bb68560dae4a4623b8a65b5211255eb0a73b8ea6da5126c0c8784fd00a758b5c

Analysis

user interaction
yes
max time kernel
255s
max time network
252s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 09:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 16KB
Sample261027-k7eldaby5x
SHA256 bb68560dae4a4623b8a65b5211255eb0a73b8ea6da5126c0c8784fd00a758b5c
MD5 3f7420c628bba1d3701ea6bd017a0b24
SHA1 ed24a7dd4aceb0bcc84b1d10e2b565d019b7f2af
SHA512 fc442c47454a8c1b9013ed1dfafc506f51b651fd0b0396ab378e27bc33a69d69260052770cbb7e197a8b86c85130d9674b6c0b9b8dce32adcaf569f9ffae12f8
SSDEEP 192:t4V7c1tnAR1KslhNS1JCQPcjxudQA+hJrbON:tKEtnS1VTIicdQc
TLSH
T16E723122A2F8543A61A382D5EB38333D61B76187E20D1124B97D07B5DFC6C9EEC37199
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
137	1396	msedge.exe

Executes dropped EXE 11 IoCs

pid	Process
4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe
1856	vc_redist.x64.exe
5688	vc_redist.x64.exe
3636	VC_redist.x64.exe
4000	VC_redist.x64.exe
1408	VC_redist.x64.exe
4680	VC_redist.x64.exe
4120	VC_redist.x64.exe
5432	offprism.exe
1272	offprism_updater.exe
3304	offprism.exe

Loads dropped DLL 64 IoCs

pid	Process
4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe
4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe
4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe
4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe
5688	vc_redist.x64.exe
4680	VC_redist.x64.exe
4856	VC_redist.x64.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
5432	offprism.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
1272	offprism_updater.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe
3304	offprism.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe

Drops file in System32 directory 51 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140fra.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\concrt140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File created	C:\Windows\system32\mfc140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140chs.dll	msiexec.exe
File created	C:\Windows\system32\mfc140cht.dll	msiexec.exe
File created	C:\Windows\system32\mfc140enu.dll	msiexec.exe
File created	C:\Windows\system32\mfc140fra.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\vcamp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140.dll	msiexec.exe
File created	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File created	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File created	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File created	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File created	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140u.dll	msiexec.exe
File created	C:\Windows\system32\vcomp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140deu.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140jpn.dll	msiexec.exe
File created	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140rus.dll	msiexec.exe
File created	C:\Windows\system32\mfcm140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140esn.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140ita.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140kor.dll	msiexec.exe
File created	C:\Windows\system32\mfc140u.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_threads.dll	msiexec.exe
File opened for modification	C:\Windows\system32\mfc140cht.dll	msiexec.exe

Drops file in Windows directory 32 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_463847553\office_endpoints_list.json	msedge.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\SystemTemp\~DFF4D2969E8FB5052E.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DFE178FDA7CC41F3E3.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF65D26A7D6BF7FCB7.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DFDD0C630FC3FCC73D.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DFB293E076836BD127.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF6B41FA3A999E7805.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_463847553\smart_switch_list.json	msedge.exe
File opened for modification	C:\Windows\Installer\MSI133C.tmp	msiexec.exe
File created	C:\Windows\Installer\e5a0c49.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFAD5AD829C9EE07A6.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI2213.tmp	msiexec.exe
File created	C:\Windows\Installer\e5a0c36.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e5a0c36.msi	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF83B39AAF12798F8D.TMP	msiexec.exe
File created	C:\Windows\Installer\SourceHash{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_703531996\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_463847553\llm_user_input_extractor_config.json	msedge.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\e5a0c48.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_2036910510\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_703531996\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_463847553\manifest.json	msedge.exe
File created	C:\Windows\Installer\SourceHash{43B0D101-A022-48F4-9D04-BA404CEB1D53}	msiexec.exe
File opened for modification	C:\Windows\Installer\e5a0c49.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI1F82.tmp	msiexec.exe
File created	C:\Windows\Installer\e5a0c5e.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIF53.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_1365666097\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_2036910510\protocols.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe:Zone.Identifier	OffPrism-Windows-MSVC-Setup-1.0.2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	offprism.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	offprism.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	offprism_updater.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	offprism_updater.exe

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TaskKill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vc_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1396	msedge.exe
5552	msedge.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 000000000400000020c1fdf03c8ae10a0000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c012000000000000000000000000270101000088380120c1fdf00000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e8410120c1fdf0000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e320c1fdf000000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e620c1fdf000000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4964	TaskKill.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Language = "1033"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9CC2BA68DB8034640B9F8FD200D627FF\VC_Runtime_Additional	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\modrinth\shell\open	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211"	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Clients = 3a0000000000	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\MICROSOFT.VS.VC_RUNTIMEMINIMUMVSU_AMD64,V14\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13}	VC_redist.x64.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\curseforge	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\ = "{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-560646293-820748483-2532804640-1000\{EBCE1A20-69AF-4938-BAD7-21EC825936E2}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Version = "14.44.35211"	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\modrinth\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\OffPrism\\offprism.exe\" \"%1\""	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\VC_Runtime_Minimum	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\DeploymentFlags = "3"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\AuthorizedLUAApp = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\offprism\URL Protocol	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\8A567BD6FA501A947AD1F646E53EEC14	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14	VC_redist.x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\offprism\shell\open\command	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle\Dependents	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle	VC_redist.x64.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\curseforge\shell\open\command	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\101D0B34220A4F84D940AB04C4BED135\Provider	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\SourceList\Media\1 = ";"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211"	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8A567BD6FA501A947AD1F646E53EEC14\SourceList	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\DisplayName = "Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\offprism	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\offprism\shell	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\offprism\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\OffPrism\\offprism.exe\" \"%1\""	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\Version = "237799819"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Version = "14.44.35211"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\ProductName = "Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9CC2BA68DB8034640B9F8FD200D627FF\Language = "1033"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\VC,REDIST.X64,AMD64,14.30,BUNDLE\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13}	VC_redist.x64.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\curseforge\shell	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\curseforge\shell\open	OffPrism-Windows-MSVC-Setup-1.0.2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\DisplayName = "Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211"	msiexec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\MICROSOFT.VS.VC_RUNTIMEADDITIONALVSU_AMD64,V14\DEPENDENTS\{57A73DF6-4BA9-4C1D-BBBB-517289FF6C13}	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\PackageCode = "51C7A0D0D899AA345AE972FBABA82567"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14\Dependents\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}	VC_redist.x64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Net	msiexec.exe

Modifies system certificate store 2 TTPs 2 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E	offprism.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E\Blob = 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	offprism.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe:Zone.Identifier	OffPrism-Windows-MSVC-Setup-1.0.2.exe

Suspicious behavior: AddClipboardFormatListener 3 IoCs

pid	Process
5432	offprism.exe
1272	offprism_updater.exe
3304	offprism.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
5620	msiexec.exe
2356	msedge.exe
2356	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5432	offprism.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4964	TaskKill.exe
Token: SeBackupPrivilege	676	vssvc.exe
Token: SeRestorePrivilege	676	vssvc.exe
Token: SeAuditPrivilege	676	vssvc.exe
Token: SeShutdownPrivilege	3636	VC_redist.x64.exe
Token: SeIncreaseQuotaPrivilege	3636	VC_redist.x64.exe
Token: SeSecurityPrivilege	5620	msiexec.exe
Token: SeCreateTokenPrivilege	3636	VC_redist.x64.exe
Token: SeAssignPrimaryTokenPrivilege	3636	VC_redist.x64.exe
Token: SeLockMemoryPrivilege	3636	VC_redist.x64.exe
Token: SeIncreaseQuotaPrivilege	3636	VC_redist.x64.exe
Token: SeMachineAccountPrivilege	3636	VC_redist.x64.exe
Token: SeTcbPrivilege	3636	VC_redist.x64.exe
Token: SeSecurityPrivilege	3636	VC_redist.x64.exe
Token: SeTakeOwnershipPrivilege	3636	VC_redist.x64.exe
Token: SeLoadDriverPrivilege	3636	VC_redist.x64.exe
Token: SeSystemProfilePrivilege	3636	VC_redist.x64.exe
Token: SeSystemtimePrivilege	3636	VC_redist.x64.exe
Token: SeProfSingleProcessPrivilege	3636	VC_redist.x64.exe
Token: SeIncBasePriorityPrivilege	3636	VC_redist.x64.exe
Token: SeCreatePagefilePrivilege	3636	VC_redist.x64.exe
Token: SeCreatePermanentPrivilege	3636	VC_redist.x64.exe
Token: SeBackupPrivilege	3636	VC_redist.x64.exe
Token: SeRestorePrivilege	3636	VC_redist.x64.exe
Token: SeShutdownPrivilege	3636	VC_redist.x64.exe
Token: SeDebugPrivilege	3636	VC_redist.x64.exe
Token: SeAuditPrivilege	3636	VC_redist.x64.exe
Token: SeSystemEnvironmentPrivilege	3636	VC_redist.x64.exe
Token: SeChangeNotifyPrivilege	3636	VC_redist.x64.exe
Token: SeRemoteShutdownPrivilege	3636	VC_redist.x64.exe
Token: SeUndockPrivilege	3636	VC_redist.x64.exe
Token: SeSyncAgentPrivilege	3636	VC_redist.x64.exe
Token: SeEnableDelegationPrivilege	3636	VC_redist.x64.exe
Token: SeManageVolumePrivilege	3636	VC_redist.x64.exe
Token: SeImpersonatePrivilege	3636	VC_redist.x64.exe
Token: SeCreateGlobalPrivilege	3636	VC_redist.x64.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe
Token: SeRestorePrivilege	5620	msiexec.exe
Token: SeTakeOwnershipPrivilege	5620	msiexec.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
5688	vc_redist.x64.exe
4680	VC_redist.x64.exe
3980	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5620	msiexec.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3980 wrote to memory of 1736	3980	msedge.exe	89
PID 3980 wrote to memory of 4668	3980	msedge.exe	90
PID 3980 wrote to memory of 1396	3980	msedge.exe	91
PID 3980 wrote to memory of 4668	3980	msedge.exe	90
PID 3980 wrote to memory of 4668	3980	msedge.exe	90
PID 3980 wrote to memory of 1752	3980	msedge.exe	92
PID 3980 wrote to memory of 1752	3980	msedge.exe	92
PID 3980 wrote to memory of 96	3980	msedge.exe	94
PID 3980 wrote to memory of 364	3980	msedge.exe	95
PID 3980 wrote to memory of 96	3980	msedge.exe	94
PID 3980 wrote to memory of 96	3980	msedge.exe	94
PID 3980 wrote to memory of 364	3980	msedge.exe	95
PID 3980 wrote to memory of 364	3980	msedge.exe	95
PID 3980 wrote to memory of 4936	3980	msedge.exe	96
PID 3980 wrote to memory of 4936	3980	msedge.exe	96
PID 3980 wrote to memory of 4936	3980	msedge.exe	96
PID 3980 wrote to memory of 5712	3980	msedge.exe	97
PID 3980 wrote to memory of 5712	3980	msedge.exe	97
PID 3980 wrote to memory of 5712	3980	msedge.exe	97
PID 3980 wrote to memory of 3444	3980	msedge.exe	99
PID 3980 wrote to memory of 3444	3980	msedge.exe	99
PID 3980 wrote to memory of 3444	3980	msedge.exe	99
PID 3980 wrote to memory of 2700	3980	msedge.exe	101
PID 3980 wrote to memory of 1512	3980	msedge.exe	100
PID 3980 wrote to memory of 2700	3980	msedge.exe	101
PID 3980 wrote to memory of 1512	3980	msedge.exe	100
PID 3980 wrote to memory of 4532	3980	msedge.exe	102
PID 3980 wrote to memory of 4532	3980	msedge.exe	102
PID 3980 wrote to memory of 1824	3980	msedge.exe	104
PID 3980 wrote to memory of 1296	3980	msedge.exe	107
PID 3980 wrote to memory of 1296	3980	msedge.exe	107
PID 3980 wrote to memory of 1296	3980	msedge.exe	107
PID 3980 wrote to memory of 4260	3980	msedge.exe	108
PID 3980 wrote to memory of 4260	3980	msedge.exe	108
PID 3980 wrote to memory of 4260	3980	msedge.exe	108
PID 3980 wrote to memory of 3332	3980	msedge.exe	109
PID 3980 wrote to memory of 3332	3980	msedge.exe	109
PID 3980 wrote to memory of 3332	3980	msedge.exe	109
PID 3980 wrote to memory of 4936	3980	msedge.exe	110
PID 3980 wrote to memory of 3756	3980	msedge.exe	111
PID 3980 wrote to memory of 5832	3980	msedge.exe	112
PID 3980 wrote to memory of 4936	3980	msedge.exe	110
PID 3980 wrote to memory of 3756	3980	msedge.exe	111
PID 3980 wrote to memory of 3756	3980	msedge.exe	111
PID 3980 wrote to memory of 6092	3980	msedge.exe	113
PID 3980 wrote to memory of 6092	3980	msedge.exe	113
PID 3980 wrote to memory of 4576	3980	msedge.exe	114
PID 3980 wrote to memory of 5820	3980	msedge.exe	116
PID 3980 wrote to memory of 692	3980	msedge.exe	117
PID 3980 wrote to memory of 3536	3980	msedge.exe	118
PID 4576 wrote to memory of 4964	4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe	119
PID 4576 wrote to memory of 1856	4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe	122
PID 1856 wrote to memory of 5688	1856	vc_redist.x64.exe	123
PID 5688 wrote to memory of 3636	5688	vc_redist.x64.exe	150
PID 3980 wrote to memory of 3144	3980	msedge.exe	130
PID 3980 wrote to memory of 3144	3980	msedge.exe	130
PID 4000 wrote to memory of 1408	4000	VC_redist.x64.exe	137
PID 1408 wrote to memory of 4680	1408	VC_redist.x64.exe	138
PID 4680 wrote to memory of 4120	4680	VC_redist.x64.exe	139
PID 4120 wrote to memory of 3248	4120	VC_redist.x64.exe	141
PID 3248 wrote to memory of 4856	3248	VC_redist.x64.exe	142
PID 4856 wrote to memory of 1840	4856	VC_redist.x64.exe	143
PID 4576 wrote to memory of 5432	4576	OffPrism-Windows-MSVC-Setup-1.0.2.exe	144
PID 3980 wrote to memory of 2356	3980	msedge.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x290,0x7ffeb631c188,0x7ffeb631c194,0x7ffeb631c1a0
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,17406696936839803499,11840455699804236337,262144 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,6576201842909046433,5364095705908390686,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,8416156921742584886,4697418079611155290,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,11930813134187956440,1605476865930184849,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:96
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,8717341183206208313,7618407518006453223,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,2773458391478370295,276933041611637436,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,2460060310863352125,18319481594981934092,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:9
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5232,i,9355620819765660028,8504347350142090144,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,17987675210508788649,5065597771679966463,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,8473762716624774466,865769060108382699,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,337876854743138416,17167765729076817727,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,6082677075633223697,1296592588345043546,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,6082677075633223697,1296592588345043546,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5944,i,1158496048031930194,10349914902806822487,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4980,i,17917993363110385549,4761265514280846814,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4592,i,6090881021505640632,1007220701297494266,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,7884101944948608523,6559616099514097859,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5224,i,653547111917244342,16281229575118734854,2097152 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,10720973439221471840,911480866749167670,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7560,i,8727926042569801656,5723264590854085242,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:14
  2⤵
  PID:6092
- C:\Users\Admin\Downloads\OffPrism-Windows-MSVC-Setup-1.0.2.exe
  "C:\Users\Admin\Downloads\OffPrism-Windows-MSVC-Setup-1.0.2.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Reads the TCP/IP host and domain name from the registry
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of WriteProcessMemory
  PID:4576
- - C:\Windows\SysWOW64\TaskKill.exe
    TaskKill /IM offprism.exe /F
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4964
- - C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe
    C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe /install /passive /norestart
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1856
  - - C:\Windows\Temp\{333980BB-863E-444A-92A0-66A3312DC63C}\.cr\vc_redist.x64.exe
      "C:\Windows\Temp\{333980BB-863E-444A-92A0-66A3312DC63C}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe" -burn.filehandle.attached=752 -burn.filehandle.self=756 /install /passive /norestart
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:5688
    - - C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\.be\VC_redist.x64.exe
        
        "C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{BABE2664-4CD2-464F-BCA1-352F1DD655B2} {20512CD4-0283-4A28-B033-7FFF6BDE2B05} 5688
        5⤵
        Executes dropped EXE
        Adds Run key to start application
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of AdjustPrivilegeToken
        
        PID:3636
- - C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism.exe
    "C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Reads the TCP/IP host and domain name from the registry
    - Modifies system certificate store
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: GetForegroundWindowSpam
    PID:5432
  - - C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism_updater.exe
      C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism_updater.exe --check-only --dir C:/Users/Admin/AppData/Roaming/OffPrism --debug
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Reads the TCP/IP host and domain name from the registry
      Suspicious behavior: AddClipboardFormatListener
      PID:1272
    - - C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism.exe
        
        C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism.exe --version
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: AddClipboardFormatListener
        
        PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7684,i,4794281215810269315,17678850824640160302,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7624,i,4329629534610782764,15889536476574343614,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=7652 /prefetch:14
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7408,i,12076943451206492828,14512468801653989006,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:14
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7228,i,17512240818011152273,6495239556848567696,524288 --field-trial-handle=2320,i,811641725867098493,11246966039546269824,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:2356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffeb631c188,0x7ffeb631c194,0x7ffeb631c1a0
    3⤵
    PID:5656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2076,i,14859066419934452337,9261551216574773851,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,3776986647429521516,12168564261837448750,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:13
    3⤵
    PID:5840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,11784020058881284236,11573113015432922858,262144 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:2
    3⤵
    PID:3636
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,7501572021378314446,3986158626836398773,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:14
    3⤵
    PID:2668
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,7501572021378314446,3986158626836398773,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:14
    3⤵
    PID:2296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,6893254285844602825,9532936482400725416,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:14
    3⤵
    PID:2044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,14409173266215675629,4246722962933019338,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:14
    3⤵
    PID:3976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,9956032716800678852,12348280417256092014,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
    3⤵
    PID:2916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,3993308244337818643,15005875109121201400,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:14
    3⤵
    PID:264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,17736234417430624277,7759224617902577366,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
    3⤵
    PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,18013176588986148270,8474770538974980999,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
    3⤵
    PID:1672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,10357491976717816391,2978189351814921509,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
    3⤵
    PID:2200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,12303977031632399146,17499441099588478009,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=1100 /prefetch:14
    3⤵
    PID:6880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,10447244750389695150,1980466612467343220,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:6888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,918344082482328623,17172355855187458175,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
    3⤵
    PID:6896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,11618334768667199929,13198508716585574448,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
    3⤵
    PID:2812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,8688260278675389192,17654178280505623520,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
    3⤵
    PID:5720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5460,i,2975337684363846848,8762480511928119272,262144 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,8548443263966955873,11744477243363141395,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
    3⤵
    PID:7072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1120,i,4602620124432571608,14063109465083626654,524288 --field-trial-handle=2820,i,4769452582244801833,2621230419836217484,262144 --variations-seed-version --mojo-platform-channel-handle=1596 /prefetch:14
    3⤵
    PID:6220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1792

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:676

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:5656

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5620

C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4000
- C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
  "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261027091502.log" /install
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1408
- - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=584 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261027091502.log" /install
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4680
  - - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{509257B9-8DBD-4DBE-89F1-5D3D95C6D6C5} {F3FFD19F-FDDA-4325-9B96-C20C699D9CF5} 4680
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:4120
    - - C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1004 -burn.embedded BurnPipe.{93B62B64-2F16-47E2-A721-6D2263EAFC8B} {EDC8A51A-BFAC-47D1-AA5B-D8D3E1FE4B80} 4120
        5⤵
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3248
      - C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1004 -burn.embedded BurnPipe.{93B62B64-2F16-47E2-A721-6D2263EAFC8B} {EDC8A51A-BFAC-47D1-AA5B-D8D3E1FE4B80} 4120
        6⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4856
        
        C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{B85EB6D0-A681-42B7-9045-255880042133} {152073FF-9A54-44C6-B873-8CD6AE419FB9} 4856
        7⤵
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:1840

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3564

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004DC
1⤵
PID:4724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5a0c3b.rbs

Path C:\Config.Msi\e5a0c3b.rbs
Size 19KB
SHA256 792ba1c2c2b82da6149967d07b3dd81357e073ac2ebe5e5e53b8e6c541675028
MD5 6a783b776e1cd8617ff72177278de28a
SHA1 a4cd20a9a0987918b0f1b92f4897e46a252b7918
SHA512 625e2be5f0e76aa0bbb8adc603087c540204c8d93dbcdd4fa77e5ec006849af87fd9059c74290c5dc586a6cfd2d1162f749de6bd046f5137cba736f88289fa62
SSDEEP 192:7uRa1kR715dXcFUADIc1f+W+y4+ogPBn7:7uRa6R7TeC81f/cqn7
TLSH
T16292FB427690C9E2D8766B30CD631B653B76DBD5A390438B50DC94308F93BCA2F9D68E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a0c47.rbs

Path C:\Config.Msi\e5a0c47.rbs
Size 19KB
SHA256 f6f1fcd127cf61ddea099f3ee919b1b93b51692d367f460c4001586b88666e30
MD5 489f0d645ac4eb635074e0bce8d9d3b8
SHA1 3565e2d6bc5b58b791da93e3492461966fa36f2c
SHA512 4df1f707a9f1e3d33824fdf83d328248dd5600bb579d014d87efbdbc6ec62a36b0d0d22aa3b6da5acfc1427621998f94fd91e860a04347ff947f984d0bcfd795
SSDEEP 384:7OOGnJXMjZ7Up+BFqiO6d1gJ60uJ60GoaOD8Lfv/8c3zMZxq+nNwzQ6R:7OOGnJXMjZ7Up+BFIB6F6x
TLSH
T1D192BA026640C5E3D8A62B70DD4B67253BB5D7CAA355A38B41DCC1308FA77CA7F8D24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a0c4e.rbs

Path C:\Config.Msi\e5a0c4e.rbs
Size 21KB
SHA256 ca3ae20f91c50f996f4e455cedd37dc11236e5b8f6d29cc6f9ae8ad5fefbf97f
MD5 2a039dfec53461ae68a778b8412a5198
SHA1 b9242fc798933b1dae6f8248f7bddee0cee75712
SHA512 c1f7b29b754289dff7eb00adf037818a409b4682511a9071ce18809e0e2db06872aa8f38001c3f1a574c4a5f33669685b30097e4e5a7faa629444ca035df3cbf
SSDEEP 384:BQRRGRinAKxNAUhUC7xJjrMNYPzIbSfKqaZsUL4lwZ7kP:BEwmAKhkmP
TLSH
T198A20D03768099E3C86627B1DD671BA93B73D7D99350434B10ACD1388F633C72F5AA9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5a0c5d.rbs

Path C:\Config.Msi\e5a0c5d.rbs
Size 21KB
SHA256 ab5f9a65760872ca2783a0c560224bdd9d7993f5d667ce53ba1844be68203e06
MD5 cff7ee86f92230540e0e1b815bc92ba7
SHA1 c6c39d919252ca259f9c65cabdc9ad85acb9193a
SHA512 2e645107bd6f9ed38d414e18487bcc24398a47a68385daf708276a4885c51a689787b9545e33c9b6ee26c5692f896388f7308d8e6163c710555c701678071aa3
SSDEEP 384:BrqvDIAZxEth/phSYjK4WbJGwazsalckU72eC6jJkE5KgJtUJtsr76c+0dWg:BsDIAZxEth/phSYujbJpTp4Gr76/0dP
TLSH
T1DEA20D42BA40D2D3D8A62B70CD975B2437B5D3DAA755434B10CC90348F937DA2F9AACB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\state.rsm
Size 1020B
SHA256 402f138119c75e0191e0072c945c04fc99d5ef9772d70fdbcfff967bd43c22fd
MD5 483e0a79351b2735c180f684fbbfa93c
SHA1 1fca1d3a744838272b8e29e9911d154486fef5bd
SHA512 f8e4d3f6b00c106155138225e8580f029d75c45424ff082684b649613e4dcf222191c0e9478f2e84cf1d82cf2186d8b34323f2c6efc517d0723eadd7079f607b
TLSH
T11811D661AFF6501AF3FBAA3129F516241C7BF4110E31912D0182618A8F32F60DD3076A
MD5 SHA1 SHA512 TLSH

Submit Download

0b168886-6bd3-43f4-b094-96f0072c6928.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b168886-6bd3-43f4-b094-96f0072c6928.tmp
Size 46KB
SHA256 e751458adc676935532b2f55d440f4da3ac007312569cc97e3ba94defd9efa7d
MD5 aa35a36dec6f896206955360e822523e
SHA1 c4553bfe10dfb85b231adde08512746c25d21c12
SHA512 96e3fb787205be57af719e594b78690bc551bee2868cb094e10738bee09e1cdf0252643af4c0a3de72276ede06dbfae5c7eefadfa80a615179cafc6b4e9cba0c
SSDEEP 768:wFQI3dwglxxbtOySBDu5/9OA9at01j0iq00+IaiNAM/mIoaTZccHkLx:zI3px4lumCHq00Na0ZmI99EV
TLSH
T1D523C1F99CE3893AD8AEBB47633D2E159ABCC127F0A44550F7851A0CCC2217FE706861
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15903dc5-5433-4a7e-a2f5-99909fd20cd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15903dc5-5433-4a7e-a2f5-99909fd20cd9.tmp
Size 38KB
SHA256 071febc1dacf292e4b5b7e18865fc7a22e94d306432a8685c28c095091c882c6
MD5 bb0e01fb8415f727e4b75134c349804d
SHA1 c3c9abe02f28111ca6b5ee5c294ecdc7c6fb022f
SHA512 cf9b47563d00dbb804a5695b581953483851ddc96742623099834d5a84170ffaa7aa3798cece10f9af9e4df5d086a813176a7edd14881d20456f4ed524888b78
SSDEEP 768:Q/UxvxjgC+H3+hV3OySBDi/9OA9at01j0iq00+IaXjSHxRz:9Zj3+H3+hCl/CHq00NaTSTz
TLSH
T16303C031ECB59D63ACE2B284730A6387DFF44653C6CA5A9049ED2E0D058B6AD170BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b552ca0-01f6-465d-88ab-d57377b8baea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b552ca0-01f6-465d-88ab-d57377b8baea.tmp
Size 42KB
SHA256 c761af3cf4d9e70b5398876d0fa04f2a3f758510bca9b29e46c9cf1e7d22c124
MD5 50ba1a5e30f0eea9de961109323dfe60
SHA1 22b5177a0c01c615809bfcc34e0c8f0e650cf3a8
SHA512 5e1b2aa39f99f4d4b5463db4e16f9d05e8a1cab72ffde6009f3d452804b228515c993a6831cf66b5cce4bcc547932b1793edb186614debac810c67d5c3efa6a0
SSDEEP 768:EFQI3dwglxNbtOySBDuM/9OA9at01j0iq00+IaJnEoaTZccHeL5:nI3pxkludCHq00NaxE99+l
TLSH
T105136BF198E78937D89EA747A37D2E429EBCD163F4844A40B7D9580CCC421BFD70A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5ce761ad-4a21-4b56-b2ea-1a156ea2f0d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5ce761ad-4a21-4b56-b2ea-1a156ea2f0d7.tmp
Size 44KB
SHA256 bda09242054aacd42880218f3464d307ecdac61b54310081a10964c69570dab2
MD5 7bb5c8c432e5b43bac260e5638e51670
SHA1 aa296052d344176cfc5709b585602219bc752f20
SHA512 05135812f96247d23cb468b6f168971228feef2b5763fe047b3388ddb855104771612e11b8293b44a508df42d0b00738a7d7a63efe5caf557ee830dddc30bf56
SSDEEP 768:WFQI3dwglxNbLIOySCN/9OA9at01j0iq00+IaJv3/Qwd4aTZccHeL5:5I3px7CiCHq00NalPQAN9+l
TLSH
T12B2307F598E3893BD8AE6783633D2E4699BCC123F5985990F7891D0CCC521BFD306865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80e55c4d-76a0-4e18-a4af-7fb169734ce5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\80e55c4d-76a0-4e18-a4af-7fb169734ce5.tmp
Size 37KB
SHA256 bd1298e6b628a10ba3e21c536e15b4a616478b82f361ede10cf5c58051c303fe
MD5 fdf17257067482c3001a4f1c8645ae6a
SHA1 12d3a774e513e715c0ed0774e689a90f3c18c38e
SHA512 ebdbe47c404bc0c3f4e31cb6df8b69a5b4c121422525e997c0cf83c6a088f854b8d542fd0e52becd804f6cafa6615f29c03772a9c75a6f4e2d8c7f0850f533fa
SSDEEP 768:X/UxvxjgC+H3FcGOySR/9OA9at01j0iq00+Ia2PSHxRz:KZj3+H3F8+CHq00Na0STz
TLSH
T1C803C031ECA19D779CF7B384730A63979FF44663C6C66A904AED2A0E01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

987a34db-3611-46d7-bd89-733fa663c25c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\987a34db-3611-46d7-bd89-733fa663c25c.tmp
Size 34KB
SHA256 15814434c0a89dfa9378117d6f87924a71e23947d30ea7cc6599e06c9c24939c
MD5 166569a66a320a0a0ee03fa450c26e91
SHA1 f7fc7d9323f2afbfc32e67301e66f9ee8fac28e5
SHA512 7e1a94f413969d705ab369c5f141820aa9ebf7a0a3c0013536c476747735f4462a1fbda5609d665828c9c605f059469817f99a8a72b38daad543950baa37167f
SSDEEP 768:kh3D7nbtOySBD4R/9OA9at01j0iq00+IaijoaTZccHkLx:kh3D7yl4+CHq00Na099EV
TLSH
T150F2AE71FCB59E239DD6B295B30A33429FF49213C6CD5B80C9DE690D018B69E270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 636aea6eccf7ac82535ca079229f0cf18f9ca60aa70e8f82fe2e8ae24829f97f
MD5 37bf40d0583bb3e2e0125359725bcb2c
SHA1 e30cee1e8a091674b778e2c4d1f970f5426ab0ae
SHA512 7aaf1096e9c2706f4e9ef9291866483d1e754910272bfe16935d5810283e8e8d92aa3cd234a9410dc0ea462f45b75bcda90654d96fcd4f899222fc27af970331
TLSH
T111D0801635163FAFE16E6675566055506D44DE53DF06054507131D364BB01453861DDC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 951964aa771b180b28740b27d7eff0f630dd8b4a0a73846486babbc13bcf3b30
MD5 94ca4fa8d37d1ce08febdbc8fd56f5c4
SHA1 2a6c4098b5cf47fb28a184322e722fa998add095
SHA512 d84cbfa87a76ac2c2641e9b285f39b6166a3a2ebbdd8f4989be9f28c5ebfb9be18f591c083954af8ec739d79bd0f1fc6c827ef683b675c4090dedf9fa480fa19
TLSH
T1B3D0C03E32073E0EDB4F6231265052A06800CE0BDE07055002231D3105A021C38100EC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0ad885c7dd6e8011221561efe5ae3499b6627f63ecef195eb479449e1075a606
MD5 8ef821225ca0b0dde43e2c3aa455ef3a
SHA1 5c8c428d679075e237cbbf7fe40c53e4dbc0456e
SHA512 0282841cd7fe256225c71d180f025567805a052c88d6defc946c74216a87d56500ccd767ff63ae28775693a75d7699cde02bdac820462e03191e456ced704b28
TLSH
T147D0C03E32073D0EDB4F6231265052B06800CE0BCA07055002230D3105A021C39100D8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

055e32be-6c1e-4f79-aa6a-981fa64c070e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\055e32be-6c1e-4f79-aa6a-981fa64c070e.tmp
Size 12KB
SHA256 337fed676baa493ffe4eacfca1f66e0466f2d9df2e8ea906691958f129c93a4e
MD5 d9a0aa6baeeed21af5246dcfefedb5f0
SHA1 284a44d04e4708cfa3b7a6e6bc74f7882bdcf12d
SHA512 636639c6b38a52d09389b70080d36368dda3e30609154520a5b41366b897aa63f3e5f0c074bc35b329fa7a77476defedaacac790e1beede7b5bd2be043f40075
SSDEEP 192:sxRxROOT/fws8l73Y8QVoA8pJ/7lN/g6+WNClzBSud/YgGIcGSwIgDyJ:sxRxHT/fws8PVZ/5op/mMS
TLSH
T11342B711AA34697B9CDBD21EFA55BF53E2FD5032A1D01F49A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22063cfe-5c9e-4897-80d2-12e1a2ec2a58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22063cfe-5c9e-4897-80d2-12e1a2ec2a58.tmp
Size 14KB
SHA256 b33909b8912ad60925eadb965463bf82bf50829995906678e809930eab61621a
MD5 6d94b3a97b1f3c0aa05061cdc512820f
SHA1 e3595c5f981842cde08791d1739c8cb154ccd3a6
SHA512 37c7c7f639984fffb65e7a73322e9f34ed67c6bdcf489d04a9c8dc8d8d0cd232c281bd5619028179a51b59b7e54a8a0392c69fb2fdb5d5a3f414d5f05bd6143f
SSDEEP 192:sxRxRnOT/fws2WpVbxUNS1U73Y8QVoA8pX/7lN/g6+WNCiXzBSE6XYg1exGSwIgz:sxRxQT/fws2WvbSNS14VH/59UXkMz
TLSH
T1EA62D855A934597BACCBD21EFA56BF53E2FD5032A0901F49A6FC8A1C00E77DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2fb9bc78-3cf5-49e5-a3ea-2b6360ce9293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2fb9bc78-3cf5-49e5-a3ea-2b6360ce9293.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

3219c561-d666-4c3c-94f7-57b79f348b8c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3219c561-d666-4c3c-94f7-57b79f348b8c.tmp
Size 414B
SHA256 46909b4689107e64bee27b96dbfa6c1bed651af88bf09cfdc4f9f8c7a4bd1ff7
MD5 e5e9dfbc6a8b086799acde983d46c746
SHA1 d8a4c7ea3eec9a5d072f260b7ca82b042063db7e
SHA512 a38cad31368541eeeb4a91f4d59b976182d871cfb481ec0c57148b4047ae5cf7d02058608dcf4b2cc19a264dfdb6db5cabd9896e92ec8c35a43405779d36f683
TLSH
T1E3E02BAAD921AC3B59FD571894545686F610130B3A41555F7B3D800C8FB473B468685C
MD5 SHA1 SHA512 TLSH

Submit Download

4a25f58a-bf10-4e40-9af9-074d9c6d5799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a25f58a-bf10-4e40-9af9-074d9c6d5799.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

63dbd03a-1c9b-492c-8d12-815c02b6f0c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\63dbd03a-1c9b-492c-8d12-815c02b6f0c3.tmp
Size 13KB
SHA256 4ea027d84b8c867315a4cc3d92fa8e7301127260de785914beabb0f3a137940d
MD5 824b4836048f1115c655cba24bbe9872
SHA1 73074225feb7359f7a21c6590c6c3e141715250c
SHA512 1f2528475bbfd0acb1da96e8d174266498150e026826535ddced2799acffb96684288ce865e439f83a61886003fdb0c0d491fa2a5522e6f92bdc5ec76fb7994e
SSDEEP 192:sxRxROOT/fws6l73Y8QVoA8pJ/7lN/g6+WNClzBSud/YgQNcGSwIgDoJ:sxRxHT/fws6PVZ/5op/ZMA
TLSH
T11352C815A934697B9CDBE21EFA55BF53E2FD5032A0D01F49A6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d099150-f6a8-4714-8726-c008b224574b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d099150-f6a8-4714-8726-c008b224574b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e329112-0c91-4a18-88fa-245b49d610a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e329112-0c91-4a18-88fa-245b49d610a5.tmp
Size 11KB
SHA256 13110d8e75ad4b420e3fb4b4278027be172b7cce6e9cc8de2fc6eaab53c228d2
MD5 c915f3cf96fd46746bc5c5fe1e3d099d
SHA1 0b35b7b54d94419ae99f5a1585dd70976bcc9dc9
SHA512 726eef914041e618d83bac9814fb6e0b439f27efc8400770bd7ba4bd90eea575d271c3136b8296310ec19976f597e8166f5272a2a04590a50924b6f4d5e00453
SSDEEP 192:sxRGROGOT/fwsF2CIY8/oA8pJRA/g6+WNPzB/Yg3IcGSwIgIJ:sxRGTOT/fwsFeq8/5l/LMs
TLSH
T16E42A615AD28693B9CDBD21EFA65BF53E2FD5032A0D01F49A6FC8A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89890d8e-2983-45ea-adf5-bb680a984b53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89890d8e-2983-45ea-adf5-bb680a984b53.tmp
Size 14KB
SHA256 d98661a8f3431df47bd2ad00c28d1df7d14436fdb544b0ef47c8d72b88129371
MD5 e4e9b9431d27a6ae610b914980b18e6a
SHA1 271be2a29c7fec641e9e4eba7d3622b71e98099c
SHA512 a0da47af0d10f628db6fd5d00da60b9d0be43b0993a49a49efad506f13627ed30412e22f08eea8f98773bcc4da49f1bae4a86a2ab06784100e58c842373dd189
SSDEEP 192:sxRxRnOT/fwsXWpVbh73Y8QVoA8pX/7lN/g6+WNCiXzBSE6XYg1efgSwIgDoJ:sxRxQT/fwsXWvbzVH/59UXUMA
TLSH
T13D52C751A934697B9CDBD21EFA56BF53E2FC5032A1901F48A6FC8A1C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98d100dd-0812-4cee-bbb1-b0af99aec958.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98d100dd-0812-4cee-bbb1-b0af99aec958.tmp
Size 23KB
SHA256 140e38352527c8b755cc4ff88345b27710c4b6e99c929b4ce5f7649b755f6ce7
MD5 9dd9918b0aa82bb2dbdc96161718400b
SHA1 3ef38431f30b6aa6ad550c84c229c33be97399c7
SHA512 03e63a596ad44780630f7f9b62cebc29b111431178f9274eab2106e16c44a8c3041b5fe28e07570350942a57e8b740968bc8856b018c3aa01d7fd71453f48759
SSDEEP 384:pFZwWWPfCtg/NFf1pKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVt5931RUWrond9:p/wWWnWg/Xf1p8F1+UoAYDCx9Tuqh0VF
TLSH
T1A2B2DA2B704DCB7F4FC04A9D9C196FDB6D9802C796588D8047FAD94C02C77EA922A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 27KB
SHA256 f517e3c6facb8c02c6d4598e03aa12e148a20d36c7913b9bbbaeae9289b1569d
MD5 19955273e98eb0584a482e57c5efb7df
SHA1 332aa91cbeb2ac7a21c504bc77f2811cdc479bea
SHA512 50b398bf798c884a5185fc8f00bb53548345422ecc2da7aab7988c9ca23229f58b2225b96eb01c87eba00aea5ff3c6e15be765992825fccdb4ef10ea8dd29963
SSDEEP 768:o9K9AJQjVzuCrVErLWknIDZTvhPBJP/R4vNAxDphd:5KKjVzuCaWoIDVpBJRE2pX
TLSH
T165D2F1FEDFEC55151C7442BCBEA6B90BC389DDA020907C1815155A859F2CE3C949D2AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 120KB
SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
MD5 7e2cf6f35e336618dcedac5730c99c6c
SHA1 3233e5cb89aaccf454652e61ab18672211f9c828
SHA512 ef54e061a31a472968702739f08552eb9eeed7b712affabdb8f4fc66c3a285d6f92bc9701c984d23738e1877332b06c58c690c3c4666d7ef19ddd538a6c57420
SSDEEP 3072:sQboBWR4jxw4c570csihKUJs+iOYmoIDT4LPd2ZeYNscm:9oBWi2570csjUK+iOYmr3yY3m
TLSH
T13CC312FB58A89632F2AA0AB4355A73515DA3762F034C4BC597B130D16AD2E80D2B6F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 119KB
SHA256 369fd6529033fa91b688fb085437dd2c89edc445282db8523bfaabbc68734a0a
MD5 68d44cce138278fc28f3dd517c91bd12
SHA1 f7b3b2fe434b63743b3630a6f0a4036d7342a01f
SHA512 cb1974bb8c0608535c25530b310aad6128d7da6feee773540b8c7ee86c59952d57bd149819c3fd1a14789c64e4730280f28a4343360621b15a47df53b9e799a7
SSDEEP 3072:LmwDJOzGBTg3+nLHOxBsuBhgFmOqSPvRCl:VDJKYNHO8ahgoOqSq
TLSH
T1F2C3124D62D4C03DD1B272532EE714FA94EC18777B08A712A88C57B8AADB7319ED1885
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 31KB
SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
MD5 c229b974a1531c851b4bb7c133930dc0
SHA1 7fb9eed0376d3812c03174d5fe740dea3e1f5249
SHA512 ea267a9005fedbbf2ef9d4137f580451ea13449ef6bd84f5685194d2cc054d7c256758d3cf3ba868ba0ec77197509ca32931af4fbd82bbd38b2249c54ee22cf6
SSDEEP 768:yMpfRDTUuuCnzekb80O5Q1ul718L1fBzrPFCW4l0sXtDkk:yMpfR+Cnzek80O5T7I1fBn9Cbl04Ck
TLSH
T163E2F26A379BF03082C70CA379D7A5C2B11174B8DCFDD176581C599D24E86B3971AE0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 101KB
SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
MD5 9357569c4b378556d6eb9e7ebeea7f90
SHA1 a6563977179b1738a8943b807e9f0b1bbf5066c2
SHA512 7a4e9fd6eada3628d8520847cf7d4161f70bfdcbc1b648f74cf126eb38ca5ff144b0051ad318d196bd6d765011d44d81a82b762c20a2f4f5a040016ddfd888e6
SSDEEP 3072:8pl8y51AZoKKcpF07XRUTGt438o5KbUGzV:8D/xKv4OKdjZ
TLSH
T198A3123507B825FA188D64FAD1D570EC63F2FA8548B120BA6128F7DA7D47F26601ACCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 45KB
SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
MD5 c8e4c6f36ea06324798a818de3ebe51f
SHA1 edc9345d3b88ece244fb417dcf6b66baf76f6e77
SHA512 9860e84790129898b87c78d7a53793989060b2e3686f6af878643a7299b2cb91697dd9cf860dacf92b935fa25b0a84b339b9e453e5a6b01d5c92eea3b1a018da
SSDEEP 768:LA0PVKH1+lSnPlgJsaOl+X/zuR8HFzO/Se7PUaDCuLuT8Y+nPn1qcdu6clyez5k:dKH1+o1U/zxzO/tAuLur+nPn15hcse1k
TLSH
T182230156ED8383F9AC42435FCE2146B224EA4AF3F047849A3040B7529F3413B7E2BB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 240KB
SHA256 b56ada64ba1ae6589055623c7b2f41dc13ff422e6b4d26b15aee8dcd7e84c6c8
MD5 47caef33ff32dd157d0b0e7b50cae300
SHA1 9aeb673439864d911f6a3de2bdb1a776182e1a97
SHA512 02a148a7f0643b27194ac885c1a6684287050da37b49e24f9c00a0a12d6ffa2cf01facd1b0f4fde468a266f61f081ca387299cb81863872acbae8d22f30834a4
SSDEEP 6144:YTheEFtDNT7KCq8OnJLGUc1lVqQFkDIHmhl4fN:YleKdu8UJLVcTV9F5H0c
TLSH
T14A34239B417C3AC6E5B37A48C44ABB18136B2932429D3964978E7EC2D7EC643F5F5023
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 611KB
SHA256 b2fbb06e4e66d483fcf61dc52c1f1b6fd8de10b6e722f6fb12f52f63a3eced47
MD5 2bd059f13acae2fdebcdb9ffa963ce8e
SHA1 8b3cae0fa0df198c7f3b198dac674ed3b6c6862d
SHA512 97c17a161f58390e1e8d7609911cb1b8448f830b916b60b4e0297edf0517483f643cf0753ed979158ca1ee3b40e42529e93d16e9185897f9a60f917c08e4b1af
SSDEEP 12288:IYPY7bdEgRvWmOcdy49mQLcey0E7RV2ty5IpXXlbFQPUm2E8ENWSmGeE:y7ZE+OU395b2yty5CXXrzVE
TLSH
T1E2D4238CEB77AF71CF11BA4FA3BE60E17104D64AF9E071C3C16A8E97525A051D83DA90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 102KB
SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
MD5 b1709ab341a9f5db44ed9465436bc4ac
SHA1 e73cb80f1b8c48e73d5462ae52151e74c27a7c6e
SHA512 1ea8b7c2b8f28c18586bd5ca6ee86f437e96e6fa9565fba0267b98b5f607abaf65693f8e82ab13a3df8acd633e61d484f1168c6d4f9714a73484cf1f89acba1a
SSDEEP 3072:jhXnN+PbqorsZ/TbKgqOphtIpiVNvTHSrl4PDBrNaa:9napsl6w+i7vT0l4bBrNaa
TLSH
T19DA3124E98E55B22E8C15D84CD2936E2E48FC9AE5794A0EF345DA6DF880E074C8B148A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 20KB
SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
MD5 2af2be0651a488d15f87aadbee775f4b
SHA1 6da37d1d9fd929a8c79ce771dc565d2f554e9d9d
SHA512 d532f7200f9655de22309bff4d2676a1c72c7d04ef5e50e66c4c9de71f4ff835bb8ff82066014fcdb21d88ce04a43f96e7e4260fd651f47736cb7e365ad25651
SSDEEP 384:R+ouqO6S2dxUPYYchyHCYfJFLI4+i+Qzrao5atCv5+JQ9TU2M:RtuedxXDfIFLI4xlz2catCvMJQy2M
TLSH
T14A92D06ECFAED5241F5B1ADD5ECC2AD9066AE5DD6CBE53C7AB723270D9C0D408809230
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 16KB
SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
MD5 fef434088fe7570529b771a4479903cc
SHA1 ddee0bf726ca69a1a7e62e0f9966b09260bde209
SHA512 abf196c2ba5f1ede7bdc6858225cb826e08ab98c8120162d6ec59e79d60a085e65fa02d1e2f0da8d38d3b1801667570f766de2a4c4c087bd87536bc21404c0dd
SSDEEP 384:yi2Y0hiz2XYMavYqbmNORgRMe9S/JtJIeCAm6Nojla69:y2vJbNgRMOS/JtJIoNo5aG
TLSH
T13172E047FE524A195918AE2692F03F2C2520B4C7B229EE92D55FF1249CF17AC18D076B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 36KB
SHA256 587d759e0bef559fad4ccf0ee6bedd2eec6e5ed728f4a617d81de910d05aa648
MD5 40827672eabfa7062dc6ca070d082e00
SHA1 4cc54a5bd23334ba2fd2332969a53c17e94c8f81
SHA512 0f28735f2d0084bffa6ad57e9e0c976a4527088a50889e52b11ccc47a320c8860d7ae6de7c4cc6cf2733f64427755450fb36e4dc6e771d97ed1cc17d1816c07c
SSDEEP 768:h44KlLEuv9ngHjywuCEf3ypxVklra3Xz7d4GmCO2BjYcd2Qp1Ab5R:h44uVngc7fakmHVBpBkqG7
TLSH
T15BF2F1F7E0B6CE753D2838A176F76F878C44428E116761F0A9961977A93CB235013B30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 16KB
SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
MD5 2cf8c574a39ccdb4eff91446c82eed65
SHA1 fd9cfeb4c4bcb34e2f40faab486d5d17c14943cf
SHA512 4b2d9d53e1543f0a35f64334440c311102e5a89cd95ed67fa936c0c1b1a62086abd95ca66fd89332da8ed292313718a9146b0c6505e6a750dbb7b8809653d8a5
SSDEEP 384:/TUjwI1S6QqeYhffUZ91ICdZ6ea3mm39WRUW+bXfdl2taEm4WhkXi:/bI5QRtHTdjat39rW+blVEiKi
TLSH
T14572E0F9572D2BA317C97E2D311CE53B22E70132466A00BB9EB96794BF14081D5E5C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 16KB
SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
MD5 8de2c6a1051f2d87f605d228d8e1cd2c
SHA1 a4a4c16de77d2f9ba598dfc2d5e4584cf32a5c86
SHA512 1f9552e220916772403307b0c98256dbf404d7aa20c00c11422e27cc78fa5d1edfe69e6e0abca3bf927dc57961a23747a8ee6027343f639c5a307d5bad797808
SSDEEP 384:qGid/SMAinz9Hh+YYkmIoXOS0wFrqDSc59Zr4gdwnqcZn7DQf:qPd/SCnz9cAo+T1HZrldpOn7DQf
TLSH
T1F472D09D0C6E5D6AAA382158A0EF175F56120D32047379AB43CF9CACB531AB258FBA50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 24KB
SHA256 61a68bab33afe5cc259bd17756c574217b61a01fef044f233e0edadba5af04b2
MD5 00c22851e98781f7156fe464aa171dd2
SHA1 5a120319dc59bae2afe3c353693d76fbfe07ab29
SHA512 8d32e5b4d9273b4193c1a8fef3080ad10aa55ebf72eb84b5c657f0754efad92cf7b1d50a673bc16f2b64ea21abcc93a451bc62c1adcb29b257e487b57c4f7fdf
SSDEEP 384:5gDUmtQ+3wyOpFBdnv8jZpMw0fk4twyDioUzQUARfxMEPAtY6/C0nxDyRRPX2K:iDUmt6FBVvwWTfBioUkRKftNCSDwPmK
TLSH
T137B2E1F03FD57C99CB04A4EB69561753E0386DEBA69A58EDBFC96716032086DC348C28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 34KB
SHA256 f6863799bd577d21fa60f1cae27e16366eb899e212934eb69736019a0c3287fa
MD5 c96d2f5053baac48ad5aa723ccce669c
SHA1 53ebbc48630a1d478690b45d0eaf2f4520ad20b9
SHA512 b6f7ccb0ac127af2111bc8191a627f7b1e19e42af6f2a12be786c1d7bf077fa73cde71af1204fdbd1f99b726d343c9ed7e84870a271eb552691d3b396b24b1b5
SSDEEP 768:SzWqIUHfmwY2OM0j1WvjQ5/8l6sZ6JulPOytQouZczU:SzVIU/JY1AY/aRZ6JulN4
TLSH
T1BCF2F125908D87B14120C5FB334A0B68EBD878FF5B4E84B1BADD29CD72C65E16399F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 33KB
SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
MD5 1c9cdac09158de333347865069c00bec
SHA1 b9b5be478cb17dff5021987c6b194140552c45bd
SHA512 5d70ade41acf79b58307fea6e249fa53d11b50dc963ee98d3d9194d100eb865ff2ec51d7245479df86a48ea76e2e6f2b1aa94a0da66bb3ae129fc373abb147dd
SSDEEP 768:uONzzT0g2ZDu8l43PfXaGifG0ZJ3FFC8I+Ovad5Bj/ojSdPd+dxL:uIznV2ZDE3yfG0ZJ3RI+OQ5Bj6SVd+dN
TLSH
T1D1E2F21DE08409473AE6A267E444C4D90C6557F30743AA3D57ECE67F9203EE18AFEE46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 17KB
SHA256 d09667ffe824b8499ff3afc42aee7f8de12778109f62dd7277a719870e9e12db
MD5 7acbccd39f0f78826087dd2cde3cca63
SHA1 435cbe4aee36dadaa2cb5bb9908d3e765194d959
SHA512 a8ba9edd3feab5cee573f1198786a627d5f1d7cd4bfc8e006806dd1f99e27b9ac583c8a10d33e0bceefe8a6161ed24ec5964024f4c7b3bd6d863a709adfb233e
SSDEEP 384:0RmUpNy/m0SWZYeO6LzYIpc0gQ4ji95x1ELACD+Vj:0LCtVds4c0t4jil2Apj
TLSH
T17A82D09D344289EE793BFDE03984B3EFAB388BB7C042139E55F749901194F112C25E86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 41KB
SHA256 99c55682d5be35b4a3123d60487e53901ac7b5b82b91f9e472039f0fb8d4d475
MD5 82ec0c2c3d0eb54b35d46c90429ee6cd
SHA1 cbfa627d247c590a33c7aa646b93388c70969b8f
SHA512 b0b29a9ce1c75ab8493a44177a36d1f1474a832d3dd13dd274a60de76c30d6dc9ddc1805d39610d8a6dcbabb37009e104fd6fa40e9bcb9495dbeaf262e1501c6
SSDEEP 768:YEuzFtTU/2/MBzbuPuvL99VuSGL1u1GIPqP69W/nhHRrzLdlS/d/DXndg3TIrc2:9uzbyLBnuPw9LuRg1TmiAXSpZg8rc2
TLSH
T14913E14D6478D9E0B01AA354640E7E0436E9708F13E23793F2DC549C61ABF86E827CBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 39KB
SHA256 a3a6b80605e30311dcb005105df72e46ccfafc0e376efcfa142e602017868fad
MD5 0d60cbeb04ca1a5b23cbb170dad13270
SHA1 be761f6dca8764b42c197ba4ae8098ac32ef6819
SHA512 1a67bbfb8ba0112559b44c20c1ed5e2e5274e4330b64a85c782809784eeae092294022ef1a329e53b4f817bc31d43d95ab3b90827f8bcf5018c9c6015202765a
SSDEEP 768:BpFnjXMUSpo7dvwN3oTAtfRbJ5o4isLz4Z7vb6w2rmhR6UlxT+sMWh:ljXf0nJm4isLz4Z7V2rmdlbL
TLSH
T191030290A4BD1AC038C17785257D387DF11DCFEEC2201EA9E71A87EC0EF9232995A476
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 50KB
SHA256 83681ad4609335f61713a32a50c648d609f11257fa30b8ed46c924838c48630e
MD5 d48d1839d0222aecdab64768ea73a35a
SHA1 72650005a0b76c2dc4e72308b75a7db9b1f3023f
SHA512 bf151de5546c2eb4f525d54ab6b01ec9fa735a056708d822186bd850cf9ec60448a0afdf40cec30ec19a0496e60e53d5ee60dd5b1297a966c6aedc60c4fdd558
SSDEEP 1536:h/kXzmIMmEaMZeW9n7QdWMAvmzn0sgJP1SE:hO0mSeWl7QdWvvmbtOP1Z
TLSH
T10C330265D34C87FDFB0A9E217F1E6E8523DF0A074079C1B505D55EE8AB3128E43A9670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 29KB
SHA256 bccc35b6fc2132d83e42318add345c4355e4004abb2aa3a92abc9e369180d065
MD5 75290a11b4b8632741b2e25bab773ba9
SHA1 f32cbe6176c62582b2426135333267c2fc4140a7
SHA512 646abefcd4cccb1855322b5829744d4a08af5d22517a9d378a6269e6b41a82e36f7f39adf9211d2bac5e395025cbc8c9de9d76a6b1609f991b16c74a7326bb44
SSDEEP 768:fIA49ZEkuPYRXx6o+kRVZ7kSNfzqI0KN5eWIP:DkuPYBxx+QVpfOs53IP
TLSH
T165D2E102924661DE5A674C1F520C7E2AFF9CEC1640722D17E5ED10F8E4FB8D758A5B83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 51KB
SHA256 5e9f3559d5533fc8a7466d0a8b3427e885ee9d64970b3ffa765222f2047f2baa
MD5 fe615c5c4b31f4c0aa98a6cc3fb64609
SHA1 85f4017a681de1387d38bac61fdee0c9f1a2f517
SHA512 cf4b80b7cd52f9be8227da9994b3f333e4ad2918b4593285020023b89f32724adad4a36306f9bc65f8debc1d1054713215fc85a0805c833b31e20700e9318cb3
SSDEEP 1536:TCeoREfoVm+Loq3N8Il4SVMpug+b85RyNw67++U:TCeoREfoVZLjeIBMvENZU
TLSH
T1C23301BAA25A15F1D438FC6282607CF801D9D6CD8D82717398ED8B70FDB9E818CF9455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 e0ace8a0c93acbfcd77853d8125b78973b1a4ac23eb15be3c30481ad1f21f8ef
MD5 a7769256dbf1c905d18f126358033c9f
SHA1 016a3d6049affbcbd28f47cacc5f9c24cb5014d0
SHA512 d935305cfa4d1d336ed2aa2764e0e51b0283fdba1d2c2b6548ab4bba6b1a06d3ed3552514a09081c6173dc6d4240973d44c2f763cae84980c5b8d542466663c9
SSDEEP 96:6CZJrh07zRI7L+Qt4joFBjPDB5vkwsxR6Kwa9alemIw/KRMtrkI3ETeTv1r0WGjc:6CZHoWcmRXFMvpbMqtZe
TLSH
T15AA1DAC7B7AC849DFF55C03075CA4C533BB09E8E00971FB32794E5346C463A5A359086
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 187c2f0b575a8be0ca25f149169644fa169c85fe75d05e6b5897ee2c779b625c
MD5 a12160975008d5c1a03e625c9aac903c
SHA1 4e83dbb3fb31e33af04c0515306859fc883f6bd9
SHA512 9f671a473347a49b7443c3d4cb50a28045d2004d5323f9c1569fedc7b9cc12042a5f8562a45f0854ad3cb6cf57fd5a359f1f9f4eb2768b4db4d9b58425cc4c34
TLSH
T18561A447B7B0845DFF58C83065C90C933FB15E9E45A71FA327A8DA796C823A17354086
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 1768338294c99358f4cb032246fc23c5194915245de33fad8f469cf481c0c2f9
MD5 27cb6b43411f0b15baee4270fa7dba28
SHA1 b8fcab03830492a764cf446d2b4a9859b8621e96
SHA512 5fcb6b5551d32a2bdcf9ea93cc6931caf464119399595fa0c99e1b98c992530c39100402d220102f4a17714103b78848cbc08066038f044e3143cedcc7c57ef8
SSDEEP 3:MsEllllkEthXllkl2zE/lA+otl:/M/xT02z9+o
TLSH
T1284404447FC40447D54011714071C3F11370DC10175357433451DC337CC57400C4000C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

645c0882-f80a-44b6-98bd-cc61fbb95da6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\645c0882-f80a-44b6-98bd-cc61fbb95da6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

2605be6f-ebcf-4173-a024-2c861c065813.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2605be6f-ebcf-4173-a024-2c861c065813.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

4f4ff4c0-0bcf-4f2a-afa6-a6c1b4b36f11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f4ff4c0-0bcf-4f2a-afa6-a6c1b4b36f11.tmp
Size 5KB
SHA256 a34b77c0e13750d7d7c79ca3f4f369d0aee00d81d6bbd9997c256593a1f06811
MD5 0db2003756bc9e4f6dc7c68e74ea641c
SHA1 983d2a094f6ee8566d706781878c6830c07604fe
SHA512 b6fa490bb6ecbe7401a1102e10acced7256dc73f13a3eff7453b0067fc0c62e0bd3a4e5d6e405983d960941b6dfa3b2822d14907d3901d9fbbc76a094627e328
SSDEEP 96:DfOoHx0BVaZaH1lzBjs84b65GOmt0RBHuny/tEGwQ:D2oHx0BVaZaVl1js7b657mt0HOny/tE8
TLSH
T17CB1BCF783B5816D9A1196F0AA186F1BCF1C0415436C3C9A89E4AF5BA3F2471E141B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

876f6f4b-8945-4c39-8ad7-1e9d87504007.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\876f6f4b-8945-4c39-8ad7-1e9d87504007.tmp
Size 5KB
SHA256 fa4fa57a4d2a8ce60e24a553531df7114e9c47e3b10d5abab094325aabc655d6
MD5 b1b180dd2ce71bc646962d5d3f56ffc4
SHA1 f197e3d76610773c657e09f9b30a6cf671479f8d
SHA512 5503d5cddb080e7756f2c359aad638959c1d378d11ab9db967a31a2fdc66577c8bfcdca567669fe0c24e59fff78535631092c35739087c01b33985f01ee48854
SSDEEP 96:DfOoHx0BVaZaH1lzhGjs84b65GOmt0RBHuny/tcwQ:D2oHx0BVaZaVlVGjs7b657mt0HOny/tO
TLSH
T1D4B1BCF783B5816D9A1196F0AA186F1BCF1C0415436C3C9A89E4AF5BA3F2471E141B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c4fc4369-a8b9-43c3-9173-dbdaf9565437.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c4fc4369-a8b9-43c3-9173-dbdaf9565437.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3688c1f9-c316-442a-b4db-5b2981d8d921\index-dir\the-real-index
Size 72B
SHA256 b5667cb897dfcf92f20f22fb24cf10885e583b108414698f503c7e20cee37d50
MD5 b324173df5b4496892017aaaf79a200c
SHA1 c3c30c080522eab8e426da1acc6de07303134b7c
SHA512 b18e66de74a72b6ea71f8ab54d4d9d3ba842cbbf64793be2180fd8f7ec07ae5c4f7fef29629a3a7e2e19ad25d9916db44643e897556518a26f113f9ad7503b83
TLSH
T1C9A002132380040DE432A5B1199212E9234AE8166220170740F24054CC664415F6700C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9514aac3-2eb6-41d6-b6af-a5a9b6d381e8\index-dir\temp-index
Size 72B
SHA256 c2cb52d07443c76de45e51fe53d16a6fa4c55875656612d20f30d77daef3638e
MD5 05c6375de00903f3d32717b8a76ac3b9
SHA1 4ffab55e30cd10f3453821b1524209e59aa2dfab
SHA512 e377b55fc7454236ff1eebeabcd7191db4cf577a39d6655a8db28c465569fd0b3bec1c11fb662aabd6cbcc3295c039f6bf574014555e226e552e641f045c8482
TLSH
T1CCA002908F998245D129577612F1156062668C9C6149074348EDA1D99DD1180D6D51C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9514aac3-2eb6-41d6-b6af-a5a9b6d381e8\index-dir\the-real-index
Size 48B
SHA256 cd22c9f685fb8ac994d614777b99dc95c30544e2038b4009b2a13e4de6e3a438
MD5 2c8d57ceeb3e06b56d9f62c93a4dc671
SHA1 e91a3bd65816b605a7e24828b1a3be88c180af84
SHA512 92bc4d960591480fb505c06069ed780734588c87aa73fa923df484b5dee563757003f1833808b46075251970634ead0ed71f2e1cd857e9258a1e653660537b58
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ab2bfd3a-ccab-4835-81a2-4407a724ffd7\index-dir\temp-index
Size 552B
SHA256 a5e8acce807827714ced988587e039ec4f83010f36ef08e10ce3bb3be4a774dc
MD5 28415eb60df07f6957643fe3f8d9045f
SHA1 a59d46e87eb26e83ca02691c57a4564d49f658ee
SHA512 168b3ef0ae894e74a4521b9e27cd0be82c0fab111174be5d4e0bd1fe95b215a53c80feec1a8104ace217709884c8ea8c2597ba96e9480d63c0a3a17484171c04
TLSH
T190F0AB8A3E135705FC6400B02478AC91657A32CCA3989C1FF0FC802A9CD2394AE41548
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ab2bfd3a-ccab-4835-81a2-4407a724ffd7\index-dir\the-real-index
Size 552B
SHA256 eaa9c926ed36cc37b88207149347d1d25c02fb4da78cc779ce906045408fac0b
MD5 e6b4ec71fb4e6e066dcc0b9a09da4af0
SHA1 81d86ce0b05716bcfc80929385991221116a9ec3
SHA512 b767b82353a3873e8ff6391b1877c6c61eb151b4fd3d4b16bb17bdb169daa8eb3279d3b8b096f28d31a55115564d57c562e7f3c30b913041f348f2318f4524f6
TLSH
T126F06A9926234781FC0411F1747D76D561721404D35C9D0FF2E6447ADC907D4DD415AC
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5d1b05b-e2e7-4768-ba86-e8588c60632f\index-dir\temp-index
Size 2KB
SHA256 175224e2f4ed7bc89c4f99fda46648a299ab1e382d76cf9ada12d780299c463e
MD5 83879630fb7cc97a24987e1935879c3c
SHA1 307aef3dbc94940c993a0ba96124e39593ba5fe3
SHA512 3278bbd4a750757bec4a40b909ca0a6d410077bdac24a66ffe7cabada06ca12b07e28ce115853848f4890b7618a2d39e59d254ba5c7873c6c6d7cc76cf5ba5b4
TLSH
T10D51D68D5C075B2CD87812B12CF304003B7C6CDC2E8C4A9768DCA634B883AAE1D696BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5d1b05b-e2e7-4768-ba86-e8588c60632f\index-dir\the-real-index
Size 48B
SHA256 0864ce6379eff9c884b9fc8a952d10c167d4b9c179a45fab104d2942f13b8da7
MD5 6c48b35d4f262426a1cf3cea79d672fa
SHA1 cc92778e6dfd7e4b5b48fb463a90dc7eff970e45
SHA512 632deeddd4409f8a88901e5163239d4d71939a77f83f3606df0087de77251004430d991577d3cf430e7b55b7fa1081ff5684f44f46766b8e17ab712c7b34f559
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f39744d9-180e-4e75-b2c6-6cc013209576\index-dir\temp-index
Size 72B
SHA256 73268264ab23bbaf458be9c6eaf9f2839237c9793a0d5f71504cc4b667ad8630
MD5 8ecd01f75b7c2513d2f046e7eee8c942
SHA1 da6f8c2e419ad38b10e1f8eb6b6704a0b35e3c71
SHA512 c95466a61c05aae9cfbe9e587dd089e41b75a49d6a1fe6eecfcb8a60234356e95efdf7e79499df587fab5219ad01f77ddd7295f26c051e012bebb342c430ad65
TLSH
T143A00274D1451501D35012FD74C56590337CDD6443119F17C0D0009A8CD095EBF127C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f39744d9-180e-4e75-b2c6-6cc013209576\index-dir\the-real-index
Size 48B
SHA256 5caaa2202a4e86e1c21a5d67b603e0974c8056546c275f4a67a350331b799784
MD5 b327272abf2bff517c6fc7489d00df10
SHA1 0bbb01f81cc9167e8ff613b9de3043678d0c2eac
SHA512 7676b956cfc219db2b975e0f105bfac959d22dd466ff472dba35f916cc703792c473d7c7e1fae2952675a322570631b3b390e66df6ee182f73854060a9e1f912
MD5 SHA1 SHA512

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 161B
SHA256 ac1b65392aabbbd28c5d367cc05ef63f312d4ed789a01e2108e7c28564a297e8
MD5 b30ade10b21a62e6416f24e8ab344ee8
SHA1 935c3397fc536565e7fbd07f27d6b3bccf5de9cb
SHA512 192738a84a37c8ba09760796c7ed40e45788398e7280de7566e4d0756146a93f92c7faad5a5d3723560f50004660fcf050718e3a44b91f0479175c45ed187dae
TLSH
T155C08CBB1CF63E01EA87D2D2513060BA836A388CAA48ADCA503E26C320701116422CA9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 488B
SHA256 99feac50ceddce45be0f39ed9f6b6c928236498dee36cc42fdcd1310ad4c310c
MD5 ad4014b625d028074fb999058e2e37a5
SHA1 d347a5eb813274f64cb2e23f73a6033d2c11a158
SHA512 a952a11b7f31e16531a0ad293e33b7358cc0ba6ab2761bca73a7edc888904be10accb54dc8c43b56769365be7c47e7cbad247f95e86a8eb2817ccbcd5d6d7dec
TLSH
T132F0973739F37D10E89FE2E6683000A106447C58EA80EC4F243BB9CA20B23156689D22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 386B
SHA256 d1812b17bc98ecadc89586d0b848c8301469ce09809b2104e0688fb860f2c00a
MD5 d0f2ff0ed3dcc516ce7a7388793ceec7
SHA1 749b4fa39a1243125473ec62b698011c1017a57b
SHA512 f3b566e79fe4cc86ee5bde0389101de145ffde2117ba13a8d2fbae0be272c79beea25804ecb080422c66c2ee713bf72a334ce4f8e8dc426d1ee61d783e278998
TLSH
T180E0687B29F33E10E89BD3DA6C3040A14689745CEA44ED8F543B2ACB50B23015A9AC66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 281B
SHA256 37bd546a14c1e7b992576b30b3b0fbde456727a53a1d8302424d1b43ec0d2b94
MD5 5d1e54aa3013c8a0a74f8cdf77f00d3c
SHA1 7ff088eea13a72db2f5d58cb6da75bca4f00ce5d
SHA512 4389cd79231cf1d19e39ea92e7cb5aacc783f5c03565f48f3f9fa433b51112230841826a6832d1fad37f682b23b1eda04f50e723252e7ec18b43832d1932d854
TLSH
T1FED02BF71CF63D01EA9FD2D3507110FA42157C4C9E00ED8E547A35A622B0161516AC96
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 399B
SHA256 b7430530bb81b62dbd02e002cbab3c39d6969da4cb30e8be147830f1cc767560
MD5 2c11ef7d91966011f5bf92333648eaaa
SHA1 acbc07c3e6dc211d909e73af4c8a206a8d2f9d60
SHA512 4d96235721f5b312369d411d7882bc980186fb5ddc6bad90acc52dcb786d0c43359869cfb6fdadad783a6588ea8418c5616d426e72b04246bc0be92cd072282b
TLSH
T15AE061772DF66A11FE5FD3D3107010BB42017C4DDE10ED4D5436755661B11655129CA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 259B
SHA256 9541ea43ea424c70fd03d67d1eb42f2d3f303c020af1f88ab6cbdb1fbace4ca8
MD5 41128d75fca36e80c6e20860a4327e32
SHA1 106c2b82687c2414404360f2c785022e1813b7d3
SHA512 e8d8b117cc58d4c870685ba7e99fec0e4aab074f4529f49d75f1eeb58110aee3e9cddd85bacb4b36b01bcbd9e0d2f648edacac87c34a5e959417a2fd17ba2d67
TLSH
T1BBD02B7318F63E00F587A2D9653040B6439A744CD504AD4E542F15C220712015459D56
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 394B
SHA256 b2530a7700c21e8ed7b3279d4517b198f60262764835474068a18308812b6901
MD5 c253601089e21ea7ef5f5a34cd821871
SHA1 590d1a997886fd7b2bac976380cdf0192016bfb6
SHA512 653f0fa33b7734783190ae8c2ff0a588de38b50cb1e505c10a3602200243ca3e611f00081e3e37b108926234be47e19663c09ce89bca28ef9156ef3644a765b8
TLSH
T163E061772DF66E11FE5FD3D3107010BB4205BC4DDF10ED4D5476655662F01645139C66
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 244948abd25ddf38b15dc7c2fc6a6846c5dfb4ea872e77472409c05147505015
MD5 3de1851681f8de6bb913c1036a7389d3
SHA1 576252c07d24a79ba4abf22b8cad2764201d9537
SHA512 8169cf1a04778dd5e487eb65311ced9e8cf97c0efd3ad31775ef2fba6c2a11f2be7c4c998ee0561b50cef65da99a2d0c8cc5cc0f449e2f3255f348c4431a8904
TLSH
T127A0026391690049E594037493E603F46771C81526452621D0E4D3F89891181D356144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 4571fc7c64a7295025062a20c011025c688c1d923b5dfbf2bfc5bb00e1cf55a1
MD5 74b257b008db1a99902aae3a413904e7
SHA1 6282f9964833d86888720426c0dcf31ffbf24922
SHA512 9d1d498ceb37ada520aa35d5d9c9ed095985fe29e537821713af8add06851a2177b475562c6d316d62659285e412b1b86c89c348543e02f5ed7c3d0524e97e8e
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 bf02b8a951f062295753d4c1af2517ffe7e070981e81b3f59e90bba48c7b717f
MD5 b89fc217c032dd3ca59db6fd27fc3f17
SHA1 08e41dfb3d0df42cf7cad587f437b53dc8619bec
SHA512 cc176ab78add825a790e8083df8d5a017ffd35b98f409202c27f90af348d243e9e6715c31efe916dff7e3994c4fd7f9e392f84ceec289771cecc6ef9f390c678
SSDEEP 48:KU8IbKRaMjyF9IVKGIw2HIdKsE43yp6IvKbq0VbE/7:KU8oKRaCO9eKGIBHGKsEiq6wKbq7
TLSH
T1F9B10370727A0240387D760881D5E72F864232633524EA2B77EE42A3DD7AE4A1DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

878e7636-f438-4b49-aae3-c0a4305077c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\878e7636-f438-4b49-aae3-c0a4305077c9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a0657b9a-320a-4dfc-a5f8-151a714a7998.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0657b9a-320a-4dfc-a5f8-151a714a7998.tmp
Size 39KB
SHA256 2e0f0243ab38814d3bc3eeac7f9c068ee4e62d5dd82ef8894912aeb7900b34c6
MD5 f2f813d9335256ba0f9897348d73b63e
SHA1 3d8697fdb9b8d397351b3b17da33881f939fd293
SHA512 2b311cbf19a05d6e5e72b76cc772533cbf696e6dec596efac4e0008d9d4c180ffbb6c4c02f9ab3e841d4abde9797d3c797a724297dfcbaf7e19b0a646ae8892c
SSDEEP 768:Z/UxvxjgC+H3UB0nbtOySBDzR/9OA9at01j0iq00+Iaijsb:MZj3+H3UB0ylz+CHq00Na0sb
TLSH
T1CB03BE31ACB5AD23ACE6F294730A3387DFF44523C6C95B9449ED2E0E05876AD170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad5fb308-560a-44bc-a39f-4e4a67a0cbc0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad5fb308-560a-44bc-a39f-4e4a67a0cbc0.tmp
Size 34KB
SHA256 bcb667ae1b841aaf273c1209c98fbdad6f0798987e63b8e90cc3e1de0be3c6ce
MD5 f76c46a3224792f46979700862abe3cc
SHA1 b409dbcc20c2d8f12a4d5a3287f44e20f6067b79
SHA512 3ad388b04412b7991922f2e549eb0f73893c759f2a789eb1951a08badc996d9bd4dd102d63e38a14a0774bce0f0007ad4cd87e7ffb67a8cbeb1d44d54f4e0b60
SSDEEP 768:Or3UB0nbtOySBD4R/9OA9at01j0iq00+IaijoaTZccHkLx:Or3UB0yl4+CHq00Na099EV
TLSH
T12DF2AF71FCB59E239DD6B295B30A33439FE49213C6CD5B80C9DE691D018B69D270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad64c00d-350c-4434-b453-c8a9545f3ad7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad64c00d-350c-4434-b453-c8a9545f3ad7.tmp
Size 41KB
SHA256 1f43b7a080e19eb1242b8232a08a0d973567209cec698f4e1852b8ecd5c71512
MD5 a28a2f002107b7d8bed9a308a882bdad
SHA1 f656ace29d7bbb850966bafd733fbeed9de99dc2
SHA512 b85295ea7c6ba6bef85c16071ac5408d90b88edc5aad88458149249e9437e7471a414e03daa4cb81d4a1910918d4b7e9762461b31e5e22eacbb149037f26a633
SSDEEP 768:wFni3dwgl7ibtOySBD8d/9OA9at01j0iq00+IaijoaTZccHkLx:gi3p7jl8yCHq00Na099EV
TLSH
T123135BF198E78937E99EA743A33D2E429EBCC153F5885650B7C9580CCC461BFD70A862
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3419f81c-0c9a-48c5-8ced-73817712ad90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\3419f81c-0c9a-48c5-8ced-73817712ad90.tmp
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

8e4ae0c6-6c81-4950-98e1-746e6806f32e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\8e4ae0c6-6c81-4950-98e1-746e6806f32e.tmp
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

ac58bf09-e0f4-4ef5-a644-641e5b82d318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\ac58bf09-e0f4-4ef5-a644-641e5b82d318.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

397824e3-41be-4ac6-a716-c2732f218886.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\397824e3-41be-4ac6-a716-c2732f218886.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Qt6Core.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6Core.dll
Size 9.9MB
SHA256 22c113a5644b875b2c85482723cd5d2e6a3a4029169778fcc78adde08ef3b6aa
MD5 34084ab9444b43ea81aed28ca2513091
SHA1 9d021629b0900d0f92599e734ef48377fbbb2307
SHA512 06066b22a91392df440e2eaccd87c953fe1b6b0678dcd037dba79290cdd1322595194a1c4fd5fb03a24a7279980278e42ab0360acf67453b646e2ee8d0f21bc9
SSDEEP 98304:RoB9Y4db9sWFZhCUlKFdu9CwJsv6t3Im6hJMANkMa/3qzs:OYoJsWkkKFdu9CwJsv6t3qSAq/3qg
TLSH
T140A6290766FA0141F6F7D634CAB75126DB72BC865B3196DF025822291E337F09E3A326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Gui.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6Gui.dll
Size 9.1MB
SHA256 19265a4e76efc12ef5f5bcf59be6c6a5b9b59ec4c89660797738bd2da7f719cc
MD5 7fca31dbc6fa55f5a6c1b49e97b3e26e
SHA1 516ab7baa3fb6fc478a963e842d75bd6d5303c81
SHA512 e27577bfa18646a8bfe1db26695ceb6eb25553f5b76793cd93636662031c68a165571f16388bed8d25572d5566230c0d49381e0168f45f14d6cc417f2558efcc
SSDEEP 98304:H0NalC95b/Y0+6duqcprtoc6QMzqs5ROWlWA9:H0Z95b1duqcprtp6QM8WlWw
TLSH
T154A69D97B3A911C8D56BD13D8B9B5517EBB2300503529BDB01A1CA592F33BF12ABF321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Network.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6Network.dll
Size 1.7MB
SHA256 75ff0896a618f4f5b602f391eb4917a55fd738b2e751d2cf18244a0de3619184
MD5 c4aeeb3c55bef8d1f1fb423ec80e17ea
SHA1 d6476688b9e89ee7832255d1efde89ba4332933d
SHA512 b73e3f2ab974a3e3a37c33bc48d05926919fd2b72812faade2ef95059db02f5d7467beda0c653de82ff84d708bae966647a90082a2c4cf5c2d695b755125790a
SSDEEP 49152:ML4bTLBqp8UcswuLTyOJrQ/jDANtXNJV+5:LTzwXN6
TLSH
T179855B17A3E50296C46FC179CB0B8A07EB73700587A29BDB42658F552F63BE22B7D350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6NetworkAuth.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6NetworkAuth.dll
Size 293KB
SHA256 361f534bcbb33bfb68be0d5fce44f722266435698abcaa85e155c174cdfa7337
MD5 ff0c2c6f9031daa9acd10fa8b5141ece
SHA1 7f7a5a326a5e0bc90743480ea6105e38acaacbb8
SHA512 17eb38dd60a84ebf56a2d9521af919759c7234b7aea311fe00a83b0dd0d73170a11a24e9f2dbc169142fd56c26ce08eeef5d76ee9024d71fbe2c93e3f2d7b2f8
SSDEEP 6144:MW+4z4/200Y+9exklLY4Ftumq+uGehfgAOm38:MWdz4O00Y+9exYbKNGje8
TLSH
T106543917B3A10E82D82BC279CA5BC622E2B3B4005752DBDF56258F592F637E17E3D244
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6OpenGL.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6OpenGL.dll
Size 1.9MB
SHA256 d1d212853c2a858c00d9560616ba67f6238c2d11ffa5549a4251fcc566d16477
MD5 edb675f0601fde4acdf51d33ffe4db3e
SHA1 3037f833abc5b5517c4034130b7804e3ce015343
SHA512 d101df4e66ac90bacdbd018f89b00fd3a3cae0125c365d96fffb13b8bb5998c681afa84b9355c6332ef3683ed5f2ae26e7e18f3f6d0b6eff5ff23adffec2a4c0
SSDEEP 12288:1pHudqwV+AS3X/2oCIeUiDl39FTLSi4zClM/cn4LsS:Vws/HZCIXYBt5fQ
TLSH
T157951FD5624AB622C976E2BE930F057E60F3AD53C3424BC389155B490AB57EE0B7FC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Widgets.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6Widgets.dll
Size 6.2MB
SHA256 e6d0b7e2e697de6ad985b97f9ed8b381c1c2172fcae87b6ab08455b3b7330f32
MD5 bdf6122248906301b6f4a46809325c10
SHA1 4e7b7d053189db6f6c900f9079cd8594e2bd35e4
SHA512 5f49d74100e6b9379f6abfb74d3ad47f00f7501782e29da4097381afcf8b441202790f3291bbb5a0ae216e34bcdc80d4e664a23b3f118800e16095e79fd6cf82
SSDEEP 98304:p9AJeBpvyxL3aHdVHruq322HRw/6b/HnAt9bMHTmQqxn:p9AJIpvyxLKHdVSqZHRw/6b/gtmzcn
TLSH
T1B5667C57A3EA0285C46BD23DCB1B8A17E6B2704883529BCF0165CE552F737E22E7E354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Xml.dll

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\Qt6Xml.dll
Size 154KB
SHA256 b3c860463c7841a4a6c236872e2e7fc7fcc361705a0c6cb1f6ab95d4bcf6fda0
MD5 98336465cb1f33c3985ca66a37eab348
SHA1 04fa64ea92daaf2dbecb7a30d0f1bb048d60055b
SHA512 11dfde911a4f835140e09c58f25e290aa53fda6bb3f73765461ceb78ff957dd8581036dee211590e1ea2445a1de6f4ea36ebaf5548ff122ffc63e9e1f63f67b4
SSDEEP 1536:ZJHvbMIbtFC8AQRjCxTB3Fry01duz/eW7jcX0pbYTQj9Oj3sODUnF2sPJ7uTOI:PPgIbtED91dWf7jcX0Ej3RUnF24JqT
TLSH
T1D9F32A9733684286D46AC278C90B091EFB73709097529BEF81598A3A2F23FD27D7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offprism.exe

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\offprism.exe
Size 11.1MB
SHA256 72feea0ae4eec5540c5e14c857f1d530096ae272090b7b29aed15e8841b49fb8
MD5 9e583dfcdbde0bae48500d0bd90151ba
SHA1 97c27800bb336ef2da01e6edf36e989c88bd2039
SHA512 bfcf1e73f91c17d611bd991fea1d06d445f1c8de3de281b9c01ad32c5b775212ed35a162ac4a37d1d3353f9608fb7e89d907f3642e002744e71d71cdf8cc00a4
SSDEEP 196608:ipolyHMehBwWRY0ViiLBzeu0BvWlndDw0:ipoAMehBwWRY0ViyPlndk0
TLSH
T164C6BF5F63A902E5D13AC178CA4A5E57EA72301343214EEB315D8EB65F33AE25E3DB04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vc_redist.x64.exe

Path C:\Users\Admin\AppData\Local\Programs\OffPrism\vc_redist\vc_redist.x64.exe
Size 24.4MB
SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
MD5 486f81facf798678c3244c7cf35a557f
SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
TLSH
T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3575ed08-4c29-458a-9bf2-95b722660f72.tmp

Path C:\Users\Admin\AppData\Local\Temp\3575ed08-4c29-458a-9bf2-95b722660f72.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

429d2ed1-789c-4a71-b1c3-8c27a3dcc9c0.tmp

Path C:\Users\Admin\AppData\Local\Temp\429d2ed1-789c-4a71-b1c3-8c27a3dcc9c0.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredist_amd64_20261027091502_000_vcRuntimeMinimum_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261027091502_000_vcRuntimeMinimum_x64.log
Size 2KB
SHA256 541ba7a719483dd73eb01e16fa59ade38fe92abb7948a7ebaadd34f8a47bd012
MD5 10d9a94de707026486c56927dc81ed08
SHA1 6e15625ddfdf98c7b71c4db53ae92e9fdf06e8d6
SHA512 595e9a5b796b5dc03f6ea04e524b223bb9b60aa3e782ee3765e6679c367e0193b48752d5c5c958bde71b49d14c13078d15260729eb546d80c3c38970a292aa0d
TLSH
T1FA41F9591AE90C06F2B297079EF3C0534A33FCC2A874DF1D2285831A436BD056968BAE
MD5 SHA1 SHA512 TLSH

Submit Download

dd_vcredist_amd64_20261027091502_001_vcRuntimeAdditional_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261027091502_001_vcRuntimeAdditional_x64.log
Size 2KB
SHA256 13060f923be04d736e906b12b5eb3e806af34dfe2e86c9005bd398687a8b76db
MD5 8981acbf078759d0740af4a9b05f89d2
SHA1 d5285ea958f5f712e98c081175882f2cb1f33db4
SHA512 301312b98f9ed0a5e6376ae6eb9bdf42c90aa347c44f2f28e6e9bf22977c8ccf88b8fc5ca6f659f5e0882df8915c50c64c2973ba8a06529b5e4a9cd175397a09
TLSH
T10A4147691EE80C0AF3B3D6439AF7C0124A33FCD96838DF0C2285831D066BD0559A4BAE
MD5 SHA1 SHA512 TLSH

Submit Download

NScurl.dll

Path C:\Users\Admin\AppData\Local\Temp\nse8DDF.tmp\NScurl.dll
Size 6.0MB
SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
TLSH
T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nse8DDF.tmp\System.dll
Size 12KB
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
TLSH
T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nse8DDF.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nse8DDF.tmp\nsDialogs.dll
Size 9KB
SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
TLSH
T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nse8DDF.tmp\nsExec.dll
Size 7KB
SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
MD5 11092c1d3fbb449a60695c44f9f3d183
SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
TLSH
T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2356_1879497924\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2356_704462026\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

590470ab0f17afb73a4e41d9cb56fdbe069d275a

Path C:\Users\Admin\AppData\Roaming\OffPrism\assets\objects\59\590470ab0f17afb73a4e41d9cb56fdbe069d275a
Size 229KB
SHA256 a14d2da4f452442691791c834cf55aae43f8b435a4736eea44cb327435bca20e
MD5 8f85d5e004a1afd3ddab796b9abdf198
SHA1 590470ab0f17afb73a4e41d9cb56fdbe069d275a
SHA512 c46d5a02f8a090bccac776ff4bc3d0c09685a4cb4c0bf355222238ee1d8558ed676ac160976f44bc79ec256a27cae7bf14cef52bdf6991d4f50b450989e305a1
SSDEEP 6144:y4UyoHoRDwNmQAFu2IM2I2gwNLbomFDIsKh8f:y4Uy2oRDWmzY2IlI2gwlomRAhq
TLSH
T1853412AE8CFE4362D8F1A5351BA8711BB8043AC76FC0E576AD070CD751251D6AA3DC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e7183e7b058cdea7c5b6eb64a0829397ed4444b

Path C:\Users\Admin\AppData\Roaming\OffPrism\assets\objects\6e\6e7183e7b058cdea7c5b6eb64a0829397ed4444b
Size 558KB
SHA256 fd13a84779b4d78fd893beb1b5831a6fe18249a6c6704565c02b8e33e8df5655
MD5 3855bfd44820a1339c7c2ead752c9e60
SHA1 6e7183e7b058cdea7c5b6eb64a0829397ed4444b
SHA512 81ff15cd05cead9c8eb0bfc871a4c45131b0c5962778b051132293e71aee7755db28831e4f188820ed7b8dd27190ef4f35d811a6e4298a786cac1c824a7796c1
SSDEEP 12288:aqdCPbnCW0Hx6c4LoAIWKswXXpM8PUCGuywj2wK52bZhGDLcTWgAq48Lo:aqcCW0Hx6c4LoAIWKswXKCG+2wK52bZo
TLSH
T171C44E25C5272FE305CA92A27CA40542F23582678E4439EDB724D65D3FEE8DF20B725E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cobblemon-fabric.png

Path C:\Users\Admin\AppData\Roaming\OffPrism\cache\ModrinthModpacks\logos\cobblemon-fabric.png
Size 9KB
SHA256 a01df5ba3c4252ae282cb55e3e2183f3aa83e1bc173e7911b13fdb499e1eba1c
MD5 ac1aaaf04e913e02255b75829d157b59
SHA1 e7f9ee2e9d361623847853fe2ddce42f519ee64f
SHA512 86ef8dcd4489edb613c68b0a20fce215273acb93992f499335cbed0fc9a4064b23413ebc8133d841d73118ff6bbd024d1bf59392148430c3ed3dddbd4feb07cb
SSDEEP 192:c0F+iRLXWW/Jp0nFwSaWdECHZ1CX1dOY4eiFHgQdMM:/+iRyG0nFwoHZ1kOemgQd3
TLSH
T1C2126CD966A08823DFB987F155FD8D9EF6975036334A0FB4B102B1BDA4E49485881CE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cobbleverse.png

Path C:\Users\Admin\AppData\Roaming\OffPrism\cache\ModrinthModpacks\logos\cobbleverse.png
Size 7KB
SHA256 e4de23049042e5e4a21f0eb94ad5021b8cab60988582748064444f95b040e626
MD5 3f6e780502e9a9e093445688ece92946
SHA1 581ecf54530972afb18a04660afd820f2f24f6c7
SHA512 88798ae8e6765c83ff9333299c22fec8695a94e9c8c1b5db574424645a5b409e120dc3755096030d2c9798b9fb645d566e129b3308f5d13ef9004ecf24dd6089
SSDEEP 192:7pCD96+VIzwBdj7XDcIDobEZEU4llSYjBG4P:lCDjBdjbDcm9olb
TLSH
T131E19D5A8D2668A68DFA4637D7F46FF3202CABA52F8056ECE150ACA0440ED436C15B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabulously-optimized.webp

Path C:\Users\Admin\AppData\Roaming\OffPrism\cache\ModrinthModpacks\logos\fabulously-optimized.webp
Size 8KB
SHA256 8894b53dc665a30241a22543fc8e1f4fe9e009f16f16cdd09a808d6c656168a2
MD5 8d3410d4c1ec9dc9c99413e855744eb6
SHA1 a2dcb2772c2632a2acabc5f64b2f9e9e3c262211
SHA512 119f42009174467d8213fb7ba772dfeb995319f2be794cf8874662b3cb4126faadf21326ddbac1b26aadc7fc76e1244786f5f597e136fe341df8c9a6abad074a
SSDEEP 192:8NgGwxkn8ZOaMH7VHDzVdOmeKp1Mh1joYstnNrjb:8q/xk88RHDzVveKp6h1crt9jb
TLSH
T14402AE01CA12302BFD2F1AB528B57961671FABE36AB1C323159A27617C1EAD8056F11E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zombie-invade-100-days.webp

Path C:\Users\Admin\AppData\Roaming\OffPrism\cache\ModrinthModpacks\logos\zombie-invade-100-days.webp
Size 15KB
SHA256 3ba0cbea4dc8fac9527720a5bb04a4afc357810b66d0f27f25e21b7999548781
MD5 10298fe3083a502689298ac5ac9ccef6
SHA1 2e9240ed9fa6cd5755b21e5994775a9782a39280
SHA512 3055821209f03a68dbac77cf755edc581c37d9e309e4bfb14dedfc03a461c0cdd7636a6c5ca485b4cc368b8af1eb16deb81a66e5007de5bbe865ee82d59da911
SSDEEP 384:TPsindW0oDKmVehBJtuCzxfN7lcj486SnS:fnMMGevJJfMBq
TLSH
T1A962D1B715163164F6136930F7BB25A1F2D1564FA138DA223D7BA018C3720F6F628D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fabulously.Optimized-v15.0.0-beta.2.mrpack

Path C:\Users\Admin\AppData\Roaming\OffPrism\cache\cdn.modrinth.com\data\1KVo5zza\versions\Wo44jriL\Fabulously.Optimized-v15.0.0-beta.2.mrpack
Size 169KB
SHA256 e222f8ff285fe44e51b4982e50dbad2b0f34bf014e0527fb21d14592bfcf77c9
MD5 5ada40060b8c340cfcb434674040fd16
SHA1 f6e4cb05af0717095220e968bd5a2229c3242cb4
SHA512 238f19bf9ab53a4909e79d14377e1d0833f1a608aa138cd639661d4434718605a1268ada068956946725edd3a6b2ec5cc8a9586fdfcede59ed5e2385991e590a
SSDEEP 3072:gIn1PZ9ZHF48hUh9HH3kLs2QiKXTgQaJc4YD+v2Od0s:Hn1Nu88PrpaJfYqvus
TLSH
T16F04F14AED2EE823C01B1834D5A4E7684EB51BDFF1A5B34B73473AA894144050F89BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\instance.cfg
Size 69B
SHA256 6797d119c87c0e4708d7b926888cd746866709dff43e2144a5307881e8ff38b6
MD5 7c01cf2aa28bc1023729ab87eedf2a7e
SHA1 327315a03830ee2657ac5c23fff996d7e0aa8750
SHA512 3b73d087b5637310dde684446b0a51c1155b2f952462920bbd2a475709114e8efdab0a06a450c9b6aa861c6d3233a2491e84be4e1ae7590a0d3f4b628546ffb0
TLSH
T1C2A0220F0A003B3C20800B028083C8038E3003C0023800AF3CB002C3230800822BF820
MD5 SHA1 SHA512 TLSH

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\instance.cfg
Size 319B
SHA256 ec79d3cf00cf63c2dd143a4da1edb02986203fc7422aa100201dbb677408bd8e
MD5 b2eadaaa721bda82458f93eb730b3a46
SHA1 94a0fe5975256a178a3fd23139dcb00dd3979228
SHA512 b13f073e075fb7de57f7b829e8c8fd07089f79efd9d78b8a2142dc91cc43a750c3ab052ada4f54cb28e28e9dd1cf57d685ffcc2902daf5bec795f27c8948708a
TLSH
T173E0CDF2237C113BD4CD454F7C5B89B05B6843A216F8407F21785CD55A5D56C03D9365
MD5 SHA1 SHA512 TLSH

Submit Download

config.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\crash_assistant\config.toml
Size 23KB
SHA256 1b978f774e6c700d7ff517b23d75c523aa3d9f9b05538a455c419aa3b32d660f
MD5 267622728bfa26deee113fda0b168dd5
SHA1 246b52e3f5f08e59d46f2270f4fce3bd58edda5b
SHA512 b28645f143c03c5d361069577b4184abb324642b383dac6b1e1a61b27b4edaf2e8d9414d0ed3d83e3e95146bb62360b6c7a6cbbce17ca186997e217c6bf5fad7
SSDEEP 384:BwJFZiqWlTlMlEjQt+ZsH0KD/zNuMHez3u0y5gEhoslFLW2QtZxn59E:BwJPHglMluQt+ZO/zNW3uNWEhooFLW2t
TLSH
T1ADB2F95AEE6D333A4E92D002AB7E91D1E33540B81373B62E74AA81BC3341856467FDF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en_us.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\crash_assistant\crash_assistant_localization_overrides\en_us.json
Size 9KB
SHA256 1379dba87dafc27bb98363add32e5bb93ed9a1339b94eddf5b65b500d1d4e647
MD5 4999a420c55103999e35b2b10c2f56a2
SHA1 9edd76d2210c880010fcaf6845d4c99ac9363535
SHA512 851ede0c76df6617732da5681e02a1ee5aa3bd30e4f30ffbe099b877d03f0d0fe273519575f6c052637bc1b5716d98ea850846b692c6eb1b3840396a383b0058
SSDEEP 96:+QZXFwtQc9ed5Jybm8RlPTrP25uPm4OVfVs6zC0Y+ACDekvQSMzkFEps0iwQZfad:UrWJwTD2ce2kAzx5il0rE/w75
TLSH
T10B12A507825BA538764029A22E923F9437F8C377B147C5DB3CFD78196BD8548C26B4A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blame-mods.jexl

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\crash_assistant\scripts\log_analysis\blame-mods.jexl
Size 6KB
SHA256 fe14e8669b9c267b450b3b79f26da9ff9bad86809dfd7f79fa20fc7c5825b38d
MD5 62ddfc8178ddd5c7cb95087bfeb9970e
SHA1 0387ecaa678183e3ef136a4cb7e0ad276b180a41
SHA512 c572ed42d162b68a5972df68bd96d0412b56af3fecc6d6b8748237a47f7a9c06298f2b3cb96c5598686d87ce33edc73e3c91e5a0c1e53ca839d87aea54a857f6
SSDEEP 192:fOfQqDF9nZNHeK2sKSi4eqTn9nnuiYgEZ/WTsXTSYVfxB:fOnBR8
TLSH
T1FBD10D06C5A25C607666E25856BF0965C3F887031804D29FBDCE800EBFEC4DED1B5EB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric_loader_dependencies.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\fabric_loader_dependencies.json
Size 171B
SHA256 33fcf8fdf682f2d5763fff3384bf6c64e4d5da053b85383c9b45cb1a5b0dce88
MD5 74d6a88b07adc9b98915777c6b7d21d6
SHA1 82806c5540c149282509c39da7ae637f68b3b545
SHA512 5c40c91cc0912904ed4b7dfbaa3574c72c83482bc15f38446b630f74a87c7cf5202e8c60043e7f9ace83356606d9a5892a6b54810e40a1f2bb907b58b4dec908
TLSH
T1F8C02204808F9ABA609BA1C61C660893963003320600008B3230008065922CC0301591
MD5 SHA1 SHA512 TLSH

Submit Download

isxander-main-menu-credits.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\isxander-main-menu-credits.json
Size 522B
SHA256 a662e70e07df91843dccd3493490e8e86299fd545ee5f883355aa84518f1f978
MD5 dd30aad4bae876eec92bcffb5e905aa2
SHA1 ccac097831033fd660f335f8ecda605992c6ac21
SHA512 63c81381f2dbde74bcd27987f799a9fb4a14af8ceab106b35bceb46a71069c3bad915e8ecc02e3f38da27c1b102af9d5ef614b0c50b70d994264008b7394db49
TLSH
T19CF0C9DB8411E07E058A82CBC78E4E87333E404D11B89C1BFA70A99BBE740B803CED45
MD5 SHA1 SHA512 TLSH

Submit Download

BBEConfig.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\BBEConfig.json
Size 109B
SHA256 e5f2ee57e9f9c0bd81af26c1918ceee988b3d726014c411f439406dc0fe60ef1
MD5 3b7faae1eacd08e19276cdbd94ca7132
SHA1 fbd464a04b876ca5a72107fd36bc49965c42ec31
SHA512 0aa2643322380aedcd1bb989871a1c24555b477ff6d38c9ef553d12eab062f4e86ada16cec4cca21b1e76258736c682c9a843f0585d52f95aeeb505077ef05a8
TLSH
T1C2B012014C5A2A7F444206CCFDE01C0C156046D0B0A5D5E4B9E33ACE3D59E101733794
MD5 SHA1 SHA512 TLSH

Submit Download

NCR-Client.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\NoChatReports\NCR-Client.json
Size 477B
SHA256 616e09c8ff849f4a9a07165a0a3513f468469237377546b64135591fca8a0592
MD5 dc1ee41c88354527a8eb52b8cce2d97f
SHA1 71120f8cdebbd0c953de70cb93439cfa0ed04f59
SHA512 90707d5f98034731812608b7a9576def6e52c1164ed4797ef5cbec1ae467a5e5d2df62c714e70c5d968eb6f0f97c5efc2da4817b56779b5d7ba6ea4132f8a8aa
TLSH
T1C1F05C764564497E8904E175F4267F461F2D0C3723913A15EA8D09AA5AF30E33332367
MD5 SHA1 SHA512 TLSH

Submit Download

NCR-Common.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\NoChatReports\NCR-Common.json
Size 96B
SHA256 c335cb5e65abce1bfc063eaddcff3eca759636e32ba7e4993ea249a31ab18816
MD5 636e111bd55a154df9a867280b897615
SHA1 5fe17cdf0f39e1ef3787a6d479ca7c683ccb7cf1
SHA512 eea109acb6afe75860f6d8fc8cdde8c51c0960e769bc7db64831dc8797f6ffc9cc65a7a17e89fb6f519a9dc7b91ddff0bb4eb84abdde88584aad3fbe80886de7
TLSH
T1E6B012546C10582D4B210618E218B600231C00C72C463080D04D008B75C30873734613
MD5 SHA1 SHA512 TLSH

Submit Download

PaginatedAdvancements.json5

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\PaginatedAdvancements.json5
Size 284B
SHA256 3a1c71d2011cac176e00697237148ee882393b19394374862f8025f129d4c5a2
MD5 f564d6f25f4508c096c5a4cf5901c817
SHA1 38969898c8090d9f9ba729256fcedc4298f49b6a
SHA512 c63516e7b3d87a844bc6bec9303df8f871714515280ed8b714f30cd49b8b426a1629830263a2c75b3227083710b37b8d8b53a0334b276326e7d740c303d777c1
TLSH
T132D02E3C2F000CAE93491974E91208978BC80074D925BCA5F66D6998A4BBAEC00F8263
MD5 SHA1 SHA512 TLSH

Submit Download

bettergrass.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\bettergrass.json
Size 37B
SHA256 8aaf74864043e08741cc3c60f3ffe0d9aaf1fe757f111bb41064fb580d25bdf1
MD5 af358831aaa5edc3cd1cd0277cc01172
SHA1 5b395e8cc4d6a327c54ccd07c34f45d9cde23c6f
SHA512 146daf21127e72f8aff2e2b9f819a3737a1ee70bdbbd8ec0316a82e3dd74ef8f5efb4f9daec2f72e3977ac7d71eaeb4d99c6e2a99b404aa31ed17a26e7c1980a
MD5 SHA1 SHA512

Submit Download

config.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\cape-provider\config.json
Size 428B
SHA256 bfaed4a90f4b3b2ddb8fce57a7c4d9d2011a154c7f6bd8f005e79dff8ead6230
MD5 be3db452327743c272d48a5d085d18e2
SHA1 66bacb70a64b039e14d34c81d85c445fb78f68b4
SHA512 9936138788ea4ff347addc8ab02bb3d58f3756839aa9fe2ab9c380806d738538456ed18f4ef548cdd3ebe69fccd7165e5c186257f0d00ef605b15807047fff51
TLSH
T1E5E0AB20CC548230ED8508BD7C1D3E83CF2879A722B0D528783F84FAC1EB6490A12897
MD5 SHA1 SHA512 TLSH

Submit Download

be_by.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\be_by.json
Size 6KB
SHA256 db87c9322336f3ef307fee2ba2773bb4cda4fc91177efc83748463e5292870c3
MD5 5b990fcccdb11bd3e6b77b0e681193e6
SHA1 216f68e41873823f337a2aa2cc93f78f87d4cf07
SHA512 9498aad756b9bb08d5304383e2cf154c3e42785ddeedb2b62766383d936ce73baade7876d6b608aef0abd588989055b31b55cf338d9948a66f24ec34dc9d37cc
SSDEEP 96:zNuRMv86iYtiiEN1njuJeW7ALB8Zkv6YQowV7NB8F9yM5H2cOWFGUTXNB8g9wufh:zARMjriiW1nXSlPcH4M9wW9QcAA
TLSH
T11BD1A94A97AD18EF5601D053EE086E4F2DD248FEB3BF631B10A06DBF35A1160827C61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es_es.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\es_es.json
Size 6KB
SHA256 24a72173ce51305204c9fad15c44c12d4d0950ab73300aeec26cbd5d12a50e1c
MD5 9590b8db34dcf0f6d75f4e47e61c11d6
SHA1 e4c3045f86db5dba55f9d2ae6245914872f5f71d
SHA512 1a5e87f104069c9ffb1c99a4d8fcec406d6d479f40b8833f71079aada4504210377add6052c743dbfb17315bb273d419eba97f2f51ab6b64e75b3dbee604a6f3
SSDEEP 96:SF/vs0kvBNgfXcrWRPJf2ds+DjhrOcygafhbUsGmvsjztY5W0zgaMtMeTIa733gx:ensfBwXcr3b7kosGmwna6XPB3QvOZA
TLSH
T119D1B60685DA3F66E66112C94B93DF6773F4C6A8F00BC1C5E579923729D828CC22BC5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et_ee.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\et_ee.json
Size 8KB
SHA256 5cc900fe1d69d4ea83e9921a55d87e299564640168bcc3a56d3a7253cb0d205e
MD5 48cef3fcf54bcc8de09e8dae5a38936e
SHA1 c96950cc9bbf72730aff1c17915eaa3263dbe047
SHA512 7a9b26dde857f1dc6303ada58074a9d413f0a7c236d2de0b7dcdf70d7a54e36178690018b5b0c4b9a1bda3387efa3c89fd504d8760a5dfef8258b4897243b4ba
SSDEEP 192:RzlAxqjm6Ob3y3YXuOfCkWLVpM5yjdpIAXBL:RzlGqjm6e0eTfCkWLVCEjdpIAXBL
TLSH
T108028706413EE83A7D1413D22AA14B352BFDC266F04641DF3C95453AEBEC9C8C662D7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr_fr.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\fr_fr.json
Size 5KB
SHA256 843e10d26a04448cc21dce3f7ae09aa94d5d7948d6274d44287026ef905d7eca
MD5 3d54b7a75a8646ee1f68a67da0daf7ce
SHA1 12207a38a14f92b5ba5ee71c36632b14ec4f3fd6
SHA512 77f4972c94af82c5d8cbbc4159bcdd50c33ecfeb64606cbdaa743b430e2b03dbb4c289a026c31d96cec2ca8446e1d94936a365e13b6c6095cfbb647a2ffbbedf
SSDEEP 96:0P4EH1XlJl1X4NFKI/QMQDGubzJrODodoffXp6isMzm6B0nqSX85+Fdel0:fO1XltXCQV5rBip6oa/qRxl0
TLSH
T1F0B1A51FE1E7348959C012D3BE618F823FF4926DE299C3EC983A915B2F8D8D8930915D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he_il.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\he_il.json
Size 9KB
SHA256 5fb0c459310e54309f4910429c40e2583ccedaec61da2f3769210a428132338b
MD5 2bd55e62875eb03ffc607106530fef85
SHA1 233ca845d6bbcbf3bd91d066c2ee1e5f42d7da60
SHA512 512379306051414111429be36353c0fa085b3655d61f03c343752e137e9d25fb92d4ec80d722f01aae1a6de3a54e266ffdd7841c957f9697298ffb17812cf48f
SSDEEP 192:vdio35fXw/IAATXDf8hI29pux43hpjDVCRfCDfY:vco35fXw/u8hI29pukzOCDw
TLSH
T1782214C0E2D65464A23036C39F71E6251FF2C6F2B986B1DFDB08616CADB78E0D957026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it_it.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\it_it.json
Size 6KB
SHA256 12d6de74be3cf88df4aff6fe8343a16b134808a71d62dd7460e50549cd5b97c5
MD5 10871ac57a5310b1c3fc318bf2d891a1
SHA1 05d8b6ada7ae4211dd650cfd96ab127ca50945ff
SHA512 204286171914ce21465e6f37afefb7bad8c3779fe194d35e08a16a5223632429a735f968a1bd089bafd6abc5394bc1b1743c67aad72d524d3ab0754881a011dc
SSDEEP 192:n9+WwQyJ1oEMGTE8e+hdKG2e5ELxhP7bK2vXC4:gWwvJaKq+X12mELxhP7bK2vXC4
TLSH
T1CED1D922859B3964AAD113DA8B83AAC9B7FDD0EDE14B19DC9479162F38C49C0F21941F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms_my.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\ms_my.json
Size 9KB
SHA256 26efd27000fd0302d0cf727731c5da907712549df0f26a18848976e4f0902ff7
MD5 0377a09f625771ae562b85aeb29c600b
SHA1 b6e8bcbf6771b7fbba9a800618d6c736d93c6b8a
SHA512 c6a4b3892e40d69cfc67c179cb7f85271db5cabdd378e72fb39b3d380a4b6fffcfcf815ecc20083334be48c85a22ab69dd3b6591d7e92a3e287f50cff2fff4b0
SSDEEP 192:TCbL7CwfH1KH37qiWdUkug108L3FVb0uUVlf1lvWh7S:ObL+lH37jYUkbTF2XdlvWh7S
TLSH
T18A12A40A8B5BB26E26A052C554D65B193AFCC372B345C6AF3D108F762DEC2DC831654F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl_pl.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\pl_pl.json
Size 6KB
SHA256 b9a995e9dee5cd018e4d08906c7a6b79d5cc0d009b7d58ab02503bf0ebc690c0
MD5 79f26bb1b337d861e3f4af5c2ff3e907
SHA1 63c3b60b4464a13fb1fd6929b8d0a653e23b33e3
SHA512 a9ba42d2d028b1d279072937d2ceebce717bc7cb088f9a00f84b69dc4139806d3237a9f2d47560ffb49c2aeab7d9630a649a725087a56a1e1f9bcf6a575176d7
SSDEEP 192:850vgCmna95eZxs4lHpBzNzWoWLygTbX+/:wja9p8BzNz8yYbX+/
TLSH
T144D1FB6681F7A68C7C9001D7DB937F6429FC858EC1AF02CAD93C983F1C86688536592F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro_ro.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\ro_ro.json
Size 5KB
SHA256 f2f5dd32c2b0c905fd9dbee03dccfab71ddc4df9cda7c39b93672d3df30579e6
MD5 1baef7de75a09918f8e73fdcf7141cef
SHA1 9a296724b872ab564f0af7445449601e5e29f901
SHA512 f4d6855e8e0bc7ae7d3e8d1614a65ed5416ce35d0f3a3758020d679fa418f62a087b2705ce75617aadef35e554a3e47768f02e15fc010c470fea11857d76e134
SSDEEP 96:EFRfvWvRXifIBhYz6/OC0O26fOwbiE+Gsmnzl10WPLULhzYREKzjyrB:EHfiRxmngiGJxoqEeerB
TLSH
T11FC1F96193DB5921096500E3AB72779B37EE99FDED4680C8D1AC857A28C82C3C319DCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru_ru.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\ru_ru.json
Size 9KB
SHA256 ecfa56a3a4807ba8aaf70d50740b6bf1d398c0f40726685d5c16567f8f63246f
MD5 1103bb02bf1f0923fe9dd4936d8b5daa
SHA1 173bcf4afa8219762ad98722cd6323af152cbe47
SHA512 05f8785fe31081a44929fbf998f7d297c1988ff62d7af7a6a9331e3d0a699f008365d1bb2d3b3b4579e1ddbcdbc6bcfa68af99e02ad66637361cb6deac086831
SSDEEP 96:qmJLAhQ4XXC/LyZwv7yp7qXl11hRO+X3STUQQO1Bk9fRH0OsZzinM0qusOj7ibPh:1JLA1aO2t1leQKk0QHHy3rqsq8YkxLJ
TLSH
T1BE12BC2156EF349D1641B05BED04BE0D3AEA84FEBF6B439614A42C7F38F1168C22D65E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk_ua.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\uk_ua.json
Size 12KB
SHA256 be34a0fa7710209f151f89524339fef9f7fbc8328ffa0eb385e53ca57d5273f6
MD5 43c6432138cbf60ac5b9ac5a40a7079f
SHA1 ddc6ae686324c139b5d51e925f121e897486b28c
SHA512 760082c0a7fc9403f72a811c1361bd1c43b3ff06c90035cc2542acf3d2990a360e6d34db2609f6c74310274386a3c56bf6bcf0ae88c3e8ffe387e2ce1d46bad9
SSDEEP 384:Bnf6OM++k7IKH2SWmKEXqoD72nveesPj09Wc:Bnf1N2SfjU3
TLSH
T174420051919E54DF1202B197E9482F4C3AEA81FFB7A6879B39B43D7F79F0014823C61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi_vn.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\vi_vn.json
Size 7KB
SHA256 e353870c54a5876db06d7d65f10424b528f0fb95d436c02683be5641c931bfc9
MD5 3357b78a3f0927a5d955cc5457d0a8a2
SHA1 eada79df55d25658e2fc3448abfa70ce4570c017
SHA512 f9265f2f391f9899a6bc762c3c78db5d7e55f95036d1efa2a024be629f5394a6f2d35c93bbc29cd7cb302f467520ccf64b969f5cd77cedf62b81bbb10c529b50
SSDEEP 96:9rYGD3jos/LpVPePtFpNmZsKOw52n/lOFsjBqfrTes7YsPzGZVxq0UowJzi9UYzy:+GfX1OmzmdwXCZwoK9FYF6
TLSH
T1F3F1963203EA3439C41C226EC59D5D093FE4D06EF2C2CEC559A8163B7EA95908F1969F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh_cn.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\zh_cn.json
Size 5KB
SHA256 1565ef7d04cdca7e658838e761fe1a9bf32cbbbdb0e3fb780aaa9f0fcd4d2486
MD5 dc979ea81de395c74ef428e2d76ed80f
SHA1 c605501a12c0c2c007bab2fd2d74fb97eb1f22e1
SHA512 db78b0018e75ebd003cfaea1d635d63b0cd4c67151fffe1bd341b0df311e3c98d7d7158493eed60c8916bf38ff442807197d3a2851855b88d373928c2eeb432c
SSDEEP 96:m9Ab/JFQBdZaM5f+KiVG+5VjKAVd0O3ZXf4rSsQz2VD0QcHMAKbUFGrIwemoi2LA:Db/JF8pW3TEBr8aVdYFQIwemHXF
TLSH
T18CB1D721402FACD8174034D247A39F9A72F4C826E2BB78DDEF6259B91CC0E658265A1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh_tw.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\crash_assistant\crash_assistant_localization_overrides\zh_tw.json
Size 8KB
SHA256 cfb038a8583eeb5996fed030c80791cdfc960838075746b7288932b921a925e5
MD5 2efa6d729dc2b90d16e4cbb85d30249b
SHA1 f3e46bafccb4e5a1524c0e018d36e226cbe22a25
SHA512 6695d18b9f8817fd1a63050662088321b612a9f9546bfd3f759a2702496b6c736ea9a5e35e5269355e92088fe6f38dfb22b278b9b50945d75016fed67bdc061a
SSDEEP 192:janw+QxtROzjdeR8L1LKKHIXl0PXc9Zi/PHF:janw+QviNHIV0yo/F
TLSH
T1D1021B1186EFD57D2B0076C167A2871226F8C96AC04BE4EFB5CD506DBEFCA48C561C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cwb.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\cwb.json
Size 162B
SHA256 54be6316220b47d38e6cfcc4cc24da98e635fbe3ac9127bd30281ce7fa8cb686
MD5 789c22bbe688234e36f7b918b132d3dd
SHA1 c9ee29b90b5a1223d2a3aa8b52d906eacc4bfe9e
SHA512 bdbcbc438abff1fd2fc32cb18e9885b39ddf11fa3d80cd3fbb989e4dabd269e5755239095d72e00675b7a38514b08fb6208324a841800588ceb5b03cb5fc7015
TLSH
T17DC08CE34A270A28A58114272038AB8F327922906075268794AE5036308B7145490E93
MD5 SHA1 SHA512 TLSH

Submit Download

debugify.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\debugify.json
Size 133B
SHA256 80297e40e6a26d43bde0fdc33cbc409c138fb83ccdf0dc0f65a40c6c088cdeec
MD5 8448894e420e950deb35a7ef54967f72
SHA1 345847488461cc0e7da7518e6e019a8918c53589
SHA512 65ddbb7e2f5d60b328166bec766435649bfd8e20d2778cb9da1c0d0d35ca4b72c651c452bf73dbf21ad96ae666270f3d0547a2dc1bcfae160ddf5ee06d0a657b
TLSH
T1D2C09B9B2C057574F853849151D67F539EF8057745413314F5DD510A1077D13541242B
MD5 SHA1 SHA512 TLSH

Submit Download

dynamic_fps.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\dynamic_fps.json
Size 253B
SHA256 f773c03c1cce5797e4d4698939ba8a06f421101a0403b8e018c3f3d86e752a45
MD5 c5a731bfcb5da338fc5610a4906b415a
SHA1 673750cd8cf6896467451122af6354fc1c6deae0
SHA512 e77f493a43d769575026317a2f5aae9b28cd4e91ba36df270fa6abf10d117c3c341d4e6859f229f9640429272cdc07d82fc0839daaee5bce9a1de17c1e32b0d7
TLSH
T136D097173200F2E948EB2385EA406BB3A63C409737090880AACEC205E8A30CC3307763
MD5 SHA1 SHA512 TLSH

Submit Download

entity_texture_features.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\entity_texture_features.json
Size 148B
SHA256 6a3760d2b7828efc524976294cc6fd17f16bdda9d9827bd55f8fcd58ce724355
MD5 a628c3d6d1d55b0ae20128eab60ffea0
SHA1 91418752e836cd2ea9deffaf9bd5f6fc9e9242ec
SHA512 b5f716b50337dfab03d2628f57253122a9ee3cf5512094b992ef576ffef5a4b8aaf51da94f78ba0e481750a9cb8bf4fc0c52df713350db69d687be0a1bb10f99
TLSH
T174C02BDC30382D4F4341CC74D08B85011D2D69B331E03920547D001D14CF0F0D48C523
MD5 SHA1 SHA512 TLSH

Submit Download

fastquit.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\fastquit.toml
Size 99B
SHA256 17225e085e6759210cec7e829e00c8c90f9c5d38714835cb5da9c98398842f7d
MD5 2d8bc43d918888947c3c9a4fbccc5c47
SHA1 e00665ee16327466c894add52e398209d98d67a7
SHA512 a23d3f69249c7c58ba0942ec56cf451b33bc88af294f673830859d5b032c38fb2e0b6f50e53cb2fd00f9af219f95d2f554cb2689099868b07af2c5d2baf4d9a9
TLSH
T1EDB0123F842373B804411331506760B806360FE0108A1546CE0F4107750CE18825CE4D
MD5 SHA1 SHA512 TLSH

Submit Download

iris.properties

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\iris.properties
Size 73B
SHA256 3f5878535aacbfea79ae6da2f9142963f5662af3141692f0ba945767c9096ce5
MD5 e9f646bca48bee15f27cb25cda3915d9
SHA1 443d5e09dd50778bb73e6a2632bf1a0a6353a2aa
SHA512 d8981b344d3e1fbdded6e9da6fc2672d8d7438af0f02ac704a48e132f0e90eb8aef25d2920c439d3288cb2c1efacd5a358676cac7ba76257c8c1111f71ab8e34
TLSH
T1AFA0240143713C743470C10C50103401C01004104D171074501500DFF4D50744FDCF44
MD5 SHA1 SHA512 TLSH

Submit Download

lambdynlights.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\lambdynlights.toml
Size 161B
SHA256 326ec0c840e65aedf5c6048ea6016d551be38cf23f692949e105a4a388ad8be7
MD5 57784a01dfdce14286682c8152f6e852
SHA1 7b639d6e9bb013db50ed4e074003cacf147f4f69
SHA512 13a4d94c928d4c7d8968c8ce0839132d66d2efc2eadea34640b311f79acde8d04407abb43e738712f2fda66e76e69504d4e86757a0465b5ff8e16948024f1bd2
TLSH
T1F8C08C3604E0687F2806B022DCF3F0E36440C8001A0FA278F0A8D0A82100E5C00CEC1E
MD5 SHA1 SHA512 TLSH

Submit Download

midnightlib.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\midnightlib.json
Size 30B
SHA256 57b848fb6d7c03b6124297de49b1e4cb169e74db042c74aecf79f035ae2f3980
MD5 faf5b671cdefd24677633d1bf81130b9
SHA1 7f635f0ca44379ba78c7390728700e36e7e0c050
SHA512 13228215bd1077f47e0836ff88bed711f8ab4fc2e7936a2454ea9ee4e063262649ed9475b38bce7b1e1f22c0f856b92b412adb52d9ac8083a78ce3e126c04bb0
MD5 SHA1 SHA512

Submit Download

modernfix-mixins.properties

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\modernfix-mixins.properties
Size 139B
SHA256 d4a891a0843b77e3df10174e2377c790dc9908f9379b2dd2e3e0790e4344a265
MD5 664a81fec1f21a8f1d533687d2d080d9
SHA1 907bc173ae1fa8702f980bdc58c1f8aa7f8588b1
SHA512 be410097b909aa506bd43330b0a6f7b65aecbad66173f5d3483d3597ca4ecdcfc746c2b2e952c15ce2311c5980c5af3ea287879de1581c52fcd9900c3aba4407
TLSH
T1E3C09B4E83980779C9D7153F605355817F7168DC44044850EC3B1FC72CC5644104905C
MD5 SHA1 SHA512 TLSH

Submit Download

modmenu.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\modmenu.json
Size 812B
SHA256 3f49d42a9970f250951d5610c6fcb860a181a426bd6cb4548bb75fe71de935ad
MD5 fbeb21ff64e76be74eb2bdc6c8cc915e
SHA1 f93480251d26f5b1507d0c642cf60b42355aa2a9
SHA512 97550d67345ab69d131adabdf146edebef89a85645f1ab995f898391cb1c716b732c48d26ca5f0c0fdc7345408d4736f7477cdd7457b9d4f68a61e0372ee0b0f
TLSH
T12C01B1BE84F9D86F5B9A2389E4DC7B194A7D00372214BD04E6DD582225D72CE305B457
MD5 SHA1 SHA512 TLSH

Submit Download

moreculling.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\moreculling.toml
Size 539B
SHA256 0aa6fc5bdb5d4276425b4885c3878403fa47cc5ed84a62a12ca7b93d873b64d6
MD5 5075bd044181c996c89699d0488e650f
SHA1 c7017390d2593c4d6c0093055a4b450986937eda
SHA512 ce66e41ef31dc94b69f598eb2eb131d559665b0157d580f0734a4cfc57c900d5153f810fbe5815f1065a9a28ff49b4ae98a7eab52c830c130e933f8d4c88bc85
TLSH
T162F0E27A1CE27F36FC76B22B19C3942818701DA57F6F32B4C661803D508A304A6F4E2D
MD5 SHA1 SHA512 TLSH

Submit Download

reeses_sodium_options.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\reeses_sodium_options.json
Size 647B
SHA256 6dbf38d3c870c6f03539f7ea8150833b41f89a6ca5b86bcd3ff0ef19d881fc83
MD5 7b3c719bcef4830ef30a7c69bdc13100
SHA1 4cf3bb53cc7fd92b8c1f7cb8ca7052256efb3f5f
SHA512 d4b6e8b254ecfe15e551c0d7737da8578ccad7df3d88e66c2ea907aa7bf2c6359afa24b01e439634368c1aa46f9881de520877e08a333aa5fb265d1d2412d64a
TLSH
T14DF0493886212874C585D328D01B7F024F7E53331281A437B81E198B11FA683321753F
MD5 SHA1 SHA512 TLSH

Submit Download

renice-shot.properties

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\renice-shot.properties
Size 167B
SHA256 f5ff731194f66727bfeb75a28a70104fc4687cbc84b69e60c94fe1b7d901f453
MD5 be42f1be4f113eea9d1c2f4cc5cf309c
SHA1 e87106195458b9c25dada790d80e863c2d8363c2
SHA512 383fc128c28a7a33a12c9ba6ea8a5f570c9555f71dce9478afd33b17380dbc294b9d5255cdb8283ed287ba5bd4c9b9f3ff066e5024ae04ddcaf5a64b69a31d95
TLSH
T1E5C08CD30F99947C0300CD82689AF45B16AEB2101E5A3049F28834A2345EA4B02EB8A4
MD5 SHA1 SHA512 TLSH

Submit Download

rrls.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\rrls.toml
Size 1000B
SHA256 3630be880dc7f037238b7e6347201d4f716ffc7e16db0a1498ef2f775cf8f5be
MD5 d5fc0b0d90ed9ea83a7715097fab44e3
SHA1 9eaaf526cbb9d996a7a2637cf47ccb99252b8f8c
SHA512 722db9ecb538e6b5fbf2d29fc71c0139af9c5127ee7b5c05edfd754ea068143da3a32156657c831339a39e579534525c3a1beacd44417fc71f1339df0f872321
TLSH
T1BC111459658336AF8F3D60D4CCFF10B03F38A012EA1F21397015C0AA257057AD1AED6E
MD5 SHA1 SHA512 TLSH

Submit Download

sodium-extra-options.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\sodium-extra-options.json
Size 53B
SHA256 cb0a666a09b7274b20f1266e5b47df5900625acdfb3b213a2d5ea82804cbc07f
MD5 530abacb26ddc22f1a0f6ab254a7dbb3
SHA1 c88cc0fc6cf296330fc0e50d86ff3e6d36264559
SHA512 27702139e0b610f9161652b8571cfdbb088e3c7b8a7d995667e40b85a617f608c88208c99e9dcea393859facde0356b73fade24fc29ac3bf59ccacad1075a919
TLSH
T1879002902850196C21975B5959261F40641D041C14355228567410503197785510A1D6
MD5 SHA1 SHA512 TLSH

Submit Download

sodium-shadowy-path-blocks-options.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\config\sodium-shadowy-path-blocks-options.json
Size 92B
SHA256 4773ede8076bdbcfb6b8ea3de058a56120aa7438ee6b25de297c10aa8f5ce393
MD5 03341f94f79c9d9b37247c01d255c1e5
SHA1 f8106ae861e984db693434f54a191e599ce3bc83
SHA512 d6fb8c5f3b0cc9d62d1722dc88d252074eeed2c4ce1f1060f5321feb4b61956110e418d5f09ffbd29dbf81e36c76a1e9fdecf1c26118244c666450a3488ec89a
TLSH
T1CEB0120374B380F0B461660BC91DDD13157450A737000BD4A54F5C1422680300103127
MD5 SHA1 SHA512 TLSH

Submit Download

debug-profile.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\debug-profile.json
Size 645B
SHA256 902b29e5f2044fa0011ac76281c700b52d83f1b5db6b605b8f702c8a99a55a2b
MD5 c9bd04af7e074a449a823d14524b5e38
SHA1 5c46a5c48fccf27ad6be72134728153b0280773f
SHA512 b9b096e1a0dd90fa3f9f6832587c69071d9e911b7d61381aa7144118db56a0e64d2c5897e94bcb716e9158c6b205a12aa9645502d73773aacb9b0fabc6c637a3
TLSH
T1ABF0FF08BC47EA3EB11AF94C586B2710E3B98B6AD50405DE6869110B23AA3D603A7D43
MD5 SHA1 SHA512 TLSH

Submit Download

options.txt

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\config\modpack_defaults\options.txt
Size 1010B
SHA256 bf066d869d460eef6cb6d0a725b50280c5398f7f4cb5c98b76c5214e57a57bdd
MD5 945c4829c7fbf2f7234412befc7fe2cf
SHA1 2a6b43c569a0c5f3cb470faef917eca2cc1e1179
SHA512 63630c1febec7ea993bac36ee3226928b8fba24bf34f2a64dcacd08a31ffd91d5854ac7d4ba5845e64b7c02702c654d600635cfbf884181d2236f3e882b8bba5
TLSH
T1A7110222671DFD38D6BA614E8160BA642215C1509DFA7B5CE64EB1EE020E5402BFB71D
MD5 SHA1 SHA512 TLSH

Submit Download

animaticarefabricated.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\animaticarefabricated.pw.toml
Size 698B
SHA256 b8a0e36c906c67f5506dced74a7567877d3c29bcdd277ae578c248f8a9dc4a31
MD5 fd12b77d84e82784f02e30029b86fbdb
SHA1 f2a91eb63d3109ad44feee13a3be172c946d8470
SHA512 40ee636bd9cea7e1fefb7617307b0988177d4ac01c22c2998893c5fbbb32b4dcebad558e843a1063ae3fbeaf99440d381421156b324c2c12429f9ad8acab01d4
TLSH
T10A01CB421B33C03301326F36E29D123A8A302932077A4D30A9F86445098E81EBB600C2
MD5 SHA1 SHA512 TLSH

Submit Download

better-block-entities.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\better-block-entities.pw.toml
Size 734B
SHA256 b9f929e6fda668114dd2867a2e11a91f122034a09512c0dea4559e4e346e8301
MD5 86adecaba912dc3b3bd02c504c483c6f
SHA1 ecdd86776156847eb62cb1a70ec6bc711a6eac19
SHA512 d28bd090ea25bb6a3e0ae9eb32d1c1096c955eeb0b91f4bec48633403d8d526f77183212f4661f38620573f60d1d8800bafa2338eecf5c681416689509e6dc63
TLSH
T1D7014C479A33C572113BAB73D59C513E4A3013374B26587458FA442426CED4DFF90189
MD5 SHA1 SHA512 TLSH

Submit Download

better-mount-hud.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\better-mount-hud.pw.toml
Size 654B
SHA256 9876824c08e5bf3c2cd66fd621f66f7a68cb0dcf519728e6df975a93ae0b92a9
MD5 c922ad048cbb4d5a1ba7bd196e87e9aa
SHA1 855430001e4cb1c9d04db5e88486b02cbbfc9a5a
SHA512 497dd6e2b0d41f80fcf99eb720eacad2dacabf9e317411ef360c44b275714f1b5c82aedb66a73858d8bfb935b34453b73f75962c870eb91152ebb97fd2caeb79
TLSH
T1B0F0DD99E677E1234637AF71F8DE926A0224463E5562983055FC842245CE91FFB31845
MD5 SHA1 SHA512 TLSH

Submit Download

bettergrassify.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\bettergrassify.pw.toml
Size 803B
SHA256 f01542630fc57bc2a6bf51c6ff6dba4c9dae9339aa609fc170c38c267ec15e30
MD5 7f948e461b285ab6fd4b500557b58767
SHA1 b28ef1d4885bf1414bd46f21754796f632f1068f
SHA512 4dd718c4f458af00c1347fe59cbc917aa9af67c01c97146e1c8d0fb78341186a4fadf22581de3c4982cb0c3bb1067c5ef4986f3a4f53cfd3492e618691bbd19c
TLSH
T1DC01BD8217B3C4310033AF71E4EE627B07305C37476A947078F1A16216CE89DBBA4989
MD5 SHA1 SHA512 TLSH

Submit Download

cape-provider.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\cape-provider.pw.toml
Size 830B
SHA256 d61e152d7b793d1fa413515bcc35cda3a57dbcd7c61fca48df31bba87c13b26a
MD5 6bdab1397c4f80345ffbb21a328581bc
SHA1 615057eb4388a29df101877ec8cf38e176b9cfb7
SHA512 2d9aa96e5fedfc2d6b032cf50e6b99c933d7b6b2be90ec0970ec27469e6cd7bf9a19af6b8b7385e6cca251475a2fe87126d29510954f175619a12a2f87de25c4
TLSH
T10701CE420A3392329137ABF3D4EE037B00641D33577A6C309CF690A211EF81DBE686C2
MD5 SHA1 SHA512 TLSH

Submit Download

cloth-config.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\cloth-config.pw.toml
Size 670B
SHA256 c3308cf7fa5639c6b730a730965f817a1106a3cc5d841569bbd49087a6cf96ad
MD5 8838f809f4c75743b489b4f62e6e4120
SHA1 9a48727980c1688574e5bc5c872199bb2083a54e
SHA512 6b7baef0f1bf6b042c2e0b4ee3a8cd641fb0a465f4d2da69e7f9880408a4ac1e30a7031bda8811c8667414a4eabe24ae1d5f93378368116de1bd729e78cb33ee
TLSH
T17D01997B6B73C633C1376F36D09D033A4A710F26A3B3A4B020E930A45ACD42DFA5408A
MD5 SHA1 SHA512 TLSH

Submit Download

configmanager.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\configmanager.pw.toml
Size 760B
SHA256 d053bf11dd0fbe5e8ed32378a419eff08a05079c1089794b88b5d0bae034cc24
MD5 64332fb9c0975a8fb89bcd2a36485079
SHA1 5873c437c43920729e5129f246041ccfc9759cf7
SHA512 af0e04b94a041204b6e33bbca83317532b13b0b1cc051fe168e9d16c8da1ffb72c6b1a2e4a4c21657fbe8f5faea87d07839a2eb6d7d0c7b5d08185108859e005
TLSH
T13301BD035B77C6235037BFA3E5AD027A02311676D2B2A870A8E86195568E51DBB2068A
MD5 SHA1 SHA512 TLSH

Submit Download

continuity.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\continuity.pw.toml
Size 688B
SHA256 25ca7add48e51fc2fb552d1dc6e6d1d9a0dc2c8e8ee9d54467f4a151a497fa36
MD5 75b59fda769ceed2a1ffeaf40d542bab
SHA1 d88f96afeb3fa9a5fd0d1416335f8a13a2430c03
SHA512 934210f38511bf1866abe7d18db986a53d2ef4eca4bd13478672b01061e5b8d85abae68248636b21ab93f999d8b3fc9bf56346540f581b412055e2da5a94005f
TLSH
T1D801FE064A33C3320233AB31D0AD122B03345A37512A58306CF460A416CD65EFB74186
MD5 SHA1 SHA512 TLSH

Submit Download

controlify.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\controlify.pw.toml
Size 891B
SHA256 8a31aba8dc36c2a8a30396f0282812b8e369928956d76d95744100b8bd8e25ec
MD5 cf025cbfae0b02ec131724ec1dc8271a
SHA1 b2cb51984a4f3e29d1afcdc6f1b31500c6afb1c5
SHA512 6d2a877988252a63e540f45d160380750e2ca70210741f1c70340c7a4863425cdcd2b7e15d19727ba33d340fa2635bb7213de7354afaecd826e23eba333461d8
TLSH
T15A11EF525933C23305335BE7F0DE132A03206B33E66A18316DE5629052CC46EFB2568A
MD5 SHA1 SHA512 TLSH

Submit Download

crash-assistant.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\crash-assistant.pw.toml
Size 702B
SHA256 e5602db4ff48cde653e6e3a7c259a55c5dc8cb7f4cce51e940272defca1f18a5
MD5 cfec049cf4f089aeeb5f4421639ef5b2
SHA1 a2361c75570aa0720add89d09addda382f715029
SHA512 1b99fa274f948e1ca1efdc1997c0fd7c1fa0d8fe973e5a7121d633f6529b263d1d5a30fbbb411595557191d1ebfce3918042258f3a6e160e8215b52d1446e32c
TLSH
T11D014E169B3BCA3385F3DF33E2DE937107204826D6F75470A4F89094488EA0E77500C1
MD5 SHA1 SHA512 TLSH

Submit Download

debugify.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\debugify.pw.toml
Size 633B
SHA256 5b79796efbe02fe707552402279b78626fdc5822b651622fbcf48cb3073b7cd9
MD5 0cafbcdad1a30f7669e21d60ab82977f
SHA1 3c5242f98b23273ad746469b007fabcf5be49d0e
SHA512 7b33c84573f35d2a284433b868bbfd69376dd4faee836632e33a444c032baf5ab7a3f0a568677ed490bd857f82cdbe831c17157f9e01f475e37e4c40376df8a1
TLSH
T1BCF078030A73C832C333AB32E1ED626A0B74063E5526E832A4E885A952CDE1DBF70185
MD5 SHA1 SHA512 TLSH

Submit Download

dynamic-fps.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\dynamic-fps.pw.toml
Size 885B
SHA256 a659917dde71d44b5abc3794eac09966dff0eaae82089d1c0bc8e8b476624388
MD5 2d6b702ceb358c3a0a330acb305054f3
SHA1 01c774783295dac361c87aca78c14cb64166a00e
SHA512 027d5c3c81b3541b5d441185484499376722f6e3a388a41ddd7c58902a9092448211980832b5cef94f4ce0970566167f1f04864706ca763822f19262fb17f5b1
TLSH
T10911CC427F3385321233A7B6C69D433A92A149376F7B58B018F4A41803CE84FBF2A645
MD5 SHA1 SHA512 TLSH

Submit Download

e4mc.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\e4mc.pw.toml
Size 811B
SHA256 fb90fcd3588e9e49e2a76f6b1e14bdb8b2d35edb1408f1279db490798e6488cf
MD5 e7aa31e8e64badab711ddc7545b003c7
SHA1 4268b126b701a24e98ea3dcf457fd2d911e2b0a8
SHA512 282cd276f7262045d44a05b4cabe8b47b1cfc9538f78e3a0e4635803902ca8de94bd87743b2ec391db75a8941db601adb2a1dabb51210e3e21cfa9004d2851e9
TLSH
T1DD01AB472B73CA231073BFB2D29C07B707310AB6AAAA6CB158F4535002CDA5D7A752C3
MD5 SHA1 SHA512 TLSH

Submit Download

entity-model-features.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\entity-model-features.pw.toml
Size 758B
SHA256 df52c20e4870591bb69ad14a7e9fda055d7d5e791d0bd5131e6e3b8ec7e1ca91
MD5 73f63e16108d76b5cc46696c648df02a
SHA1 55d834c71648ed9a1bfec3f5e4b4bbbf4f8deadd
SHA512 379b178ce74bdfc58e459c63c4e9831e664a68f8e5d63f555a43cc5f02adba39b59f76c57769d18e3f7ae57936c11c57ef9cf45b3854b869de28f1fbdee36d73
TLSH
T103019C4A17B380335837AFB3E698827647A40677CE7268B49CF4A21506CF14EBF141C2
MD5 SHA1 SHA512 TLSH

Submit Download

entityculling.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\entityculling.pw.toml
Size 712B
SHA256 35ba28de57d54608ced1d5f25e33cd9b33b3584e381a7a61fbe05edb52b66bec
MD5 12ae634fcb26a19450a1740f4449d586
SHA1 a1c5e70259b9cacd09386a70c7238ffb91607654
SHA512 511288f55655c64eccb41e342f18fea1a0b9ee69d157f9a43a65d59d4f12f28cd1430c39da0499458626e7785673da284a1e5f8b75676074b4abf1e0c1d944d6
TLSH
T1810197536F73D0234276AF71D0EE923A0B710A3B462568309CE9A5550ACD85EBFA464A
MD5 SHA1 SHA512 TLSH

Submit Download

entitytexturefeatures.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\entitytexturefeatures.pw.toml
Size 722B
SHA256 1a6aadd3ca368c8b1e0ef4c88a43c7bfe77dfd60c2ce1dfe24edc8325609d7d2
MD5 82e1d80a21b2f15aa8562bae86b4f6db
SHA1 514e16ceb0d93256e60b96b3a4e8cbe32661da88
SHA512 d114c610a5cd14f0def081424da40cdbb5c8a2710cb9c51e67e37f5ad312a8057a01d3e3fceb3033888f0243c9af1eafd0e25fad380f9a025ef975c1b1b04f6e
TLSH
T1E201FE4597B3C52388339F33F8AD037B467206768617A8F4A4F440A815CF41DBF28487
MD5 SHA1 SHA512 TLSH

Submit Download

fabric-api.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\fabric-api.pw.toml
Size 653B
SHA256 4c526c12fa6074d32003c0e447d3cda8599b60db9f47067586751271b82aa7b2
MD5 0a75ee3d3721fdbcc13fc70abaafb9c1
SHA1 8b304d7b6d190cee2abfbcccbd6c07ddfa6a318e
SHA512 583f91214f84080be5eaca922538df503ecd12c1ce9614016436051c488ae3caa4bb89c9f961db9c2c8f37a0613fb960847fc2c04f4b3858d36faea757771d81
TLSH
T15CF099132733C0334637EFB1F19C02374A315A776A66A43064E63955A6DE52DFBA9086
MD5 SHA1 SHA512 TLSH

Submit Download

fabric-language-kotlin.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\fabric-language-kotlin.pw.toml
Size 1KB
SHA256 ae5017053386bf540a256ae19857132588cb2b24fb78a0dc8d348c220de4c39d
MD5 a635560949a66fac6a3ccbdd8504a452
SHA1 114d768a9785636894ddb751608f6f29447392f2
SHA512 0271240cc38269d8092b95d0d424be5c208df588d6216e0145be1d11224191dfc828595ab0e0ff51c227f408c955db52e5f8d7fd8f93dce1ceeec0979281ddf5
TLSH
T1EC21C13317338C2134EDCA77A46CB22B055409239D69B62072908555BFCEB5CB9F2EF2
MD5 SHA1 SHA512 TLSH

Submit Download

fastquit.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\fastquit.pw.toml
Size 842B
SHA256 4b3d39d1d72067f3872f31abc78bcb328fb01cdcdc55c7fdf1f40064c6bcf5cf
MD5 c6d22730c4cd7ee94d407ea1f4c95c60
SHA1 4940258c7808221899ec6107c800e5ec281c98dd
SHA512 426e74607806279d39c24c765e97d9b92433daa73a423598f578fc6807edbe7552abf2be9dda4fe9496dbd889b742cabc90bae42c6dc8621c750d58381092eac
TLSH
T17C01CE920A73C03201339BE3D2DD133F46B25932A2BE68305CF4919912CD66EFB74686
MD5 SHA1 SHA512 TLSH

Submit Download

ferrite-core.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\ferrite-core.pw.toml
Size 690B
SHA256 ff7cece78552fb9ef06895cd6f840c95f749285f7cd9123ed69a2ac461ef6e52
MD5 702e6596439afa82e09bb4f9086562d8
SHA1 af15be5ba91713736f1fbab15096898ea895328a
SHA512 0bb40a168d6323d7579a63c7d0b41a5af9c1249ac6ed0d78a9591f3e6bd4c4d8db36d1f909377b51d4a384828321e005485a4acb7d2f9719e57b75318cc0b029
TLSH
T16A01FE031E77C53352729FF1D6AC4336062015BBC322287454D0A1C944CAE9CAF20286
MD5 SHA1 SHA512 TLSH

Submit Download

forge-config-api-port.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\forge-config-api-port.pw.toml
Size 806B
SHA256 deecfef4a79a7fc2037be3947ac05fc9f9ea4d1f811f9c3e594a8fec2749b4cb
MD5 3bee871daa7d042e730ef4aaec5f5891
SHA1 7d4592f65725dfb9ba2cab84145a07ace4edce43
SHA512 44f0dc15fd7bfbbd92e885590edc687e3fff7038306423bb6f9115f9b9ad3c265cb0e2b513d4dacdfad423a4f49d7adfebd1cd5e3dcce76256fc51133a8c44dc
TLSH
T1B0016D435933CA3706376BF2D4DE437B0736153A522A28709DF861A523CE95DBB65181
MD5 SHA1 SHA512 TLSH

Submit Download

immediatelyfast.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\immediatelyfast.pw.toml
Size 697B
SHA256 003ef64ebd19f5b8895db9f8bb77b65c46acdb751096f6ad7f439da06ad343d4
MD5 d7430e222e2c1f2e6fb87dac6e5c094e
SHA1 9367e9c7abe0b637b4b95446a79a4156d9eab711
SHA512 b266cacb9fbc3566a6ead9401c03368a9b5c1ddb26998b0f048e0b41331d1d138307e61cb16cac37560115e4efaf99bd7ea31f139416c550a10e8ea6af707d8d
TLSH
T1B101FE2B6B7385765573EF38D5AD833601700D3B456B98B468E09259878E90EFF18446
MD5 SHA1 SHA512 TLSH

Submit Download

iris.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\iris.pw.toml
Size 727B
SHA256 bfbcbc0699b7e3e588cbcdfe1ad8398eced417e81b8f169ef244c86b6c3760d4
MD5 9207a2dc047c0a3a689626932012875a
SHA1 19403dd12e00a77bf2a10f356ae17cb60e69d9ed
SHA512 268c2a6b5b2435b802e2f3746e407eb8881d23215803fb7cce7618e588d75af6180fcf5d8a54c8e175e6f88622da14fe85a854cab5f1614f1b6e1ab326c8d729
TLSH
T1B701CB429A3BC5334277EB72F8ED0336427026361236A8705CF5A41D46CF82EFB1438A
MD5 SHA1 SHA512 TLSH

Submit Download

ixeris.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\ixeris.pw.toml
Size 670B
SHA256 833f69a9fe17eeff73c30a20579d73ba820e883ff751437f4451f72cf8649416
MD5 b32304703a11f12b3b8900a2a68d82cb
SHA1 a52103804e0e54c6a00a0d8a7e086b24f2157364
SHA512 8336f311f47b2aaab2a6509d9879efce4f47ac9642ba5efad8241192565299e7d426fb97b57bfc4c13e102310883303990b9231d69581e49e96f7c08a461050e
TLSH
T14A0149265633C5234177BF32E4AC937A47314E678BA55C70D0E5509449CE41FFB68DCA
MD5 SHA1 SHA512 TLSH

Submit Download

lambdynamiclights.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\lambdynamiclights.pw.toml
Size 904B
SHA256 8538d677a952e819b992e7d3fc6fed245559eaebbfe61bcd7d5e498c06f3acd4
MD5 b3866878fd40979505c909e4b8518858
SHA1 fb76bf6820cd964b636eda069512cfb749b5a1fe
SHA512 7a79ce84e587bc6f0215de35d731396481d9ef25a97e3b2d197f1128f902c79fff86cb7f85f5a0ac3e53fbdbf883697013bbb6b9d8b515d082376c52ff66cf90
TLSH
T1F3118C92153788B1217767A3E09E933A43310B33B5A65830ACF455F163DCADEFB29546
MD5 SHA1 SHA512 TLSH

Submit Download

language-reload.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\language-reload.pw.toml
Size 785B
SHA256 9732aa5c1a1907b79a5ef0981bccee3d7ba2ba5f102907fbf613421ab5717297
MD5 b7cb0465535cd547a23a242250c7b6b3
SHA1 ed3dd25b16377bf5d6e272022eacfd8eec3aab59
SHA512 ff354aa39c31f17f5f28f69895d649f252b08c82876c890e0be1f14ab6ce12c4b36447c485668a0f62bcdb4a25b1ca402d632f2bf847e7d60877f4815a7aade4
TLSH
T18801D0425733C1324237AFB2F4EE022A01709A336969E8315DF6806192DD8ADFB21987
MD5 SHA1 SHA512 TLSH

Submit Download

lithium.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\lithium.pw.toml
Size 677B
SHA256 02790ad25219ec4fe75f232bf22ae98d909f07086176003359a25ce62c2e6f3e
MD5 1e7fcc74aedfd79b11892b91438e0250
SHA1 92fb18d3cd14bb3e2c411ab0d8f15477e728750d
SHA512 dc5b1214c7dfaffa827933e45cd4b23e7a19fec3ac41648ea73e385d8ce76f3ae48d1931fa9d645d78381495da7a552754b862fd841abe4464d9b9efddb642ea
TLSH
T18301FE5A1733C1221676FF36D99D03A6476006360E23A8B05CE4129E41CE92DFB540C7
MD5 SHA1 SHA512 TLSH

Submit Download

main-menu-credits.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\main-menu-credits.pw.toml
Size 710B
SHA256 ee059625120c7143a1266d5adcd416082017f64f0a0581446a9453b1656a1f53
MD5 58d73ad1b220e97117a446383c9dd6a3
SHA1 7e3411b49dc29b454a265eb9994e06af3c5d000e
SHA512 c59bead1c772e40e261528b8740ce8a22137308832078df3d394aa705582e3a2b13d27ba43c584004ce05fa18302e5653cd847939cb75511e44b2898198de076
TLSH
T13401C0524537C033083BDB76E0AC63A6037485678322D421F4F1A19ADACD95FED6408E
MD5 SHA1 SHA512 TLSH

Submit Download

mixintrace-reborn.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\mixintrace-reborn.pw.toml
Size 698B
SHA256 763d1c18c0b7c00dd1df090432aef05906d6cb06436db233fad11ddf33ab9c6e
MD5 a5337dd5b71bb46bd3d8c541a53ec604
SHA1 8c58a1d80b16e7649ab749052a0772dbfd5563cf
SHA512 5b180751b482a8c0746ac25f6f9d9622af9479aa2778245a84c5dcc514a614f871501506acc820dce6d4439813ab241e2e286a5fa726a0c2d94ff31491598b4e
TLSH
T1F0017B536A33DA33583AEF76E59C032607744E2682A6A860D5F162A521CB91DFD3C188
MD5 SHA1 SHA512 TLSH

Submit Download

modernfix-mvus.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\modernfix-mvus.pw.toml
Size 701B
SHA256 ee7a036235f59794350eedc89d4766d3151d7267e35baccff697c95359870868
MD5 02687b406253cdbdd2107f117874f4c5
SHA1 b08d4c1df054d81c8d97705e7b7a9d2df3c416ca
SHA512 534afa435e7ccbf04b0469d6d6b0d6ca6c7e3562508a5b3a13d23a2e22c6158d377a104970f51d82a1d2d677878393feca4e8f726cbf466f13c1dd4bc6012020
TLSH
T1C8019E462E73C5320533AF33E2EE17770370293266F6947168ED519426CE42EFF55189
MD5 SHA1 SHA512 TLSH

Submit Download

modmenu.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\modmenu.pw.toml
Size 748B
SHA256 6251b5c9e168e861632293058e0971e95188c2128baded3c0a93b7e8401769e1
MD5 d7e9a80f25e997c58c27bf3cdd731523
SHA1 cc853cf0ec5dc12c57f8993c15c1f91a08eddb0f
SHA512 1d1aaf0c9bf7a17dc69e2540085066a740eff93e6a79ad08b5484a584b4757550d598aed1ff96cecbd0b82e528d98e5edb054cc64b7d90360267512267dcbc9e
TLSH
T1E0019C930E73C1734633BBE3D1AE42B742754635927668705CF8A02452CE40EFF65685
MD5 SHA1 SHA512 TLSH

Submit Download

morechathistory.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\morechathistory.pw.toml
Size 685B
SHA256 81580d38741607a3e80308316821d5e550044943c1c0559bec58b6770825d77c
MD5 7fdcd5bbff68bade00ace1223ce9ab31
SHA1 b2932145ef8df434cfe12dab04d51f6a7657cd75
SHA512 7aefab73039a92378301ad02277471e4e38a911f23a227531efe934b275e6de7749db366924268a4b08a8d6c1523f4b9d7ee6b5e591f9462dc4a95d676948aa9
TLSH
T13A019E0B2D33CB7260336FB6E99D126702215876E227B87069E5A298519D99EFB309C4
MD5 SHA1 SHA512 TLSH

Submit Download

moreculling.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\moreculling.pw.toml
Size 708B
SHA256 e3c7f0fc6b8047da6b88aa663ff4ae6508dbf55c3f324e748f32adc8c45646d3
MD5 8b1a0ff9b83013216e8fb649e7924709
SHA1 6406244b08d8ca9efb7b499ddedfce00f1309b16
SHA512 392c75cd382bed4e38c5126e42d403e4b42295de5e9a9ec8ce124e28f1870fd1d5b1d05bcc1318bef3efd3f183087e5b9a084381feba616654c73635f477666a
TLSH
T155019C128B33D5A28177AF33D2CE427E0371563202B7A471A4F6D61656CE81DB720486
MD5 SHA1 SHA512 TLSH

Submit Download

optigui.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\optigui.pw.toml
Size 855B
SHA256 fc470ac42d1715eeae39a79d2c156959f06139e0d099f969e6d0632ac0a40e15
MD5 9044d93b82d3fc0feae02fabc11c18fc
SHA1 e188b0fe87e890812b04a47e17c19b344454608c
SHA512 d9a74463b5f4ba3086c003de25b3d861541907df1f243d58c7b97e07985de33383a879f871eccb7015e692a3cf6bd8c25ced1dc86912489643714d3b2129a03a
TLSH
T13911AF432B33C63E4533AFB7D1AD433A42601932167958705CF4909552DE88EFF28686
MD5 SHA1 SHA512 TLSH

Submit Download

placeholder-api.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\placeholder-api.pw.toml
Size 725B
SHA256 641bb9041a910124b7e2ee46ff133ea9415b1002d6320608cb50566461e37587
MD5 cf5db7ce505e6a6db1e34323dd463f38
SHA1 66dddfd99e6cb40e95fc71096ecd827e934613ff
SHA512 d7f8b8ea373b9e22461c6fd87b15d3fbb97b552e5da155f2b77b547392d965d58fece38aeadc98a3ec981da71aba3a7d5645e4c9309a0ca1169db22a04cdb065
TLSH
T1CD01C056163782674177DF72E0FC533207304B36567294B044D484A4658E85FBA185CA
MD5 SHA1 SHA512 TLSH

Submit Download

polytone.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\polytone.pw.toml
Size 659B
SHA256 6897ce445b538f6dd03627440609cfa8dcd951aa30457425885697bd82d2829c
MD5 143c064204a91b182d84423df3112f19
SHA1 42a5c1dadbf9e793d94512c26555c16329e46c3a
SHA512 eea4540ae2263fe79cf47cc8b6a12eb095656ae85079d8935d2352c4353abfc9bdc6b27637d100e16c16886702206ba6aa8f33d9748fdcdedd0fb37496efd622
TLSH
T1470199064773D173C233AFF6E99D87B303B056324AB751B060E4518166CEC1DBB144C9
MD5 SHA1 SHA512 TLSH

Submit Download

puzzle.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\puzzle.pw.toml
Size 706B
SHA256 2576d5311e82ccfbc4a97001481f1b18ad9185b6d86d0f2fdf6338e9e66e0afa
MD5 c6ae093a5be697a12430a0536b3bc253
SHA1 e526025a3999204194a86b789e58dbc2c0d1f46b
SHA512 e902e939f2a42024ef575eaffe177c96e226e0b2cc891daa4a48a575861c867cbbe4181cbdddf63837a4b1d242e8a67b864408bc021ac7a522c8d46a7b8399ef
TLSH
T1DA019E075B3382320533FF75E0DC022A17601A33573AB8F059F4565656CE91DFB6928A
MD5 SHA1 SHA512 TLSH

Submit Download

reeses-sodium-options.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\reeses-sodium-options.pw.toml
Size 895B
SHA256 e61e5eb61b0b069255e253dcfc16e693422a56d8b433e2c2cadc7eb4dd58e545
MD5 5da590127b2d25e7d7ecbe27c411a60f
SHA1 580cd19355493fc8c15d5867cbd71ff1828dfcb5
SHA512 86e344ef1c691c17123aaa881e52031d2ca887d4a29f575e4906c9cc57b216c6c1e1629439ee8a803955afc3be9eb25ce8fc7cec3bf4d6aaca28031d49fc60ab
TLSH
T13C119C413A33D1214173BE72D5DD433942704633823A56719CFA869906CE85EFBA5142
MD5 SHA1 SHA512 TLSH

Submit Download

renice-shot.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\renice-shot.pw.toml
Size 843B
SHA256 003d63a3b142fa82834b89db0f3f12a0be56c4fbdaf11104e295a07c8b0966f8
MD5 d21dffcf9f0e1c89ac4e6813692dff8d
SHA1 e3be9196e090e9c4f7766f86897eb0613e1b4604
SHA512 470363a1cf622618c917b4b7109636d87372c77760aeccb75d84aaf6ad33e7a8c93b2a90624185d891348f7ca5c842dc1039372ee0cab0bb79b20bc1d77e3c80
TLSH
T17D0189D25A33C036003BB7E2C5ED033B42364637A23AAC319DF5956002CC44DFFA8A86
MD5 SHA1 SHA512 TLSH

Submit Download

rrls.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\rrls.pw.toml
Size 707B
SHA256 aa88d0414ddad7548b04e4640d78753b47acae44a4fb1e8d9b5a2b68e1fcd53a
MD5 badf29d953a4d8afec507f8ee2f1aa6f
SHA1 ea3decc6e1392b1b4496117d61c0dde079c6d6c5
SHA512 bb635d1ab6b8967ecf8cbdd142002c44ce6f337b7d22c5ff3b820994801c4f2f454c6558681bfbf6b19a5b162e718a19e19fc0d1b69a9856380757a6408c8768
TLSH
T12D019E861F33D9368033BF36E0AE436683626633876AD87258F1916883CCD6DBF91541
MD5 SHA1 SHA512 TLSH

Submit Download

skyboxify.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\skyboxify.pw.toml
Size 834B
SHA256 51ec7c908502416779589093b72626eccc62927475a03308167eed56e3f24a99
MD5 40a6ed1945c57256e96c77ba6f88fe73
SHA1 07ebe2968da6d41cc3e6be7f8cbefa7f4a98ae13
SHA512 be836687d094ff845eb94ea3e2630a88c4dd4802b1ab0db664255350b69f917a1bb786d8a43792fd2433a871fbdd30ffa83688eb2d1d0972dad37c169433f695
TLSH
T17801A6622633D1360433A7E3D0EE86360222D63396795C7058F4A1990BED81CFBA8686
MD5 SHA1 SHA512 TLSH

Submit Download

sodium-extra.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\sodium-extra.pw.toml
Size 940B
SHA256 7f9b4038958fc62257adf7c28b2f309583fcd360bb594a6da71c76ffb2679e4c
MD5 a911d651210512010d65fe77a3c5dd73
SHA1 af94420f4dd24bff9c2fdcedaca67c54dff64d85
SHA512 e41b5a5cb3ce75fd37f44eaa1a6f958335a14c427c9aea7e4d45099dbf692c97f1bf57462505b8d8eda2aa6862272b5081104ace8c4a20972db9b3d63703f0d4
TLSH
T198119C826E33D1394033EBB3EAED13368270593796395532ADF541A502CD81EFBA9281
MD5 SHA1 SHA512 TLSH

Submit Download

sodium-shadowy-path-blocks.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\sodium-shadowy-path-blocks.pw.toml
Size 756B
SHA256 fc504662fa770503e523bd8c2b94c22366dfdbb1f1efe48e6f72ebe5910f7cf9
MD5 2df10fad92594c3d641527173fe6dc6f
SHA1 e95a9e61ef15a4e912603f58f07b86d3929b2c84
SHA512 37a05442a40fbf650a4a945cf4bca4532ed5862360286761eab6fd4c1bba3cd390922afbb82735fbbfe0c70b23cdbaca2999ffbe92381f4e0edf354da0691ba5
TLSH
T11601D043193381620133FB32DEDD437E42305E368B6A65B089F9905425DEC2EFF64686
MD5 SHA1 SHA512 TLSH

Submit Download

sodium.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\sodium.pw.toml
Size 664B
SHA256 080575a1600edc3c4a1e7c13d71432fd364f3be69bd387afd154895886c6ac42
MD5 64eb222bf6fbb640e56431a74138d954
SHA1 90f392ee4e37db56e7827f70eafbc7961bc9bea0
SHA512 308ec5af2b97de97fdf554bf48eecb0d605d4a8703bd7c154b6fe593bf1392f974da90fcd625615d2023c9a3a317051cc329a53c09bafced528012434cfbaf6c
TLSH
T1AD01DD635A77C2234533BF36D4ED23368B300A76C2668870E9E9459906CEC6FFB405C6
MD5 SHA1 SHA512 TLSH

Submit Download

yacl.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\yacl.pw.toml
Size 753B
SHA256 e06fe6ca33ac5d0f55ffe6f632b8c4191e4dee04de600cacd62ad796c4eecbee
MD5 099e5c86c9a3f8019b4e1a45a3c3d59b
SHA1 c59eae11daa7090e0470fb3d0926813f139c426d
SHA512 f024e6212923ddbf6fd06187d5efab2fa6b7df981f1ce6084eb152e63cc598a874e3fa53989ae14f9879b7febdde540ed4c35a0c4c59bc378003da58b3e9dee1
TLSH
T16A019C564F73C5238573AB73DCBDA23A0B3016778266E87448E4B18552CE51DBEA4185
MD5 SHA1 SHA512 TLSH

Submit Download

zoomify.pw.toml

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\.index\zoomify.pw.toml
Size 1019B
SHA256 72fbb41c37e78416c486b59ad040290ca80968d238fcd5f9da7df490b6431dcf
MD5 e829d47fd2a9c3d645e4e15c8127acf9
SHA1 d1886a4cdfe341405d3288c7466691b4a0b44ce1
SHA512 82b21dd8017bece565e743a922b50c7c4632023d2fb5f63e9458461c5689e02dcda27ecb695dbff53155c56600f3ce14b823f8c5b0753a20871ad8171a27c6ab
TLSH
T1A91178821933C4364577AAE3C4DE13374225593362AD1831ACF566A516CC84EFF393D9
MD5 SHA1 SHA512 TLSH

Submit Download

BetterGrassify-1.8.8+fabric.26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\BetterGrassify-1.8.8+fabric.26.3.jar
Size 87KB
SHA256 eb88628b69aaa5029667cab63deb46a5149fb693901b2cf269edefb3d2a05c2a
MD5 c1c160ed83955ab9f306b0535e29d4a5
SHA1 626f74d3265d140f80ebb5ca1703f43ba07ff1bd
SHA512 14cd361bb1f56d207a3e811a25d4af9bfc76d52bcd7bd9aad73ca8f334a7226ff3cb69d9890d4fc3cdd83eb4b630077b36870dcaff8149be178207ee2a9ea90d
SSDEEP 1536:1Cxwp0hsVIhhkACKqiymNpVzx5b8MKRYgWSgAPcqHMhbXHKRYgWtXrR:1Cxwp0hzhhkACKVvtnbeZgAPdHWYWF
TLSH
T1D893CF7ABEC0C8A1D7274E31C2587102EE3B828D540221277565BC5F6DFEAD42B31E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfigManager-fabric-26.1_26.2-1.1.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\ConfigManager-fabric-26.1_26.2-1.1.3.jar
Size 86KB
SHA256 59fd62349541d3bccbf5634163015cf335bd272da9b1729649dd2fdb3809bb25
MD5 5862ad81db0908b8fb10d1d6b430648a
SHA1 ce2d31f3cb6815fe83c742326430af8dd9f6a479
SHA512 bfa70defff2530780f0f0aa0de1845dc256d9cab244123e4847a6b24db1f812c47585ed1ddc80b2de91671aada421027b72d44e8b748e2a70ae405af54d94de0
SSDEEP 1536:nLXJQ8tedmvhLzkWEi9TnWe1fQGD7uI7LRFO80wXtPb3x:nbSFdShXhdnWe2G395N3x
TLSH
T19093D033E7EE4C17C66B7EF2D0709407A4156FAF429B771B34F5A064989ACA72A011F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashAssistant-fabric-26.2-26.3-1.11.14.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\CrashAssistant-fabric-26.2-26.3-1.11.14.jar
Size 3.3MB
SHA256 dd76ebfebbcc3d9457c7b7a37509ef5aeb0d69edc323060a8fc7c31b8d6f97dd
MD5 166e5bb1f534912b5698a384bd749083
SHA1 dea53a10e5fbfaacd18e212a0eb0fe328b3e9467
SHA512 eab56ff4773821ea74c16987a986032e0d41119078efed17f66e4d6f1e19ab43e1e465463b09386644c4ae73942909f29ff725736e2ea1ad6de9b8313080de31
SSDEEP 98304:DCQkffTQ3x7tLMsMC44Ws6vsAHIZ+4HodS2x+NWE:2Q07QhtLMsMC4HLsAodSx+l
TLSH
T1EFF5122A71798139E2AB5D71EC017F03E6A7278E8016BE0334750594ACF7EEF1B995B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ForgeConfigAPIPort-v26.3.1-mc26.3.x-Fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\ForgeConfigAPIPort-v26.3.1-mc26.3.x-Fabric.jar
Size 595KB
SHA256 95cc2bd7a943f910a54baf2f65acde301dcfb3d8aeff2c989c04c416d5a4a1cd
MD5 a16f7b8b0f57d3f2fb2fb9d4adab070c
SHA1 a0d802d2cb010a5054c72f1ccf248433b6e0bafb
SHA512 b9339c21e14beec2eae0ca215317284bcaacef72e1d1dee8b3dfbe2de0eefaa758a172446df85419b6534557c479abe972d7d21f4ec194f2d436f9ed4329cb9f
SSDEEP 12288:bAOK32FFmfsx2DLwSOgLVYhF+uaVkxAx3JZS4YUbe2:bSmFFqsMMSVQF+f3Jrn/
TLSH
T168D4127245EDA453D27B5B3BCE149827EF27DB6E5A022A473CB4312ACD724914F12BA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImmediatelyFast-Fabric-1.17.1+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\ImmediatelyFast-Fabric-1.17.1+26.3.jar
Size 97KB
SHA256 4b346661cd0811d98a6df8c9faeb8fafd9326ab88248430e8bec845ef1ff6dca
MD5 72773f07e9918a16f1f058c7e3aa8dea
SHA1 f565bbeb201f2305e81761429d3f1f47e1c3a321
SHA512 8e139589fd995bce3d485a34d92a07243964212f7ed2e4fc2f6de5b9a74d0f59b03252e7ce40c64e006cf3e21bed5de27b830d33ef048b286e041f6178ad8428
SSDEEP 1536:QfLNhdWwivLIuQlCmZt+36PZB+h5lATuwlP/XqS/T5PpCIT0pFNJ2E2m2dH38ItC:cL8Ij9QbYzPCS/NpS//2938IoSe
TLSH
T153A39E15BFD7EDAAD673F17662C0E20AA83E988D4947215F3961102E7CF86D4024DF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ixeris-4.6.10+26.3-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\Ixeris-4.6.10+26.3-fabric.jar
Size 750KB
SHA256 3512fcbae94b94e651d68eb40611f3cfb5d7d51fc6683a11034dd607b8f13c26
MD5 8f2021de16a09271043bdcbd180e905f
SHA1 4b1491b45a962616d7abb6bd87a5a312aead1e7e
SHA512 a7f2d00280d56355a2d79ae29af92c5befe60c1b69969dfd2674e3f7f5bd949ed79be7f26afd7077d713049306b64c28ae607f1e3aab02561a846f54518e1c0e
SSDEEP 12288:gdl9PpJuvp3bv+OWp3POd89DNkysFmB5Z3Kq3fwRhn7LiT7QcvkEgm:Cl9PpJu9bv+9p3POd89pkyskPZ73fQh8
TLSH
T1B0F4CF12B9CDFCA2DA335D77F311B512AA1B478CC899B50B38950E45CCFD689138AD8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animatica-0.6.3+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\animatica-0.6.3+26.3.jar
Size 114KB
SHA256 2093464d69f2e4ed1dc11e03b68d11e8449fedf8d8d2fac65958b4344e9cd9e2
MD5 8e87a451f67039ee4396584828af1b6c
SHA1 c24b269d5cb523800bce90920de13ce7f042ba80
SHA512 e4e7e824803a9bd946318575ca4d1b55f78cb588fd08f621000deaa89bac2579d3d73aa410e3969bba709fac41c15cf1b71bb9e8c2217d904139b584924a043f
SSDEEP 3072:DUPg3S6Cg7u+YV9JeujRvrlwsL34t45kNTAp1lhFPBwf:gPg3S6puZJDZrlwsDA4CTAPfFPBwf
TLSH
T168B3E1677984C504CB7B3A72425952F7DD351A09D01BFC2F32740A6E21FAD4293A2AFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bbe-fabric-1.4.0+mc26.3-mod.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\bbe-fabric-1.4.0+mc26.3-mod.jar
Size 202KB
SHA256 bbd7118e9a65c514a69646ee95e8c467154d593c37518d48f392379a51f514a8
MD5 fe7694549a1a028ac5fe8b94dca91276
SHA1 ef6cb9b2a7c2074e35a5994953f773e043070df3
SHA512 061404c7a546fcf97b1e95c84be6538634ef8a64c38c50ab52413bc30eb3ca631d70469ec9a5ec6e701bbfbbd9779d65a3a70e359e80d8c36449ff2a2d286cab
SSDEEP 3072:le5x2ii5LrnY9qMtHkerfW/v06Hp2G/ONL5BjtNRtrD4aptleFVecb4J9:iKlrnytH2/nHx/OxDj1ttkVGJ9
TLSH
T101149E12E5FA0DE9EAB7CF71CCA128C3E1262A4F4B452493B462825F0D5F7D51309BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bettermounthud-1.3.1.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\bettermounthud-1.3.1.jar
Size 20KB
SHA256 3d4f56c46e61e86ecd5f411809a01af7c40b25aead6791b716befcf33e1e3336
MD5 22c665b2e8ea22d26368cb20116ea8c1
SHA1 f86040d5010c7aad1c677c7a7fefe52d3b386abd
SHA512 c7fff6ddc463178f7154d433a9dfe21443732d1f70f450a5e03860f631adb2f6a445d72fb59ac017f014add4881edf59d9960e9163d6d497d117bd16a8ae5295
SSDEEP 384:NfOFsGxJQS24ZK4xcsX19/+2oPC+lfvameAUpU+Jaq/NGRWAodpfF5UKr:NfWNJQS2qF/9/+tPC+FCmzUJJf6Wd5UQ
TLSH
T14092B06EBFC38FD7C37B7BB196581E26F502864E99613BA7841303350CF541A3BA48A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cape-provider-5.6.2.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\cape-provider-5.6.2.jar
Size 200KB
SHA256 d9916ea44154f2413ab475a0cedb13c66ecada4fe6ba7fa2aa209db84b0a7aef
MD5 ee190810010bd4cbb2a1c8d58f984751
SHA1 3231a2c7744683014c261be19334f25dee277e99
SHA512 31d86df0c87cb6cebd3d10b41415c8ab7ba8ed316346d3383da37e3f4a8004daaf13572a78a0e957fc6a2ac1c727a901b82a78986b98c878e3b7b7d5dbb5e7dd
SSDEEP 3072:5Tdke2emYIg3YxhFfVREyXVUNarKTylBo9y/1oAjCnM/vJQla/lkVB:5OTVeylUQrKTyX/1KnwvHlkP
TLSH
T1B814CF3CB6DCD0EEE163E932BB5CE043F909CA4CC909F9933650405D95EAD854BA6BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cloth-config-fabric-26.3.159.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\cloth-config-fabric-26.3.159.jar
Size 1.1MB
SHA256 1716b9964f90d2b885f9bd3887f8824b71b55c32a4123a5853486e722f7c2e4b
MD5 ad876761ca3b7ace3b026bc901dd493e
SHA1 9a5cce069380a2047250831dcb19f4ef1b15872d
SHA512 8924e19d41845096724fa10f3717bc51964a0edbbbcad0ff1e6c6187a398b08f356e49579a657c2dc44a7f92e3850771f3ca70bf8c1f654de60425163b91dbb1
SSDEEP 12288:jLjvYqXX/vndJLTZMSFEBKzB2vcV/7GmCfSyNAz3ytfX+0r2CWdTLdqtzWk8Wel0:PjQ4Hd/MCxzMchVCfD2yzJqL0elr0l
TLSH
T17C35CF3FB5EDEB52D3E3CCB595C45623EC8B22CDE806523332A0272719F8D591259B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

continuity-3.0.1+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\continuity-3.0.1+26.3.jar
Size 978KB
SHA256 429fb0946118e86cce8ace8b57d07e1971088fb3f8115439bb0f2f12df14f511
MD5 fc9ba23f0b9a2ff6ed2c8e906091a0ab
SHA1 63d51781b2c87e3b4b4ca98a133db8c98d3f2afb
SHA512 1ec1e3b2f73c26b19445d664822a8936e9076f4d8855a2ed5fac19786daa8da42da8fdc9526c4a53c227a82819a87ad8e73d5b4fc003f6519c50454c33014f04
SSDEEP 12288:44UGoKl7jyhoCnuFSBToVsjId2aOc7Lh6+Ex+YcBaolmpICGrqr9L7rYU/+CpqxX:PF7jyhjIl47Q4CDZ
TLSH
T10B2534AAB6ACC438E3BB5575DA097242646BCDCDE41C742F89F008D9E0E4FC58E48F65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

controlify-3.5.3+mc26.3-universal.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\controlify-3.5.3+mc26.3-universal.jar
Size 6.1MB
SHA256 bc759f557d122079bb9078741065935bf3aa9bfd5e60b414e242633c0dded86a
MD5 d154a0a385a5c2468881cd2e3b3862f2
SHA1 9df91163e9a325c83215df29bf743bd0e4aa544f
SHA512 cd4e64a9621dff200329b249dc63fc4542ce554db16c75c4b04cfa7495bf84e1a4bca0f89a7a9d4d425f6b6f23c8df52ab8ce323ee18ae49c6cf24858697bbf7
SSDEEP 98304:rFKKDVM2jLgYL9dpuW5PkKbT1xqLrob5xo0pG8O/rG1lg6ncbG+qSKtBmRW1wqW4:rI12QYxvuhK1es0OG8EgljGoBiSV
TLSH
T1885612253FBCC5B1E163863DF312F722A81AA1CEF652711713592BEB18EC4960B0B795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

debugify-26.3.0.0.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\debugify-26.3.0.0.jar
Size 347KB
SHA256 88c86804997207a6438782fe4d42467cc797bec7de6e6a051cf8e2026a828f63
MD5 9d98eb24230affde9e4a82f030519681
SHA1 62876ccaaaaad48c04499e4cf211433dc6c6e53b
SHA512 921a2f31531990df93af4099cd7bece26886b7fc38021642ae32032e435b8686a0ee208dba4eb1ed0057e6e0b3332f990fb77778781afccfe0e52d28dfb07c26
SSDEEP 6144:gdWqmF8NKMNUi3zUN4TDBIk55zaK4y8k3P3qn01fjA+DZGOzUBEVd7uJ:ZqmegUzSkKk/zaBtk3P3qnu/DZDIyOJ
TLSH
T13874AF592FEC9AF0E63295BCC24A95029517824DFB12720337A7456F4DFC9670B0EF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dynamic-fps-3.11.10+minecraft-26.3.0-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\dynamic-fps-3.11.10+minecraft-26.3.0-fabric.jar
Size 185KB
SHA256 a186d7cdfa3738935cb8425026d118013916fdcfbc060e4397d22368d0bb6594
MD5 0b5600c4d6825890c9cc9a2b9727c5f9
SHA1 a4860c9480f0ce1a468e1e4c254214b1f97e19b3
SHA512 7976d11411babfa3ac0c38898f26ee6192f22a4f595b637eeae3cc5185f326c0e4b9fd7d00b3d7e8d020dd861295f0df52f9a9d7c67e88946d0ba9fff4a9f894
SSDEEP 3072:q4q+DXCxCVG5E7W9nzUqM+t+Nwo9TekHIC/p4YvICNlPRfLa9Wk:zq+bCCVG5E7XqM+tzsTekHv/p7ICNlBS
TLSH
T1C90412166F696D84E8EBA172CBC85B13D0406C4C6DC17DCB31D2084A6F7BACC2E55B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4mc-fabric-6.2.3-modern.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\e4mc-fabric-6.2.3-modern.jar
Size 648KB
SHA256 50125e336c383688403e2fb24c5d88af82cd4b64288359ea5323288afe258f95
MD5 fb0196432e5924f0474b43f6f0bcf79e
SHA1 78a4feb50b8cb67a80ca172a56e85c9cd79d9fbb
SHA512 4e5dac0458cd533346d7a9572582a19f2f775371027ff0bfe445e025c2fa16ce22d9da924e73f64806373f82257e32b0e264cb0c29feaaa40fb03b6ff2cae8c9
SSDEEP 12288:zr/t1Wh1NkMMl3+klW9Lsq0uUrW6I3xSJIiTiztgqKWUPGTM6:XF1WjiblLWRLzV6I31i+yWUPGTM6
TLSH
T136E4F1A2AC48C02DD05B61766200A963F9AE1648F92FE49F4CE8154F56FCC8F0F56BDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entity_model_features-3.3.12-26.3-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\entity_model_features-3.3.12-26.3-fabric.jar
Size 649KB
SHA256 4a8b04d26c94909a3ba9f08972fb475e7d39f715f666f99a294017baaa37cb69
MD5 92e72c097bce4031b2ee69072ca3dddc
SHA1 2d076285c7e0671165fc86a827e62ce88ddcd201
SHA512 4572fc065e757264947aff35a96d17d5e45d4b43e8e385b9a207f5380a8f43da5dbf8e10f30a7bc7cc4c0c8f7999717b4dd22d325667bdf8a0de6e839ad81efc
SSDEEP 12288:j4R5zqotrl/fCIjwZmqhcYgMojUKB4YziG8vaRXG99EDaFhmfgWWU:EzWoll/KI6mGcPH41Gwa4TqaeaU
TLSH
T15AE4D01C69F3AD36DE3F8AFAF7440843AED545EDAB682D1F72A8050718E4D48430E2D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entity_texture_features-7.2.6-26.3-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\entity_texture_features-7.2.6-26.3-fabric.jar
Size 774KB
SHA256 9ae73892099aa759e0cfc0ccb1fcba3986e27a7c743ad5832310ba8ca58f644a
MD5 93e8cb23ab1557b0f2aa020f8df3d0b6
SHA1 40fd33455e0543a5716f8cb7100d0d3c7abde3d8
SHA512 21ef9e7640a2e1e06f5dba10bcf830d6410255e9fdd204504f021c6e3c697d1b86203089b5b21dd99821a2b5f1a237ac4c798f3287562f160786572d6756c4ff
SSDEEP 12288:9qdjko1UeivIAVLrd3LFp6o6DiI6VtrD0BxcaBeF9z6mfYQ3ha5fl6h4Ir+F9DeF:UDB+9LT6opptKxhBenzCQxZGIyny
TLSH
T13FF4E01DFADACD36CE7748F7A1092813FD5693EC7F14659B3268A68F14E8C48070A396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entityculling-fabric-1.11.3-mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\entityculling-fabric-1.11.3-mc26.3.jar
Size 1.4MB
SHA256 d2f80514ee3382b1fa7afda4df762df50743226e3cd320b829ee507357aeafbc
MD5 2215f5aec107034e3ed86690ebe2a645
SHA1 45f47f7a067f5efd733a32767dc3d1d770678b2a
SHA512 b6209bb62d72376d3fd284da137ec93a6dd38ebe5fd38ab9190deeade68b5b7f4bf915f4abcb4a807afe18cb9f0b59e11be789d46df6f0e6f64388ed2edc284d
SSDEEP 24576:FbkWhsJ/wK9WCQ1acTBdhaXCRY4U61FGVU9WYkfEHR2k2E2UmRqlJMvsvKcP6E/:FVj1nBra6Yk1Mm9PkfEHRSNXRyJ1vKcj
TLSH
T1F365336AB9CCD7D9C115313241B3B92197FB624FE9593877D0FA340A3EEACC5462181E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-api-0.164.0+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\fabric-api-0.164.0+26.3.jar
Size 1.7MB
SHA256 5a75198715a50a86787658617b03b97da9936d32df04896748c12135ba709de3
MD5 b575042bbfb302fd2f987b7f296387f4
SHA1 7ec45ba92a286ed7d0c57bcd74cf9182789741ec
SHA512 2ce7b0826f75801a56e8150eb5ceca467cdf8b4b44e160b5a5381e5412567d024f46a16c679f29c4a9346b2687fa1740f91ed6026a31b2ed1f3d4b5035968d69
SSDEEP 49152:pmlRYTJX0y9XXdpgHxMPxar4ngvynir5u3:pmlRYTSyXOHWPIHlO
TLSH
T14F85332CFEC5EAD0D09F8DB04C94F27DC6A94C4E189EAEB953A44B540ED942FD906CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-language-kotlin-1.14.2+kotlin.2.4.21.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\fabric-language-kotlin-1.14.2+kotlin.2.4.21.jar
Size 7.8MB
SHA256 fbdbf5286ab9d65fedb49e6e01c15e338ae303eb7b9d8c7423d0a9bcfe526ef9
MD5 08b201c7d0e80ba7a3d77cca0b2d3d3f
SHA1 f1d4ab6ecd54d9782521333a87eb50724ecb03e0
SHA512 7fb475c4a7e7bdf8d0aca4b5798a58a354c51443d5b1fbde3e8cf34dfbf7191ef4238b5f07d08ec9490ec180b371624523326c3ad45d4ed2b2be541de9407e5d
SSDEEP 196608:+Wc7nndt3pszi3BhrayyV1sWNDI0dp8yMYyALAo5gyQVt:WJBuzi3beyyV1sWNlgyMYjLMyS
TLSH
T11A8633E36ECF7096FE247531A71376256B9C91863DA1BDECA2580701AECD2C3BF56108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fastquit-3.1.5+mc26.2.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\fastquit-3.1.5+mc26.2.jar
Size 61KB
SHA256 f18490dfd6c52f9abf4cbf06e0228269425acb42a8b75dd29cd26c574aac47a4
MD5 485f105d47952e6423ac472267d134f7
SHA1 0977eb0a35e1a1602bc9306ddbbb9177734131f0
SHA512 cb6e3547e3fd3c6df75cfa8bf948ded35e4ed7ccb81c401184c4f02c4b0694a141c673b238605e8719b4b48d2ba90616a3b921344cde2d68b58da3e33edca477
SSDEEP 1536:/ehFanrOjuI04ayEy5HX31Yg+o1T8WlMJqX8YVEPLNp:/ehE6dP5HX3j+cbXSp
TLSH
T1D253C0BA3ACB9831E11B4C7B421148967B28C66CF001B25F556427CEADED9742B13EFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ferritecore-9.0.0-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\ferritecore-9.0.0-fabric.jar
Size 70KB
SHA256 213966c72ed967acc7392beb28a866fba301ff56b9976c2e7801c2db7de6bf22
MD5 9d96f643cfd220b75f47c94ea56ebc2a
SHA1 eac76ff0f3753422c61b2c44487d0d195d88d4bc
SHA512 d81fa97e11784c19d42f89c2f433831d007603dd7193cee45fa177e4a6a9c52b384b198586e04a0f7f63cd996fed713322578bde9a8db57e1188854ae5cbe584
SSDEEP 1536:lYmby5CJoCDbh1tPj+/bCUQzA5CFG89BV9:tby5ioC/PtPa/2A0tT9
TLSH
T117639E6A76989DB5CD574F771A63C013E142C0EDC3253A0B2C656D8AA9D8F2D43047EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iris-fabric-1.11.7+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\iris-fabric-1.11.7+mc26.3.jar
Size 2.7MB
SHA256 83ab4d3013dd56ac05ae503a2f596968911001c4ef3d82c59c5c79e64c34dd98
MD5 6e390346ffb4f04e670d7f0ffc04887f
SHA1 fa03640ba1e4ef2f7ae3619c6373a06e46d0ba2c
SHA512 d8d3312f77fc52a48e4a6cd836fda33669bdebcb4de0b8c0d30adc808b287330a533e0baef355cc1ce6336a26851d9775369a802a4666b7b7a6266af20088f42
SSDEEP 49152:ccS51lMqNs1oIGLn1JufQ6WbcWH5kkGGqU7Fb:cdDNsCIVoFc6m07t
TLSH
T1B0D5F16579C5E468C72357708245FA33A41BC68CAA16619F25B00A0FDCFC84DAB47BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lambdynamiclights-4.13.0+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\lambdynamiclights-4.13.0+26.3.jar
Size 1.3MB
SHA256 b7550288423affed86370acd80d064876d7e256f5489461b7ff7941627552ab2
MD5 613e6680a71a0eae85446413367485c7
SHA1 18c8ab40f03219bfcf809a83db6e3958ed8bb866
SHA512 67c37ca7d619bd7f2b0dc02217070c20e34fb3bb3363d4e23f5ef9ca90b1b58adb223fab73639a3499d366497316f1eb297d2759f3ffb976467b4759f784619d
SSDEEP 24576:Qc46gk/BP5vn6FOa7uahk2CaidnFRwsddB0bxA5g0pFjsWkizzXiW:QnCBRvn6FjkbaipFRpbBba0pGeXF
TLSH
T1D855E025F988C8E7E4138C3AD206A832574653BCE44F618FA7A34D078AFD72D164F99D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

language-reload-1.7.8+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\language-reload-1.7.8+26.3.jar
Size 77KB
SHA256 b40ae2cc0e06f222ef30ef3d3d9fb54d31c6ab137d650c3734609c4317b98986
MD5 dc6c71b2ba9e1000824c7b9c17e12922
SHA1 e6fd2df83d1d3d0f352a7e45eaf76f4551c136f2
SHA512 6366596875e9fa33b6b8119d08e5c18f3514662e319a735cedc8addb00bff4cf3179f3a33533b2070c1ddd776f23e6a5f22b69d0da0589f3091f0db9eead1d43
SSDEEP 1536:kY5+w3c8dWL/iwuzUreAZOwNfo4tWrml7e/e1n:8zr/B8YeAQWwaW3ep
TLSH
T10C738E2739D0C499E01F4F35E492BCC3E4AD85DE4942F43B5660666FA8F6A8433079E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lithium-fabric-0.26.2+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\lithium-fabric-0.26.2+mc26.3.jar
Size 893KB
SHA256 0be5b17ef9f6e9244cd07b24b227553a73aec0cf93158cf28099f3094c167f1b
MD5 4bb4ada83b50bb026550b20aabcad32c
SHA1 dd5a4ec2c68d7601d8bce9076f789c55a5f8bef3
SHA512 4d7fee66132eedc71feab9390b92c95d7058edbdad0fecfac1d836a2950b97a7ca463afbede61c7ef361ce65e1f927ab9e89dde5bf2e0e0ce486afb5c5dbee40
SSDEEP 24576:gNGC76OFMJnOn3T3x9FdusFfkPezo2uV4blsQS2:gAC+oMgn3LDuPezGebWQS2
TLSH
T18C157C587FE6FA75F897A370228B7033E77D6ADA5D0124D332D1470F64E4D808249AAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-menu-credits-1.4.0+26.2-universal.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\main-menu-credits-1.4.0+26.2-universal.jar
Size 30KB
SHA256 56964c1535bd9ae883637d6afa96b8afc30dc5df120de3fed5d0d4a2ad1e92f7
MD5 b0193613f9b437d91c0e3ec5e1b8a17d
SHA1 d73b75eefb787769a965166793e0c9ed58e6de85
SHA512 5d718db852914a19bbb27c44e0b42b2fa33e2435fdc137e14244bdb84a92f1341cb1996cc3f0fa668c95460ca437ef0c930d5e6a9489991d3cf8b88a2abf8272
SSDEEP 768:NgCH6dN/mx+mrZSSjNOVquo4ilvryFaSuIgTurM03VfOKbvkOIV9GK7RG6XFo+aN:NgK6dN/mx+m1SSjNOV1o4EvuFaSuIgqR
TLSH
T1A0D26D151BB844DDED778B3BA8430E636632060CAF15672B543F72A7086D2798FCD3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mixintrace-1.0-26.1-universal.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\mixintrace-1.0-26.1-universal.jar
Size 6KB
SHA256 63aa32aebc9bc83585a52559370aaa0274cf5994d3e4aefd705eabe76146d2fa
MD5 de87dd33ae556863cce8c6f815133bf9
SHA1 3b270bf23ffec81086c23a78dd473608640b0a96
SHA512 d1b4762208b4d056b1a4313dbf661a5116d5614c3d8f90ff64c1977a7581a438067869688b34bca6e1f8068ca47abddc599dcbd64760e30a7b33bf6f4b5b220c
SSDEEP 192:UueHMJGC5HQ3Wf9AktRHGquXf3hiUKNsp1:tTJGC5HQeWktRmrKm1
TLSH
T1EAE129B43BCDEBBAC53B8B7162427A026497CFAC95594B87B9300A57447BAE003039DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modernfix-5.27.20-build.2.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\modernfix-5.27.20-build.2.jar
Size 1.1MB
SHA256 f340fff04132ae9b60eae494d2de4cd177d436da8c0e525d6bd8f5b15ed141b5
MD5 be050737ccdbee7e458bb02b46b7940b
SHA1 b63337e801fbf2cb420a049d69220c56e083f514
SHA512 b586434056107aac4ef86e9351d66170dac65a45a1e5f8bd48fb931b3012ab2431b16476eb9c256773339e2b4c60f6f3e90a4709180f700b2aea59ff607f4243
SSDEEP 24576:sPKETh4T3NlusowGk2lsEXlHis1sNOmfMONqSfU8ugn4NiE:MXYlvowGkpEVHisCE6Nqmkg4NH
TLSH
T1FB450230B6F7FF76E66365B3177A7811700E8E6C6C41309FAA580B4A48E6D445B0BB8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modmenu-21.0.0.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\modmenu-21.0.0.jar
Size 836KB
SHA256 837812c6c98d66141db7b5dcae668f27fb78d557e8f4c0c89912985fc26a5e6f
MD5 d2b9c21cb592b8723d3d443589aabc8a
SHA1 66ec40f1cd0c037ddca2b5fc6b4b976d479c18e8
SHA512 588c0c557963f4778572ee81bfafc190b332c26d5926c5fe7e3e1614dcf8e14f58e3bc80a97694521dd05907e9753a7c8575048ea769e4dbf40a3db74a4e2606
SSDEEP 24576:+AeaP/5VVlhehTGtlWkx7avqR0u3TqdffA8GEJ3Z:DNVVOitrave0u3TqS8GA
TLSH
T1910512797CFAC116E67F3B308751D256E017AB0C4409F11F1A64220658FAE6D8B93EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

morechathistory-2.0.0.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\morechathistory-2.0.0.jar
Size 3KB
SHA256 5a98a8c5b5ab9f6e34393ea62ba462e17c696d4319fdeeaf98f516e11afc3587
MD5 89baaf10d39c96e70460765738afb201
SHA1 6ce97845f93090dd7556b6e64bb7d63e126b83b4
SHA512 e85558f3effe8baee6394b61f48981989d22e181a3b8772c0f521022914d4c3603785e0e23a8df4a5e6ce9407c6abb8cf7d73183901908227a5623daadf30d67
TLSH
T1D571835CBFDD4EA0E07B2738868C07A3F569E2AC8907251F205B03389DE5C40CB56DE4
MD5 SHA1 SHA512 TLSH

Submit Download

moreculling-fabric-26.3-1.9.0.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\moreculling-fabric-26.3-1.9.0.jar
Size 287KB
SHA256 4739cf1bba326d538247b565a0200f926b2c56bf0e1106495335eec4d8528b0c
MD5 44dd60956fe1f666b2c06f4c957f0b8e
SHA1 7308b0b0b6fffb0e076cabf97db7fc889d9ada68
SHA512 b1975ef43606a3baa1c93a040fbef96abfbf46ae6a1e364c60effd03a42568f945ede0bde329241e87adc6a9c2769dd1d13ad286869c689018035eff677442b2
SSDEEP 6144:R6DNhbuzlCBCvZ/cuBpzwtvU6z7rA1EKTkcMHx:wglCBCyujzwtvPvEJT+
TLSH
T11E54BE66BDEDCCE1D4232838C3C05872A43A96EC955FB817D192461B8EF8D64620EFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

optigui-2.3.0-beta.10+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\optigui-2.3.0-beta.10+26.3.jar
Size 596KB
SHA256 b17d3f5d5c7659f06b9818dbc21af8295798fe29221f609b1c979407050e00ab
MD5 8032449d88f49af18c460e55df19ebcd
SHA1 e788a22a46fa3cf40078e1b794a37c0684da76ac
SHA512 47fab036837b3fdd02f845ade865e367ab61c23100343f8273c44f73996e61cdf2af316d453b67b5e730eea623b9e89af380d71fddf869d487035a67d6e68ab3
SSDEEP 12288:uRefZhZJk4VGuI6ntySDXzRZIpkA4wHGAFPFFktWJF339CYthsK:uReRho4aOtyEXtWkA4oPFFktMFEmsK
TLSH
T176D401263DC6CE71C0FF8971A381A146BE5940CED412D69BD33C4A86B9F74899344EAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

placeholder-api-3.1.0-beta.1+26.2.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\placeholder-api-3.1.0-beta.1+26.2.jar
Size 248KB
SHA256 c2ca2b5c397a0c198a32e7af68d2d0a011bc2c7baeae5cffd3996efd65c5069e
MD5 2acee95d87c4e626781880017e3ee03d
SHA1 99b57ccc1d4323c4ef71887828dac25ce4ce2103
SHA512 07b6fc802559d54ec6577f6e2788926ef391d755206c2bfb0528280977885cae4bc0c517d8a53eb6f34092015ebe6c41210627d255aa6504662daefa8fb76397
SSDEEP 6144:Kqh6qf4hwfVH6iREfTsfWAl0P8BKpDavsxnun0W:J6rwfciq7suAl0P8BKpD/uV
TLSH
T19B44D05D1A9CDEA1C63BCAB986DB8C43B137209ED143251B247C810A98DEDDDDB316E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

polytone-26.3-6.8.6-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\polytone-26.3-6.8.6-fabric.jar
Size 1.6MB
SHA256 ae7252f16e58e0537285d4c9209afd2baf1386934a5f19f783424d82c6f11979
MD5 cb5445cba075b1344d3503baef31e21a
SHA1 8762bac6ce639a519884d8dd686ac78642329cca
SHA512 f50370557e24f5404f17b6c055d35a3e4540f6d0dc9b9b406afc4d0f1f8a14a33b7993b747bb9e7d92f7c83d818493b1082858cf2f85b06d476107577af9a087
SSDEEP 24576:OrR6Wzw7VHXtTWEQHwLSLL4Dtw5uehk5+VKNbMbvYFu4NHryJHICzQZHW4N:kRlzGVHdTWEN5w5PhVDwEUtCzQZHWc
TLSH
T13675F16C37D8D9F2E1BBDA739552A4A6FD1B6ECC5D09147B202C30DE50E7E00278269E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

puzzle-fabric-2.3.1+26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\puzzle-fabric-2.3.1+26.3.jar
Size 95KB
SHA256 669c4db0b448d6a9f4075d690311f9b5e8ec4ef41410a35c2c524af61a6f34e6
MD5 2b860d1b0f82027301ed08d878d00a97
SHA1 323a50c8f8385d366985d1e67f73d3c595199448
SHA512 677ee8736eb6a00e3e8ac2b4e60e5771d3c6ca3e44f73b099b78cfef22b5ffc3b851ef931f902d8a668648cb6261ee1c531d8a607e2603e81230c3e132dc3fb8
SSDEEP 1536:6CIHE2n0DBQqdVqFedu13UdbhdQ7S2ExFClJAny9+W5nRJsEwFD3qNy0h9/q4b0Y:6CrBlVqF3UVhCAYAny9xRWEwbqNy0h9t
TLSH
T19B93F168FAC9DD62C43E5EB683549082A499271CAB63B1D737C4449F88F4BD81309EF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reeses-sodium-options-fabric-2.2.5+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\reeses-sodium-options-fabric-2.2.5+mc26.3.jar
Size 252KB
SHA256 b692acb0f84d7477deae48e2ba0908e1913c0d87db53daa4d23cbe646e9028f0
MD5 0cff517075a0499c6b9780d7eafd28a5
SHA1 305aa813172358eb5e95d0a7af02a44326261226
SHA512 9c6f335618c1ec03cf9030cd88cdc32be5457bf4fbabd49c76ed68df53530730cf4681ec3742f2c6efbd48cb2b784f24c636977a95d78df62af1214ec5488be0
SSDEEP 6144:opo4b64AP0cV33cLByzITL2RwIOVnQjbt4KVb:oeJPT3RITLdNdQJb
TLSH
T14344CF113DC98529C8F74DB7C27CA081607D768FE11D2183BADDD76E18F89A1C60BADA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

renice-shot-1.2.1+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\renice-shot-1.2.1+mc26.3.jar
Size 50KB
SHA256 4d6fc56837872dded80a95197fd23158291807d4e62b59d6d33c80b4cba68bbb
MD5 d4f200902b71a17f954743ceaffd5f7a
SHA1 224e9c47d9234549a589b46b9680be53b3697a65
SHA512 566ae63254768869e3b4f706f8296adc8d6b5dc48a7aa129ed32776840a7c7ea1434913f13f4899ade579edf20bbcd737c0332bff0b255ce9f39a461287bbe24
SSDEEP 768:qFa/MI2RzNP59GZaaZcYsYG1DjlLQytgVAgtPaqUmsrQ8L9JwjkZWu6CcC1VxX:CKMlkYEgYGdqy6VAgpFUXQU9wmWIcC1b
TLSH
T10A338DA339C6CEB5D01F29399682A193A90F9ACCD116B41F47A4352A1DFCD440FC3DE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rrls-5.2.8+mc.26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\rrls-5.2.8+mc.26.3.jar
Size 115KB
SHA256 ab0fda8a8421da7dce8921da30d4dd634a9863b25d99fde5488270e57b95d572
MD5 713978b6026c2e31772ba862eb3447c1
SHA1 2b86b92f9c3ad773f5c7d751cee0512ebaccaf60
SHA512 642eea5dac162c7273f2426cbe3c38d7239a4630924ce05e91ea43bb1e8bca4d780594c4bd8728bd9239eda6859c167b79e6dee3cdb4ed3f0b118186c4e311a9
SSDEEP 1536:yX6higkboyoG8NRikAe2rYt/sV4am9ViGQl441SkZ+FO3w9lpt8iiBJZGG2b3Yb:EWDN/AfrY9sOVYq4MhFO34LqvBJH2E
TLSH
T187B3C096FFABC111D023067C918A452B782AF30E915CB43B75F4092B8DE4C550E4FEAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

skyboxify-3.4+26.3-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\skyboxify-3.4+26.3-fabric.jar
Size 299KB
SHA256 0b29f9ee0a18a9ae441cd666746937b91e2f2f28b090ec7dad041c719304762c
MD5 ed82dc780441b011be675b0659494d75
SHA1 b24b18f87c6301aef4812f6d0e769b2d7c7bbd1f
SHA512 b63f0b7fe627b36a65428e24118ff8604fa0fa31f5cff8a7d2aac8d8f77bbf091433a84c3bbe87ce8d5d83876d45c5b4158ec344a53c5136802690230c0469f6
SSDEEP 6144:2/4wW0zM1ibyWimo2sd23RGP6neS5/AQ0FwuV/IA7:sMqyWv3RsUU9Vgo
TLSH
T1C054F1327695F581C07E8B784F406612A065E1CFF405BAEFA660EE2D17FAC214396C99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sodium-extra-fabric-0.9.4+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\sodium-extra-fabric-0.9.4+mc26.3.jar
Size 454KB
SHA256 fb0a24fa4d46f3669b827e73b7f33be8b48821fdca3dea3d283022330bf6a874
MD5 304bfa58e60d4bdd6a0240e2fa940ef8
SHA1 ff2056f222b751fe161123e71e55afd5b2f41da4
SHA512 a2e8d8416a556b7a351460a06407119eaba62f06636377001720bbda9b797dc881b2bb4528fb75a0459fee34475db529858633b6b86b545a72d0f13cf3c2b7bb
SSDEEP 6144:dpFbi0z030oJ/V1bEk4ojqHyYN17+7z3VA6X6cpUtV+kK0VVVEJA99Iill4UZtRg:HF2IM7YB/anF56cCtV+9XJQ4mRKL35
TLSH
T1F0A4F125FECBC478C20F893AE32CE105159D9DDFD60DA51B6BD9571B28F86E04309ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sodium-fabric-0.9.2+mc26.3.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\sodium-fabric-0.9.2+mc26.3.jar
Size 1.8MB
SHA256 87a5bb39f7e6e41106e77f122f82fc93f9d3bc0b6ebcb746b314172a446a287a
MD5 cdb88a33f405f700021f24274e2ab852
SHA1 9acfe851e36f4fb27d7c5baa224e8bd4e0334283
SHA512 f3f260f204b8ce5e8777c2c73f537956755ec61f3817b0b78b5e5568e8aa40f14891f146475075109747665c7c88a45ca0ca9a8df3c68d79c58ecdaa8d8c4b93
SSDEEP 49152:Xj9qjHVNC3xu/4vmmIzckEjeKiKDWgF/Tvn2:XjqNCOLHxESKi8WgFa
TLSH
T1B195CF15FCEBA8B4C4639630D3859931953E74CDDB0A205776EA4B0F68E8AC0934D7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sodium-shadowy-path-blocks-fabric-8.0.0.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\sodium-shadowy-path-blocks-fabric-8.0.0.jar
Size 68KB
SHA256 5033e2873cf718a2667903c0b8dfcd6895776b5d12e7a3cfd228f4d5193a74d6
MD5 1493d6a2d91803363820ac16758c64cb
SHA1 9d5d153d39700683ffbf62afd0e965eb86113382
SHA512 20525c70a74242ef182e48ed16077f768a0f4d6b4b4ca6fd8cffcd93866c217de7d61af0c7cfe63c7330e0fd7c8ad6bb6c6b1fcc3605a59f9229e20718f4a0ee
SSDEEP 1536:wInfo3xYxqG/fEu2szPUbg0+mEPdeLoGn4x:hfkYxqG/fEu2sz8bg0+v+Kx
TLSH
T1CF63E1B97ACCDCE0C637D6B84351A052F03A478C5986F52B6ED72C4BA8FD9448716CE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yet_another_config_lib_v3-3.9.7+26.3-fabric.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\yet_another_config_lib_v3-3.9.7+26.3-fabric.jar
Size 1.1MB
SHA256 c52d41d444522d9abba994cd4c4ee2e71a065d7c31010f92a9959b80ccb4b0f5
MD5 967207b5cf360d9481fb318abacfe8eb
SHA1 e54d86dd4a78f95cd6ec0309d96fae01e661c00d
SHA512 f3957028dd31cae78f08aee3e768f61bd12c4c8423257d357bc3c1a2172047c769d37901f99775c7ffff1e5ee794025dc72738b2869cab06f1c2811841d68b24
SSDEEP 12288:/AK9rrCYVmyCICF4wAVVIKfcxoq4dMVDJAJYWaQuHdhrkimg2c1yyc32lKqnDz0p:4K9ewrwAjRTq4KJ2aQu9tkrB7ycRkHfG
TLSH
T1E53502193EBDCCE3E1B3C438E252FA219C0B86CCD11670679256179F0DED85D4A2EB99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zoomify-2.17.0+mc26.3-universal.jar

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\mods\zoomify-2.17.0+mc26.3-universal.jar
Size 565KB
SHA256 134edcc2992d2f6c3793746101dec1aba3ef02f046024fd280afb09094593027
MD5 9c8d58390c4534599e94bf755f5866fd
SHA1 7f18090fea4a2ddae01e032d09629d14fa381d3f
SHA512 1c5bc8e46a3575847584bb6993034dbe7d8060be32ee676c473d36bd4bbbc4df21d03a8f3b3f8904e42312667e9716050cca2cf7a098c8ebf6985d52eea4d637
SSDEEP 12288:MDn7CqGNNgkYcU7aRapgV1htW9JdLH3Pu925IngxmD0EmyK7cGxCTF:M77KNNgkgGuZG2pc5myecGgh
TLSH
T1C1C4016D7DDCC998D522CD779A86E633A86F0389E7127017B30924B70CF889D5A06FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Chat Reporting Helper.zip

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\resourcepacks\Chat Reporting Helper.zip
Size 72KB
SHA256 11c6e2fb728cd269eadfb5663b28de8d9849e633de7792ea1d44e870782ba6a8
MD5 9fd71090f57f899a828a4f30a8256c2b
SHA1 fe52ddaf19663c0cf6bf8bab12ff17abdf25622f
SHA512 aa96f74c7838cf687fbd175dca07ebc6a012de525701d55ca7867484cfc8e983001db99294de158343b64021df25e280e56a433f33d1bc162181091bc3395970
SSDEEP 1536:W+z5qkG+ZvG1njpljxxkdGCjQL3lRe/7J:xNjG+ZORpJxxk+LVk/1
TLSH
T15F73BF28F90DEA01DD2E2731500DD6BAE409897C4FC3B5B626124B4D79AF9C4533AF7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mod Menu Helper.zip

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\resourcepacks\Mod Menu Helper.zip
Size 87KB
SHA256 18aa6d7b2934580784aa70cb14087e2c6d7d64c93cccbb1af5c715370b67ed18
MD5 c0a3e62c5d18833a050e3c139cff4ac3
SHA1 d21aeab19cfadf9ee64687f983773ec6a7ec20bd
SHA512 dc271fc977287d1fe7dd2dd2603572c7e5551936c1e2736a5bb89dd0ad10e2fda20c09cfb66a09bb857406745dc5447b562824ccf8e539b12a93245c314b2e01
SSDEEP 1536:zavhPt4BFBZVEBGEB4+2FQBOW2JVGMUHrzf1XiNKHKai0ZpjB7B5PSs8CHE67a:WvhPt4BFBgBZB4+2M2JsCKHKai0ZJtHI
TLSH
T11493F1DEE50CED48E0664DFD228B422EDA550F0D4783BD0B9F3538835AB7431A652A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SodiumTranslations.zip

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\minecraft\resourcepacks\SodiumTranslations.zip
Size 279KB
SHA256 e733dd165333cf439bd443a31b8733e28d8d883a24055aff5a2f51ea9923638d
MD5 529dc8bfe6890372f4563cccfacee2e3
SHA1 49fa8ef2ee0d0866f924cd10b62c2f0fea0e5857
SHA512 affed4f72a476dfa7760d4cec87effd174380103df63b7c3ae3a61a4e72af6c0ec624432259f017b4eaff5855a708766007a1ce538bd440ad8fc89b85366f3ba
SSDEEP 6144:FZS4XFOIWdxY2No9YHK9rh4IU7xUIaSSwubtlEgS/JUFJTN3kn:FZ3BWdni9D/U7x0SSwubtlEgUJUfN3kn
TLSH
T1385412E99A902505C70FA93AD20DC395810F5B0854D7E8FF8F252715E822AD1BFB37B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmc-pack.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\mmc-pack.json
Size 1KB
SHA256 e620147081aa6d382bce51ac7244a1d387b618f4f9a8a698633950b7a729a50c
MD5 023605a94f44992c6cbb7c6e4d86e716
SHA1 a71202c2992876dca44245e782f2d978e1c76729
SHA512 dc6350c1afb20da1146ccf15b524468cb494d40b71ddd2cdcbc39b24203d1bf888f589138908d306c44cee5cdbe1cf3ebe6ccae81bd6ae6cc65a0668db2e5eb3
TLSH
T1F7212374C3F21CB334659375483A41A6967040072FA03FEDB61C810C0FAE2AEA6A62AD
MD5 SHA1 SHA512 TLSH

Submit Download

modrinth.index.json

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\mrpack\modrinth.index.json
Size 30KB
SHA256 bfac4eb0ad3644dee0e875f24a55d3bb534e04b058cec35fe241fa39c730e947
MD5 c4d8b63a2fe0b54e9acf54d745486b04
SHA1 177acec461c3bd5e6315a25daaab1e6e8de54a05
SHA512 6d29a71d7b30c6b39e63e1723aaa86755614e3861dde45f587778808cb70c9b676fad5757dc90361d853cc58ed92c1e02028583afeca8161906f49b0da71ee2f
SSDEEP 768:q73gC3XkX0jyfiM2/AV6rHPQ+CuL4FDIPIIX2oiF+nIG/28S9wZs36Vz/YVNB:IWKPAR
TLSH
T1A3D27768D7F48DDB16906276DC2F6152B222969F0FA83C1A79DC00CD8F2F11E73685E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overrides.txt

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\.tmp\37c63a\mrpack\overrides.txt
Size 1KB
SHA256 3f98feb7fd1ca1e133a736e3f36fc83a0c8a9b210d1e7f565f57f3d83afaaa55
MD5 34c1ac51580cd8c00ab20390289e9f64
SHA1 2a90eb6dd9b6870eb2611bce65d0df2c7b4703d0
SHA512 d0cfbbe55ac9171d01207bf048095f51cb8b0a57931ef9b3d3c5ca3ce9fe919c58bf80342e6103f47035986023f0d24d899338c68e00f7955a7ae636355758e8
TLSH
T115413B1BF03E9D73418F0D69E4A88421CDB80FEF7290744FB38D7A58D149AA19A4A33C
MD5 SHA1 SHA512 TLSH

Submit Download

instance.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\instances\Fabulously Optimized\instance.cfg
Size 614B
SHA256 39c21c1de2ed1046085758c19f89046b02f0e71ec4db2d1892284217a05bca1c
MD5 b70c8e038964ef5ece3444b0d25629f3
SHA1 c7faa0f7ef803241be2697ff832530032c5b4a70
SHA512 45abed36afaa0a5457914a4f3e39c77fa0fec83290ed0b5574626863096a23536885bc227e8c62baac758e47c38007d0a9f4c1a04715c3526afba9cc1d1ee978
TLSH
T1A2F04CEB12FCE43EC8980A1F7F5F5EE01765135350E400DE327EA8948BF6C6526A526C
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 52B
SHA256 a85a9d50bb071347303a46f4136a1c7cce8bd90981cc0827ff197039297f27ee
MD5 8aac2bd026fcb2d8fc2f6a7f45cbcbbb
SHA1 667e2b2fd911eb529aea7acd6fb8f8ccf0dbe618
SHA512 a4e65cd70986ed3978d774a1cdeb849ff8c4d024b19785946e07638aecc2bf00782036fc353bb88bb81296bb59c954a892324cabb38ee46d5ba4b8beeb48673e
TLSH
T1B09002078100A0760563274580118C449A6113416519456D78D9A98673059541997C64
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 282B
SHA256 adc578a0bd0ec6bf054b31c13e613f0caf0befd3a9472ac50ace1556e84b4629
MD5 120ee26497a96d2aa5d58d03be6af440
SHA1 5cf01a847cacc1cc9c0cccba3d64daca546660f6
SHA512 f26849510952f41564184e1f046a659febbf17e923c387404e949eb976318e8d031cc26eef9db6078837a2fd74726e0bfcc297e5b723fa7816ea93cd1752c32d
TLSH
T1DCD0EB337384E12B2D8A7C0640251C86CC132F439A8010656908791A23255081F82C06
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 321B
SHA256 4f3b14b15309d0990833da01f20811de46abbb130eb5336a8342a5e23459b2ab
MD5 99d10d56e2a956c85583935387ac077b
SHA1 6ba58d69ee8f2b3558854f9c2ae4da24137e7f24
SHA512 27bc0c4c78f1621fd2a279d24c7668a69a76b8e88e29a2be18cd1b20beb785c08b319407784bc926274842fbe362ed53cd52e0047700332e0e6fdef3de4fda2f
TLSH
T1A7E07D337398E13A6D897C8641552CC6CE532B479B8410AA6A0C791E633550D1FC1C4B
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 634B
SHA256 2f49cf08789ff7fe67c47f16dca4183c1c85347bea374972a073d8da6eac1c77
MD5 97747163120e20f93d9060d8499807c9
SHA1 7e63cb297489ccc59796d4c161b9ee00de5bca8b
SHA512 caaab00c3431cbcad74765585571fe11a72f21b1d874165b89104f9ec6502081c1ef29ebed0e92583b4bcf7e69260e3a50b14c04fed629a42b85504074481f07
TLSH
T1C9F00C325388643F9840A85EDB192EB28F2B672332443C4EF1CD962E33F340A274248A
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 822B
SHA256 d7f08b7c229a09b24d84d40480dd244f694929fbc229967f5332d6f11cb63c87
MD5 0867eb90f0833c58d68be56e3e6b6efd
SHA1 987c40147c7bbf26c6b0922de67874d723616346
SHA512 246e10f0778e9d9317cca58dc28053e8dcdb351f5066634ca924ebdad67806ce57536ac571bbfb202b2f58fed67ebbb8eac2f9b4e56924f9c6c0300d70cfca62
TLSH
T13101BD225254543FD800A46DDF5A3F724F2E562331843C4DF1CE922E62F38062652586
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 1KB
SHA256 e3e3d820023a51a61ef286eafc9acbfea7640613a7d8ca0247e91afd645f91b6
MD5 21fb9bc60da1df193d22ff2fa86fbc83
SHA1 42393c61d20b54fba9f661bd5bfecf7600fe580d
SHA512 7b330cf16d360c75bf889deb0f2c8932dd65943966c36f0e164d72c00b1698c7bbc512455d21d93881941998f489bce7d16b889a10c7af1a370012a0c0a38f0e
TLSH
T12B2123218164183FC800982DEF5A7F364F2E562330853C8DF1DE832D61F78173562686
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg
Size 1009B
SHA256 0c813142301cd4fb6d3647ac6a808d785fb526ce95a06fada02794f14e23d4eb
MD5 b78d6be1d5a0e95e653fd1eb54326041
SHA1 eacf8f22bdb8af857a9ccc53be330b21e0147b60
SHA512 663f7257bdabb7af7532de33fa32a06893f8a3471a4140799b83e2ede1e558b0f8f326fe66bbf3088d582cd125193251204d9268e236728d1c3066d945f6054e
TLSH
T199117A224254583FC800A82DEF5A7F774F2E562331853C8DF1DE932D62F78073552686
MD5 SHA1 SHA512 TLSH

Submit Download

offprism.cfg.lock

Path C:\Users\Admin\AppData\Roaming\OffPrism\offprism.cfg.lock
Size 61B
SHA256 114d809654dd231bf0d2e514326f3053663058d811bcd0ffed4bfc93f233d931
MD5 63a3d119d1be9dc76ee728af2e4824ea
SHA1 f19f8730eeb804b00f7d75a112158c430a0bdb07
SHA512 ea7b3782bcc69ba4dc1dc2af4358016fe22c48078c14daea3c581dae131a1c2039d37191f4860ac6e0009850d1b2db699843ccd3ccdb8257b71d27a4d4c4f916
TLSH
T1D3A002126F2F928C648209755CF4A50D860D107ACF51D2364161891215845F9D66BCE0
MD5 SHA1 SHA512 TLSH

Submit Download

594520d3-aa4a-4421-893d-e7032c981837.tmp

Path C:\Users\Admin\Downloads\594520d3-aa4a-4421-893d-e7032c981837.tmp
Size 15KB
SHA256 55a361ebadc93e5cd198ce6cdac790c567f262be011286ca6c092b90a9f9c1d9
MD5 befe0b8ad2a128fd1d399a738c003fc3
SHA1 adaaf3009880c65074b525a418e566ae7b77759b
SHA512 8205ea6c282e0da0a10d437e30d4fda205524106b0cfb21fb63bd9531d65b3ac1aade77dd989c8094fa9a85d891b0c00ef8652239db5da550d9e560fc63aa39a
SSDEEP 384:h0xhD+yNA0qfEnu14xg/x/i6OBTxrLrTQ/SxfFunqoL58exFpiJEPGU1:hGf6qfEqLBTxrLkSRoys2uGU1
TLSH
T10B723A21A5A1D4B3DCE313B2157A6377EFE7832217E0658397303FA93963692E50F605
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OffPrism-Windows-MSVC-Setup-1.0.2.exe.crdownload

Path C:\Users\Admin\Downloads\OffPrism-Windows-MSVC-Setup-1.0.2.exe.crdownload
Size 23.6MB
SHA256 f01efaaf72f50ab3275a63e7f1676f5efc4e90afbd8d72e874a693f82578cb06
MD5 b53e643d361ca016bffafa4f56dd10aa
SHA1 1cbb7c957f7132d870cca6ce4cea98af73db0509
SHA512 71ea7c9d5b29c88a5da716e30f0985879ceb8e2de2ad744b0454155ba1366ac37b1703549d288e4b26bb9cc8f46b6e37d01685d2a5c660cfc76ca3109806de45
SSDEEP 393216:sRFaH8XgJkgY8jFIPFg96lU5CP61DIbY9/DcNFEYGB8+CwT329r8zd0GoPOtOoKF:snn8jgPaoPnb6WEj7Cy329rKdLIwKpf
TLSH
T1A84733FE395EF84DD22A0D3554B643CA2E22B4382A16847A7DCE5F329C74D8078B935D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OffPrism-Windows-MSVC-Setup-1.0.2.exe.crdownload

Path C:\Users\Admin\Downloads\OffPrism-Windows-MSVC-Setup-1.0.2.exe.crdownload
Size 23.6MB
SHA256 f01efaaf72f50ab3275a63e7f1676f5efc4e90afbd8d72e874a693f82578cb06
MD5 b53e643d361ca016bffafa4f56dd10aa
SHA1 1cbb7c957f7132d870cca6ce4cea98af73db0509
SHA512 71ea7c9d5b29c88a5da716e30f0985879ceb8e2de2ad744b0454155ba1366ac37b1703549d288e4b26bb9cc8f46b6e37d01685d2a5c660cfc76ca3109806de45
SSDEEP 393216:sRFaH8XgJkgY8jFIPFg96lU5CP61DIbY9/DcNFEYGB8+CwT329r8zd0GoPOtOoKF:snn8jgPaoPnb6WEj7Cy329rKdLIwKpf
TLSH
T1A84733FE395EF84DD22A0D3554B643CA2E22B4382A16847A7DCE5F329C74D8078B935D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Windows\SYSTEM32\MSVCP140.dll
Size 544KB
SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
MD5 bc88b387cafa556068b5c5d6ff3ccc8f
SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
TLSH
T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_1365666097\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_2036910510\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_463847553\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2356_703531996\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

vc_redist.x64.exe

Path C:\Windows\Temp\{333980BB-863E-444A-92A0-66A3312DC63C}\.cr\vc_redist.x64.exe
Size 670KB
SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
MD5 bc9c8a6a42e8d3ea18f8da78d5031820
SHA1 07812a4b945364d04627363e46ab38de188281b3
SHA512 b583f41b8f9cbb2b04e4c7403b54241bf4c51caefdb0bbe9184202dc615f599b496d65f6d36984b75f9b9003289c0c13066dc1e6eb294f9139248595114b4f73
SSDEEP 12288:n3mgqnIZuYfCYqFet4CovkM7x61nE4rfDDIcbMZ3Mya:n3WnIZuMCxezot7MhbfDBMZ8ya
TLSH
T10DE49E32A5604033F7F10573B928A6303E7CE3282B51C9A9D7D4AD1D7EB4892A7F7256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{4204C96E-EF02-47DB-B34F-DD6F500B9D08}\.ba\wixstdba.dll
Size 191KB
SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
MD5 eab9caf4277829abdf6223ec1efa0edd
SHA1 74862ecf349a9bedd32699f2a7a4e00b4727543d
SHA512 45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2
SSDEEP 3072:OXoiFK6b0k77I+QfaIl191rSJHvlalB+8BHkY6v53EfcUzN0m6I+WxBlnKzeZuqt:OXoQNb++gDrSJdr8BHkPh3wIgnK/IU1a
TLSH
T103149E11B5D0907AE7FB1A385938B5216D7FBA201B60C99E17589D6F2DF02C0AF35B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\.ba\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\.ba\wixstdba.dll
Size 215KB
SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
MD5 f68f43f809840328f4e993a54b0d5e62
SHA1 01da48ce6c81df4835b4c2eca7e1d447be893d39
SHA512 a7a799ecf1784fb5e8cd7191bf78b510ff5b07db07363388d7b32ed21f4fddc09e34d1160113395f728c0f4e57d13768a0350dbdb207d9224337d2153dc791e1
SSDEEP 6144:K6EZdi6e93SuDeTKZxQfsRy26BqbUHYJe:K62i6eNSYeuZ2sRDK
TLSH
T15E24AF12B5D0907AEBFB19305939E5216DBDBA210FA0C9CE5348AD2B2E705C1DB36737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab2C04DDC374BD96EB5C8EB8208F2C7C92

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
Size 5.4MB
SHA256 7dee5b77719fb6a6627145357c5a93bf8af2a9de54d34c79ffc1ae71d52c79f5
MD5 ea81447ef1038bd5726b36063896b39a
SHA1 8f484a24bfe42276580d120c200a99bf604eea70
SHA512 31fe32db60d9a0579374ce3a51b586ef0fa7b891aebcd33613a818264bb9eeccba4f2b5ac4b95feca144d4be6146e99d9f5dfa7bfa5e11cfae46e06b41da251f
SSDEEP 98304:JnfKe/OhMAf7WUHioDNe/rdRlRFQdU8o2VDF/ZXZsHOtnF9r:hPAzWxZgU85VDbXZs+z
TLSH
T17D4633018111941B63BB250753FCF1518FF2F087A4B672BA3BD2934E4AE78CF59EA51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5046A8AB272BF37297BB7928664C9503

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\cab5046A8AB272BF37297BB7928664C9503
Size 964KB
SHA256 640aa6c516c72444523b8fbe034db46ff4e118ed02705340e3ccb62d426ff040
MD5 efc41c00aadf8b2050ecf9e38e9036f1
SHA1 bc4afc5cb90411f0e4e874372f1fbabab0cfd33d
SHA512 bc9cc1e83acc8dbe53501ca4554dec6d31cb0ccd3609d0e760c7fdbf73fbc4c46baf14c397667eaeced284506d0a9a0bdf7777736f05ae277e9e2f3349371136
SSDEEP 24576:+e9fUQD6DozFBvW8lRBAaKycdSCTbiVTPf1eg++4:+exUQX/e8lzAjdZTbiVTnw
TLSH
T15625338685244AC1694EEC06B346F9BF74D331FD59B5B8032A262EC8E3D33857593937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeAdditional_x64

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\vcRuntimeAdditional_x64
Size 208KB
SHA256 7df26ee2169ef6c61c17675e1a2edbaf01bca2ed1a0bdc0f8396d029a336c1f7
MD5 f375f3d81a661e188146d701d8ed3ba9
SHA1 0851e6da56fa65981ae27d9eb7e396afe1ea0c73
SHA512 d67709e2f25ad12532ed33d26c0ae365b7a4eb0e6711b2ee7dda489480b9976b4bbfd0b902cbb847cb602922a1653a2981741718fdec4091ae25f07fe5b8bf2a
SSDEEP 3072:F9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriT6qF:/laZeKFxCnBheIdlu2q
TLSH
T19E24AE12B5808033DAFE1A311178DB615F3D7E608F544A9B6364B6AD1E717C08F3AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcRuntimeMinimum_x64

Path C:\Windows\Temp\{5648F71D-29BC-4EA0-8D5C-3DF0AF282D48}\vcRuntimeMinimum_x64
Size 208KB
SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
MD5 23626831f9a05572c6ebd133e5ffc4b0
SHA1 ad044cdf938a5532aa270c6bc687db95d803fe10
SHA512 1b45ea55e7278ec61f0689b70794f371d56eb2787c22106ebec38d17f1670441a853849460249d08380053bc8b2fae0285845b47ad62670029639d5de5ace10c
SSDEEP 3072:o9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriTA:+laZeKFxCnBheIdlu
TLSH
T1A3249E12B5808033DAFE1A311578DB615F3D7E608F54899B6364B6AC1E717C08F3AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootstrapperApplicationData.xml

Path C:\Windows\Temp\{DFA32F57-AE40-41E7-852E-3CB313FB4CCD}\.ba\BootstrapperApplicationData.xml
Size 14KB
SHA256 8c81100f594e3d0bc51e5571e0046f016086207c1c382d45708c30e1d732b648
MD5 7f35d3c6ef5189d916dce7f974f2e5b8
SHA1 37f9ed9a2ed80fdafd187ce9a38ce5b0c952f3a2
SHA512 ccaafb8ef675e2625561a244f80a4d5e05c590211055e76afe4a317b2220bab2e9baf8fe968a46b226e3ad4e2d064f1551d88e47da798d24ed365331840d4c03
SSDEEP 192:X0sveDnH5zHqQHG0Hd8Hz7HE06HA0rH3pJp+tHxLUrnDzLG0LY1ftHJr5e0II0B4:X0s6dLbmnoNwtR03J+ftcItVEp+Eo
TLSH
T1DD62D5142AFD0159F1F34F88EAB945566B76FC963E38C81D01611E0E4873E819972FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.rtf

Path C:\Windows\Temp\{DFA32F57-AE40-41E7-852E-3CB313FB4CCD}\.ba\license.rtf
Size 9KB
SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
MD5 04b33f0a9081c10e85d0e495a1294f83
SHA1 1efe2fb2d014a731b752672745f9ffecdd716412
SHA512 d1dbed00df921169dd61501e2a3e95e6d7807348b188be9dd8fc63423501e4d848ece19ac466c3cacfccc6084e0eb2f457dc957990f6f511df10fd426e432685
SSDEEP 192:H8kZ1UVDWkiWZTIsp/4hghFF1Qf4lCfnEtHixEGx736wHqItfSpOtJ32:cM1RWZMi/zzlOnjt5HLoa2
TLSH
T13F12A7A8234783D103D213D7055294C1B71F0BF6AE7AF95C34E4D53826E2E6CB6B91E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thm.wxl

Path C:\Windows\Temp\{DFA32F57-AE40-41E7-852E-3CB313FB4CCD}\.ba\thm.wxl
Size 2KB
SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
MD5 fbfcbc4dacc566a3c426f43ce10907b6
SHA1 63c45f9a771161740e100faf710f30eed017d723
SHA512 063fb6685ee8d2fa57863a74d66a83c819fe848ba3072b6e7d1b4fe397a9b24a1037183bb2fda776033c0936be83888a6456aae947e240521e2ab75d984ee35e
TLSH
T11F519B6778CF639028335125EAD2966A6920C5DC923F2DF1FC4A914B838D522A373F57
MD5 SHA1 SHA512 TLSH

Submit Download

thm.xml

Path C:\Windows\Temp\{DFA32F57-AE40-41E7-852E-3CB313FB4CCD}\.ba\thm.xml
Size 8KB
SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
MD5 f62729c6d2540015e072514226c121c7
SHA1 c1e189d693f41ac2eafcc363f7890fc0fea6979c
SHA512 cbbfbfa7e013a2b85b78d71d32fdf65323534816978e7544ca6cea5286a0f6e8e7e5ffc4c538200211f11b94373d5658732d5d8aa1d01f9ccfdbf20f154f1471
SSDEEP 96:8L2HdQG+3VzHfz96zYFGaPSWXdhRAmImlqFQKFBiUxn7Ke5A82rkO/pWk3nswP:ZHAzZ/3
TLSH
T1D30259B546DDB801D232FB1166E231D27F126971C0C46E59F90C2AFB5FE1140A8B72BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1272-2000-0x00007FFEAD910000-0x00007FFEADF44000-memory.dmp

Download

memory/1840-1439-0x0000000000B40000-0x0000000000BB7000-memory.dmp

Download

memory/3248-1450-0x0000000000B40000-0x0000000000BB7000-memory.dmp

Download

memory/3304-2032-0x00007FF689870000-0x00007FF68A39C000-memory.dmp

Download

memory/3304-2031-0x00007FFEAD910000-0x00007FFEADF44000-memory.dmp

Download

memory/4576-1123-0x0000000073C50000-0x0000000074260000-memory.dmp

Download

memory/4576-1220-0x0000000073C50000-0x0000000074260000-memory.dmp

Download

memory/4856-1441-0x0000000000B40000-0x0000000000BB7000-memory.dmp

Download

memory/5432-1496-0x00007FFEAD910000-0x00007FFEADF44000-memory.dmp

Download

memory/5432-1497-0x00007FF689870000-0x00007FF68A39C000-memory.dmp

Download