Overview
overview
7Static
static
3ECLIPSE-La...66.exe
windows10-2004-x64
7ECLIPSE-La...66.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3ECLIPSE.exe
windows10-2004-x64
7LICENSES.c...m.html
windows10-2004-x64
3LICENSES.c...m.html
windows11-ltsc_2024-x64
3d3dcompiler_47.dll
windows10-2004-x64
1dxcompiler.dll
windows10-2004-x64
1dxil.dll
windows10-2004-x64
1dxil.dll
windows11-ltsc_2024-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows10-2004-x64
1resources/elevate.exe
windows10-2004-x64
3resources/elevate.exe
windows11-ltsc_2024-x64
3vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows10-2004-x64
1$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3$R0/Uninst...SE.exe
windows10-2004-x64
7$R0/Uninst...SE.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
121s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 04:24
Static task
static1
Behavioral task
behavioral1
Sample
ECLIPSE-Launcher-1.0.0-beta.66.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
ECLIPSE-Launcher-1.0.0-beta.66.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
ECLIPSE.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
LICENSES.chromium.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
dxcompiler.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
dxil.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
dxil.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
ffmpeg.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
libEGL.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
libGLESv2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
resources/elevate.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
resources/elevate.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
vk_swiftshader.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
vulkan-1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
$R0/Uninstall ECLIPSE.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
$R0/Uninstall ECLIPSE.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target ECLIPSE.exe
- Size 215.4MB
- Sample261030-e1d4dahs21
- SHA256 252b248136064e0be7fc02050c442be2150c5ec246a3ab7a49828ca351daf8eb
- MD5 84a722ea578f1a8392905dee8f3a6007
- SHA1 c535f731543aa9cd44a8c127bc0bd4da78528b83
- SHA512 12ec3d6d57ea9f9864fe82b36a5c46c1fa6c5621886d4d09b9ea947f3403aa854f453ab699ea14536c66623216a1697543eb80d466881e001456c3de894064ec
- SSDEEP 1572864:8IcxdSnnq605IHf8FRPxzgnBYRE4CxJfFjUV8wM6YMTwR0q+zkMrDstuHJDFkmod:Q6xsx6Z8WKI
- TLSH T107B88C03F29641DAC05DD1B98B5A9633FE71B8054B25A3DF2B5807522F66EF82B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Control Panel\International\Geo\Nation ECLIPSE.exe Key value queried \REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Control Panel\International\Geo\Nation ECLIPSE.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname ECLIPSE.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain ECLIPSE.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain ECLIPSE.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname ECLIPSE.exe - Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3 ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6 ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString ECLIPSE.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7 ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz ECLIPSE.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz ECLIPSE.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4584 ECLIPSE.exe 4584 ECLIPSE.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe Token: SeShutdownPrivilege 3144 ECLIPSE.exe Token: SeCreatePagefilePrivilege 3144 ECLIPSE.exe - Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3144 wrote to memory of 4492 3144 ECLIPSE.exe 84 PID 3144 wrote to memory of 3692 3144 ECLIPSE.exe 85 PID 3144 wrote to memory of 796 3144 ECLIPSE.exe 86 PID 3144 wrote to memory of 4584 3144 ECLIPSE.exe 96
Processes
-
C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"1⤵
- Checks computer location settings
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3144 -
C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\eclipse-launcher" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1692,i,14843189247274791124,15645073760711491059,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1700,i,7069051178660748606,16675498726572176182,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1684 /prefetch:22⤵PID:4492
-
-
C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\eclipse-launcher" --field-trial-handle=1692,i,14843189247274791124,15645073760711491059,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1700,i,7069051178660748606,16675498726572176182,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1868 /prefetch:32⤵
- Reads the TCP/IP host and domain name from the registry
PID:3692
-
-
C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\eclipse-launcher" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1793333911842235 --launch-time-ticks=575552061 --field-trial-handle=1692,i,14843189247274791124,15645073760711491059,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1700,i,7069051178660748606,16675498726572176182,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2588 /prefetch:12⤵
- Checks computer location settings
PID:796
-
-
C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe"C:\Users\Admin\AppData\Local\Temp\ECLIPSE.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\eclipse-launcher" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1692,i,14843189247274791124,15645073760711491059,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1700,i,7069051178660748606,16675498726572176182,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2440 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4584
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\89d1d78e-8ccc-4942-a316-88f5553b939b.tmp.ico
- Size 363KB
- SHA256 aca19d5face1c52ccf21ade8246721d410438ec290bd4385f73cc84f6f0d2619
- MD5 75bfa1900d812c04bcf03bd34e361483
- SHA1 5729c0bb4d3a1b6ff813545d8efbc16532fa96de
- SHA512 3e1a79125e08873f5c28e2f9ff1da78c430ed4d3b2327c442ff5ce1ce3570839efe7e00b6182d3b80ec9d4f6e490755c1128f0ea894d73998cc004c32d8654c9
- SSDEEP 96:JhMm6txV5i5AGg1h45h6qqCfrP//Y1Hj2KFQVVFX/X/XxTj1T2kE43O:JhW3Xkg2gqqCfrP//mj2KI92M3O
- TLSH T1C78482E822D0E183CE98EEB5C91162951E335C587AC0F2A7356C7E9FBC3EC426431176
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\GPUCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\Local Storage\leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\eclipse-launcher\nova-config.json
- Size 969B
- SHA256 572da7a2f4c859937942dacf2229bfe709de2f3833665a7b32afcb52c453dab4
- MD5 97ccafe7bdfd90d4e5e7b3f345814a28
- SHA1 13217c90c3bf64c3d5a0bc61360cb0c766758261
- SHA512 79168ece955d657d873dcf6c1f12948db02d2cd10aa8bb0493d023c831b4494a5722a6243905b73e1c75dcb0f1e3994e9caf64757fb5f9aa506cea34832242b8
- TLSH T1FC112535E5B80CB70698123A8C7E62436A2044630E183E3CB5C2564C6F4DB1F30BB2F1
- MD5 SHA1 SHA512 TLSH