQSuFpexUU4KvFhr4SPA2ZiemUSjj:hfY+onX96lZuFQUSGQA2Q5UYj
- TLSH T1E4B4097291BF955DE0ACEA3E04796A5D343EAF1227B03705FEB2BDC714B8301B915A18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\zlib1.dll
- Size 88KB
- SHA256 2739ea627cef23563e5e2550522a8f126b5fd2bdbdcae12ce4e8dec097638603
- MD5 1a98595e5cf70d18bd56f7a262fad5ba
- SHA1 900ccc08958b0b717a3c85e7aa25b8b0d5dd889c
- SHA512 849b4f97a48fea9a4de38994c1790ecd2312011590aeeb2f49b9d2ccbb5c607d26bc1b3ba12540193affea9619c54143770f01cfd66d6d9b6d18649077ef7c32
- SSDEEP 1536:JvEyaXGzTqbvqRfSOzhppf/ISUaYuOlqjebaIOcIOZGdGUL:idXozVhppnURkeboSZGdGUL
- TLSH T12A936B4AAAB412A5D6F78174D8D3079EC335B01407A44BDF9248A76A1F23AE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\zstd.dll
- Size 642KB
- SHA256 32b6fb4daf2e6383a6a1782de0de7d0565b3c021cfa8f0c28811282b0e607d26
- MD5 772d661be9a9821c5fff0a3afb62da63
- SHA1 2c727174af2efeadd6582bb45be39aecd7a7db77
- SHA512 ab3bed20703029821943a90ab29316120ef9390c2806384dca2ea5e0a3947d39719659a72e7f0912069e4b3c70b83557388b30796b6166956aa314c79fd8482a
- SSDEEP 12288:SkY/0hUaFMJEOQzB8JGKnBxc1+yOdu5Io6H0LoMb:Sb/0hlKnBxc1+yOdO7LoM
- TLSH T170E48D83F29992EDC13FD179C5564323EBB2380613046AEB83A4EF652F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\c1c4dad4-ae58-4518-aa0c-bd105468c26a.tmp
- Size 242KB
- SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
- MD5 541f52e24fe1ef9f8e12377a6ccae0c0
- SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
- SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
- SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
- TLSH T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna12727434693152989750.dll
- Size 267KB
- SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
- MD5 2d2475f1f026dd54e9f3e787ae4f81da
- SHA1 27ff882ac271db547aee520b38e3ba9aa91e136c
- SHA512 07ef110d202d51f096a8b474d25c66b93b16af8b2ecdbf3ab23138273a0771c94dda6426fb644d43dd26cf53924f37821dca4c539d889d435185fff2198b3e76
- SSDEEP 6144:cZkI0LRMj+xkFxdHuGL0x65sz7QZBx4Cp+slm/mgye4:cZX095x65sz7iP42
- TLSH T1BC441917A7B648E5E9B7C03D44236A16F6B178294320EBEB47844A531F73BE09B3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\OpenAL.dll
- Size 1.9MB
- SHA256 ff0671cba224947ddfd5d338ebc1f8ce502be7aea5cbd599d46cd74473dea0e3
- MD5 dadb0b90f530a2e0f3f156d337ea78f5
- SHA1 5e9527c7714d52d1120cde7bc37d0da836028680
- SHA512 dbd789c3321ecea2a7edbe7b47a41199822f83c8b1e5d074b0deb3567ff6033344052dfbcc4cb801b38c23e1ce88297a61c417a2953d304224f000ef6e47a1fd
- SSDEEP 49152:j7CtuMgHjW35qmxIZ9sCfIZnmOrofn3jNyw:fCtuMgHAi3f0w
- TLSH T1A095AE17B2A541F8C1BAD17986576E1BF77234090370AACF07E04A662F27BE45A7F312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\SDL3.dll
- Size 2.8MB
- SHA256 292406def58d7771919eeae8d55a79d1b42657c8e0176b0602eb97ee796786c9
- MD5 eb05adf47ee81d8309ccf4b2ddce9d23
- SHA1 c055e2494b11481f126bfef192c7c87708d25260
- SHA512 dc88266384c208dd83da245af3f5da4e2092ffb45dc8912471aba303d1a39b8d78eb5d7e057964abbc61a865d1e2a55abff5e5961cc471b423ab6fc9def026f7
- SSDEEP 49152:IREDtqHb1p5QU8rnZKvqKX0ZdlQZfxXPQIvIaIyrLTJBPxWYJSRUdrny6EI:/J01pY3ylV
- TLSH T1B8D59D4EA3AA0099C8778078C25B6607D2B2B818179697DF46E403B97F73FE1267F711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\freetype.dll
- Size 2.2MB
- SHA256 fcac5b5a9a8977f1bc76eccea5e71f6c57250ca5ab8605f06906377e91b6e6b7
- MD5 bb2658e193a8e22d07f7119f10f6f9c9
- SHA1 398e71a769ee62920008e6f08d96ffe15f3b77a4
- SHA512 0563c498033eccebbf57d9544bd172a263d1b5f3e7a74575e7997cb16a7f6ec015df4b82a379e2e5be8dc9564747a641733dfd5bf57a2311fa658cd5bdcbcb4e
- SSDEEP 49152:06Q/3K5nYjtzuWSge8Frv8jurMfYm7NJovo0tc1p:9mbv
- TLSH T1E7B59D46E2A610A8D97FC078C692960BD7B2740117149FEB56E08B59BF23FF52A7F310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\jemalloc.dll
- Size 391KB
- SHA256 89cfeffe72f01d3634ab4adf7e1597a4a502b463c0472ebfa483b9b41f0ee130
- MD5 5a9b36b218155389a823f52f3cb07b68
- SHA1 0b26a594f5be51e5ac58fe4569551bb016ac31b0
- SHA512 4fb6e71abc7589d24f3c09bd86cc10f177e2a27c196e6869eefc31feb9b367ca9280e889522a5e8b51cd1ec446c75aab09c007a36a02c377b2c9a2509f149e02
- SSDEEP 6144:qvfoM29LEXNTjdxvUeZb7r6P1JjYQWhNOn9d9pSfjqCG:CLd/dx8ek9JAN+XyU
- TLSH T121845B4BF3A544B5D8ABD03885B74A07E7B2B9284722BFCB176446552F23FE85A3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl.dll
- Size 519KB
- SHA256 15b82b77f3a584b8df9e95899a908fb825cfac80a3ebd78ace0eb473a1069121
- MD5 091744b8c77eaac020e2121ae4d07ed3
- SHA1 bc7d28fd085dce393566047b61f952c2bda53a6c
- SHA512 2782632e7ccd64095542f08a92f900c982e41daf08ba992855f1a04ec869c33dad468c010b39b9f7875e80d7c8055bc991a275784df1a0dafc403a5375345ebb
- SSDEEP 6144:zlGhMXkbivVkzOLzlu8HhZJfpwOvJSAt7ch/cVo67G0gwAx:zlGhMXkbiLuk/Rwwzch8o67V
- TLSH T1D6B4D531DE22C78CDCFB763A60530005EA7678641B1226CB57A79A1BA11B7F093F6F25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl_opengl.dll
- Size 355KB
- SHA256 834013019ef4fc203243a7c1d4e0b8c2c49d134ce156780a6d2af424da49d2f1
- MD5 f8da1c8e2f0162bcff5b96de5bb7f477
- SHA1 bc432be644b4249ca7b469b344e42fcedae5d8d2
- SHA512 83c125888415583cbf7e87dfec172c142e55be6bd60336f8e131567c6937135b4488d28c38ec07be39b3e2b2f4d3d52c3a2c498ce8f581d4f589999ab3c73e6e
- SSDEEP 3072:TIdK32yvoYwIg4QoARIGD+dhhCNArwEmgRiFVNtLjRbTrj7zLDgQadzVeTLL2r9m:GDCbHXAi2uOGf8B6K
- TLSH T15474523BAF57C4AADF2B3539D1941975E12CA8B04B041AC3214CAA86F5CF6F451F7E24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.3-snapshot\x64\lwjgl_stb.dll
- Size 593KB
- SHA256 cfb4b0c0fc34a0efe7632e76581cba05b489059e2061c1ce164fb4c32ec79547
- MD5 46e3cab565ef5fedde0d1c2a287071e6
- SHA1 9a0c98ac19229362c71cf6d86f3cbd08cc9cdfce
- SHA512 444aef261c7e87d1f9809a7e6541a684462738dd27800000eb010fa7f3c01ee0d575f0b6f84162ae5f9fe9b5b19ab91a00e23ea73fb3ed8351717f2b175d42da
- SSDEEP 12288:adz7vqQVfWMAgAo4iV3+Ort8KUbHerCcFi7ubqsRdvd3oM:adz7yQVfWMAgAo4iV3+Ort8KVLFi7ubP
- TLSH T146D48C44FAF684E9E427903851A7650BF632345903608AEB4390966F7F67FE01F3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nslD81E.tmp\NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsv2906.tmp\nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\bg\messages.json
- Size 796B
- SHA256 a114e2783d0e9b12155017323ba70838f0f82a71c7ee8dc1f115ae36991241f8
- MD5 6f8e288a9ad5b1ed8633b430e2b4d4ca
- SHA1 f671d3d4befa431d1946d706f4192d44e29b6f08
- SHA512 0f87f3f0d115b872288949e59acd3cd41b1fbc64a622d8fda6d71fafc5a900d92adfbb0e7eb926f2a8759bbaa0896d48728fb719bbf5ef54ac21027328f7700c
- TLSH T19A01624881A258AF0162E01BB0A13706FCA2027B2790949F386CAC0D3FF9D528159F0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ca\messages.json
- Size 675B
- SHA256 c67898b67f9c9209eafda6532b62d5789863cfb855998dd6a70e7775316cec20
- MD5 1fdafc926391bd580b655fbaf46ed260
- SHA1 c95743c3f43b2b099febebc5bd850f0c20e820ac
- SHA512 39d95d45c5746da3baa7ae6a3344ea17d7a7c3569c2a56959ff119261da08c747a320fcf701ac72b8dbdbf8bf06fd8b239017a282cdda444f3826d4ec672cbb4
- TLSH T11D014949C290BCFF02F2415E77643741F990467A0F41D4ABBA2C980C8FB8C879092F8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\cs\messages.json
- Size 641B
- SHA256 32290d69a90e6baac428b10382c99221b12773bb9a184f3b93dfb48a4f6d7a40
- MD5 76dec64ed1556180b452a13c83171883
- SHA1 cfb1e56fd587bcdc459c1d9a683b71f9849058f9
- SHA512 5230a217968d5dc463e2e92d704544311a721e5cef65c3125cbd8deb9c0293d3bfb5c820a6011abf77095fdee7daf67d541dc202b0c9cdb0908cbb85d84885cb
- TLSH T1A5F0FF08C4A2AC9F06B2429B70B47780EE2483770750A8AB3A7CD41C9FF9D439186F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\da\messages.json
- Size 624B
- SHA256 4977d4a053542ff66967faed6b06585dd70e68e20bfeb533b66fe3287f9655d9
- MD5 238b97a36e411e42ff37cefaf2927ed1
- SHA1 4e47ac90ba24c8f4724d9293fa40cfd4ada66fe0
- SHA512 fd0742d47b5f5ab9aad9b4c3d57f63cb693e060eece123a72036c6e92156d099495c7e9e9cc6dc83eebcddcc4b4c81fb47e4c9559da3eba024780fff10c53e0a
- TLSH T16CF0AF88C0706D7F02B2821B70A8B311F96106BB4B10B65F396CE80C8FB29970086F4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\de\messages.json
- Size 651B
- SHA256 a62ffab910e31531758eee48b2cc71a8857bec3021dead50b668cba3c8667053
- MD5 6b3e916e8c1991aa0453cba00fedcaaa
- SHA1 d6366d15912e40ca107fd42bfe9579c3336a51f9
- SHA512 87ea4311b61f29543b13f3e17dfa919d0c320b4fe370cc152e0b1514bca79b0abb526ddcf08621d6ebfa48923ee8fb4c667efb120a72bd9583eebee7bfb80552
- TLSH T181F0F408C8A09C6F03F6435B71B4B704FB91027A4A11A85B7A3CE84D8FB2D6710C2F1D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\el\messages.json
- Size 787B
- SHA256 a052c32b4fcac61152eb0adb2c260fb6a8256ad104aa0013db93e9798d41a070
- MD5 05c437a322c1148b5f78b2f341339147
- SHA1 ab53003a678e44a170e73711fbd9949833bbf3aa
- SHA512 c36cb9202a34356dd06d377e2a088f428d0b8ebe7d2e54f8380485e9d94a0598d7f651c1e7a2fd55be481d49c02b0812f2ba335e08611ec85ee0bd60784a6b40
- TLSH T1F501F98EE0B0ACEF11B3820671E4B619E781067A7A04DDEA3A2CD8087FF19430142F4F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\en\messages.json
- Size 450B
- SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
- MD5 dbedf86fa9afb3a23dbb126674f166d2
- SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
- SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
- TLSH T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\es\messages.json
- Size 661B
- SHA256 4db9b2721e625c18b9e05c04b31af5d9694712f1caaf6219abe34bb08e5db1c7
- MD5 82719bd3999ad66193a9b0bb525f97cd
- SHA1 41194d511f1acc16c1ca828ac81c18c8c6b47287
- SHA512 d4c49b43427799b6292ceed11cacb1d76f7ce43ebf402b43b638a6eb2b414ed0981e386cb8cdf0b51d1bd9552934fe25b2f6392266bb73d8c9a691f65bce0128
- TLSH T12E01F40EC0A0AD9F03F6012E36B43705F990167B5A40D56B7E6DE80D8FB9D9B1096F9C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\es_419\messages.json
- Size 637B
- SHA256 6659bc3705311d7641a73995dcfea80c7734f2f4ebbc3787b3892a240348324f
- MD5 6b2583d8d1c147e36a69a88009cbebc7
- SHA1 4d4deeb4be6aa0181825f3371a761abc5b4d5937
- SHA512 37f0dbfcc1b5a2b8e4c92c49d2d9deef25616421350324f57e0149a45a6ccb437f5e3cbe97412c4b5dbbf2593783c7df71e9c25a851aeae6e4764c545723fa53
- TLSH T1DDF0D109C4A0AC9F02F6415E37B43705EE50027B4A80D56B7E2DA80C8FB9D925186F5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\et\messages.json
- Size 595B
- SHA256 c85800bf45942fcc7fd6b1df929c25f9cc2a977a6678966bd03d4b6b69889afd
- MD5 cff6cb76ec724b17c1bc920726cb35a7
- SHA1 14ed068251d65a840f00c05409d705259d329ffc
- SHA512 53d7d01bb30c0306de65a79fd9551d2e8c1f71f4f45f71906b009071cb3e0f231e6a50fdd78773e9b4de94085bc7b97f829842fa21a89a2080d33458b745c46f
- TLSH T111F0C288E4A1EC1F02B1422A30B57306E928437A1310A8AF7D3CD84C9FF9D6B50C6F8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fi\messages.json
- Size 647B
- SHA256 0bde54b20845124113383b6eb81e43a0f05e4eb0c44bee3c1dfac4cc5fec2836
- MD5 3a01fee829445c482d1721ff63153d16
- SHA1 f3eaaaddc03f943fc88b30b67f534aa13e3336dd
- SHA512 3b92b6c86d30fd36aa3ceff8773ba60c3fc5cc19c693540137044c5838a5503895c770c0336a4d0a3db5e42f3fb36274d8d3f85b9dca2f3ec0e974fddb0bead8
- TLSH T11DF0F408C250E81F16B6461A76A42305FDA5433A0A41D99B3A6CD80C8FF6ABB24C2F1D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fil\messages.json
- Size 658B
- SHA256 ec002ed92359f67818b49455dfc579e140368e6a004080af022fd4f57f6b03f2
- MD5 57af5b654270a945bda8053a83353a06
- SHA1 eeef7a4f869f97cf471a05d345e74f982d15e167
- SHA512 5f0ae839fcf3f4ea48ff41a76655ae0f3821564afd5d42fbb9fbb9a38e8d8f7bb5e9b6f71064588cd441261f644095a44a755c134ce546d506d9a21e488baf52
- TLSH T17001D698C1B17C5F4272492D3179B708EBA4027A1B42645F3E3C9D0D5FB2C931081F8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\fr\messages.json
- Size 677B
- SHA256 599491f8c52b945c16c441adf45bfd45afae046da07757d97c56af4de75ed3b5
- MD5 8d11c90f44a6585b57b933ab38d1fff8
- SHA1 3f9d44ea8807069a32aaca2aaad02fd892e6cc90
- SHA512 d7ef7f5ad7ef1a1595825d79b69e2b1e988ad3cf1f3881496fccd30f241e4e9c6e457f9f5d0f855de3536db7a40c3e1c55946b50d3f556f4a35285066a0cd6f7
- TLSH T1F301D68CC4706CDF02B7421635A6B751E5A0037A8A50A6AF3A3D940C9FFAD6621C7F8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hi\messages.json
- Size 835B
- SHA256 8106d98c4f8da16db698444409558e29cc96735e188bfa303c333a5d99231c1d
- MD5 e376d757c8fd66ac70a7d2d49760b94e
- SHA1 1525c5b1312d409604f097768503298ec440cc4d
- SHA512 673f3f259af2946e4f49bbed14a2a70d44bf9fda9d7a71dc9172ba9b7b3c7f7062b16d29682b638d485b0520ed6f99e7a735f28c7c719b539559005b69fa7555
- TLSH T1BC01450CC7A9F90F0ABD304A32A92635DAA0127607D0955B7E2CF44D8FF1C671185F48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hr\messages.json
- Size 618B
- SHA256 a2b2ec359a9dd9dccce02859ce1e738bd30faa4a05f1dc522893ffdf722bbc15
- MD5 8185d0490c86363602a137f9a261cc50
- SHA1 5bd933b874441ceacb9201ccc941ff67baed6dc0
- SHA512 d7629978fc031ea5f716f9c1065fb2feab48c15f10cd68830dc966fa1002c03ddc7acde314c7d075f9f3a0a68552a6acbccdee24cf20b6c3dd1bce6562d0396e
- TLSH T19FF0C888D091989F02B5815E7DB57304E6A483BE4644A8BB7D7CA50C8FB5C9B6091F8F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\hu\messages.json
- Size 683B
- SHA256 32a249749f12adb6a220bf9adc272c7e5d9ad5497a38b0086d961e3aba17fbc6
- MD5 85609cf8623582a8376c206556ed2131
- SHA1 1e16eb70db5e59bb684866ff3e3925c2def25a12
- SHA512 27883430865d3cfa6edfe8c6ce1442bd96150b5ce520ccf7d556a330caa6392c712b47bd86f7350e174876bc681f6dec94d1312402655b0af90883a2899ec78b
- TLSH T1480178D8C076AC6F01B2062A30B5B725DA5512B78B20989B3B3CDC0C9FF6C575082F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\id\messages.json
- Size 604B
- SHA256 c6e8800450602de0f39fe9f6854472383813fb454b08abae7e25a9167ce004c3
- MD5 eab2b946d1232ab98137e760954003aa
- SHA1 60bdc2937905b311d2c9844df2d639d7ac9f7f67
- SHA512 970fec9a9ef0baf7f693c4c5977f3b47914579c5b5414fce9dbb5e4574659a5bb9ad2de0cc886b368f49c019785af7d2d7fe82f71341f039eadc399ed776ca12
- TLSH T1A0F0C289C0916D6F02B2455771F57748FE5002764A11A9BFBE7C9C0C9FB696B02C6F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\it\messages.json
- Size 603B
- SHA256 cd891c45f7586fb4a2514205a11f260e4a6d4482fa03d901909dd9f57be0536d
- MD5 a328eef5e841e0c72d3cd7366899c5c8
- SHA1 2851ed658385804e87911643f5a4200b1fb26e13
- SHA512 e47297896e981774ec3b59d41b89d6ba9333f6b4435eb9727d8645a46b10c7d408ade06844871fa757382fbe7e645276449db7b1b23bc59c9a71a5cb5a5ecc57
- TLSH T191F09088C5A19CAF02F2421A72B97750EAA1027A4F54A5AB7A3C984C8FF9C935185F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ja\messages.json
- Size 697B
- SHA256 706312a4a2aef3317223f141eb2b82685345b7eed444f16bb4df3a272716da1f
- MD5 9b3a5d473c3f2bbfaeece94a07a940b8
- SHA1 61baca342cf766bba15c7b4d892a0e7dac9405aa
- SHA512 94f6fee9a11bd890ab8211c98d1cc142348961ebcf756f66477a3e3a76519804b70be0ae4e551739f8afe32d7ade6ede04ef6b9b9eed03e3a857e6058eedd4c6
- TLSH T13901F24DC090A81F02B2822630E66381EA214E778641699B393CC80D8FB1D6FD186F7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ko\messages.json
- Size 631B
- SHA256 d1467b8d037114403e8f4efc52e88c4a7feb96126be4cff883feff1084ef7e68
- MD5 9f6b4d82a70c74ca751e2eae70fab5cf
- SHA1 0534f125ffce8222277cf2be3401c59daf9217f8
- SHA512 ed9319830314385d09c06f62ee34186e8ca576c857981205e4468a28b3acd2ab03384e77b866032c324abdd97a56efd08e2d6e0c79d563578b3ec52517819bd8
- TLSH T10EF02849C096AC6F02B1411A38F4B714DA9052360B50999F3D3CEC0CCFB5CA710C6F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\lt\messages.json
- Size 665B
- SHA256 7c311ab751d840d750c11553c083785813e079c1d464fe568a98c9e3ef3db96c
- MD5 4ca644f875606986a9898d04bdae3ea5
- SHA1 722a10569e93975129d67fbdb75b537d9d622ad1
- SHA512 e575e3d0622f5bd4b6c0ee79128a1b1f1882195670139d1983f4377d847141b8fb8ebb8bced82af3a220ed07d3577afbe085badc0e9c7678292b80e3ec5d3444
- TLSH T175012888D9A16C6F07B2421770B57300EAA447720744A49B7E3CD50D9FF5E8B9696F0F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\lv\messages.json
- Size 671B
- SHA256 1fa1df2ca8516def490fb8484e9aa498acff80eef5c9258ffe42d3678e6c7ded
- MD5 c5ce2c51391eafd3da9e4c71549a3c28
- SHA1 1f67ff6ef6e90c0ce3aaf56ed543a3efd381574d
- SHA512 c85f6281e682f52bc2147dea7e2f3bb4dc48d98bada8687b05c6c7271c78ea7f5431cd51671a4184c9ae004fc53c016e3c594697f483195ccba08a93821eef70
- TLSH T1F40149C9C591DD6F02B1826A35E47300E6D047B60A00A45F3EBCD51C8FB9C5750C6F5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\nb\messages.json
- Size 624B
- SHA256 2cd700aeb57d89c2e73333d0702556ee3ff3863516170f85669bc680fcbdc4e0
- MD5 93c459a23bc6953ff744c35920cd2af9
- SHA1 162f884972103a08adb616a7eb3598431a2924c5
- SHA512 f76e6e8d8499306883c3ec1e774f7e8bb6b601096da5a14d17d3e7d5732829542041e42b7350466589291adcc83fb065fd591b4e20cfcf8edc586e128ecbfcb5
- TLSH T11CF0C848C0606C6F02B1825B74B8A756E654037607A1B64F3D6CE80CCFB6D9710C9F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\nl\messages.json
- Size 615B
- SHA256 92be7c2dc9cfbe5a65e9ce6488d364c8d7ec19e7b67a31e4d43c1cb2b169671c
- MD5 7a8f9d0249c680f64dec7650a432bd57
- SHA1 53477198aee389f6580921b4876719b400a23ca1
- SHA512 969ab979546a741c0f3edbeeb21baba375fa8870d4fb9248cdd4c305736e332e10cab7b64c5c078e60ec0cd73848101b390be8f44b89c310058af4c1ca3c8aa7
- TLSH T1C3F04F5CD4A1AC6F02F1421B71A4B754FA61027A4E50A59FB97CD90D8FB2D931086F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pl\messages.json
- Size 636B
- SHA256 e2699f98c511b18a2afb82eae9a4804b646c4ff1077d80e77c17a3943a6373c2
- MD5 0e6194126afccd1e3098d276a7400175
- SHA1 e8127b905a640b1c46362fa6e1127be172f4a40f
- SHA512 a71f7c7bfbbf1e37e699601af2e095c56cba91f90cb7556477df31d01b83adfb1271e1775c9ba299ff6875bbfc2b6ab47488cc88e33def2f6f2e0e5ac687b777
- TLSH T1EAF0F488D0909C7F02B1019B36B87700FE52537B47A0B59B7A2C980C8FB6C970081F8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pt_BR\messages.json
- Size 636B
- SHA256 6374880fdd1f8af1ee8aea6a06b73be0ab265afceb4fe6f08bde3b3989264b21
- MD5 86a2b91fa18b867209024c522ed665d5
- SHA1 63dec245637818c76655e01fcb6d59784bc7184e
- SHA512 da6dbde5028756421c2904f605632ee98831a25a1247e6238a931629b94ce8a00fd76f4235f118d2167304bd60f2c06b2ad78e54ff6ce53f8c38df8c7b5afce4
- TLSH T139F0C84DC0606CAF02F6422A76B4B710F95003BA0F80999B793D944C9FB9D571186F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\pt_PT\messages.json
- Size 622B
- SHA256 c1c94f65fabaf17def98a8587711a56d61b1e5607500e9b01f2824db109f9e83
- MD5 750a4800edb93fbe56495963f9fb3b94
- SHA1 8bfb915488a4eb3cb33d68e2e59f1f8447db7d61
- SHA512 2aedef5793406221be76af22031ce8c30ab5faeaed09bb394c153e2ebe990c89c1a2a73b40d8a92842641afca8c77ffd808a2058602d3646fd8dae2844406f24
- TLSH T174F0FC5CC46059EF02F2435A72B47B60FE50027A4E50549B7E3C984C4FFAD471182F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ro\messages.json
- Size 641B
- SHA256 113a13900cba62fe8aed06751971c23a80a99b47f9be219cf884d57db19611d9
- MD5 98d43e4b1054a65df3fa3cc40ab6fb6d
- SHA1 46e0a21c4da2bb5d4d8f837ae211c1b6fa26e7e2
- SHA512 a76dc53912a4f46714926b9ea2b22e909540e447f61f6dd72607ab7b3bb5d4a9b39e525b04c33aec53ba813d14ac1fb5827275b2524e52b693e83171e1cd1466
- TLSH T110F0C849C461AC6F01F2426F75B47641FA6503774B51699F7A3DD41C4FB5C8BA082F8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\ru\messages.json
- Size 744B
- SHA256 fbaf22ce6e16de174ced8cb5ea3098cca1c3426a2111ff33bd3e64da64ed67ab
- MD5 db2edf1465946c06bd95c71a1e13ae64
- SHA1 fb4f3ece9ececebbc6ca2a592a15fb9c1fdfb811
- SHA512 4e0cf00baef1757548deb17bbe1af55770a0a0f7351779ef55c7defa6d112d0227b8865c2c22e0ec62e6e2f1c8e1632a2d0ce6828d25c5abbf143c990116f632
- TLSH T13201285884816CBF03B2812AB8AABB05F86002BA2F4156DB382CAC1C7FF585200A5F0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sk\messages.json
- Size 647B
- SHA256 7fa16af97e6cfc52ec6008eb679d3f30e7e0c24f9ef2d18a9228eaf4ded9d63b
- MD5 8df215d1efbdabb175ccdd68ed8dcb0a
- SHA1 2b374462137a38589a73fdd00a84cbdc7e50f9f4
- SHA512 c0e623343bdaeb4731800d183b59f2fcfe285f0c7153ec99641fd84f2f2dcfe47d21e73f3d28b1240340453c5668eb0affbe087aab62f1c88cd2a40cc44e599d
- TLSH T187F0A488C0B6AC5F03F2415A71B4B781FE6943760B51A86B7A3DD41C8FF6D965082F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sl\messages.json
- Size 617B
- SHA256 18aff072ee0df7c3495045435c752a805606e6d5d462ef2321c443f1773f4b3a
- MD5 3943fa2a647aecedfd685408b27139ee
- SHA1 0129dd19d28373359530b3b477fe8a9279dabb7d
- SHA512 42e62b3855611ff2e1d39c11404cb1a09825ee4ca6a8acb3ff538b4574388f549e3bd79137dd4dc128a8dc44dd270d7d878e4aad20da8250a5c25297b0dec09d
- TLSH T1A5F02288D091595F02B5912BB9F87A00FAE5037A0240A87F7E3CD40C8FB5D4202A2F8E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sr\messages.json
- Size 743B
- SHA256 7ffde34c58e7c376c042de64def6481dae32be8b70f0b18edf536290cbe0c818
- MD5 d485df17f085b6a37125694f85646fd0
- SHA1 24d51d8642cdc6efd5d8d7a4430232d8cde25108
- SHA512 0ddecfd860e99290b6c3aaa04f510272ae081cf2d93ed5832d9d6378ec9d36177ffbe213471247fb94721ea34a83e7665669200047091d0fde134e3d763217e7
- TLSH T1FC01D868C5DA785F01B2C11674797348ED5612FE1B44516FB93CA82C6FF59A201C6F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\sv\messages.json
- Size 630B
- SHA256 b8ba77e0089b0676545ec16d32468b727812b444f90b33a7a5b748e6c36c4388
- MD5 d372b8204eb743e16f45c7cbd3caaf37
- SHA1 c96c57219d292b01016b37dcf82e7c79ad0dd1e8
- SHA512 33640529e0d5dcc5ca4bdb0615a2818e8d26c6fcb7b3474c08ac3eb67b9db40e1f0a79954ed20728cd47a686d2533dcbc76abcbdb917f8530c8de8bba687352e
- TLSH T10AF0F44CC470ACAF12B2415B31B4B314FB2412BA4B40759B7A6CD81C9FB284300D6F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\th\messages.json
- Size 945B
- SHA256 2feca577f43d97baeea464741d585892103585208fd0a935b810a03bdce83c88
- MD5 83e2d1e97791a4b2c5c69926efb629c9
- SHA1 429600425cb0f196ddd717f940e94dbd8bff2837
- SHA512 60a5928daa8cb4341487f477c56b5a98b83ede50e5f4f55a802e01fddab86f3e795d391953d3d9214552d14d3f58c5a183693c613720fc12fc387d7b8f9b9ab6
- TLSH T10D11E167D090DC6F22A0021B3679B385EA281EB62B10B4F6B92C510D4FF1F27C452F9A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\tr\messages.json
- Size 631B
- SHA256 a7cb86f30c9c31fe5540282c308ba96adb4ec16ef98c87129eb88105e5bef5fc
- MD5 2ceae0567b6bb1d240bbad690a98ca3b
- SHA1 5944346fbd4a0797b13223895995cab58e9ecd23
- SHA512 108a07c6d03d7178e8d0ffef5349e0249a898d864964fed8757bd8a08bc1c6d9613f2a6c01aa34a6606127d1c6ce14c229fa02586677dbb060b85e3e845950e1
- TLSH T1CBF0AF48C4E46C1F13B6821B72B57692EA9142B25A10E85B3A3CD91D9FB6E5B00C6F4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\uk\messages.json
- Size 720B
- SHA256 68aba284751eb9c856032062ef9b1651e2a1e5ce5fda0977ffc97d63ba7bed9e
- MD5 ab0b56120e6b38c42cc3612be948ef50
- SHA1 8b3f520e5713d9f116d68e71daeed1f6e8d74629
- SHA512 cd852a58217f739c1cd58567ff432d31a7ad3f68c884abba1da95799bcd1545c6a5d3b06f319681c12b78ad0a709828de4b22736316f148d21f5db76a5bccbef
- TLSH T1DD012B5C8495982F03B3812B78A97305FDA103BA1791979F3ABCB80C5FF5C564192F0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\vi\messages.json
- Size 695B
- SHA256 051f96ed874c11c4a13589b5f68964e4f5b03b52dda223d56524f2ca23760c04
- MD5 7ebb677fead8557d3676505225a7249a
- SHA1 f161b4b6001aeaeab246ff8987f4d992b48d47be
- SHA512 74fd267cf7e299fb8e7054605c3f651f057f676ff865082fa24f4916755456768db0da62dbc515d829b48ab1f9cfc8ad3e841dcbf1f194d5cb14c5335a192a0d
- TLSH T114014908C160285F02B6571BB0EC7312FB5806778700DAAB3ABC841E8FB7D931986F0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\zh_CN\messages.json
- Size 595B
- SHA256 d804f2a040d21d7511efd5213d8e1721d64964a1a0dbb48e21622ceedc9d967e
- MD5 bb73bf561bb79f89d9bf7c67c5ae5c65
- SHA1 2fadd3a1959b29c44830033a35c637d0311a8c9c
- SHA512 627d44cef1fe5c5abd598bd47ff5e22b9efc1cf98dde3868fa9e5896c134a0c9c055ac34eddadae56b6690e51aea89965d38f770552a85c732cc796795dc68d2
- TLSH T19BF06248C4A0AC9F027A852730B9B369EA54123B05109AEB7EACD90C5FB5D5F2483F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_locales\zh_TW\messages.json
- Size 634B
- SHA256 c6f8c640f3353a7b9b1432a0c139c1aeec40133800e6c9b467b63991ad660308
- MD5 5ff50c673cc0c661d615f0cfd0e6dca0
- SHA1 60dff98deab9c4746b288bdd9c94b3bcae5eaa85
- SHA512 361d62d91f4931c5f34092c9f2c6a5323d5eeb82a24e7abe11f7817d8d66341c0ecad4dcb4b10873920c8d6a3cc9f5704889e178eb2549001a9f62bedf6c8019
- TLSH T1FAF0C248C4A0AC5F0376854672AD7707EE5002BB0A11A5CBBE2D940C4FB289B9082F4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\_metadata\verified_contents.json
- Size 7KB
- SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
- MD5 0834821960cb5c6e9d477aef649cb2e4
- SHA1 7d25f027d7cee9e94e9cbdee1f9220c8d20a1588
- SHA512 9aeafc3ece295678242d81d71804e370900a6d4c6a618c5a81cacd869b84346feac92189e01718a7bb5c8226e9be88b063d2ece7cb0c84f17bb1af3c5b1a3fc4
- SSDEEP 192:RktDNJ2UzsL5KcASyoH+CouKP/iNGRo/oRHMIT:AZQflcsU
- TLSH T1EBF1A568CC5D758CFC56B77987AA36768B48C5C9E14D3E2E12C30CA178F6A4888B30DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\craw_window.js
- Size 255KB
- SHA256 5721a4b3f8e09c869a629effd350b51c9d46f0ac136717d4db6265c0ee6f9ac8
- MD5 1709b6f00a136241185161aa3df46a06
- SHA1 33da7d262ffed1a5c2d85b7390e9dbc830cbe494
- SHA512 26835b4c050f53ad2ddb84469df9a84bbb2786a655ab52dfc20b54bedcb81d1ecd789198d5b7d8b940242e5ceac818a177444d402397ae82c203438c4b1d19cb
- SSDEEP 3072:I5vU7I6s2M9duIWFCbmYJ4tnFWdqpMad2vywhIp81QFv9F9nNsZgiDdOFlV/mZmc:I5vqFCb2p8Gx9FNNsZ9Dd/ceR
- TLSH T13E44A58D75A66551A797B2A890BF014BF27B1885F84C0EE8F5ACCCD03A799894037F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\css\craw_window.css
- Size 1KB
- SHA256 10dfbd2d98950b79ee12f6b8e3885aabe31543048de56ad4fc0a5e34d0d9d4ec
- MD5 67bf9aabe17541852f9ddff8245096cd
- SHA1 a4ac74dd258e8e0689034faa1b15a5c7c56dc3bb
- SHA512 298fa132c6f122798fdb9bc6de8024915147adc20355b56a92f0ed9acce4549be6e7f42212e07dca166e31624d4e66e299565845d4ba1c51ca935050641b61fe
- TLSH T1D831AFAE07A52718755BE4E43BDBE72073355043E51FD84C6BEE6989CF82B098123792
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\html\craw_window.html
- Size 810B
- SHA256 bb8742615e4cd996ae5d0200e443ae6a6f0b473255f03affdb8fb4660de4554d
- MD5 34a839bc40debc746bbd181d9ef9310c
- SHA1 8b4eaa74d31eed5b0baba3ca5460201f6b10da46
- SHA512 ee81e5509cbc2cb2b6c834224688c1e1b1aa9aa3866c52f8eaed040d5c390653c52d8d681e2e2cf62906643962abac823d5b622385b983b21e0dccafdf281eff
- TLSH T13C01689280F952CA41A224D43FE7590B7F81E287C332590837AE0A9B6FD778AC80B495
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\flapper.gif
- Size 68KB
- SHA256 2b73533f47a99ffea9cc405ffafa9c4c53623f62487aebfba415945120b22040
- MD5 398abb308eebc355da70bce907b22e29
- SHA1 cffb77b8a1724b8f81d98c6d6ad0071d10162252
- SHA512 fc7a56fc8a61a582161874b54adbad30a84840190008edb0b6fbf84f91393ca58e988e3fe446f11a0c3c691c18249b93aec2904b3d0c4f0857d79034f662385a
- SSDEEP 768:g5TXOSBAqNIPmA8NcjCWdM0VFMJEwavTeElfWupav5TXg7wV+irIPny9MTVQHydi:g5KSmiIPmAhZWiMsDfWug7DmqM6HybkF
- TLSH T1AD631870DCEA65C3FC3171B845EFA6DA74312039E88A843C65B0A41CB568D7AB3C3769
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\icon_128.png
- Size 4KB
- SHA256 149fc2270389655ee20da9cebb31ffde75e16e3ad371b9b907f62013ed45e705
- MD5 7424a1046f7a440dc5e43b9a3c5d791e
- SHA1 0672cf5b67820e81beb23010f62123e0b362e3ab
- SHA512 2836cb5b4d682bc70e74c88af21e0ce972679eb07e88aa0b80db5990a68453e1c9580e530eede390c743d7377ea8ff3df7b78a7c5ddbde124d7782c63cf329bb
- SSDEEP 96:jzliICMC5QmAjL7eTu3Ay1Hnn5IlQRU19x0tfo4CPmukC0:jzQzAjLiTK1H5IlQW1Xbm7
- TLSH T1AF916BA01EB4FABCD449F179A423BA2CD4049904D83583278E1DBF7626247A633C94AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\icon_16.png
- Size 582B
- SHA256 15b1cc630202324ad6b3b142a22cb1a55de8d6d9a0bcab78d5b14cd997a5ddd5
- MD5 b323815b176657da3933a39e5658177e
- SHA1 27e230c6d7b1774a9cfdebd6271e781619e797eb
- SHA512 c049c8c8ad36fef941ef3917fee911d632923f41e8d2b3caea8938c87dda229c0d632f8f07aa3334fe79a31de87e75bb73d45d4811f9e81e0f261238bc41014b
- TLSH T105F0E1E29628FDD8C20AC13E4619AD21BDB258D85BA04B380553ECB13DA9AA9C065195
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button.png
- Size 160B
- SHA256 d5f9234dc36e7ffa85f35b2359a4f82276f8395efa76e4553507ea990b27fc6c
- MD5 8803665a6328d23cc1014a7b0e9be295
- SHA1 9da6ee729d5a6e9f30658b8ec954710f107a641f
- SHA512 ecd9e71b8ba1ed8bd4ca5a0936cb66a83611c4abcbda76c250f4cdf4ad80320212e8f5eeb79a38910718f8346ecc1ad580a3fa835ec2b22be497f36899fb5930
- TLSH T1B8C08CC3B21C8C99C591133380424050D8A78A928E22C1D82B8384693B3050050B8627
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_close.png
- Size 252B
- SHA256 131817cd9311c03df22d769dd2ad7fa2e6e9558863a89f7e5e1657424031a937
- MD5 0599dfd9107c7647f27e69331b0a7d75
- SHA1 3198c0a5f34db67f91a0035dbc297354cbc95525
- SHA512 0076acb9d6a886bd987876e49495038f9388b292a9efe5c9093cca64ca3692e3a5d24e35172c7697f6aae34b86ca217ee59c003423e46d9499bd27ec7d77a649
- TLSH T178D097C1A380C9FAD91C03B230427870ECD3B9D44B3B829C1026B88446BCF40E0E5712
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_hover.png
- Size 160B
- SHA256 721b7aaa9a42a54a349881615a12e3a26983aca48e173fd2f66e66aa0d725735
- MD5 7cb6b9dc1a30f63b8bd976924b75ad96
- SHA1 0c40b0c496d2f2b5f2021c117ec8610ac03ab469
- SHA512 4764937364e355956b242b84010ac56102536d2aacbe4227f0e88e4de7ab468571957ea6c33012539156e5349ae4f777115615ae3361f60addf9cd227424f76a
- TLSH T181C08CC1728068A4C0A92233A0105010A8E3895249A1D3998589C4283730E09A0D8A07
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_maximize.png
- Size 166B
- SHA256 afa4ea944cbdec8543242e627ef46d5bfd3766dcac664e7e50cdeef2b352740c
- MD5 232ce72808b60cbe0f4fa788a76523df
- SHA1 721a9c98c835d2cd734153bbe07833c6637ecd68
- SHA512 4048eea5a78dd569521c488c4ce4f7b77ac0454c92ee9107a81a1b3af91a4ee036039ac1a0a6b8dd26b12e7f1595db80b7faa7b6a25d9032bf385528a81a8654
- TLSH T13DC080C171518DA4C77113A1150B445598F78DC50121196C49014062067DB0495F465E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\images\topbar_floating_button_pressed.png
- Size 160B
- SHA256 5c10ce0589eb115600f77381130b70ae0b7b3752614d86d4c89e857658aa222b
- MD5 e0862317407f2d54c85e12945799413b
- SHA1 fa557f8f761a04c41c9a4ba81994e43c6c275dbb
- SHA512 07cb69327961fd0019bef8ef7590b5524905ac373a815f73f6d9e0b26840929f919a96caa977d4b5656704dacd0f352d568fb3997f80ee6bb94c95b58839dbfe
- TLSH T14DC08CD261846894C2A9117220114010A8A38D828623D3AD4A9AC0352730A04A1E9A47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2536_1132646559\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 f52714812d68c577a445169d11e84df6751c2d6886bc429643072bb5d61c6c27
- MD5 01334fb9d092af2aa46c4185e405c627
- SHA1 47ad3c0e82362ffe5b881df8d71d6f79ab7f5796
- SHA512 888d96adb7a847abe472145258c8c46950eb2fa3ba7d596c2e90a17c8fb06fd0155c56cc8aba5d076d89368417464bcb2d236f9e40e53241950a01f9f8ed548f
- TLSH T1F721CAE72455C0BB16B0DBD9B8A8620BF733130E8490C6CF793C404DCFBA8E2524A668
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\accounts.json
- Size 5KB
- SHA256 594ec3507188f4366a62e6b74e8c6ed5d57b06c4755b1a8ce1bad1f59a34946c
- MD5 429e56a412dc82a9499afdb966645c8a
- SHA1 cd3f3c279a4adb6ebc60824686c2bbb92b5378d3
- SHA512 7f6ef31a5b6e24c43010d2bda1bb7601405996d20c793c50808559c93c8324a5d2286ba512d03a57b6b92510b2c948c4724bcd2a47af601875cb19ccc9a08c6f
- SSDEEP 96:6GujRreIg40Mk8PZrJogKKsDGGujRreIeyf:6Gm1WMXBrunGGm1eyf
- TLSH T17BC1759DAB701D3BA4232D10645E3B47484C91F308A67564B9EE70884FECDAA08F76B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\assets\indexes\34.json
- Size 583KB
- SHA256 f226e879fbe70d3b105280b3d6d16ec1df279e7e1b426f8d9a17496640758f16
- MD5 d1236651788ae238b47282fb2fead8a4
- SHA1 1e4e4a68dece1c0f51b8f93b45da8fe8da51bcd3
- SHA512 800d3bff065de654cdf04761ca95941ddbee4b129eaffffce89f69b9818baca81a2213ec179f2dda0f02cf4b24814ed25b4b8f7942e05d876dd365b826efb990
- SSDEEP 12288:+74+PIHhDD2EqJFQQX0y8mBqmCsSM/m8XIB7w+nAMMwvtAOxOzNtHe1mwU8kUxUx:Ojtq6m1l5Xjli
- TLSH T180C4DF96DEDF37A7F809DD65B57F0A039320C21B9304C78DA66DB342A5899DF2012BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\assets\objects\59\590470ab0f17afb73a4e41d9cb56fdbe069d275a
- Size 229KB
- SHA256 a14d2da4f452442691791c834cf55aae43f8b435a4736eea44cb327435bca20e
- MD5 8f85d5e004a1afd3ddab796b9abdf198
- SHA1 590470ab0f17afb73a4e41d9cb56fdbe069d275a
- SHA512 c46d5a02f8a090bccac776ff4bc3d0c09685a4cb4c0bf355222238ee1d8558ed676ac160976f44bc79ec256a27cae7bf14cef52bdf6991d4f50b450989e305a1
- SSDEEP 6144:y4UyoHoRDwNmQAFu2IM2I2gwNLbomFDIsKh8f:y4Uy2oRDWmzY2IlI2gwlomRAhq
- TLSH T1853412AE8CFE4362D8F1A5351BA8711BB8043AC76FC0E576AD070CD751251D6AA3DC2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\248a5e6a350be6eaa54a347448f6f3c6b8cadd27
- Size 16KB
- SHA256 13232c4850db3285b4224c9c8b6e4b5cd176de7a857444129d0725bfab3353d7
- MD5 6338ce30cefeb3e75dac504aa00235bc
- SHA1 0296f222b748ed2982cc268d18af22b571d8a4a9
- SHA512 fdceca29c218f5aec5cf9d5eb6938761b62c840d1d2f3e967b611d07f8dc42bf3b53d4ae1b561d1eab60e213f84c553195e4c407b9ca70fb65f3790bf46753d4
- SSDEEP 384:FDvcFBiQBEp1EfzIH708NVmNhH5wzJx9e5ovatWSGu4SXNIy:BcjiQCKEHY8Nc185yb/4GIy
- TLSH T10472E13E51D948C7E472BD6C7970C0F8A539A87526AA0BD83E21F64A39D0B08D9DD181
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\26489b48c864dd6c3695a832996af1e939a293f9
- Size 15KB
- SHA256 003befec64413e9fd966aaebbb5cad1bd2e1c4575a89bafd47f0d96990147097
- MD5 57fa1c2cccd3ba691b21e5f7c2d84b2d
- SHA1 d79bad19d862aa4923ef3b6c1876c9f867a517fc
- SHA512 eb6a786f9cdece46eaa924584ff82600f0ec8f6513cf967416663565b8c5842732c62fdb67fa1daf084163a6a78a483efdd87c6774c229f40532d146d13d7970
- SSDEEP 384:PDBBwOMMbBUAxNZRaDzfm1Ux4Ka+aQD5YerPtpJg/I:PDPMuUOHacUZa+7D5Fjt3g/I
- TLSH T15C62E08F7CAFAB3E49520678DFE031164B46053807C8C2098D2B3BDED99B5AD5E69426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\33987a02e4273f4df3eba499a77f4efe935a887a
- Size 587B
- SHA256 1b6ebd1b5ae776298d2d0b89a870b65495ca176ae1903b6e25095c6da71ecd02
- MD5 9aab00ebfc2bb9478f45d770471338a6
- SHA1 6bed23fff3e0b0966d5196fc5688b103d2d69d90
- SHA512 c68f257f11842d05c69eaca3f1acf9b32eed39fe16962a8144c26098bd76ec9d3343e4ee0da9ca3d08e709833299c9f865d3c829976c4a3ab206a19d795a8385
- TLSH T1BBF0757822E07462F7AD0B7663BD401FB47D8D5008B351E2594BA4ED1E30383D154246
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\4026d3fb8923a2523f8d230a46a51a81557fc5f8
- Size 22KB
- SHA256 fb5b76f9b1c153abf85040188bd155b5d499821ea2dd4df46770e7d41d6f2960
- MD5 2529861ce07311a9cab3391f8d696031
- SHA1 f39a84bd0c3cb34eaa039e829218975a2b7c39f6
- SHA512 6b97569f1edb0a85adda7adccba75afba5f0f1bad8a85e0556759c002f53213b098efad237f9d2928472dc6a66564e8b7811ef9d19e4d53e26e1253c7785dd07
- SSDEEP 384:Y4OPaVQYgqoV7gNVRVj0sWwRcX1XvEvLU3FZkOTqcYX1FGoOojOF6bock7d:mPay3GVRVj0sWwihWLU30ENmU5oKAba
- TLSH T1F9A2E1D5AE374A31E3EC0FCEB3670E0DC7197E506360F691ABC5A28101F8A662B35217
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\4bd3584e7b69ca65f2de1f3046ab3f25a48309d1
- Size 4KB
- SHA256 6577355a9d1f994edea64342f01f2b2f4f37f2dcd068f2aa35dc5b42cd241adf
- MD5 b39f3a8a9c5958989089173916a3a500
- SHA1 34e3092b08e5745f5d49e5abfe621c4ad7a49291
- SHA512 b7972d46c5fbe4b3c8ea5079dfc7e36fbda401f082cfe3dc13f17dd9277c944cd29de9f39f5a4a92024c6d63d487948883af16ab890363604c0b3be0cbd0e681
- SSDEEP 96:mO/9fnykscm6tOTUH/N4ZQm2Za2SOtyFw1sGiugkxz:NFfykIAyUH/N4Zn1OtyFCfjxz
- TLSH T1BBA18D5517BCDD05FBAC0A3A25A557D4E20B86BF8043F87AF3EE49B1897E4010981E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\50f37587a8e91af2d9bb0c92c09ead594a3c9ade
- Size 4KB
- SHA256 99b358c11c3e94b69b4ab9bdfe437519c334cb6d3948701c6613dd121abed150
- MD5 81b6be3dac349d69d262a21eacb0e2b1
- SHA1 88f197b4ae1b7c4eaa3fbe1114c7c0166131fa24
- SHA512 c1ca267f31840bc3db5df8722be9d28bf833068d3ac142504f3dc144582bc9759a1ca2fa69cb84b7957b633287a9049b0a385593b92d5db5a9012fc6cfc58324
- SSDEEP 96:BYqlMcHkZ4NGLd5nbuMeF3gp1fyDwJC9Nku93pMV:BNqU/I5nqM+gnWhvkI34
- TLSH T1F6815CF8A32EEE02D3356175DB33509A30A4985D0F9ADD0DD86BA4C1390CBF6488149C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\571a1fb1505ed8fba07b3f2b48ff9e327cd7939f
- Size 13KB
- SHA256 0c75be3385e43039b0d1d48a10634bf8bad29726cef3b40a953d01344b99af24
- MD5 44add86c9763eadacbe3bf8ff7739c56
- SHA1 441eaa53e5ca9f504e1e0ad5e0773ebe6b47e497
- SHA512 211dd5e2b22ccf1cec1f890c3908a021ad1fc91a4d1cbadad188a603b123c4e2a5a98babdd53a87e0830b57e5f5fa3ce891433ed71a563cd475a92dd04fa1c31
- SSDEEP 192:2FuU63WcitjJCWwI8ze9QDddxeX2S5oTFDG9Nut0CTAWMrVfSq2F525s:2FoWHJJCfee5X6uFyNAjW5fSqk525s
- TLSH T16C52D0E106DBDF01BF101866961B8888162714E1D1F9B733CCB7F0CB14B9F08DE9A6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\84f54ad84ee2d02e1d4c5eeec5d532fdf5d9bf3c
- Size 6KB
- SHA256 2ff42395aa41a7e01e33a2b0427e89ab1f3d82764a33de8d3be52a503dd57a61
- MD5 d26fe8ebae9a6f8d3e496c82433b5d36
- SHA1 8b96ece62481b8ab89f9c2d6aafdf49d8e330d2a
- SHA512 d0f364fca1bc7fb40e62eb41b76e15a0c7f31c00f31f8c2e1a3af9536d2041ccc5448115fd9c36f71a8b2f748ef161ccd5144f7ca192711f6b6b0ec71bd88b41
- SSDEEP 96:HtnkXRGnecwBP2YABEOqFlDURwZ0yXQLUN/BbBcNPTIaBDDfPYATW054hK1c6A0i:HFxxwd7IoDUKZjXyUljmZDXYAJeKy9
- TLSH T14BD18F9C4D1AC263458CF161F1D112EE2C78D0DAA876E61398922713EF0B57B3390B79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\88114d7d9e6b52dc2bb69c9d9df508edaf4d6e53
- Size 9KB
- SHA256 b49d8d1db390035fe0b9dcfcf8f07b498376987e7252df254b94e116acfa4809
- MD5 9710d2bdceda07312feb25c4dd80b55e
- SHA1 0497ed784769e51352cb0b96114e1aff0da7dc29
- SHA512 18d1b433655731218ec3ca575c9ba7a8c4e3e9b5f3369839fe6e34e3fa0e5e8e4e9ab980dc5993bad7b89dfc088ce76b31c058a5191417f69fae30bf1141ab55
- SSDEEP 192:vFcIzaqAhBjNHZvFyEOTLfSsMjufgFS6cMJHSHvyLOVd0K:Nc2OB5JDID5MqfW3HSHqL60K
- TLSH T14A12AFE84C8C662ED901A1F0D818D57C6512627B3D3664A8DEE7A68BB76780D0A243FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8a86c44b1602a618907fb260da07a62df4132910
- Size 11KB
- SHA256 eb22adfb84f343128cb498140bf0274565015663711aaacafebf42fae77d213b
- MD5 89c18a8fbc24ecdeda9b3f9933c7078e
- SHA1 7ada95710b94bacbec4e4ea7edc2a1009dcda159
- SHA512 b696d8a8f78908cb0578c087b1f2fddb51137fa38fb7ef49195bf6dabec7f9ff72e4874bb1acf4f64d3c32a21f9b9b004cba63c1dead2c4561ad55f2afd79881
- SSDEEP 192:6NUQ5RGh0uTFxRGtMgDZbBVRwO07/HbIjrQwtdQh0h74Kg1KfapOk2xAhkGrdewm:6SQ54hNK3DZvRwO8/7Ifrte24KMJMykV
- TLSH T19732B01CF728C55FAA84B53050790087A799F5A8BF6AA7076F35FF202C5B36355228A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8a9400f7da27e202a2246a34111c3c8f8108cb34
- Size 3KB
- SHA256 2d8686efe218a003d3df4b44fce8b511c80be5124e3fde61009f61dd6cb70dee
- MD5 b53d045c0aaabf862449994171894e5f
- SHA1 4c0510e4dd117f47811fe04d7f93a177791ea52a
- SHA512 1f5647efc3c6f307b047dbcd22a066d6f1d79d25f48c09ac64cf4cdd2607d0dd28e30a24c33ace1b6c8ea50f810c3e03c45820bf29a266d29212fbef69fffff9
- TLSH T105715DCB9024230ACF99F9F48612AF085C5D6786A28168CF55C5FE78D799816F643C50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\8c245f98542b23e0696437968ee04fd31a84ed74
- Size 759B
- SHA256 e169d7c5d5fdb71b8f3c5ae7f8ab8909e548d192ef62b08a6f942f348483362c
- MD5 4834e303f28a616f5977eef3cb74b5db
- SHA1 0584175617248830b8d45f2f28160adf99d84886
- SHA512 39568b5348f8ada3f85e9bfa685182438d94e9269198b7a8fc9cf8319603477b00cf2c8a16d206b556f8896f9307328508835d5afa453dc97c4819cca701b7c2
- TLSH T17901D5F9DC05E8E00282EC0E88BCF0A0E87F362CB4280AE68500E0631900305DBF1ACA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\965c872944cfec9a657bf93f16f815a564fe6590
- Size 12KB
- SHA256 94069d6126994bbc4f456a0a845f532ae8652211a743c34de92579782a9e5117
- MD5 361a0e412557814a9b0e71d10a36ba10
- SHA1 6b5b2696d1fe291433806b4ed644619c4370cb67
- SHA512 e48ce521fd3589b09c9099ecde97d3e60125eb3659f74cd97f7597b57135edb53610c4add6ebc290153e93a7975583f14dff7fb339941a9f035692690a52d607
- SSDEEP 192:zj1I9Ar5E1y7T2LppMY18Do81tqE9bF9/+wM3pfOyQG2xABdY+5UcrYiEc:FpFh29pMCIFr1bPWwiROzNU75Uo5
- TLSH T16442AF538B225FA1C170C2B9458B94D208A2D75EB3AE4B79070D0E38FA87EF09DD97C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\9b6601855f72bc59246b5219c2bd0c9c81aee1bb
- Size 1KB
- SHA256 5f9480ac80578115af08964ac1da022a32f26e12e435c6630edc36a80d6abfc0
- MD5 2c8c93c90d7c619cdd2b5084abf6a5e4
- SHA1 5a39d13495a6404a38d3d2d94d9144918fc32097
- SHA512 51040bbb665c7ac7c647078da917bc62989eef47499ab82222e11320eb818d293568b06f0508277241439219ea1ee72ef820f96dc1fd02e0563d6389212bc456
- TLSH T1B73194C98209793BC92992B634E3E232AC9745254E7157106DD9CDA5D8C084A30F26BC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\abca1d02885121815475528cb1211609033a5760
- Size 17KB
- SHA256 1476ffa006bce135a1d999893644a7f742147e0a12ce99a1bec749f78f0efa93
- MD5 85a4e9f56b7dcb9e957c8ce867a197ff
- SHA1 e3a58dba3f4eb9b8f8b7b6ce75975ab547427656
- SHA512 75e451a197857bb9aaa3eeefe82aa772f1afbb12bf44b1cab9c1122a63c9d6e855fbd5ce56b8993f558b09747bc6f5b8c50fd1308637f9fbf149c570b0f115da
- SSDEEP 384:c8YU68nC8+g2o3AebMPHhGOyuDwRUKYf3CCWzx50dvLq:HnC8+5wAjH3yuDGXYqCWl56q
- TLSH T11482D0CB25547E9D64E0E9731F6BFDA19A96207E1D924FE43C152284298C71ECDFC320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\ba96d73c587153a103f5d2f16b60b123f1dfdc49
- Size 6KB
- SHA256 0166724467fb429677514fae524f7a699a7adbfc59019d8c88a7a0316239f0a6
- MD5 e3d729a770fc9e334a40c6dcdb055027
- SHA1 8f8a6c527c003ae006ee11fb470f83d6d846aa4b
- SHA512 e7ecac3c62297e4456a67cc92ae27a7fb7332a77a562594152b42182967a51dea3a7dca395620d8094f160ed6b099b3bee56aeb1df7f0a0bb704d4700fb24576
- SSDEEP 192:RDaJfNotDpxfl8A9iJCk62/nKrePsSi41Dj0Uu:sJfOtCaiQOireUSiEwUu
- TLSH T1A8D13B929E5E0563D12CA233B2CDCC5B5491B2AA200F402473B3549BDB06FCE68F722A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\cdb147c2a082d80e2961d9f94c91340e33ebc69e
- Size 5KB
- SHA256 46efee0f765f0c38ba3781346bf8287b23ae3eb8fa9f7dc27581b61cc43176c2
- MD5 11a2c72358ef10e7e7d431d69dfe2924
- SHA1 2cf4e5c5aa8d9786ba4e113057e553c22c78722c
- SHA512 a5198a28bb491610901335dfc14df3760322f988afb47bffd213f42cee9090d6c09be4196716081c1cf0848a8a137300a5d1dbae317eac64d7abf80072b0c4ee
- SSDEEP 96:bCPv1WmHOnNLJ2/kLXS1Kz0kxsV7bs+i7ZkU68FkDoV4WJKmeYsb1d+Vxl6wgUt/:CBuN92sLUkxkXJN8FooV4WJubH+VxlhZ
- TLSH T130C18D12780C6815F354B3393F106B0491AA7214E8D8D9AB1EBF8CDAA8F571FA557E81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d6647f4405c698b6681d15da344b686c5aa0e123
- Size 14KB
- SHA256 00e67dcd86ad2eafe652be5a1a5bade89b6c29b62c587697b06aed02e6059d38
- MD5 1fbbaaaf28d793bc6fe1dd7694cd6f63
- SHA1 e93d6ad24c44e9eb43b72c4c9fd080671aeaabeb
- SHA512 b92705bfa65bf159e7e4cac94b7ce9d4d7372453963962f35664f3d276409f87b68de99d586f39bffd1e1efb898c10cacd37cead16525976409ad0b82c266a64
- SSDEEP 192:3BTtfKFDmTsKXYhbq9vRxRdxDJr/yHTgIUCExds7/TAJcyvBW2nAcp1D3XWM0pXW:3BThTdoVq9HRByzlUCE/s7/UCdqpHWMH
- TLSH T14152C009B2F755D9CA33E6B71BD0B526DE95C267F28121CC01E4E69867D1111033F5DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d93c71ddc3a6ea658693e5aa6f8be93877ce1355
- Size 10KB
- SHA256 bba20ffd857c2db1a17bdb018cc56ca94a74cd7876eb94b2350b612fac8a4c29
- MD5 1c7ba65e0a0f3c989cf41d91960a02c0
- SHA1 eb1b9cb72c95645cba8c3048dcdc14ca97cab0c3
- SHA512 88c7cdb5e4b7c89d80cf875385ea2e4103c81ded7e29b389eca6a2b4dd0e430a52e390e8a2a8f4e2d2dec38a58bf3450426db0f2c5e572b349564a1dd2228fd9
- SSDEEP 192:3InYyqnhjfEZSBVb5xoHPtFQdSYNDQVCaJGMJKr0v9ZW:3QYyCBcUBV9qvzK7MJKwv9ZW
- TLSH T1C032C0840A444729EBE306BBBCF898F53544BCC7F06A1BC0156F1ADF44F4CA26692748
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\d96a52ef9ebed273e217eae03f26171f990152f1
- Size 17KB
- SHA256 f2ebff6bb1d573794172be261302c9b6d0fd86cf0139043cdeede17a7eb19175
- MD5 d46b693a781c7fb169929042b572355a
- SHA1 5debb00c95a8ca39184ea15c9ee5827d07f5e35c
- SHA512 8ea5897c7f485db33b120f37ba90b3bc489923c792fc13eb2875bbcb78437aef11e8ffc249d6733ec6fc86ded271a278a70d9f050aa5b2c55a5a4e4a61e0aa11
- SSDEEP 384:8nl+nZqCMNqpeq1nLxTwJ9Q7vSYsNEdBS/zDUivEPaRhtar+Uc:+uqCMNqp31VTwTQDSYw/0isPaTQu
- TLSH T1B572DFDE54C65EC460EB351CCD3AD31060AEACAD3B297AA3953290263775D6738A4393
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\e72a964a0e8d496fa3087c54fb7e9ce155f0b4ac
- Size 487B
- SHA256 e95c230cf1e850de619cf2bf09822490642ef57fc50211d86768437ab32d6538
- MD5 c20282d73fc1342158c23befa3513880
- SHA1 60f4e71b974408307f40e8c69d72a15006f1bd1f
- SHA512 057a52f19a2e345f01645a30119e82cc40c2bf6dd719049f03667ec61dc5392ef59f2c8349c47e437244a0cb83813a8491e4f85c79251e52866d0d8eac42c97f
- TLSH T156F05410D1ACC833D75D90310B2AC203EFA2080E7B499A6121D5CD9B2CF266F93442E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\cache\ModrinthPacks\logos\e977713482bb0c22dee38fcee4e6d55af42686b2
- Size 6KB
- SHA256 2597500a7984f15b0735cd44be58d10d8ca2fa139e34fc4763c074549efff2f8
- MD5 2bc743c0198350b4887f5f26960d5bb1
- SHA1 1039667f53e0eca390dfcbf287318d61d407d198
- SHA512 d7c629094a68b875205aa94418e6fff4118352f044cbe936eb6e37510bc259cf2c6c09b0c3d47952600cff88af3dbbf30dc01f00831d9b7ef0f3c8bd91b66ac2
- SSDEEP 96:/dM6qAm5q9oj2OSVmJj0XIu2pKltlWrrLAHBbKTgVggvEOOeRRH5S9tAxfM0AXH1:+6QQW6OSVjDsE0TfWEu5S9OYX1
- TLSH T162E18E0815B8447CDEEB7F32232B431A790911760F8A23F79D911F066EF6D8A4B83361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
- Size 52B
- SHA256 a85a9d50bb071347303a46f4136a1c7cce8bd90981cc0827ff197039297f27ee
- MD5 8aac2bd026fcb2d8fc2f6a7f45cbcbbb
- SHA1 667e2b2fd911eb529aea7acd6fb8f8ccf0dbe618
- SHA512 a4e65cd70986ed3978d774a1cdeb849ff8c4d024b19785946e07638aecc2bf00782036fc353bb88bb81296bb59c954a892324cabb38ee46d5ba4b8beeb48673e
- TLSH T1B09002078100A0760563274580118C449A6113416519456D78D9A98673059541997C64
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
- Size 77B
- SHA256 1d883ed7011b86d0da80c1cb36b3bc0be2ebbb25e820c368d06f9d675228cc6b
- MD5 960957c3fda2a1a34977d8f3323d67d6
- SHA1 30b6fd9eaeac7a3bd64002969672b0a464b45dc4
- SHA512 3994892d4336acae5681fa9066be533f396735c9eddff8078a23ec57ec8a1bb8cbd16d80028b3dd83cf87dfa0bb6936c739e75099c414094d51202588ac216b1
- TLSH T186A02443C00144710F533303C001CC40C53313041D15007C74C574443303CC40F53D54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
- Size 1KB
- SHA256 d067580b24bef51b605522c557ef794393f8994b6e2af15ec619363b699cf197
- MD5 1923803c4bd665ed6537521ccb2706cd
- SHA1 3d81e3de27ff6b307be6d06fc919d0984c2e1a16
- SHA512 b492375aa2a7ad7f74b9c660ca647cf5a93bdc6ee8b7b90700f2258fccf5607197d2a7aa0fbba817fb371cd7eaae02768a264c1e0503efa92617511853009367
- TLSH T18B31DC325010583FC850686D979E7F394F286A7315C63C49F1CE832EB1F7913792295A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
- Size 1KB
- SHA256 b581ebdb7bb30f991b62a87a36f3ea4864e30c98a1237d50453a5c0bab82382d
- MD5 23489fabbe64c76a89127136352c9d66
- SHA1 61b3003c4800e0c48c0d26ebeb7208ac6b0e9a5f
- SHA512 d300f06119a6b904a368a673b2f499362c739e29b8953f24667f3bef7c1b23be0e0597b8d8c3c5afe4d36cfd03c2a45fde1695626b771db67657c16672774416
- TLSH T109310D324150583FD880686D979A3F395F286B7310823D8EF18E932EA5F79137921A6A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
- Size 128B
- SHA256 a96353c87e990eeb0a402bc4556f241df92b51d7919d4fb6e2238a9d70f8faf5
- MD5 537fa4a9b2acf7549d220faaeb856d9e
- SHA1 17f35632967f7318206919dee224d17b365ea59b
- SHA512 0c394bee9cb768c41b9beeceb81b825b2c537a661d55be14744bf88bb4430d00f80cf650fb922a9d6befbda57fee40b34e926c8e3380aec3d1436054e3aef759
- TLSH T16BB02B838500407A039339104003EC80C42322580D0B0AA4B4826C48B3429640763874
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg.lock
- Size 69B
- SHA256 4c0de4ce82ec37a12af6ee4cc87946191185c1c97e40f995ec13f50d577029c8
- MD5 63665be1f71c213b8f1e0a7aeee8eb29
- SHA1 82336dee3a47450612fd0fbb235cc2b65b5aa302
- SHA512 a816d03a3c72d1b992bb59039ddae1c4f150c0fb785f53ef5f222e5e6f0799721f7786eb21bbe37bb36091af67c5738872ece44cbbe03c98cd79915645cd7d49
- TLSH T1F8A02280030B080F22282B0830AA2B2A300E820008008C02080AEBB2B02E03FFEFC208
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\af3243\instance.cfg
- Size 69B
- SHA256 a9830ba49eeb1ed7dc3d99f18decd6b406e4d0f567494c4d7b2801ddb6141e95
- MD5 1711db0f7b5a155a7bb2b96f151cc065
- SHA1 cedaf82d795696a11a5c40d64f1c7feb505dab0a
- SHA512 e4d05a8194ae58bf98011561d5e940339bb3368f20ec21f100cf5641ef02693b8cdfb848c186a4139734f70dd63f4aad6ba65b93e4b461a9e5618b73a41a2a37
- TLSH T1DAA0025F4709372D0DE12B0790A7A8120F641641A2B6631D2B9A5B8793157992DAB620
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\af3243\mmc-pack.json
- Size 273B
- SHA256 ae769ca6377c8987e583a4e7cb7bd1f3719a06e46b340a7c1006c37188f29c2f
- MD5 55da125aeb62911cc7efdac24b3f9fcd
- SHA1 1be5549aef1dbac3fa8b7d1a893cb72739f3d77a
- SHA512 6bdd5c3074ff5f67c4761d8a26d4877ca8a9fa22e6e1f0f3cf77292bb01b1fa7b716f341c21a72e4a1297b893d01576319ddef5f2a5768c62e66ad8164522d6b
- TLSH T1A7D0C904D1766CA3349513341EAD9162A6B000477E502F9C362D928C5F6A1BE14A629A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\.tmp\b27f88\instance.cfg
- Size 69B
- SHA256 d2e42a316e480f5a17087e482d27648bfd79468dd0d04f6047f75d0712b469b6
- MD5 1be2f6cb2403bd0ca2ca42c3e969c92f
- SHA1 1ae34aece213db933c89dae33f36acb067316221
- SHA512 1c21ac34a4a3f534e2b755b0ce04a4178226ca430dd240ae9b3ad651b6ee9a22a6f7bada66c72d61113ef080f44d1613e796a8096b967d7f8c740e3cb7cf6c90
- TLSH T113A0228FA00033BC08E30F22C0EF8C000E2022828228000A2820B2CB830CB008ECF028
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
- Size 128B
- SHA256 4908d831f60d717eb9fbb806262a19ae5072f7aeb522ba600d3e9681ffb0c62b
- MD5 b55bc6ad86acd34b541bbfd7b165354f
- SHA1 81275c8392f3fad015507d4b4c65d26109f0c389
- SHA512 581ae28ea7b209f2eac35f6785938fe3e86daabb57131cb26d47e45f641bc2522b142ca5a384b35a3edc0e0ae013d466cf9fe428ed4c00bc8fe0ed8c8bd6adba
- TLSH T1BCB02B4F4301213808C01307C0E72C110B22014DB0752206039B1D43D300F8919DB124
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
- Size 101B
- SHA256 2b5d1c4862984b8080b08554da8425859ef62a8ae1d0404dd9a40d7ad49bba57
- MD5 e068dae9010e67de76fbd27c4e5a3418
- SHA1 dd3504ac008ff78e41283c6f64e819762d3b714a
- SHA512 8c3fcbda4563fa2d234287ed100e1ed2c9aa3a270b58fc66ca10697e41fe029db520ac4aa94b5428723eea20e4e5b5a12f05df6883ca6b427fb144e024fc753c
- TLSH T171B0120F0306222D0CD4170780BB6C110F210500D176221917EA2E879315FC629EB234
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
- Size 246B
- SHA256 1e8653ef38643f6f3ee76da19b8a3bfd5cfa6facf1a97c57faab1124ef174a54
- MD5 f5efdeeeaf60fa130e8af9df4ca330eb
- SHA1 46870cbaaa4e2aad673ac4ee35a42ff2da08ee84
- SHA512 3cd531c981ec7356bfd45cba91dadc682ac718c7e20fff08a37b5f973ee44e4d55d031bdc6c6e537d258f2444538e2ce8f85ee4a26b9e28417c6570f125e136c
- TLSH T179D0A78ED381213E1CD01707C2B768710E7781ADB4B432094A5E1E46F295F4A2BD6629
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3(1)\instance.cfg
- Size 1KB
- SHA256 eaeaf37045e701d3457339b4da43d520f2f73fb0005bf2c1229a1819967615c0
- MD5 7c05ee65ac15f5f65a12ca8d9ebbc77f
- SHA1 f1fbbd44c63d93aab00fa8de62ca20a9b25aa3db
- SHA512 64cb6f92a51ee964e851ba87ab9846f523776ddc99084530c4e34ee50ddb12522ebba6cf737d41573ac6626d7ccbe218fdd127da48994012587d2ff3492b932b
- TLSH T155314C730253FC574D342E11EA091C580D69B8BBBFACF284EE8A61F5A4EB501DF561B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 f8a86e8f47fbec533334f4a10e3d98c633d11d67c101926be3a17ae71ea0640e
- MD5 88790e71899e2c91af36edf73425be5b
- SHA1 6b853fa608cddb0d689364722985bdd99354ccad
- SHA512 2c946430022b0ba809e5516a3003d70c8441714dbea82790e5a1b498d31dbc8f938de8e15df2acd0e07b7e36249ff1667b8fda2b378fcb5cef1fbb65fab80cd5
- TLSH T1E921C2730123FC574D392E10EA491C580D6878A7BFACF284EEC9A1F5A4EB501DF6A0B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 6222328ef9180817650f21090e39c9e36ae4b96ae8e6403f30fda5433258672a
- MD5 811dad4961a60eaecb0adafec3265287
- SHA1 801aafaac66bb09c1a921677b856f644a21ced27
- SHA512 bbdaecd5cca8aa636541473bb18da85eeebab67114dc09336d33897be8c44477887bc2a771cad37759957e4a58b4ea2f81c810a15381a8ea541456c344da12f2
- TLSH T1A72109730113FC574D392E10EA491C580D6878ABBF5CF280EEC961F5A4DB501CF560B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 0c8315e5816711252a36bfeec4bdac78649c7973b5990d62465bd2da230c1f40
- MD5 5fb2c1856dd6e128f4318300356a5644
- SHA1 a3f7e03de0d1e9848500935dd6748855949675a4
- SHA512 19d2ef5c212652f302c36959aab3fd3a74f6aa489f9fa83860ec8f4600d12a9a76471c414b0f8c6b51d5bb31bf930d848963b3a069998b445d36eb6ce1a32bc4
- TLSH T1BD3101734253FC575C751E10EA091D580D68B9ABBF5CB284FE89A1F4A4DB901CF521B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 c2e7395243b82f53d1a2cf3e5f7868cd23946bbf1fbc6deda6cbfb1783ad2615
- MD5 9b338c870c1edc86459290d3f1b6e8ae
- SHA1 a84c452f418991fe335e3e42e1403b694a573553
- SHA512 5a8b303f4c4f97e0c45f6c43ba61bbb407ef15fb93af261a6747b715fada95648d0ae277f0477959d6f2ba1e89114937ac6f19918674057534a70bc5f0f97ef0
- TLSH T134312F730253FCA75C751E00EA491D580D69B9ABBF6CB284EE89A1E4A4DB805CF525B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 9085348196a2a2319311940b688a65cb69c36e3715d7cd448ac985dde08e91ea
- MD5 71ad3d1dbd0a85759f6bd9c122701558
- SHA1 f08f69b170bb13b68bbd844b8bd60b5c4a8195a7
- SHA512 27aeb3ff76d7c9100530d28a9457d13034f57d70f52ec72a5803febdaf12feb160ca12f6e0ec94c4f1fe94c77cdffb70bd9936b304e76c0bb253d26c189a9538
- TLSH T168312F730253FC675C751E00EA491D580D69B9ABBFACB284EE89A1E4A4DB801CF525B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 7947bbe4002b0e9d053c9d87f7f1fb374ca6583a50d4ea69335cbde6ea0142eb
- MD5 50ee3dc7331738614d75257419e8399e
- SHA1 6a58d761f0831c0897a6c039c06fb405de0ca6d3
- SHA512 ebdbcad811978b30f20e55a2c754fd5cdc4542081aa58a0a3a4bab9ed1b467a2eb61acfe1cc1ab265d7707cf00164a6ce811150a119cee030570393473682c3b
- TLSH T1CE3188730163FC574D382E11EA091C580D69B8BBBFACF280EE8961F4A4EB901DF560B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 ef6e71661a8ef73c2c5af7d2222c63926bdf1476e90a9c90c4cf6af2228e965f
- MD5 d53be4d527507cf9d78e1f17cc6b4581
- SHA1 8c0b74cc9578926ef0e04b21f3459e427bdcb91b
- SHA512 10119a6dc879ce0de8c68eedd202097c2c96a9043005001b24b7ac8a1e879aa5a0b9cb7a68f2dc28ba246493a9f503ed2d18cae32bc27b3836ce602f20c3f651
- TLSH T1C63132730253FC675C751E10EA091E580D68B8ABBF5CB284FE8961F8A4DB801CF511B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 4313793d81d6a3efc5e790875a177fab52926b06d377fc034e85468030130b95
- MD5 655be14b170e2b29c4f4dffe0bf7cc1d
- SHA1 0ef2507d3e8010372c43497ab4b0cb96f4c94ac9
- SHA512 f077f78d6245cf7dacc742eb7626db050f25b3e194e398f7dede26e60093a03a3f1a6325a9e6ba618bc10cee0fd5b533ed6762a7e97ac1d00940db6f0a1bb988
- TLSH T1563134730253FC675C751E00EA091D580D69B9BBBF6CB288FE89A1F4A4DB801CF565B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 1KB
- SHA256 b8ff5f1ea8e09f490817ea3d29ffb8c277b0c64a9e219b5e9d66a214386c211a
- MD5 0047316a4f551b3893322feb0f35c53e
- SHA1 199cba04679a5ab6d147de919bc1896976ba8f15
- SHA512 1900d1e2bd13728acdfe7dd47f85431578a3681e269ef39ab7e0c224221c77d0a56fd106d9ec2513981e3128097d9cea4e687231cec315ebebdad943afaf3d6f
- TLSH T1433131730253FC675C751E00EA491D580D69B9BBBFACB284FE89A1F4A4DB800CF525B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\instance.cfg
- Size 101B
- SHA256 43c28092f566a9dccd343bdcf1d263c5cf5bf9a784b06c191793a24006c53b77
- MD5 959da9a0b73458872fe4421720b7d0ae
- SHA1 64a261388a63376c439767839b85e231cc53334a
- SHA512 ee05aaf1485312e60747593d12edbcee8a6c930221bfd8d1e5e689b50637829333eb1b787d23a1b423d26642a63bf83012eac97dfa17453c607c32c4ee263470
- TLSH T14AB0124F631131BD08D60B12C1EF4C400E221145C629001654B47DCA974CE819EDE13D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-advancement-api-v1-1.0.0+38c7a2d55d-47ca37f6845087c8.jar
- Size 69KB
- SHA256 4e58d2f35b8b349949691b123033ba7158a921d351cfbe0d1376c4b2b4c90c15
- MD5 6701adb0c2b5a064a643b6a6ba374921
- SHA1 ad877dfe846ac9b9aee9fdb613a1647478d2660d
- SHA512 4b41e10ab55b6306cf8726b00f1642997cb807a3b043b5d900b6757fc80dcce8c732ae0d8b08afa10441edb011cd57f7d2033ae29e10d1beef086586125f01cf
- SSDEEP 1536:f9u1gNzi72SWCOxkR7KtDlGlLcWQ9fJIa1rnF:f81gNzldCOxkR7KtCQ911rnF
- TLSH T177634413BBAA76A3DA5FE27A052342729034C5378F05FAC7B5184025EFF7AC056D26C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-api-base-2.0.6+fcdff87f5d-911714d21467d390.jar
- Size 58KB
- SHA256 e3b64039e8f261cc24a5013cb8b442cf368f08afa28d01ecdf97f3ccdeb7b63c
- MD5 202fb89c9b5f9b4a31b08d732ce1a3c5
- SHA1 49328fdb41657f0c44956ac8fb7d9fdbed172ecc
- SHA512 2ff59a3306c01881024e69296f5340951272986b509f13ce3cb38d7ebaa24851dba055a02ed94a78870d608f55d4c095efd7c85a19519b47a49c64e3003894ec
- SSDEEP 1536:28Cgtki0GZSLuX2FBUl0tRKQX8rFU+eS7X3wUzNiZk7xaaQj9fJIa1rn4Yh0ON:28CgtkrGZSLuX2FBUl0tRKQX8rFU+eSC
- TLSH T1BC43B51BF3493653F286E67D0A978234B138D47B2B03A5C2BA4C58066FEB1D197935CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-api-lookup-api-v1-2.0.24+3434d6d95d-1365061b0d161c01.jar
- Size 106KB
- SHA256 0ec468396a47cd8ba892294b2c230d4ce31558b6bb9653ff4d886f699f340e67
- MD5 fe9484eb3f16b9470d464c0a45376b16
- SHA1 82e9400ad089408e5e6d06876c596396ee566227
- SHA512 ecd4c232da1cc9fcc8b2ad66b44b9af88440c99d0463bf56a685d0a7c3c380e30e338524afeac8e9eca7ca28c835c4b60174764be13ff9560a2738682d05cb8c
- SSDEEP 1536:AaH4KpE8oX3+HpZgIsBxrz/NK789fJIa1rnF:AaYKpBoX3+bgIcd/Np911rnF
- TLSH T1F7B35F13B6ABB293E666E57E1D518230D235C9736F02B6D37A1DC446ABCF2844AC31C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-biome-api-v1-20.1.0+c6aa69a85d-4015b454b712d70b.jar
- Size 199KB
- SHA256 64bb6654ff4ad498f792766b343b280bb811d3fa6a6fc7d5812405217aba519e
- MD5 23df08b4a413387bad466f2ec85a5e95
- SHA1 e4e78452f5c0598f6fd78266f8cd28c6e5aae138
- SHA512 ee794ec2df5e228f726d9231137afba5e244eefefe96ee18adac0bb891951bd6f6337c6f38b3f3cffe7ecb94360f6078be9695d445148d9c62f7db269ac6afb7
- SSDEEP 3072:s1CQNu2xUx+2fYTsBTb/vtZlAi8SsCsj88EL2iIYirypug1/Da911rnY:T22xJsjOGRU
- TLSH T12A145F27B18B77E7FA6BE77744510674AE34C1371F0662E636184A06FFCA1C066D388A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-block-api-v1-3.1.0+0ae6f9115d-df20dc5ee66c5229.jar
- Size 47KB
- SHA256 0a9d70f750662a5417d2cbab5835173671a155478ae68a8b7875443a8b26e5de
- MD5 eabce030fc2f40f34f3edfa754151e15
- SHA1 61d7ec7d7780a5e168418610c23185e45dddf884
- SHA512 7aca02916d58f3cfefb0eab84376c13687fd32f974db0cd21b0dedf8661a36841ec18690164deab9569026a3c0de634360ff5c7cacebdf6c419acbd4800e4f3b
- SSDEEP 768:nDRtzPDmyXNKrRDb5OOScLqMhvgGpdPScUDB8+KwHlROSv2BcOiuIB3s4rNf9TzJ:nDRtzPDmyXNKrRDb5OODLqWvgGpdPScY
- TLSH T1EC236025B29A77EBE967A2370D658131A934807B2F0722EA781DC50AFF4F1C066C74D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-block-getter-api-v2-2.0.9+3434d6d95d-17b6beec7ea6b7f5.jar
- Size 36KB
- SHA256 6ee8e9e475874df839974c3f80807aaaf845cd833b027500519ad4ce551d332d
- MD5 95f7c87a561bdb6cd110207d8d3b3736
- SHA1 38f07ef7afcc6c113b7bf3ad69ed8daa97e0a88b
- SHA512 136c7afbe0b4307dc978e4dd154c453bfa20458776a23cd5eeca70daa3e17424322df76a1f6d09d71bb420166852750df69e4599363346034a33f72268e6f98d
- SSDEEP 768:xgmS/Ck7QEqcXNQEgIBfHv//9TzJlFvAfxk1rbJ1+S:xgL6k7hdQ18HX/9fJIa1rbJ1+S
- TLSH T1A8036125F35A2BF2D583A6365D719135E234A83B2F0632D6392CD01B7F4F2A097962C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-command-api-v2-3.1.2+fcdff87f5d-3af650bb94aa4431.jar
- Size 75KB
- SHA256 58072787b5b5d171a7e65b1eb7a9c006bd48b940e12c870d7b23e0d5173cf2c9
- MD5 42ef0848234e7d4d69823d291b62f9a0
- SHA1 114fb5ea17ef56ca14904dc77f8bb0242b797683
- SHA512 60a7c3822cfebb3babc0aac4b430c494405783b6c2aac2f38d5c38dd527c93a97e963859464d36acb4433abfd971613f8d084101da7b3e1062933c1810bdcd59
- SSDEEP 1536:RfdtCwwEhxkjIC6cyjqrd7ARJDoAADTIkcYyxK9fJIa1r5Qe:RFtCwwEzkUDId7ARJDoJIk3p911r6e
- TLSH T1AA738312B7EE76B3E486A73A0A6182306674DB671B0331C77A3C2C4D6F9A5D047573E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-content-registries-v0-15.+74ed1ea55d-6daeda255ea77519.jar
- Size 156KB
- SHA256 f25c676005d542fe8d0ea742a2eb98cba964218d774f6e17e0ae82ad0ce87889
- MD5 a76d7451ae068e8774db562a5b9269d4
- SHA1 ff5959286454ef593e8110c98b04e213f491ae56
- SHA512 da70ee15c9a0a7c8d72e9eae26f0ec3d2cf30575fb739e49f6c44e3d4164f02cbf3672a62a5a35f5e2b17c0f8fa326791310af7319f3d8a097d261233b337fbd
- SSDEEP 3072:tUMU0G9/wNyq1mr+upnhfPUILw0mQU0E4uCUq8JxDrNkQY911rm:vECzgRi
- TLSH T1CAF36126B28BF6D7EAABE33A0D5142309635C5332F0753D67618465AFFCB0C04AD3696
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-convention-tags-v2-4.10.3+6b5b47fd5d-95125f640f04dcc0.jar
- Size 637KB
- SHA256 2ddeb51ad366da4225de9e9f113030ed55d7527c08c25950172d8a246a6c2fda
- MD5 e84699cb2697d456cb7dbf8570e9b010
- SHA1 8424fc04f18d8423972cec725082dacd621a8b6f
- SHA512 ef3c555eff4f1c45177b27aef2de0c606c989be8ddb5cede09b040c918ada2825a0f95ffff584542b1477abf0b9d0c37d160c84a8ee80173e766c92035fe1283
- SSDEEP 12288:EpmSglW9n5wMfLtwE35OZuW0DGKCiccRH+lnQTs2wgqFrFp6gwwNwZqmpJRiW:cmSglW9n5wMfLtt35OZuW0DGKCiccRHB
- TLSH T19DD4ED24C836597BC4D9BC3809B81B17BA144EBBD509368677D68C7CAF4E51F01B23AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-crash-report-info-v1-1.0.7+fcdff87f5d-4892b3c1b665487.jar
- Size 28KB
- SHA256 81a9a1db48de260919e4220d0c2cf6362083475ebd803f14e341516d42a26d5a
- MD5 070bd201f9a13abac24ded13e33399cc
- SHA1 1f2812293a6487b872b78c38170b8f12b83be83e
- SHA512 d17e9b2bf4299ae2ac7dc525113df580c9e5261dbd63383d15e979785906ff0a2e85b4918acbea17f264f6290123e622d5db084dd679aac84a3b9903072d85bd
- SSDEEP 768:1yUwoJPyy+319lZXIRN69TzJlFvAfxk1rnpv:1yURu3XYr69fJIa1rnp
- TLSH T120D2F93BB30C1773D1C3E17A1A524165B235E43B2716B0E63A1D851D6FAF29047BB2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-creative-tab-api-v1-5.0.2+fcdff87f5d-c345ec684804aed9.jar
- Size 103KB
- SHA256 b865c563ee0b02e5bf5b40c29e57c6b6533c6f6f56e97fdbcb004eadca3be9db
- MD5 f762bf2e99e19a07f772a6e24de52ea6
- SHA1 c35919f6a923327ee00e48923b156cd2cb821db6
- SHA512 553b231f39f4e5a0fc6065c45036f8d91141838ca22aa5ed57185eee7b02788a5d12214c18b388160b3c8ea140c1b83d617e3d90a389ff963dc58b2d65f500bc
- SSDEEP 1536:z5yF5LnlFLOfC1LxD3q/qtxHEbJUUtmGvAOGSSUcdh2Ek6UN6xZInxqUrMgeWRx5:lyF5lF34WZUjhT6UN67GG911rm
- TLSH T147A3B816F34BB7A7D56BE236057581B1A134D87B2B07A2C73E189426AFCF2C04B925D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-data-attachment-api-v1-2.+b9b88df45d-f47372822cfd61aa.jar
- Size 270KB
- SHA256 722f3a092f668ae7bc5fee1ae6337f72eca0cef7c14bf3daba5218499bdbcd69
- MD5 866c8261e43e33b49035d70ca22fca32
- SHA1 997f8412db5a872ee6db30d72980b114402cbda6
- SHA512 d8ef89289f6222f0c19e9285a8e62623d9ad60a22b24a28387d1822ee8868104d5356a827c54c73f3f67518f7eb162144beede6139f604904645571905016c3e
- SSDEEP 3072:DhJ9OL1jyxNIWOcEdUtZph4aTg0K+twGUNjY8u2Rs6FXHo9d0jTgGJ4jlzPULoSw:hJlow05hPxU/Q5TRE
- TLSH T132447436B38F7593D65FE23A0A5182309535C8731B0373D66A1C9502EBCB9E4E7C299B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-data-generation-api-v1-27+5be2453c5d-3e4dbc517780b0d5.jar
- Size 451KB
- SHA256 fc431fedf521f4ebcb3f28655fb9006cb5feba348ac2891bb116011ff86057a2
- MD5 8d98ea8e882d6518b60b84ec95c96bad
- SHA1 c5fa0cbaef021e014f199485a804744725ff7c23
- SHA512 fd523f493695d29934c9888be711c9293ffb925ea454512407523d8cc9c1bb6c667b427ca1ace5b1c75df36a029e6e4ed3345c7fcb9cc6774e1a0f2a40d93613
- SSDEEP 3072:QWWeagocrTcoj/hTWTUorBi5GZgZ7M6+OV/dasi6T431e4+Abd3GbaJa98LccRoG:ncaorQU6oUOWtloLqXxRBQ
- TLSH T14FA43016F39B76A7E92BE33A1C654534C039E5331B0652DA7E144826FFDB2C026D39CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-debug-api-v1-1.0.4+3434d6d95d-501201e4ab5f7f66.jar
- Size 51KB
- SHA256 e9806c1b6a5d4aecb8029fac497d43766b2c9612df6b925cc9e9d994c28834ba
- MD5 fcd3d9ca0d2efb42ee8b6df6f738d5af
- SHA1 d1f2dee694d3a7e0763677e3dffcd85a409c7e09
- SHA512 a128cd9dae52c4d331d75e8f9e8d92a1b4ae717e27fdab4912eea9899ff0c06b374fc2eeb3d81bc9dfedd853f4c19b11f975e454faae85447ffd6acf05711118
- SSDEEP 768:N/2USY2TeWdC7YsDJ8ON/tqWxnwN/Ab95uoFKnQ9TzJlFvAfxk1rQp:N/24geWRaak/sMwN/MSoFGQ9fJIa1rs
- TLSH T109338426BB4677A3D6879639DE51C135E038E9632F0731C2368C006E6F4F5C46797A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-dimensions-v1-5.1.19+47f74c985d-8da159b8856cd08a.jar
- Size 59KB
- SHA256 ced046d84afdc22fd85c2a6e7420099ca2c86156669b064ed9a5c4e98d81f7ae
- MD5 5aec0560e0846e90a77d3feca559164e
- SHA1 35640891278789c40bef9e5e97abe5b42ed150f1
- SHA512 c88f43ac21e2f2166b5a456672b21d06b335442c0e703dbf96f984442556900625078b9f3dde802efb294b88bea4649af6f72779a3b002419a5f9a8f3b916e50
- SSDEEP 768:XPqjqug41YgkGDASH4lUCHsgVcgzKWS1TVgVnNH9TzJlFvAfxk1rnB8:Sfg41YbG04cJ3NzgB6VNH9fJIa1rnB8
- TLSH T13D53C42AB74567A3EEAAE13BCD11857DA530C93B1F0562D23B4D04057F9B1C017A3B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-entity-events-v1-6.0.4+3434d6d95d-a5c6f055e814f73e.jar
- Size 167KB
- SHA256 67af73392b583a8ce56693a769cdc2c0ea16b7970d30a80c0216d58df45465d5
- MD5 343d3fa161d650cc1cb4d0a95ad11540
- SHA1 749ace887aa38e2ebaecfe906f3d535d42dd7088
- SHA512 a520ceb77dc765e2580337a6e060d5d4bc6cd7f56d01c380f0fec1fd1f507946e5e7baf29b931b5fc94979b3fac0aa79b4b1afabc53150cc4b2b578338252891
- SSDEEP 3072:3SMdquumqGdddkNsJCEw5xEW1kQWObS2GFgkAV18911rny:5ImJINsCcblRG
- TLSH T1A7F33E1772CEFBE7E55A923A4A740536DA3485F72F0212DBB51A1D0BBB9F0C096924C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-events-interaction-v0-5.3+b9b88df45d-29487a77c863aca5.jar
- Size 148KB
- SHA256 e507339676f4ae1a6468bdac128e077e6022a702aedeea07232573eacb20207f
- MD5 a18c43dee6da6ae7aa081df47465f639
- SHA1 b87acd97ca6da11b31ef0521ed09c7ab1c443b90
- SHA512 baef53ea390dc3165a7941f423e5b5571b73dc94c433397ab0ad777efa7dff4ced60770efdc9047e119ae6966f648aec9b0c42b6a115ad980c508e2360e6aa8c
- SSDEEP 3072:8ieoXj8WGQWon5JZH8szH5haGPpajG6tk+OY6f911rq:JpRm
- TLSH T163E3EF15B2CF7BD6E96B923F4A714531A83481B76F0B22CAB4189D0AFF8F1C052D6593
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-game-rule-api-v1-4.0.10+3434d6d95d-bad78c55982f9239.jar
- Size 124KB
- SHA256 5cbd6be7ed872b3aa2e10695ec8f0740c408de69caa264028623edc8be6e4961
- MD5 f9e696083c979d0a59315ed44e6fa401
- SHA1 4142b9a56c501990908a2f05d530a6c435d3a545
- SHA512 5e0f5594a9377e8fbe70703193ba94e3a21907bd9023b525f7913527333a8f045e65789f059651431a9372095a5bd5ddbf31618fb8fa6aa03a06e4fd0bcf30ad
- SSDEEP 3072:edElp7frvMVuv0L5T6R+A514MzMaHzgEnQA7It911ra:9UR2
- TLSH T182C35227F24B7283F9A2F63B9951C5B45430D4B76B03A2C23E5D061B7FA70E14686BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-item-api-v1-14.7.0+cf6bc2db5d-a4efffd76e34370e.jar
- Size 212KB
- SHA256 5128bd7b303de8aef6dc03ee1ad39c2a8ba98320c251f3674787761222b99bf8
- MD5 dc2439d2cb0ae70ffdff57e30b373e6e
- SHA1 ba24a94dac8e4f043dcde1e22137c3f3d7967bfe
- SHA512 0c2188d67f3cee9c9c4480ca172860262cdef8da1627a0d6e7030e3be133fa8b6f8919e95938dde9b362166e475d77470a630e66a756f93e9c8d5d2d2c9a41de
- SSDEEP 3072:DxAAk9A8Bp8EPX7KaIcDpDAy+EK/eFrTRlCmST/PRMbym/AJNA2CPtBCac2O911J:9S+alyVRzt
- TLSH T1F1243322F28B76D7D5BFF2360AA10A31A538C533EF8312D636190516FFDB2C456A2587
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-key-mapping-api-v1-2.0.8+3434d6d95d-a0c9ba042f6d554b.jar
- Size 29KB
- SHA256 00dc27fe09cca1b1af6346be12a86df4e49d33717dfbe74af4efca5673eb6b7d
- MD5 4e40d1b0ab2307e5d90fd76f363c0229
- SHA1 12207415367a4473674f12dae267e1fb21011b41
- SHA512 a45683c0c2b9511b5158199a774227c62c25ca1cb712b63f664098dd8d40466fb94499deb1557760048cd02c2f0e9597fe42b96881ad22a3ef26840759726d20
- SSDEEP 768:LhEwb0T+9kdN2yqgZNC9TzJlFvAfxk1rRm:Fz0Tdd4y7zC9fJIa1rRm
- TLSH T10CD29629B33927B3C987967E4B429066B235F4277F0332D6391D801D6F4F69043BA2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-lifecycle-events-v1-4.1.9+ffef5f675d-b54f254bc663e591.jar
- Size 210KB
- SHA256 fc47f06fa9ce4145ad925164a6eccc436f7ff504cf7d1e766a15699b82cd3e74
- MD5 c957c67bbf80cfda78db5fa14b9c9748
- SHA1 c4c3bc92c17174e2c2d94e4196f60a29749b0677
- SHA512 6dd6e12f9a66e9badf86ee729b59bba3f84a4d9526b39417c29b11f6662cf1fbc97cbeef87ddeb4fd724b451c350dc4d00c0a3dbc44175381ba147bff845d1dc
- SSDEEP 6144:lMtITXY1+xseh+CWTjSKvP0A7Vmbh9jGKRw:phRw
- TLSH T12724221B739A76E3E257E63F8A748231657484FF2B1213DAA9181C0FAB476C0D3895C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-loot-api-v3-4.0.8+4068fd645d-a1989ce77061284a.jar
- Size 89KB
- SHA256 ff225924d0569f113f25bb4c51c9e8ceb2b73ed6198499c81b862d4186fb719f
- MD5 fed12c86a5fc71c8fd2ad5b0afd02bee
- SHA1 e8f2ff40a4997e487d37086986d42b197a38c36b
- SHA512 34620e9b2f2ffbfc7f42079fb85628ba72ec7fda84f17cab39cc619f121922d78dbd7adf7df1266c1d2eddb6fbbdb9cd2506de5ae3e8cf82ca2e89997ed2a9b9
- SSDEEP 1536:fKiJ55vd1M2wlNigXMAkM0ZnBvyYAdpJZx9fJIa1rnGj:fKi1d76gAeBbAd911rnGj
- TLSH T181937522F38B77A3E967F73A146202749032C9331B0766E679180586FFDB2C416E79D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-menu-api-v1-2.0.28+ed66f0a35d-7f5ecce40a49cbac.jar
- Size 52KB
- SHA256 ca22f06ef29de5d45ae930d6d84da39045321df62005d1c6e124e077331a1d07
- MD5 853995a07356f47672534fff22597010
- SHA1 a106280f4c0e37aa57da522e7d4312fcf924a1f0
- SHA512 2b83d9dd792d2e80db8baa81d00be1d1c355f1be7bce4e4cfaa29729583b4c60954b32652d7ba26b57d1956639a758452e98ef33312e37c1e94c34fd7d8c4d56
- SSDEEP 1536:Ew+wsP5rwwbPHVTlpVWQxFNm0xAV9fJIa1r2:EVx5r3Hh9e911r2
- TLSH T195338213B25B76B3E4A7E63A0A614534F234E8771F0722DA362C4519BFDB0D013EA2D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-message-api-v1-7.0.10+3434d6d95d-2bd0c2513363578e.jar
- Size 92KB
- SHA256 ab4e1143c20301463348612d1b440878ae2eacd60f66112ce187c6c4c841156d
- MD5 261380c621c9cfb4ccc439055dc9c105
- SHA1 f74fe1042438317be24cea340541432e6bf98820
- SHA512 f17d3b8949d4f0ac513e9f2612240ce0d224c04d957477ee6816ddff5c1cf89c1187701ac8ef45e52b8d3f5480a9bcf728da3ed400d7d0f0f785d0636ee1afc5
- SSDEEP 1536:O25K/PDbKIeYc+2WO1DpUf+qNaCGeZXiBbN9fJIa1rAC:O+g/8zXWO1DpfCHZXiBB911rAC
- TLSH T18593122AB38A3EBBD44792333A417531723999F72B1235E7B66C158B6F871C053493E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-model-loading-api-v1-8.0.+fcdff87f5d-c5db57590397f77b.jar
- Size 225KB
- SHA256 1479d2a6fc9c44c0038311ad64a51dd01d2a9509547501576ab68eec2885464c
- MD5 9eb53ab08de75cd143f07a79bf1d409c
- SHA1 008e1c1d1fbe5bb2426ca2347c63885b095d9602
- SHA512 ae08c9f38caafdfd74070e25eecda6cdc27829b730b14ad01ab503dde363db63f1e09d3e7e047119ddfc0b2612556968d15f146c43c0e88b2a5d2a1bc7399a9c
- SSDEEP 6144:Joq3POXwAcsqbITkTsW6rEJ305Ir9lSkuaD+RJxfXBM3XF//3IAHZ2VR9e2z:Joq3POXwAcsqbIoTsW6rEJ305Ir9UkuB
- TLSH T1DC344415B26B7AE7ED5AE3354A14C2305431E4771B0371D67B28842AAFDF2C0A78978F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-networking-api-v1-6.3.9+b9b88df45d-2fb15feef6111363.jar
- Size 544KB
- SHA256 bd9df58c724f7b476d930814665f5f3ac3849d8442293fbdf54197b8c718b478
- MD5 8a878ff4d10524a0556c5daf3eea76c5
- SHA1 f19694fc49f4dfa159ea8753c3d6b43a3ac892d8
- SHA512 dc5fab3e6d45dc4453aeea4ebc7056e485d60f023fbc7d4b9ed5642aeb7598df9b9cff95191d6771d7f621167d7e8862f1615dc47d7764c04e0a40d281e2080a
- SSDEEP 3072:4eg2chDh8NhXXUcJ74IByBbg8nBtbJZWpif39fTgcTBWu6VUIEIO8ld64A7a1eWu:paBaBd6FuGR0i9jTnqr4RRg4
- TLSH T110C48603B2677AF7E457D23B09509B30A238D9731F075DEE66281246EFCB1C057AA1E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-object-builder-api-v1-24.+3434d6d95d-d52d8bdf1e8677e2.jar
- Size 138KB
- SHA256 2807750229fa894ea8164d6573952600cb7c8040a05ea8a540ff81a566c2366d
- MD5 bc94bddc964624e7662968670117048b
- SHA1 05b5bfcd18c29541dd4cac95558fc5a1e008e542
- SHA512 cbfc9fe425b56a019fa59c480a1a33e44e29339148cd47f43f14f34dd1767279f2ed36b962290d366640e75acc77d1436201cb5317877b771b91a26c5cfa5c69
- SSDEEP 3072:9LZnBo08n29HKLhI2pD3g/tDY/Fxnib+u9X86+KHjYy081911rL:iSXYdi+KD5RP
- TLSH T149D36226B2DBB69BE85BD23949304639D531C4731F03B2FA3509C916FB9F0C05AA3697
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-particles-v1-5.0.25+3434d6d95d-3155cb1f33b9b26f.jar
- Size 112KB
- SHA256 9b1e98a48b6ee647ba66fcdf23cc6280b32b2e2d27c22d44f7fee75cee4fcc75
- MD5 52e842f72fa641a9f9c6d8b956aac5d6
- SHA1 9379ff149230aa91774281e6bd5cfa0c457ab187
- SHA512 66f3576ae9599dcdbdd48078614c4926c58a52e91b950361c1b11c03a4a3e956580bc9743845073fc4fdd00e0dd1cb5f3cb6eda9ce5fd137ede0396b93fcddf4
- SSDEEP 3072:ZIGeKbYFiFfs7CHkdyvYbdGXFNUMOMO0C+NDm/3qSnhke911rm:z5QZsORC
- TLSH T136B3FE17B2DB7FF7E6AB92368CD081309434D9335B8711E6B828451EBF8B2C056C66D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-permission-api-v1-1.0.8+fcdff87f5d-92eb5805185bd053.jar
- Size 93KB
- SHA256 d8e13a6fe81674be65163bbee6422892562d0d6265275f6c0e280b0c7385493a
- MD5 9d27fe1de992335062c5e70e04f7e884
- SHA1 4cc91e85ef07e68f1fecff4636d5a6f6934a00b3
- SHA512 c13dc13bbebbb838ec2c1fe560672f784b2affacb999ed1b8cff6d370989bc130696f90948c8cc5a4b5bb3b560b2e4bb3a1d8f5dce5e68e090c9d95bda1fe5d5
- SSDEEP 1536:cRByU4ISMon13ebOMUiCB7d1dnvlaDXhkvltNXMe9fJIa1rn2:cRBy5/1n13eFUfpPdtYXCltP911rn2
- TLSH T14593112BF38EB7B3E642E1B5693541305234D8BB3B8192EEFA2C14466FD70D096953C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-recipe-api-v1-10.0.9+b9b88df45d-703f6354514767fd.jar
- Size 222KB
- SHA256 dbce796a60c770f24b1ceffbca038a7d9871073e78fda6886d15c94c9d999ec5
- MD5 a4811f5381f81bdf3e2c922c2d561236
- SHA1 6a5102234a14d643c465d0b9eddc5779ad573a2a
- SHA512 b36403af090836468569ffd3951d8a85328835f6d8b470eb71df4b2efb7410541867ae9810a6a5b5224517f9a70efe978588dee7672927725735689802aee30c
- SSDEEP 3072:/n659vem4dLJPHblqUvZ6VtDo2CBj6YN2nMQkU5GQMnVoXyHNHjimb/8cgqq2Yku:/tB0D9AyMfbdBkSRc
- TLSH T16C246406F25BB6D7F46AF67688624A34A434C5376F0312CABA1C0909FFDB1C053DB65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-registry-sync-v0-8.0.2+1ca9f6365d-c274ebd63decda21.jar
- Size 337KB
- SHA256 ad2e7ab538ba920561572f09b8cef4264ac6af8aa4a703a3b39c242fdbbd37f1
- MD5 0bc39b8b0da7f1f979ab90c49ac217fe
- SHA1 202fbd3235948cc299a27c1013f15b746841de0e
- SHA512 aea660ea9bce8bb015eb87886d1cb697f87ea20219028d27a52f024674dd702e451267b39b2a1e8cbd2bf824eef8ddf33d1cfab606d17edb03614fda5477ae25
- SSDEEP 3072:R2q43Emg/EOI5xQK3xjAMhTrYr841YsdKi3hPyyZV0Gs5gCwvFHKP5DISyBn4tS2:w6Mt+7LWpl9UTXjBzRHjxRHEj
- TLSH T15E749717FA87B7A3E2D7E73E0C2142309135C87B5F0265D7AB580695AFC72C0D2A2697
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-renderer-api-v1-17.0.15+79385d0b5d-81cfa71d64ab6e80.jar
- Size 284KB
- SHA256 412f1e3ea00f5af9babd52ebd388081f9f380c84b71935ff441f41936caed860
- MD5 6539ee6ff31559ad07b2844f3b214daa
- SHA1 b683f0d03f3044379739a3284f5c65e6adbf473f
- SHA512 869bc2b4424fc59c355c13e0a4c71f39688a44d9e7c9cf867e256d433ccebe82a9804ffa5de10598c3c9c2725069d23fa679fdaf9e12d86a3ed29fa51b22f4db
- SSDEEP 6144:xzZrnpC/F4zP9OTkZw4QLbyB5xpv/zXPOl9cxTJw61yqRO:xzZrnpC/F4zP9OTk64QLbyB5xpv/zXPu
- TLSH T1BF540F51F25B76EAD81793368951C6205435E8AB4B0F32C77A28403FAF9F6E0578E387
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-renderer-indigo-9.1.23+b9d63e335d-ffd0c2573bad5c54.jar
- Size 220KB
- SHA256 f46066891737dc270ed9892cb514d92d72a8012c71f4f27cbb20167aad512776
- MD5 46dcf15526fe82b93f1c51f2e0a3f232
- SHA1 880578f2737ebb84311154676df21ae43b22dba6
- SHA512 3f41d2d45979ce17114d20b3db99b01ef8c4cd082f2c756aab98953ac3852853315bfa7fa466c9f3d37b7877f53761472222f8aa224dac380bed329296c775d2
- SSDEEP 3072:oQVLfp4T+Ays/SLMQ544L4HGip9USqjT2YZeM2c0yFIoQqiRzgz7rXpdI2ebtBCR:ouv2ZX2uIRQw
- TLSH T14D244162B34B35EBD416933599A086305235E8A7570F72C33A28903FAF5F7915B8DB83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-rendering-fluids-v1-6.0.6+3434d6d95d-c539f1f0f4f2f37b.jar
- Size 48KB
- SHA256 35b2f33dd1db506a8d6eda598e8f263a773a418e8453d3c18986cb4136536165
- MD5 8682fb3da05287cf638f7a232ce1e2df
- SHA1 990b08b3940dc5ec4948b2a5014427cd29568acb
- SHA512 34778c6b338db633845a170b2bbc8a34d7735dca0e86a6f1f448e16c37fcbaa65cac2a3a244dd58149e2ae6bde347404a9320a1be800e7e7da8ab43958199544
- SSDEEP 1536:PLupadkhzPRzFSZ3JloWzriC2QI9fJIa1rj:T0MkzRZSZ5l5zriCU911rj
- TLSH T14B232015E65B3BEBDC179332CA158424D432A83B2B2A71DA391C842FBF5E1D057DE386
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-rendering-v1-27.0.14+901a437c5d-8887c5c030b47e50.jar
- Size 482KB
- SHA256 0dab025d36a81dee8d4c6d0f785d3e41765a7e939a4e594f146a6749ede91d6e
- MD5 1375f0b705b24fc2ed0fb288a59d1907
- SHA1 be53b1072e4f68cc03ac147048b06ef5a3b1d00d
- SHA512 8b5209e81edb27f4d96d9380ec0e35609a4159c76f87c9dacca6c7bdb71064390bc5e72edba7b19e7f78fe1e23b4da8c6f784837db85ab6a877cd1d901803d9c
- SSDEEP 3072:Bfdj6mXkkuE2q4gc21hZgbn4e6OYNzot/2VBz5NVea0rPecKQHGmfuBukYvCQHIM:+69baEtmfSJerv4IzC67R0YsK
- TLSH T1FAB42321F64B7AE7E85BD37AC91189349035A8B70B0F61C67A24043FFF9A6D0578D386
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-conditions-api-v+0d124ae85d-edda27c7f6e699da.jar
- Size 135KB
- SHA256 a1b65f27ac0a4697d15c9c52c2fd71a49629e2e6f0b9e46b33588139c27686ab
- MD5 f888607d1c9f3e368866bb112fde0aff
- SHA1 01e8f9da457a1bd7ce9193a878370ed1a8f1fdd8
- SHA512 946b29379b2568e32b6b624fb32eea6d6f04435b5ffb86dd350d4ddac139665fd9d05a357d05eea533bbc63aa544e2106d9654b78afba51bbd59c834bb171d7a
- SSDEEP 3072:JPpV6+jihzTpjpUa25G+FPPrNdeiczdXp911rnkK:Zc1cgpRwK
- TLSH T12CD35417FB8EB3A3D67BE13A0A8542745030D5376F0955C6BE8604225BF72C06B87F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-loader-v0-3.3.26+4fc5413f5d-ac05d69aa1db9f01.jar
- Size 39KB
- SHA256 a3b0cb0cb626b19e6d03422916554c133cca5c9db091b237f7513e86f429c7e0
- MD5 20f450fe69446005e3639c700b88dce8
- SHA1 6154e3c74034804bfa6c2a5044cc28374b00eadf
- SHA512 1b1b5e0a34bad1a4b486f56f7bebdd9ea0e92eb0e6b9d36eb78ee99e4546aa6268795b807ef8ea4f9838a27ff385d7cfa04a0f3f953f754304ef259ff54e7b15
- SSDEEP 768:6KwToPV5RyAJoCxpoRsx/xo41BoWupfNa9TzJlFvAfxk1rnQ:61TuV5dDsna9fJIa1rnQ
- TLSH T1DD03521BBB8AB773D0A3D23B1B4241716139D537AB1121EAB90C400A5BFB6C1C7A6DD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-resource-loader-v1-3.0.4+ba0d6c0d5d-fa2ece4c7e852692.jar
- Size 283KB
- SHA256 b62fa7d0bf67982ab1f6feafc88899e05a877a5215bf3d91e0b1b51c46ec2f89
- MD5 e5fd147b8e084c859d67401564817ba5
- SHA1 8c4ba64f3f3c2bceed5f84efb2ab6648fd18061d
- SHA512 d783941399ef4d6a0647d2963007b0acecaac7b1f0ee949a5e8b7bf1f71e2073c3edfc96570f69d6f53ba623fc128c5e639583c026070e259c680e596303d77c
- SSDEEP 3072:xW6MesQwzW4vBPjOAo8JNnAv84hBArNZHCBcu8GtGwYgoMnZlHd2wJ2VtqLYPNEW:KLwoRIIAanREY
- TLSH T11054841BF79AB673E067E73E095142306138D5379B1671DBEE1C0406AFEB2C18782D9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-screen-api-v1-5.2.4+48607d035d-2559d10e2d0219b2.jar
- Size 162KB
- SHA256 2d940d1633d86a6cbe5efb559becde9d17fa6aedb2311add7cda1aa02769665a
- MD5 6c2778c9dd53ac3a7e0365689eeb92d3
- SHA1 440b03c667b397735f640066f2d43a015ba7df65
- SHA512 8684d44c55696b5807b6b5b772eca75747457b1d666809fccd317baa3ede0276f3ffa1bf43a8d9d63e6f9715c43687724c4a8145e0fe53153834304f0a8f3d90
- SSDEEP 1536:kjm5T5ygjJUzoZWRhpnR0MBoTDruiuQGJ83zHy0yi79fJIa1rVv:PT5ygjJURhX2PruPQGJ8DS0F911rVv
- TLSH T1E5F3DF35B24F726BD466DF738A558971123899E71B3631C7783C087AFB0B3C097A528A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-serialization-api-v1-2.0.+74ed1ea55d-75c6be97f1d2d0cf.jar
- Size 36KB
- SHA256 0af4f059a581626bbe5680c9f3f84aeb6d603d9ee654714bfbc32e31e9a3a693
- MD5 748316642613732ae311b8415640c2dc
- SHA1 c03363d20255898c4953171ab03a332243f7c2b0
- SHA512 42531b86464d16971b8253dfeb029e900fb32e971b01c6aafea194bbe481ffda6daef0316be0e1156e7faa3fae6df7d9aa75e4e5590cb92b871be5695ffae1e2
- SSDEEP 768:3987EdGukpv95WvHsNg9TzJlFvAfxk1rny:3C7EjkpvjW/ug9fJIa1rny
- TLSH T14FF2855EF7085B63EE83E53A1E01C5B9B535E43B170261D63A4D44662FAB0900FA3BDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-sound-api-v1-2.0.7+3434d6d95d-34a65b24c9a26380.jar
- Size 25KB
- SHA256 1a5ed88972366eb2f68df816d9c907686274649407e77100d92fd0cdf5c989b6
- MD5 215c2477b2bdf8f4228d281b8f77a254
- SHA1 e5e56a08300e66801408378aec4d1323bb4a9bbc
- SHA512 ed11c9056acced78b532337c53229db44b50d3f0b55ec747c9031bc45f3ae07cbc71c64c71eddbb725c3375cac599a2a622ef3cf59eb5a6a00bb013612af974f
- SSDEEP 384:4NO2qC4jWAi02Pa0qYUTNnzBiJKXg1/E6cc9vlKM1zJlFvmNz5VrlkTS07Hu0KDU:gVqC4taRcNa/E6N9TzJlFvAfxk1rvX
- TLSH T1D5C2072AF74827FBC4C296319B5651B2B236E43B2B1271DA744C401D2F0B6A253F76DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-tag-api-v1-2.1.10+fcdff87f5d-f2433599535fddf1.jar
- Size 106KB
- SHA256 472e3a97e3b11c72ac8fc54b425f8e7130b861fa8b8e0b64a66ab6833353056a
- MD5 49449d908d0a53cd6dd023eabbea4211
- SHA1 03f9051d47f7a1190e8d64ac0e1466695ed8f088
- SHA512 f42908d4e4c4516e1e1140f8d02ed71b2d54718740223e28cf9b6fee3f9738121f71b2c8df46d3eef54ee026c3e945b4842d662a300539dd26a9d2960fdbfe16
- SSDEEP 3072:knVpDL6honLIejWNHvUMacIT8ibBntpr3oFaW6911rY:kTElMMacIT8ibBt53rRs
- TLSH T173B37713F78BB7B7E667E33E49A182309034D5374B0692D7BA181509EFC72C056D2A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-transfer-api-v1-8.0.25+fcdff87f5d-f45cc0e461e7cb5d.jar
- Size 452KB
- SHA256 f7d81e91f0f326dff6a393738b623a60bbe0afae86dc6c70431e103fa97edbd6
- MD5 64b273e7095f6acc2a3a9069c7a1e26c
- SHA1 960757ef5958abaf71870780ab8e0ee05dbf32cd
- SHA512 4168415f2a87c6c136a88d473a1c6ee478146ffd252128b9c531df1a84927c2fac0da8e634e4382af85ea4c868a021f341d62b1b728e6503b286493928f51271
- SSDEEP 3072:hZYZAY2DMKCUTGSKID0xF+oJPBn9RzpRucYFgp/wvgh+kDSd5XIkaTdwtGZSgB6+:qFMazzD5kLftY2baYXNRc
- TLSH T119A42E26BB4A3A93D51AF23D1AC14A345439C9376B8772DA3619409BBFCF2C847D20D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\fabric-transitive-access-widener+52268a0e5d-defeb479a8839027.jar
- Size 79KB
- SHA256 71ea7cdf8b94cde75d3f6ddd0ab66370e3b1e40dc05558338df929ca514c918b
- MD5 e570a60b024d5130506d48200a8a7ae2
- SHA1 b1867b36a191e061a73f94a0df32ad59d0cfc622
- SHA512 6e29157d2f9acaf9a68210f38fa0bac0d72ffc53b841ec24f40ec3e2741bde8ce8081714a605595762d09cc40ead540d09cb04f26764deea088a1707d3c0559d
- SSDEEP 768:bbJFqrxV+IEmdnqj5x9ntgsZx05YsCNm9TzJlFvAfxk1r6:bbJFqrxV+IEmMj5x9aATm9fJIa1r6
- TLSH T1DC83AF11D58F7ADE3A3AF70648A81914D931D1377A2A27DE7E288905FFCA4C810D7E93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\.fabric\processedMods\mixinextras-0.5.5-cd81fe35163f5828.jar
- Size 710KB
- SHA256 5da883dc4bfb16e4ceca3f16d8c4ad937bdfb1ce337ed5ba15472d4d81dd6242
- MD5 c67dd516464988323e27c2e631c44562
- SHA1 d1055b99c0ab08a8403fe2da3d79ca28e6340a76
- SHA512 854e8fdc79699835253cb1d98ff10c6ef88586f11a1a279a198e8c6784ff7477dceb6d8d8562fafb458b2c43648f6dc4853e42a3d606ba495d1c3eafa02d953a
- SSDEEP 12288:cVUYGJYJlcTz1JNxVrOzLoF+Ckbzm9ThDCiYIP+6X9qcDpBJSTVxuDQPOeRq:DckzDNLOzLfCkbzaYr6tqcDTJ2xukWoq
- TLSH T13BF4BF2217EC5675DF67C1B392627637D6290AFBFC062C02AE981EEB2C7164D0F19748
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\config\sodium-options.json.tmp
- Size 744B
- SHA256 b865bdf247d5fb138f297871a43c4a1e84053e8a65904ed2c7a31f2600978df2
- MD5 4b5d804c0af39a7793ddf9e681023669
- SHA1 afc40fd90d6828ede496435ddda68e9ede5b718c
- SHA512 5dd557c4e7fcd270737ad26a77d9167123b0a7072728748570ed46079af37e8b20ed358e87266a4ead0da4201c88deca38765039b715ff7ff66a9c58903dc1ec
- TLSH T147019C32D0F41DBA01FA54358D7D944354310157182C3C3AF8D9205C3F8E72B62B2EE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\icon.png
- Size 2KB
- SHA256 247dfe5bf4e6c33acadbc90e91a28d74ea25f0c1471264de2ddc0ca1a6ee7bbd
- MD5 719e399f1873bf9f817bd28c7f9c6167
- SHA1 4b3e0a6318cc7e197e49acbe3b4d346a7b84a4dd
- SHA512 219d8f768e4b349226953a354b1ea13af6dc66e3c94fb9eb250a7c5ce3004361314dc52b849d1752ac5d88645b443e80616958d522628db1cd2eed5d5bd1100a
- TLSH T1C6516D31F2398544C88961A9B1969483D7732B8B4F57E33A2C3E5C093D974803988473
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\appleskin.pw.toml
- Size 669B
- SHA256 b9deef65143a425882189bd1fd86f41f194cd64e5814f929ee5bf324b0c7dbaa
- MD5 51f3d97b764f743473eb703410158c88
- SHA1 27c64ad7d3bbe3cbdbfa8f66438727e948124711
- SHA512 32202629f477d1516ecfff51cbdd05716af14b1fa55cdc37b9bff4946c744cebb19031b773125d1e1be9d3734e1e741beacdefc0abc0add61ad6dfd49e3c3776
- TLSH T1C401D34F1A73C1320177BFF7D0DD423683B0157A9255A87179F0109492CAE3FB664644
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\fabric-api.pw.toml
- Size 618B
- SHA256 03b54528239df8ec7db638fcd0e12ed311f49859fef69111886c86c73fa3b9fb
- MD5 dfb1693d5f2bd9f6417cc34a717c95f9
- SHA1 8b9e168994bfba5d1cd05dd894a5ea2730a2bfd9
- SHA512 5f180f91639b964db4785edd1422e7b95bdc22bcd2fb60489e3134c6f8d4ccd532a607515fc2ce13ea98814f013b993ca26d9d9d43195f64b80db5b4ba9d69cc
- TLSH T143F002623A33C6320127AF78E0DD23370520187B14A4D83014F02694D9DA9AEBFD84C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\fabric-language-kotlin.pw.toml
- Size 1KB
- SHA256 4537dd26f923c0c3f47056a5ee4d8d1ff64ae47a1762ed6a7294254ade16e5ff
- MD5 85650b3df71c33d1ba9fc84082228444
- SHA1 8622a163475010aaebff2f3c61bb63776378a46c
- SHA512 f29b944a7891500eb5216a15ac51143714ef02f565ba37737d7b5a2c441cb859dab284e1aacea4dc4394c648363cf6e7b1a4be8e16f7d839311e71c08f0731fc
- TLSH T14D21D03327334C2134DDC673A46CB22B05A409239D69B62072808955BFCEB5CB9F2EF2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\immediatelyfast.pw.toml
- Size 662B
- SHA256 370930260aa756514e74fb0c0d81ad7a000b0a69a9de812b81ada0b2e6fd8a5d
- MD5 1093deb0ae0c0c240b6d319d85ef409e
- SHA1 c540304860af3bae8756e8b3799742a6a39be967
- SHA512 3afc65f9e0873c8fcfb01501e320acf21c71016839a7ffceadc221ef0b8942cc168cbcc9a6ed165ffacdc577d17a1a88b37c38378af0234a5a09bc2b85b91098
- TLSH T1C6012D2B6B33853A1973EF38D1ADC23A01B00D3F456A88B468E09259878E90FFB08446
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\iris.pw.toml
- Size 692B
- SHA256 2f789753e3ff9e19e0a0419ea47b6a224d1ef9263e406f7643b8dc3a38a1e7d0
- MD5 1226d8405a4873859c056e56a6c01241
- SHA1 54a706807a65e3b46f050c0980c16232bca73a65
- SHA512 94439d694ca6f9869f5b168b1666c78f4c19d79e44f48859a7bad24228bcbca2ea8b60263e293389a2e4d20d0900c0b894fcaf5c339a21bacb0ee922aebe0cb8
- TLSH T1B7017B42AA3BC5230176EB72F9ED4235427026365135A86059F1651D46CB82EFB44286
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\lithium.pw.toml
- Size 642B
- SHA256 27dffe58020a4fe1163e3f8d8393eceb3b0a005ed5eb057d795faee12987fb81
- MD5 323785ea54948a7e1651d7d46d0e30de
- SHA1 25b1722eff8e36fa29b0569ecdd81f444a5e3117
- SHA512 d440a871cc9ba6139fc0fbd819a78a97c1df6c4b0857cc574021dfe06a3f015f60183e6d10dde95ee6a0b68266685f933e264aed038dac19f2efae05f4b18fdb
- TLSH T1B8F0DD9A1B33C1221676FB37D99D53A6877046364E62A8B05CE0129E42CAD3DF7540C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\reeses-sodium-options.pw.toml
- Size 860B
- SHA256 e73004eba177ca9f9d3ebdf29214e6129bc1f41cc0bc6cf3afff6c8c74f8b34d
- MD5 61121402982f4e8ef4d369ce8ac258cc
- SHA1 e1ea01e7dd8d216c24b052bdbaf4697e7ffaeb4f
- SHA512 cad53ee3e01cf789b44461be78d73b897b012e9195c5e3e548eb1aeca8488e1aee1c10632ae1721c374f1088c59796026113d7a8b458d69ddadda32940cfe321
- TLSH T17711EF413E33D0254173BEB2C1DD433943704633823986619CFA86A90ACF86EF7A5142
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\sodium.pw.toml
- Size 651B
- SHA256 8726b0c4ec1a3db84c18be2dcd6f2d240e566fccb2447564126af4425f9ea242
- MD5 0453459056e3c863d2588d17be6bfbeb
- SHA1 3235bdb9b669e210840788c45f53fd72e21f0094
- SHA512 eba5366cae145541539969cbcc7d58482e4fa5c893dd3339a66da76f6e3b83a71300ddbbcd176a334dd9b9e1a79581b7c049b81fd773402bd5306a9b6dda0799
- TLSH T1A9F0995A7F37C9330A339F36E55D03B68A300A36D6159464A4F2465889C985EFB481C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\xaeros-minimap.pw.toml
- Size 764B
- SHA256 cdd37e8d8125fed6719a99d1ae238bfaf77fbbe6d3ebd1f9a0865a960f999b7a
- MD5 dfc9a846282b17ff8397b04bdb7bfbd8
- SHA1 95ed1030c877109eac91421b33d2cea4a6722833
- SHA512 096f83ae2e9d312c77f7ef7d4ac3bc94cb7c678ee1a6cb89cd7eabe7da514c9c8e6fa72fa49bf68497c0d90933755d4ab974d4a2c81a163d99c51a1390b68a4e
- TLSH T17D018553AF7390360533FBA7E4ED0B3A06711A335A26983108F1657857CFC5EB764482
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\xaeros-world-map.pw.toml
- Size 768B
- SHA256 e9f90e3bc280e86b48684cc9d473a591cc1128eec04c75c0ab4fa589b1e285ec
- MD5 9e81faffcbc0038f807a04da1dbe893e
- SHA1 c5ae607665e6c77e9959f0fc8ee606b318fe9fbb
- SHA512 0464b970560600e299e775df0e53eabb28ab0e40ab4d0d88cf078d93a4c9748f5791085cd9574d0e99db1083548fcbac466ec82a4d5fc12d7e2ea6841f4210a2
- TLSH T13001D0539B33C4198033EBBBE5BE077643344A778638A07004F6652406DF89DFB229C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\.index\yacl.pw.toml
- Size 718B
- SHA256 e59b5312948f3a64fea58e6f2afb95e87361c78a6338b5f42ed89c282693d2a0
- MD5 87f1c95a78e48082935fd5cc6df149bd
- SHA1 01c5b2c7d14d0c3a50a2052ab6242ef1c254cf31
- SHA512 55b17027df8a63676f55beb7a545bef4416a39518d5a66855ffc60a8286b63a3396c3e30995e5d47f68707b949e5936be3e99bae26476d5066c796314fc37811
- TLSH T1E801CB668F73C5228873AB73DCBDA23A0B30167782A6E87408E4718552CF51EBE94081
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\ImmediatelyFast-Fabric-1.17.1+26.3.jar
- Size 97KB
- SHA256 4b346661cd0811d98a6df8c9faeb8fafd9326ab88248430e8bec845ef1ff6dca
- MD5 72773f07e9918a16f1f058c7e3aa8dea
- SHA1 f565bbeb201f2305e81761429d3f1f47e1c3a321
- SHA512 8e139589fd995bce3d485a34d92a07243964212f7ed2e4fc2f6de5b9a74d0f59b03252e7ce40c64e006cf3e21bed5de27b830d33ef048b286e041f6178ad8428
- SSDEEP 1536:QfLNhdWwivLIuQlCmZt+36PZB+h5lATuwlP/XqS/T5PpCIT0pFNJ2E2m2dH38ItC:cL8Ij9QbYzPCS/NpS//2938IoSe
- TLSH T153A39E15BFD7EDAAD673F17662C0E20AA83E988D4947215F3961102E7CF86D4024DF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\appleskin-fabric-mc26.3-3.0.10.jar
- Size 175KB
- SHA256 cb05087c39f0d860611aa1fae7cf63560214d1b71378a7c903c18dc370b5c3ce
- MD5 8e1c81bffa2830438600f52d15e251ed
- SHA1 3d19e40c5f97186857db98e622c01c2cd0030497
- SHA512 17d257af419b7530aa8617c2e8c0e4bbfabcf888f26655790e0188e7957e0bcd931f85f9a4c69fd27e889dee5082cf7b2b8741a14a6ed4425e9ef4bfe13a8b8c
- SSDEEP 3072:JcdSgLZH6lYm7x2u4Mdt2v+SyrZ2FTl4Ib/RzqNbZaeL:JcPRG7B8yl2FTaKRzqn7L
- TLSH T17404BF2136C0CC51DB3B34BC9390B353EAAF6AACE045B2B74871160769F885657A1FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\fabric-api-0.162.0+26.3.jar
- Size 1.7MB
- SHA256 8626c189b702f466800b1c8ddac6203cf8a1e0bdaee75a5f9a33b18c2baa81b1
- MD5 4491ab1b808b69f3d7ff97cc75536b85
- SHA1 273cd2dcbd92d1559edcc91c9f23fee47f6ff93f
- SHA512 5ab70908952f1d2346d16b122ca31327f4055db59c279a1bc3c3c581ce359bb541cba15730f55b0727be7c7c4debc4a4412a183c228e0d4dea81c734f7b412ce
- SSDEEP 49152:lO/mp0YbMMAA2cUdAHWniGeDT3pvtWZs7y8aN/5uZL:l6mpRbMrbrAHMivDlS0y8cAL
- TLSH T1848533799F44D584D26ACE31C896F16CC658948D186F9CBE03980F849FAC87FE841BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\fabric-language-kotlin-1.14.2+kotlin.2.4.21.jar
- Size 7.8MB
- SHA256 fbdbf5286ab9d65fedb49e6e01c15e338ae303eb7b9d8c7423d0a9bcfe526ef9
- MD5 08b201c7d0e80ba7a3d77cca0b2d3d3f
- SHA1 f1d4ab6ecd54d9782521333a87eb50724ecb03e0
- SHA512 7fb475c4a7e7bdf8d0aca4b5798a58a354c51443d5b1fbde3e8cf34dfbf7191ef4238b5f07d08ec9490ec180b371624523326c3ad45d4ed2b2be541de9407e5d
- SSDEEP 196608:+Wc7nndt3pszi3BhrayyV1sWNDI0dp8yMYyALAo5gyQVt:WJBuzi3beyyV1sWNlgyMYjLMyS
- TLSH T11A8633E36ECF7096FE247531A71376256B9C91863DA1BDECA2580701AECD2C3BF56108
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\iris-fabric-1.11.7+mc26.3.jar
- Size 2.7MB
- SHA256 83ab4d3013dd56ac05ae503a2f596968911001c4ef3d82c59c5c79e64c34dd98
- MD5 6e390346ffb4f04e670d7f0ffc04887f
- SHA1 fa03640ba1e4ef2f7ae3619c6373a06e46d0ba2c
- SHA512 d8d3312f77fc52a48e4a6cd836fda33669bdebcb4de0b8c0d30adc808b287330a533e0baef355cc1ce6336a26851d9775369a802a4666b7b7a6266af20088f42
- SSDEEP 49152:ccS51lMqNs1oIGLn1JufQ6WbcWH5kkGGqU7Fb:cdDNsCIVoFc6m07t
- TLSH T1B0D5F16579C5E468C72357708245FA33A41BC68CAA16619F25B00A0FDCFC84DAB47BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\lithium-fabric-0.26.2+mc26.3.jar
- Size 893KB
- SHA256 0be5b17ef9f6e9244cd07b24b227553a73aec0cf93158cf28099f3094c167f1b
- MD5 4bb4ada83b50bb026550b20aabcad32c
- SHA1 dd5a4ec2c68d7601d8bce9076f789c55a5f8bef3
- SHA512 4d7fee66132eedc71feab9390b92c95d7058edbdad0fecfac1d836a2950b97a7ca463afbede61c7ef361ce65e1f927ab9e89dde5bf2e0e0ce486afb5c5dbee40
- SSDEEP 24576:gNGC76OFMJnOn3T3x9FdusFfkPezo2uV4blsQS2:gAC+oMgn3LDuPezGebWQS2
- TLSH T18C157C587FE6FA75F897A370228B7033E77D6ADA5D0124D332D1470F64E4D808249AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\reeses-sodium-options-fabric-2.2.5+mc26.3.jar
- Size 252KB
- SHA256 b692acb0f84d7477deae48e2ba0908e1913c0d87db53daa4d23cbe646e9028f0
- MD5 0cff517075a0499c6b9780d7eafd28a5
- SHA1 305aa813172358eb5e95d0a7af02a44326261226
- SHA512 9c6f335618c1ec03cf9030cd88cdc32be5457bf4fbabd49c76ed68df53530730cf4681ec3742f2c6efbd48cb2b784f24c636977a95d78df62af1214ec5488be0
- SSDEEP 6144:opo4b64AP0cV33cLByzITL2RwIOVnQjbt4KVb:oeJPT3RITLdNdQJb
- TLSH T14344CF113DC98529C8F74DB7C27CA081607D768FE11D2183BADDD76E18F89A1C60BADA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\sodium-fabric-0.9.3-alpha.1+mc26.3.jar
- Size 1.8MB
- SHA256 a8f1e82847d3640c20dded44b08829c5987a055de83c99d62c33cd7bd06a1c54
- MD5 7fa8ba0b19e6ce03b13d9e3ef06b344e
- SHA1 5d88caf6f3e182cd39d0fb0d2e7200c5e613f287
- SHA512 8aa044fea0185855e2ca0971b4e3b3bc1ee4c616e3a7d6ca4d4b979fbb99340678c0bf6acd16be04095bc885b75b4caf95401486e91b65239385e98fab6d3542
- SSDEEP 49152:XjSqjHC3NCgxu/4v7qIzckEjeKiKDWgF/Tvn:XjcNCVMTxESKi8WgF7
- TLSH T1CB95CF15FDEBA8B4C4639630D3859931653E74CDDB0A204776EA4B0F68E8AC0934D7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\xaerominimap-fabric-26.3-26.6.0.jar
- Size 2.1MB
- SHA256 0cccafa29181e704bfc888c7063a19b29c82eb9883ec1a7d8f02c5ed8f931a3d
- MD5 6861979f573b4c47566431a7e2a601c3
- SHA1 287f670348124261bef5c7833715c49960e74dee
- SHA512 c704ed5154e66e891517b9b6778b3227a276823844ec70b348a32dc91d38e3500a6e74d8c69d7f9c68e3137b49511258b0b7d5e0b503391dd959f31e8c4e5112
- SSDEEP 49152:J61o5DvpL8xtEiCDTHkRXy2MD7X7/YNwjZD6WS65zr:J61CLfLqXnM3LCwVZS6F
- TLSH T11CA5E1D8AFE7A9B1D27FC335C1ED1562F9B7834CC801140716AA227D44EBC724A6AF61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\xaeroworldmap-fabric-26.3-1.47.0.jar
- Size 1.4MB
- SHA256 2cd3cedde12121958bb3fc500b8cca3fecf6b9517287f74f00ab961531a546d8
- MD5 8c0ce6594b6b447403f266720b4b32fb
- SHA1 9ace0b064668929e3f1df6b7eb012ac713526e96
- SHA512 e80c6bd6729c059c3e433e7e77714ed4c7f20e1a487f7449cf47282e9816b51523efe39183090b76a56834ffc67090317e70324730f311ba2e71fa24eec539c6
- SSDEEP 24576:N2svoFyQo1GpnfDwObKZut26sGHMKrbs7SAU+ZCTMNNwjZlfFbuWovxE5Ggp:ADFtoWDdbKiwswQYNwjZD6WS65p
- TLSH T1E26501D8BFE68461C27FC779C15E0D73F9B6A78CEA012107539A223D0CE9C62465AF91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\minecraft\mods\yet_another_config_lib_v3-3.9.7+26.3-fabric.jar
- Size 1.1MB
- SHA256 c52d41d444522d9abba994cd4c4ee2e71a065d7c31010f92a9959b80ccb4b0f5
- MD5 967207b5cf360d9481fb318abacfe8eb
- SHA1 e54d86dd4a78f95cd6ec0309d96fae01e661c00d
- SHA512 f3957028dd31cae78f08aee3e768f61bd12c4c8423257d357bc3c1a2172047c769d37901f99775c7ffff1e5ee794025dc72738b2869cab06f1c2811841d68b24
- SSDEEP 12288:/AK9rrCYVmyCICF4wAVVIKfcxoq4dMVDJAJYWaQuHdhrkimg2c1yyc32lKqnDz0p:4K9ewrwAjRTq4KJ2aQu9tkrB7ycRkHfG
- TLSH T1E53502193EBDCCE3E1B3C438E252FA219C0B86CCD11670679256179F0DED85D4A2EB99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\26.3\mmc-pack.json
- Size 1KB
- SHA256 e620147081aa6d382bce51ac7244a1d387b618f4f9a8a698633950b7a729a50c
- MD5 023605a94f44992c6cbb7c6e4d86e716
- SHA1 a71202c2992876dca44245e782f2d978e1c76729
- SHA512 dc6350c1afb20da1146ccf15b524468cb494d40b71ddd2cdcbc39b24203d1bf888f589138908d306c44cee5cdbe1cf3ebe6ccae81bd6ae6cc65a0668db2e5eb3
- TLSH T1F7212374C3F21CB334659375483A41A6967040072FA03FEDB61C810C0FAE2AEA6A62AD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\instances\instgroups.json
- Size 52B
- SHA256 0dd2a2f647bd2d34e72ba82fe690d52b8cb0d36a57cf0c59c119e241d0c478d0
- MD5 e779e78d956ca4bf36d98ec3c326d88d
- SHA1 13cca38b02da0fadf1f83b64964d52f1233203d8
- SHA512 fd1fab8367f3e8dc0e8c17211b3aa2115ea6ad5e6c319a28cd0033ae84923f96f2c2556cbff1bb8de22f2e0b7ef1c521b19881d11eb1690efb3b4700e9d87509
- TLSH T1E090025CC4930C5214E6264E405C42019AA4415B98055C1AB50421088F1877E1524354
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
- Size 39KB
- SHA256 38ac81b6ef29e4f29235902fe56385e3c2e4f216f728baff9512aae4e5c7bc67
- MD5 077bf9670015eb050f8529aff17c6d5b
- SHA1 bf0dd9fa4eef618c1d312108fabb52b12010bee8
- SHA512 7d3558ee4c36013d7dc8b76292157bdfc06e91bffcff7a7d83ac76b12a821282f7de069fb7f7f0db5642eb1b60b3f517c9b3dea314f1b9253448b65caf7f93a1
- SSDEEP 768:qmmD2sBM5R2TyJ5R3s8D/bkt5Ruz3Vb3l35:XmzM5RdJ5R3sozkt5RA3l35
- TLSH T172032B47AA192C81F02F80F18867395A51B4BD132BD172FBADC6B31E4C713619827ADF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\conf\security\policy\unlimited\default_US_export.policy
- Size 146B
- SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
- MD5 1a08ffdf0bc871296c8d698fb22f542a
- SHA1 f3f974d3f6245c50804dcc47173aa29d4d7f0e2c
- SHA512 4cfca5b10cd7addcff887c8f3621d2fbec1b5632436326377b0ce5af1ae3e8b68ac5a743ca6082fc79991b8eec703a6e1dfd5b896153407ad72327753222fdb3
- TLSH T178C02B07BB17D0F800D0EF4617B57916B1701E89B0A1121CFA00C2A41EDC6108330394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\ADDITIONAL_LICENSE_INFO
- Size 48B
- SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
- MD5 512f151af02b6bd258428b784b457531
- SHA1 84d2102ad171863db04e7ee22a259d1f6c5de4a5
- SHA512 1a305bc333c7c2055a334dc67734db587fd6fda457b46c8df8f17ded0a8982e3830970bee75cc17274aa0a4082f32792b5dbff88410fa43cc61b55c1dce4c129
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\ASSEMBLY_EXCEPTION
- Size 43B
- SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
- MD5 bd468da51b15a9f09778545b00265f34
- SHA1 c80e4bab46e34d02826eab226a4441d0970f2aba
- SHA512 2c1d43c3e17bb2fca24a77bea3d2b3954a47da92e0cdd0738509bffcdbe2935c11764cd5af50439061638bba8b8d59da29e97ea7404ea605f7575fc13395ca93
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\java\java-runtime-epsilon\legal\java.datatransfer\LICENSE
- Size 32B
- SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
- MD5 663f71c746cc2002aa53b066b06c88ab
- SHA1 12976a6c2b227cbac58969c1455444596c894656
- SHA512 507b7d09d3bcd9a24f0b4eeda67167595ac6ad37cd19fb31cd8f5ce8466826840c582cb5dc012a4bd51b55e01bb551e207e9da9e0d51948e89f962ba09606aab
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\metacache
- Size 54KB
- SHA256 554d5fbdb3d3b4f633df983bac695e0d53c708f49e3f9dfee2c875b8dbe89812
- MD5 732b21e1f7e6ac528f8e445d65a5e52e
- SHA1 047e249f74576e8f0a4d6e8311a805da6e28caf3
- SHA512 2c8103f81e83498440b407660706c60c946f40408f0a7277b65986bfbe6292370c1aca680ee8f952276632d7b433bc5cd0eac6a711990ec48ede9cd5b4fdfec9
- SSDEEP 1536:BjN9zQDHs3l8ZqrBPILZ15k5krmhRkqervKYJnukr5ChDpbzZ+eVqt3bwbbesioY:BjN9zQDHs3l8ZqrBwLZ15k5krmhRDerl
- TLSH T11343EF35C9180D73159B926854FA538212B403EBAE913C9A776C4ACC4F1D44FABFB6F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
- Size 83B
- SHA256 e26a49f69f3bea5d0a393e4da353e3377d0ad694a5ddcc9b714562ba2ec548ae
- MD5 24d638de8bd4ddcdc5eae807c8ec0507
- SHA1 b93336e17b4a1d39ee018ce0689fa6a875a4230b
- SHA512 9f6cf9ce05b61b925f93497205a13e8eb78eddfc1db343d7158a963a42b85f75bb5369fd2992c34fa61d81ba27f4b6c19bd8e9cc4ee928833eb119d0c1c40434
- TLSH T1C8A012891B01A42C14B41984000909515050446B2FF5482812C989454242F23884BC08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
- Size 43B
- SHA256 4d844e34567cedeaec227d547d75b35c0d8eb20224ad4d336a16f98c9edf95f9
- MD5 39f01a96d9305718f07c3fc8de3c78c0
- SHA1 a6244e4656c047932fb4a2a43d0f81fe60ee1c37
- SHA512 656c4da03389cb34959a395f2570804100fccd8afc6f520ee17c627dab0c584a0a24744040e2ead21e503ef02896a7864fe5f593af4df571131cccea9f43b3b7
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\prismlauncher_update.cfg
- Size 60B
- SHA256 176cbd69f347e1708cee88ceb1451603d7a74f6a26d561654b2d331a3172f9c7
- MD5 479190de491c1087c3963c195ed13305
- SHA1 48e50d9521496ad25b53d0efe236b749cc0d1b8a
- SHA512 0e9f68644012087e68ee12a1eb1320063978af0165162f9857e48f1cc3a538e26b51c112645f32e3d87cc16201965e25ae18064104400265c62c289d7a8ce556
- TLSH T1B3A002DE2710613414A91A9511464611916199A67F389C7D21DEDA469216F134987804
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\translations\index_v2.json
- Size 28KB
- SHA256 138acf884a8689b8ce6d070d76ad5491a004aa97fc680cbc5d38d67a344b64ad
- MD5 5f2d1560e7134bb9c95b7445aa07875c
- SHA1 f538b328df54efd1e8b12d74c3e5baa0ae9ba1e9
- SHA512 d7acedf445c1d732a2797ddb94efef7bd80a2139c414b5a6c0baf072a6c30a0709b9b5a455270fa5f4dd52cb406217d4f17897d316f8b8f4397e9bb176c466e4
- SSDEEP 384:v5G52LIMH9oFn7VYff5wi7DT2jjcI1JZGHzbbf:vA52LIMH9eY5CUIhGb
- TLSH T1DDD26A78C4316D492016D2AF9A861643641FEF574D263D047F2C8A8E1F2F26E26FE63D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\translations\mmc_en_GB.qm
- Size 336KB
- SHA256 752d19cdee3a74839ebafab6cf56480d035fb22c40003fef374c1dc1b9cd6da5
- MD5 e5322b5aab7341e35601fd86a3f3ac2d
- SHA1 d239adc90cf667ea39f5b7f5d73bdb1cef6e4aad
- SHA512 9af94e46ca1c4444d5d139f1e72b370d8661c9ee6d874c0da9aa60f6ae8cfdb6da37bfe7c1ff2cfc97c7b7e5a2c78054aa7d29a32bfb4e547cc8a6a97f8e948b
- SSDEEP 3072:VhCocgTiCfg+A1PzPzt47XZs0w7gklz4GS2KbsJ6+xsd4OLtxmCotWobg4NVjfCz:/l/fM4NtesT60s6MiOtCKExFppT7
- TLSH T1C874439223F8411CF6F77FB97E3A43648F367C66A934C21E0254A06D0A71A94CDB6763
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
- Size 257B
- SHA256 5a8567fd40c54fca6983e0f189bb90f2cfbd9e22109e6acfdd1020690d4de135
- MD5 2d45650ef86f522d5b8b500d99df88ab
- SHA1 7f28f6e2291a7366fd0e16d37fa7b3ba5b2f7a8f
- SHA512 cc1cf960ba4829d48d230fa6d97de8f9175b57a7c13944043a283bbd6cde0966982fc6d049a99712cf4e4198d192e8333f9ea7447df784c420549e4f08a0e3c7
- TLSH T195D05E0FA33AE3E6CB3C60947C389EF087F38C18C5CE221404EC5ED20C284431507494
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 77B
- SHA256 48af172b922baa706b2778d3500377c47a5021d7b0cafe6961e24a9b04347e3d
- MD5 f8761ec50d534424fe1f18ec293f838c
- SHA1 9c291e75ca5c7a928cad59442012fbc6e59f24e9
- SHA512 7a7dc20dd913c40665cec6be0527c84a4313f8a58e65bfd4e14c56ba4a318501716df488bccd256cb21cf3b01e239c0420b7dc2fe34871af971dcde224bbf4b5
- TLSH T1C6A0220200CA822FE2C00283022C830B20B3F823800C3020AFA0A800B002CB30BC083F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini
- Size 76B
- SHA256 4c337446ccf0e16007e9fd9e03e2b4e8363558a282840310ed75ff0e1881e5df
- MD5 f438d0f0f3e9f1e8b1ed2a96d656887e
- SHA1 84fc456a0fe491a69af5915921a3a64d612003e2
- SHA512 fa774e250d60ab5a854302dc6c91e126d525bd37bd86886f0a8be29a278c027598acaeaaead2be19bf76f5eb162b28ae4e1962b9e3b963d06b498dc0398c5e93
- TLSH T1C4A0220200CA820FC2C00283023C830B20F3E82380083020A3802C00BA02CB20BC083F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock
- Size 18B
- SHA256 6a6ac66d11a49682984a9ab7bb4ffa1e3f9a15e564c0566171a6c2a105212c05
- MD5 e75e7653b2aabad8c7188b6b046ba51e
- SHA1 abceb29809c72b76a6c12da4e3fc0e5731cfc238
- SHA512 861d2d387a9af8420ac1ac3d87dd6d3154c9ef5575f086fd960a5ba1c061ef8c8fb80153c151ca35cd7f0cab631088baa56b1a68350676e1be64b1f13b3eb15d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\vlc\vlcrc.4164
- Size 94KB
- SHA256 ec45f6e952b43eddc214dba703cf7f31398f3c9f535aad37f42237c56b9b778e
- MD5 7b37c4f352a44c8246bf685258f75045
- SHA1 817dacb245334f10de0297e69c98b4c9470f083e
- SHA512 1e8d675b3c6c9ba257b616da268cac7f1c7a9db12ffb831ed5f8d43c0887d711c197ebc9daf735e3da9a0355bf21c2b29a2fb38a46482a2c5c8cd5628fea4c02
- SSDEEP 1536:XJDiGWjxYmJPHzV1vC334+DmV3LrCE2y5h8LwgLgG6H:XJGGWjxYmP1a339D0XCE95aLwKgR
- TLSH T1B393A4C46C6020940897884735D5F180B91A712A9EFF1AFAD1FEFC5923848DAC5B9DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\1e198d1c-5bd7-42da-b647-9f2244f36026.tmp
- Size 15KB
- SHA256 a128c4a4fbb60114f63708af24eeb7f2119058197c8940fc00c1fcb1a62a5481
- MD5 0bd526cbb1ff72aa23d664fb3360dcb4
- SHA1 000bbaac2f74495f89461e4e0f862768a4c367ae
- SHA512 49cf16f0344a0596a2b9b9a0c7c20c679b3a155bdb3d5711035aeaebac7dcb38bfc09ccbfdcb641a13eb42b6f4cc134aa57df6e8b42f0151daa420de44ffcea1
- SSDEEP 384:h1xhD+yNA0qfEnu14xg/x/i6OBTxrLrTQ/SxfFunqoL58exFpiJ/:hbf6qfEqLBTxrLkSRoys2/
- TLSH T108623A21A6A1D4B3DCF21372157A6377EFE7832217E0658397303FA93963692A50F605
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe
- Size 22.7MB
- SHA256 828294fcd8c71c33c307dc7971936a5b8801dd02e32ddc6648e87cb4a92f5562
- MD5 d5437aecb34733ac255b81c559f11d2e
- SHA1 b1345e2c0b37050472ae43f845b0fdfd68ffe36d
- SHA512 11763cc0bed2d0b5f2cd626ecfae6d8ce114d174905e9330a00b96d34d41b482d6277888b8809c5f275375af0d72a99eb3c5f3eb4cf7f4ca5c80a705370cbda9
- SSDEEP 393216:tkWuQjvArLNw1pet1BCBglg21N3RYJzk8D2RAIACcspokbGHhdILeV/WCxsGd0Gj:tkWuQrArLy+1B9dhizk8D9CcsaHhm2xV
- TLSH T1FA37237695BF954DE0ACEA3D017A2A0D303EAF0227B03749FEB2BDD711B4301B955A58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\PineconeMC-Windows-MSVC-Setup-11.1.1.exe:Zone.Identifier
- Size 1KB
- SHA256 5b07b69d29a1c9054fb302372de6ef2941cc384c10cd7a1492492ef5027ccb73
- MD5 91662ba923922ae9cdfd553f01cd5b06
- SHA1 797ed24313312dd771c1f3b9859cfe0a935320fc
- SHA512 f709ca065ee035e0ba2d2211ac0f5363692ec3b024cecde4bcecc6b3d154d7de53fc09c032abd5fa0d8348434de0809827ec1663bac25fdddc108119f9c80d8f
- TLSH T1BA1165EF940A815E6FCF76C3056E5D2E9017B49B594A025C0B66C14DD0C12BA31F693B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\~$UnblockConnect.ppsm
- Size 165B
- SHA256 1176a0c9b71c5a4992774717d673027786db7e377e3d40a8a0606853e63afeb5
- MD5 5ddc860d871aca9286f2a680e63af7e6
- SHA1 dfa0bc3318667d8da509398a3138888d0ea50446
- SHA512 13b343323e1429e8f87ef14b8162f357c2c82be5927c6eb74caf367e8bba732fbce8f02da3391bafac51e9ec7b382d27ea6ce0959ea08f02079f7ca2705b51e3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Videos\Captures\desktop.ini
- Size 190B
- SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
- MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
- SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
- SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
- TLSH T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Temp\{265B01B8-E037-43FE-9041-A04C5587BD13}\.ba\BootstrapperApplicationData.xml
- Size 14KB
- SHA256 8c81100f594e3d0bc51e5571e0046f016086207c1c382d45708c30e1d732b648
- MD5 7f35d3c6ef5189d916dce7f974f2e5b8
- SHA1 37f9ed9a2ed80fdafd187ce9a38ce5b0c952f3a2
- SHA512 ccaafb8ef675e2625561a244f80a4d5e05c590211055e76afe4a317b2220bab2e9baf8fe968a46b226e3ad4e2d064f1551d88e47da798d24ed365331840d4c03
- SSDEEP 192:X0sveDnH5zHqQHG0Hd8Hz7HE06HA0rH3pJp+tHxLUrnDzLG0LY1ftHJr5e0II0B4:X0s6dLbmnoNwtR03J+ftcItVEp+Eo
- TLSH T1DD62D5142AFD0159F1F34F88EAB945566B76FC963E38C81D01611E0E4873E819972FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\{265B01B8-E037-43FE-9041-A04C5587BD13}\.ba\wixstdba.dll
- Size 215KB
- SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
- MD5 f68f43f809840328f4e993a54b0d5e62
- SHA1 01da48ce6c81df4835b4c2eca7e1d447be893d39
- SHA512 a7a799ecf1784fb5e8cd7191bf78b510ff5b07db07363388d7b32ed21f4fddc09e34d1160113395f728c0f4e57d13768a0350dbdb207d9224337d2153dc791e1
- SSDEEP 6144:K6EZdi6e93SuDeTKZxQfsRy26BqbUHYJe:K62i6eNSYeuZ2sRDK
- TLSH T15E24AF12B5D0907AEBFB19305939E5216DBDBA210FA0C9CE5348AD2B2E705C1DB36737
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.ba\logo.png
- Size 1KB
- SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
- MD5 d6bd210f227442b3362493d046cea233
- SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
- SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
- TLSH T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Temp\{2D16065A-0150-4422-9A61-54A6F59A0D0A}\.be\VC_redist.x64.exe
- Size 670KB
- SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
- MD5 bc9c8a6a42e8d3ea18f8da78d5031820
- SHA1 07812a4b945364d04627363e46ab38de188281b3
- SHA512 b583f41b8f9cbb2b04e4c7403b54241bf4c51caefdb0bbe9184202dc615f599b496d65f6d36984b75f9b9003289c0c13066dc1e6eb294f9139248595114b4f73
- SSDEEP 12288:n3mgqnIZuYfCYqFet4CovkM7x61nE4rfDDIcbMZ3Mya:n3WnIZuMCxezot7MhbfDBMZ8ya
- TLSH T10DE49E32A5604033F7F10573B928A6303E7CE3282B51C9A9D7D4AD1D7EB4892A7F7256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\license.rtf
- Size 9KB
- SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
- MD5 04b33f0a9081c10e85d0e495a1294f83
- SHA1 1efe2fb2d014a731b752672745f9ffecdd716412
- SHA512 d1dbed00df921169dd61501e2a3e95e6d7807348b188be9dd8fc63423501e4d848ece19ac466c3cacfccc6084e0eb2f457dc957990f6f511df10fd426e432685
- SSDEEP 192:H8kZ1UVDWkiWZTIsp/4hghFF1Qf4lCfnEtHixEGx736wHqItfSpOtJ32:cM1RWZMi/zzlOnjt5HLoa2
- TLSH T13F12A7A8234783D103D213D7055294C1B71F0BF6AE7AF95C34E4D53826E2E6CB6B91E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\thm.wxl
- Size 2KB
- SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
- MD5 fbfcbc4dacc566a3c426f43ce10907b6
- SHA1 63c45f9a771161740e100faf710f30eed017d723
- SHA512 063fb6685ee8d2fa57863a74d66a83c819fe848ba3072b6e7d1b4fe397a9b24a1037183bb2fda776033c0936be83888a6456aae947e240521e2ab75d984ee35e
- TLSH T11F519B6778CF639028335125EAD2966A6920C5DC923F2DF1FC4A914B838D522A373F57
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Temp\{A771FB84-ABCE-4829-A279-C76EA4A85222}\.ba\thm.xml
- Size 8KB
- SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
- MD5 f62729c6d2540015e072514226c121c7
- SHA1 c1e189d693f41ac2eafcc363f7890fc0fea6979c
- SHA512 cbbfbfa7e013a2b85b78d71d32fdf65323534816978e7544ca6cea5286a0f6e8e7e5ffc4c538200211f11b94373d5658732d5d8aa1d01f9ccfdbf20f154f1471
- SSDEEP 96:8L2HdQG+3VzHfz96zYFGaPSWXdhRAmImlqFQKFBiUxn7Ke5A82rkO/pWk3nswP:ZHAzZ/3
- TLSH T1D30259B546DDB801D232FB1166E231D27F126971C0C46E59F90C2AFB5FE1140A8B72BD
- MD5 SHA1 SHA512 SSDEEP TLSH