crypvault | 046b8e68ac8a639b95bfd93c65199ec57b037901cdec20b6734fd0e8c2de6241

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
22s
max time network
60s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MillidaLauncherSetup.exe
Size 1.8MB
Sample261030-xerrfsfc74
SHA256 046b8e68ac8a639b95bfd93c65199ec57b037901cdec20b6734fd0e8c2de6241
MD5 8f227941683c0163d1dc5162d9b4c121
SHA1 b4679092252023ae936df303c83cc3c4ecf109c1
SHA512 454f3af3bac99180a467cc07a1f209e66b6b477f8dbc371614ccbec8e5f2f4c786d8fa6faa4d768633ad824e59666ec9f9b2f3d3bfe6e166747d04b7f499cf24
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+c:/b2dZWWySHixrTza3OOvIl+5SfYIU6ik
TLSH
T1B0858D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery crypvault persistence ransomware trojan

Malware Config

Signatures

Family: CrypVault
Ransomware family which makes encrypted files look like they have been quarantined by AV.
ransomware crypvault

Executes dropped EXE 2 IoCs

pid	Process
816	millida-launcher-setup.exe
4728	millida-launcher.exe

Loads dropped DLL 6 IoCs

pid	Process
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Windows\CurrentVersion\Run\Millida Launcher = "C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe --autostart"	millida-launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	millida-launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	MillidaLauncherSetup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	MillidaLauncherSetup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	millida-launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	millida-launcher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	millida-launcher-setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5040	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 16 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell\open\command	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe,0"	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell\open	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\URL Protocol	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\DefaultIcon	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\",0"	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell\open\command	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\URL Protocol	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\DefaultIcon	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	millida-launcher-setup.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
816	millida-launcher-setup.exe
816	millida-launcher-setup.exe
4728	millida-launcher.exe
4728	millida-launcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5116	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	816	millida-launcher-setup.exe
Token: SeImpersonatePrivilege	816	millida-launcher-setup.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4728	millida-launcher.exe
4728	millida-launcher.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4728	millida-launcher.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 3332 wrote to memory of 816	3332	MillidaLauncherSetup.exe	89
PID 4728 wrote to memory of 5116	4728	millida-launcher.exe	93
PID 5116 wrote to memory of 6120	5116	msedgewebview2.exe	94
PID 5116 wrote to memory of 6112	5116	msedgewebview2.exe	95
PID 5116 wrote to memory of 6112	5116	msedgewebview2.exe	95
PID 5116 wrote to memory of 6112	5116	msedgewebview2.exe	95
PID 5116 wrote to memory of 6112	5116	msedgewebview2.exe	95
PID 5116 wrote to memory of 4712	5116	msedgewebview2.exe	96
PID 5116 wrote to memory of 2724	5116	msedgewebview2.exe	97
PID 5116 wrote to memory of 2724	5116	msedgewebview2.exe	97
PID 5116 wrote to memory of 2724	5116	msedgewebview2.exe	97
PID 5116 wrote to memory of 1696	5116	msedgewebview2.exe	98
PID 5116 wrote to memory of 1696	5116	msedgewebview2.exe	98
PID 5116 wrote to memory of 1696	5116	msedgewebview2.exe	98
PID 5116 wrote to memory of 1696	5116	msedgewebview2.exe	98
PID 5116 wrote to memory of 1696	5116	msedgewebview2.exe	98

C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup.exe
"C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:3332
- C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-3332-0\millida-launcher-setup.exe
  "C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-3332-0\millida-launcher-setup.exe" /S /R
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:816
- - C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe
    "C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe"
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - Checks whether UAC is enabled
    - Reads the TCP/IP host and domain name from the registry
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:4728
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4728.4504.4532153971369411599 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5116
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView /prefetch:4 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x198,0x7ff9036e5fd8,0x7ff9036e5fe4,0x7ff9036e5ff0
        5⤵
        
        PID:6120
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1796 --field-trial-handle=1800,i,3713185411931227060,4829531427973451470,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:6112
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2260 --field-trial-handle=1800,i,3713185411931227060,4829531427973451470,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:4712
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2336 --field-trial-handle=1800,i,3713185411931227060,4829531427973451470,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:2724
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3436 --field-trial-handle=1800,i,3713185411931227060,4829531427973451470,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd /prefetch:1
        5⤵
        
        PID:1696
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4020 --field-trial-handle=1800,i,3713185411931227060,4829531427973451470,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:4144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://millida.net/auth/launcher?code=HBTA-8QHU
      4⤵
      PID:5360
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff900a1c188,0x7ff900a1c194,0x7ff900a1c1a0
        5⤵
        
        PID:5708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,9745106616964008692,13120621731654527728,262144 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:2
        5⤵
        
        PID:5192
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,9506431181574858267,12683244075911151042,524288 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:5040
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,8905354208749111918,16076678664323037691,524288 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:13
        5⤵
        
        PID:3800
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3696,i,16141824011369248629,14951013452124320024,2097152 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
        5⤵
        
        PID:5288
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3836,i,7343989577579157803,10199464903157413110,2097152 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
        5⤵
        
        PID:1424
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,7001019060722670462,11307560299840289434,2097152 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
        5⤵
        
        PID:4880
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,1511116379592641290,3535688971755092457,2097152 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:9
        5⤵
        
        PID:3388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,8443859034684746317,15214872354366428035,524288 --field-trial-handle=2836,i,15263212902826169538,4818614270003495682,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
        5⤵
        
        PID:1816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5a74ac65-ecb7-413b-8adf-42069d3ea1fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a74ac65-ecb7-413b-8adf-42069d3ea1fb.tmp
Size 38KB
SHA256 be86c053aa562f264130550c941561b1403bd21a1b8cafc07bca65d39778633d
MD5 798cba29252cb82182a4b4a71cae85df
SHA1 e6d3b456e37d17143a5878907c928998ce0f6079
SHA512 14aeb2e99b12a795915c3de287d8fba5a70fe96d2ce5bab3661999d0edea07d9424bfdacef23dd421919597d411da583123f73aed1c61a45d15acd839083b222
SSDEEP 768:vu/UxvxjgC+5j3eVR258qieONttiYotNjFnUPO4Qp7cPAiSm2eo4w4cciGrTFIjS:vjZj3+5j3e65x1jFwQpYoimeoR4ccFF1
TLSH
T11B03CFB198A8AE239CF7A644365D63C7FFF010A398C11DA8CAEA2E0D454379D170BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

fd09ccce-d93d-4bfe-9b65-c0d84d835fa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd09ccce-d93d-4bfe-9b65-c0d84d835fa4.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f16f47a0-2c1e-46fd-a292-372e7336c40d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f16f47a0-2c1e-46fd-a292-372e7336c40d.tmp
Size 37KB
SHA256 52c7a556f318969a5ccf8c6d4f373a55d81de78271b5fd8f213ad9851a3227c7
MD5 40468da4990424309044593661b3585b
SHA1 dde7888e27ca37ebdef32d42d1899a2bde1a9182
SHA512 c3b4bc211dee10a2afef67349cb37bbd54ad81f69219425d740c53821f2cd8ad6f0ab70586ef51ecd0b64e02ced5400ceb1255bed9c324643f94f1acb6954ef7
SSDEEP 768:vw/UxvxjgC+5j3+VndG8tieONttiCjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5aAgZw:vdZj3+5j3+/GmyjFwQpYoimeoR4ccFFz
TLSH
T18003BFB598A4AE738CF39784365D6383FFF140A395C12AA4CAED2E0D42877AD4307C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.exe

Path C:\Users\Admin\AppData\Local\Millida Launcher\uninstall.exe
Size 84KB
SHA256 2cce78393fd3f18c260005def41b73c11d3621f21dd75c08b409e65aff4beca9
MD5 fb7b68afa79255a3c889dc4bc9d914a4
SHA1 d5e10484d4cdff19628e2d037c03e257123215f4
SHA512 0cffe555c5f5b9aa0973b31f819d64baa618de6055d9dcf110e0194915fd179b81582a7762a04ad3caed4058d870a5345b2d873ef415b530ac34cd15b4483b65
SSDEEP 1536:orX4tpfcUjrwLxZYE8ksuMgzk5RdLeAyqx4x5BagHw9ckkgQKgzzmFUyLnXmL2v:SX47fcIrwR8ksuMck57eAulagQ9ckfpl
TLSH
T17383CF0427A0C8F7E9B607314D7B57B76FF5E9250168574B23506B1E7E32282DE2E3A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

millida-launcher-setup.exe

Path C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-3332-0\millida-launcher-setup.exe
Size 36.6MB
SHA256 5eeebdf2fcc8b52896e827bfc11878023d1b85efd05b850b6d6aada8cfe0c5ff
MD5 f9b1449df1a5d99a1fbfd5f0f42fc306
SHA1 1c7e152c854a82f63427717845d9c6ca42009c70
SHA512 8a4c2dc1c0768f8a735fd3b12629808c432545627d34178a5f4e3b3cb8e40d1c6390ad268cf4495017fb761d81d57c47ee0c7e015671c4dadcd86dc5d2f84505
SSDEEP 786432:huIMn/wkp6tQsLfiYaZNMgF81KukEhhFCMLuGK8aOQ4A29Lz9:huF/RprsLPEegFUNJCaJ19Lz9
TLSH
T13C8733C6F00A0D07E41C40B6927938BA4DBA37311AD9D6FE97877D8D78466832973B36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbD2B9.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbD2B9.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

083ffe2e-8654-4f23-b169-b546dfbd0a85.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\083ffe2e-8654-4f23-b169-b546dfbd0a85.tmp
Size 2KB
SHA256 f369670a883966714af3cb61d88f3c83fa4e30829ddcc9f7b56f4bba305d74f2
MD5 e9377abc9294f9d132cc03a662ab4e67
SHA1 b8019d7d8696d65dd80626b11d378f4c8bf637b6
SHA512 db50a9477cf30ed15bb0f8c27c623a9403c7f32365f24e26a501f4d604503a6221f6594bbe2519db75734047f75f6874007b4bb525760b20dbeb0cacd9c5d74e
TLSH
T1EE5198336914B6379EB29B587A873B23DD395061BF512F1096DC4B1C01D759C2351C3B
MD5 SHA1 SHA512 TLSH

Submit Download

2f4db767-2206-4ad2-aedb-d2574fb49eb5.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\2f4db767-2206-4ad2-aedb-d2574fb49eb5.tmp
Size 3KB
SHA256 8fa2eceae0bac5f10a6ee47a4e9f3b45dc96b37c38a49577d3ea81e13e4bbc2e
MD5 5538d21c7722d9551b6b4902bff25036
SHA1 084069a35231a1719b1be00bdb2e58804d7ef9f4
SHA512 6ed44d9961caa4e7781c4a5f522af9df8efb51c3d56059cd02118b4de1399dfc2f0a3dd960c09dde19afdd450164ad344d853950401d72104e993e0f19a7f94f
TLSH
T1E66164366974A9378EF2DA14B9C62B16EEA55023FA953F64C6EC0F1C02D72981391C1B
MD5 SHA1 SHA512 TLSH

Submit Download

7a8aa393-0e12-4859-9550-9c97d5885c50.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\7a8aa393-0e12-4859-9550-9c97d5885c50.tmp
Size 3KB
SHA256 454f9c13a1543a1b99fcc86d84b964bb520bb99a02bb127762a53e162c492c34
MD5 e01b7fa5f91b702aa3cbb15f0b4b2543
SHA1 bd2de8499ed500b2100087f493ee33513bc9ee2b
SHA512 9d759f4ee48b82e9da875930cbce8326c04f998e9b48b6b4c7337d68b06e7f64583a3041a8f0dff41908139b1534cbae4cd3231584ce3a30f314b122765cc89a
TLSH
T1E271853669B4A9375EB2DA08B9863B13EE655023F9957FA8C5EC0F1C02D72DC1391C1B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 534dd7bef363a26d45d1af0b88bcd9391b866df57d206781b2cde79702c12f5a
MD5 dcb30e249789cf579b8e0db0732fe4a0
SHA1 a59b808b5f054e87e4b294fbb788f87bd275e191
SHA512 b38fb451e969aa6b4d9ee9a0d52f0c51741886d7f040f8647bd5862e2bfbf5b1283ada220c4db697e027b2571be037c115a1e947a5631f922c8a8f1815bd81b7
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 394ee1911f00e2f0681f14f16c09412fd3862789fa08acd11abb019f2c9b800e
MD5 39bebf43f2ccaedc8a9d5c013610dce8
SHA1 50e321ca71da330ac3368f19bbe85a2011d43e62
SHA512 f7c6452c72d0ecb455411694872ad4fb6d0944f4b191e587ec32655c0f84f1d7ed9b51032951b456498c337a45a31849587cd3f4f11d3ae6f1bacd5c7221e45a
TLSH
T116D0121232134534C01021330512A5081C40C10B400B8044A42D861E3F080900D16881
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 8ceede0f04f21ff9e2a14662462330897bd563d8458cb6d971fb3037ca93afe6
MD5 947bcbdb102c39d62e9824859dcedee2
SHA1 38f420fdbfb19b3b7fe376a588d6289f1e5bcb3f
SHA512 b49f02de97c3da3dd70e5f23aceba1da6fc8fd3bd43ec8b9e6e3fd63022a808ff62fb0dcec8b343135f179ba2d1ab2b7addb73bb4efe2667484b4f2226448810
TLSH
T1F7414E64714F21C5F34B8A7027CAFA7C3B3AA08EB0171E4D15709235A89B3D4EE3C522
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 74f1ee5429cdbc7b45cac456deb30c168e52c145513ad24ed0e38c877cb1c3da
MD5 d3c22ee93d6512fc90333c35a6f221eb
SHA1 b71c0d92c89ac8f8d3ff43c4e43035b3788c64f9
SHA512 3fc3480bb53a6b6999128123cba548feb5162f1fbb7a1ba3e1892f5694420b7ff4503109716e70496c747f228a71531090afd854db5a7f7b0de0ec8fdbf07fc6
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

0f7131ef-5496-4cf0-9982-3f945a9f9a13.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\0f7131ef-5496-4cf0-9982-3f945a9f9a13.tmp
Size 355B
SHA256 3f892f28a8a591c82d0d1b25888c573930a3257d0337d982635437e4b90665f9
MD5 3dcca1431a4c4d8ec143d8d11c6060c4
SHA1 53e9a04215387be24453ab0742ca6644efa8a520
SHA512 a1a9450a717f71cf62c3c1852f91a4870a789420b327530147f28bea61a69602fc733a089bc44baea4e24e706121b80cce71432d64366767046a90762d96d95b
TLSH
T1CEE026B268BEB87E703DCD761D807A05EE76B036014154EEDAA742AD70881B7621B017
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\TransportSecurity
Size 355B
SHA256 a7721ece66dc048142201183f39c16e3203b8aa6e6861ca804596c9f763d8d12
MD5 167ab03d3e2d3b7ce16a4b112a5a71e6
SHA1 26dd9ac85ff5bb96657eda2423ccc8bdb48c2e96
SHA512 a3a887d5a9dd5d27a676e9694e6c27fd6a35cc75bf86dd2bd2163849b721f9b38fbc3523aa8f0e0f9ff65b25c8d927764a666b9e93bb060e7f6f6b8e694c6015
TLSH
T1E1E026A268B9B83F303C8DB25D817E05BFB6B036015158EEDAB3536D70801B7721B05B
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 1KB
SHA256 96ce64f5fc5a93b0c17b34fbffb7f080354b47055121a63c795c22ff95d7af3e
MD5 f4879e97be081b8de3af7b35a1f152d1
SHA1 8173b57f0183d0a598599a805fd71a6723246cc5
SHA512 ae47f2775e2bedaa79688c4d34b01056d9253b50c6dd3984354ff8fa1c657ae09b36034b478574173e73cbe4f88cd55522b63efd52eeaa53d3a85ecc74ac217e
TLSH
T1D82195B2A9746A33EDA2A75932833B239D211026A3408F0091DD873C03D319CA1B9837
MD5 SHA1 SHA512 TLSH

Submit Download

version_manifest_v2.json.4728.2.tmp

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\version_manifest_v2.json.4728.2.tmp
Size 318KB
SHA256 46433eb46857213d37ce29449345d216d2163adefd7edcb76947ed9ad2664610
MD5 4ccd022c562b3e4f4b44b6bad567fe5a
SHA1 0e1a2267dd51ef76ad0d77313602ec6abc57efef
SHA512 6e6587935609354f51f8d9b42e8ed989fcd3ba79be83445870da35c7ae90310e05334a966ea82807600c9d6be7abb11781c7f259d63fc8cc4a2a5cee97d4559c
SSDEEP 1536:wLGfEg8gPxatYHyUMiHLkbJRYUZ3sRZr5lYMNhMkfO3cS:wLuxsYHM8LkbJhZ3s/5lYifO3cS
TLSH
T10664EB64C0385D671C9060FA482967C50B509B1B5DA4B95A3F8CA1DC8FBF87F2673B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

achievement.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\achievement.wav
Size 150KB
SHA256 e6ff475f0be341f14ef8f0d5e790fbe37c2063625d94cc5769b3e3833569a39a
MD5 282b900b6fe419907445696fd241e91a
SHA1 df8047d4c29c62f376b7c9532cbafe58ca51c11b
SHA512 145a60d634c6d882b88a2095c735f5864fb2b27af6b70d59b5b62a49cd174dba300be88af7167f9cfd1e14b7e33ca3f1b8855874350155a892b15170a85bc7a4
SSDEEP 3072:CIQdOoPbB2tFTx6QEj8ChvX3bNm6yZJpIX9qBEuK5cBJSrc++:UdOgB2tFTxJ3QbNm6yJIXUBEn4Src++
TLSH
T135E34A527301CA11C4351E7A1D66EBD41332FE8AEF0BA36730827F6F2DBA1E19E15691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

case_burst.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\case_burst.wav
Size 86KB
SHA256 c5ba824a1b1d5b9b7807d3cc8528b4b4de8b30df4d1d5b46c45dc6930328d816
MD5 ecb7e50724742b1325682545fdc2fcbb
SHA1 3f6702db33ba8345f67c3ca36cab33d54e7b098a
SHA512 008f019ad1d028be7058413abbbcd7ecc8fa06297b444a21874d3b50dfce401948f120ed9242372f30b0633bfbd92a025041030b4d6aa4618e604032a68d6397
SSDEEP 1536:UdDSkkPbq39vEPzEozfp2pGJ3ix3QKP3hJBjIIAS0hyAeF0R1y:UdDr8eNsnTpUBR7BjfASDM
TLSH
T1E893F752F342E950C410ADBA9E5AD7D85332FAC9DF46632B30809F3F7CF96818E59681
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_card.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_card.wav
Size 66KB
SHA256 e23e9d1712c4127546e82349ede32a2c55b69dcf9f75b7ab016df5a103251611
MD5 b831cb3aa8fa246a39a70289c25a7e89
SHA1 d68af28af417358957549989bca076d7f474589f
SHA512 3ee2763521af4fa2c9eede169cac648d020aa78779e294648a81ff250564a2bbe1a9ecc4dd2a5acc36325d5a573f5ff5d62bf3c18496b5ed48dfd8a46b11d2ad
SSDEEP 768:a/HY+E7++g1XndUQIkq+2WDr4itO7e8IoEcIb5vSWPQ8CvDA6cMj2V6w1ec5p9Fv:av+kPqKgpGdvl2vncwh7cdFMIlq/F
TLSH
T15A631892F201DA10C46A9E364D22DAD54332BD9AFF4757273081BB2F7DF61E28E15782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_crack.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_crack.wav
Size 34KB
SHA256 020ec3687602b1dea2b9bd28d5e81458019406e52888da454ca82ccff23b9844
MD5 212d6fdd3ca7c7c20566fb2224900ba1
SHA1 3db7cfd9e6670c43c017b52d1ddb6c41480c6348
SHA512 44be0d5f4d21e03bfad6622ecdd3daf47386cd5715386041f95da1919df000c669d1ffdf8f78cd97dc6a9244b97cf21f8185f704c63d27fc9cbceecfc9fa67f8
SSDEEP 768:KMN7BT/peWy+9h5E8R32lA8NRrkO8ij/u1tueO19tX97:/3pryshxaZN95B/0/OfN5
TLSH
T179F2AF82F6119A90C8A56D72CC52D9C44736B5EEFF43225331D0BF2B36BB181DA22A91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_epic.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_epic.wav
Size 1.2MB
SHA256 6acf0d241fdb9e2628b021f2f3447da8df61020e66c4a90561f77f3868459e84
MD5 05f8a3a0303c8d0001ec9830139f6bc1
SHA1 2cc0720b071e9a01f093ab03183a9442a5108ce7
SHA512 d327c92ea3143bdddd7188e7e4cce8a193b2ce7841860913bd2b46849ef366f049ce369d3c0f9f184b82bdcbd68ba132e5693fda26ced02b1886599bc2cb84af
SSDEEP 24576:7t9he3/0Yr1GzjbY58orzRSFQ8T3XgZWm03UyisB2OnIg+dbSNUIq64TG:7t9hNYgzjbhorV23XgAm03TphnSbSNMW
TLSH
T12055F1C2D011ABC058AD8A26A456DE5E07123A9BEF471B34302CEB6370D35537FA979F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_gold.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_gold.wav
Size 34KB
SHA256 a9463e1c43eb05254d2812e2075bcfb08baa34c00afb7124b91c9c9b9773feb2
MD5 3a99b2ea4903490479704f90e3290499
SHA1 780d1376107db638d51d5958f88e591f152b1944
SHA512 699cdc520c84b1e6cb54e6f7e99d0abf2ba708a930a048b1da5d3a0a64beef8b5da4bd969f0f16571e4035c0936108c12101755354da905bbcb3012b45b71f8f
SSDEEP 768:QYXryTOgAiJ9KnZ1nmUEOsnw3HvBXtcbbGLvkhesVKiS8Yc:/iOLkKnZ1mU0nw3P8b+Mr
TLSH
T14EF29DC2F181CA00CC364E3A4D278AA147317D9DFF421B6B7149FF1979671EAAB21396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_hit.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_hit.wav
Size 43KB
SHA256 ab0b448fac27a4b6e9e65416d42d2c743e2f124170f2c412e1683e846a6aa11d
MD5 26e5cfe3ef661b6ba39b76a744f756b5
SHA1 b2a0df412269ed68ef1bcff28ce74cd70003291b
SHA512 2ddf023c242f31002a569295b6d60fbb0df85141285c0ca59f744b37d92eeae18a03306034bf373210740ec6d89ac31ffb231179115ddf1de6201cdbdfb14f54
SSDEEP 384:Ezv6GN2aCxhr03Sn3x9+n7FpvT/TLzcAoXbxxaqNnXO:O6y2DtBY7FpvzTvrQXO
TLSH
T1F6135453F242CE11C89A4A354972EBAA4336BC16FF0B67073484BB0F6EB23D05B946D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_open.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_open.wav
Size 43KB
SHA256 01dda21e110cde5ab60511f02f15f019fb949db3c8e30fe032f24b96d645888d
MD5 f2f3b0c1acc335c26a66f85561bc11cd
SHA1 10edb71b925ca0aab6ba275423f1e508346b4e34
SHA512 f8cbb553cbad464dfb5dd03f4c08275c3d5803250bc2cadaf6571bc0a67a0111086d600785235eaa9f54501a91deb8870712f89bd5ad0a4895b8c43dd6c3c7d3
SSDEEP 768:b/mbY2a0QEwaTzqHnXfeE2CvgwwrQ6kUTrhmyY4upK53Qjcx38P:HU+HvB2xdkaMyGUhx3E
TLSH
T14413E156F465A807DC678F3699C214C455C6FE0B7F070A98250EA78270D7FD0663BB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_rare.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_rare.wav
Size 116KB
SHA256 2f480ec5c59799545bdb07b0698acf731c580b5c182efe79dfb78265fc3c1471
MD5 615b00e4f2ef17fd7f1e2a74a9afe2f5
SHA1 5273c1f5dbd8c2f76aa2bd4f67ef8e0503169fb7
SHA512 3b0d73ef6450c5590cb754d980a363bb9b2fc43107217ddd3e2fc01a68314720049898ccd788faaf7d2f8ddc8e5809da3f19169ea5f5e4a432e4534539e6e455
SSDEEP 3072:V3+ey1M9os/fxJpHhxEGZ1aVsJ8E/KPB7zd:V3JHvxJpBxBZ1GA8lPB7zd
TLSH
T119C3F9D2F441CA50C8364F3A4D63AE6147377D2AFF4B5B073084BA1A39E31E29B26656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

click.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\click.wav
Size 13KB
SHA256 63a5a1b722fa701ddc04d09431da9a570538b8d077793000259a820e2de3212b
MD5 6543594de6fd85cef37893a4aacb247e
SHA1 84b9e704378afdcb574f554c0ee628209226dc37
SHA512 bf450669b856a805ca7c338dbe84f95498b23816116b3a284da49885ecc17f735e32dd6f32a2299680e85d246264a73f3f5ea4f68dd874c240cd5bee7b87adaf
SSDEEP 192:g9eM7tFsyVYU7d3HmUbqQe2FiM9nrdyjCTCMULCbMsUnkHSf9cFMlHepF33yAoOE:gR8U7d3HnRemiOoXLOrSq3JJd2YeJl
TLSH
T1BE5208C2F0028A51D8260E3D4C229B905576BCA9FF4AD3A73048FE5639B73D19A606E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\close.wav
Size 55KB
SHA256 07e14e7d28484a3df59b6137cc40573f9589e9ef07fe9fd6fdc8222625fa5990
MD5 02d05a12aedd40554a6da068b4a33364
SHA1 2a73578374b5ef691b5600e72d78ef11eb55a646
SHA512 c20f2f1b8b4dd54a8555da6b334c1a58ea122bb94b26bbb8d6477865e389065122245ad21f6883edc0572c337215ffcb0fc32f9b1def068e9d058f072895a0d9
SSDEEP 1536:zx0D+kirL2YWFOig9VEy6eG/mRR0sR5dmC:F0ixrL2YWz6VEy6p6RBdm
TLSH
T18F43B0A3F0634201D8670A3A66B3DD6106B9F85BFE25621F3444FF2872A7744BF25B85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crash.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\crash.wav
Size 41KB
SHA256 3a72af16e249368352f8c8f2a8bd3e39b6136ee67767dfedbf312f4bebba61c2
MD5 263bd11cea345024a33ce270b8cfa1b9
SHA1 4b503e19a658d2a8d75045d0dbf2d5c03169fc00
SHA512 ad1818c1ae49a84dfd549a45177eff90f9559a16bbded5bb82e557d3d542f1bf408f01f7a6022a07cf21e8582f661be2fbfb2a61375ab943b52b4d85c2cf4a8a
SSDEEP 768:xaNqoTJ5VWQMyQF396lsatHR/BxtipFcN1LqPKJdMzR+/uOQ:xeVW9B9Jatx7to+NYiJNm
TLSH
T12E1307A3F4868E01CE9B9E798533EF3106BA5D20FE5A174930847B066EB33D057599D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delete.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\delete.wav
Size 73KB
SHA256 34af832e911039593c6d2a9f92234686a2b3cd73f457c0c98d6dee57031c18d3
MD5 63ad923043954d6e3d2a83c8a7c1d013
SHA1 2fcd65ab08436dcf6d7254728a504fc4f3e3c458
SHA512 42f8ac17b379c8dd5667f0df63d0b3ef97d67a009956e05e84bfaf67f41e5952bbcc30b352c7b87a120576c7b5837a9c465c18f92f80536654134a17507fd4bb
SSDEEP 768:pEv+O0+Pd//i/18DwvKBuOgHt5G9Y+THSJEZn96JG/W1StDVV1NvmxKL:pEvV0+PX0KBiHt5G9GwnJ/sqLNB
TLSH
T168736B82F042DA50C83F8F318E17E9E686727E69FF47132B3040BB1F78A31E59615269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

error.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\error.wav
Size 43KB
SHA256 6e6486e040a6aa951cf2992d035d6c2bb3be8bf186bfe07f363b232d87859a0b
MD5 1cf2a0b7f1456bbb2d6bac55f91d948e
SHA1 aa6cdcf757cae6b7591e524e54753543dfb02f0b
SHA512 2ebbd69543e77f285eb4cde33df6029ce4b69bf6535bd688114ce69df9f2c41ef0c99b488a21cda5c20ba10cd77b99b55f4612be0826425a01976e75a98a1d7e
SSDEEP 768:8YEhC2eBiUHhah6PbrL2FuM4fDZpWJxHWi8dAP+CdQ2axLTjhOOBm6V5RyC2:tPBiUHcoPbXzb+JdP0AmoQ2apTjhJBmi
TLSH
T1A7135B92F983C811D94F4A39C673EE720273AD29FF0A470A35847B0679B33D16766587
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\install.wav
Size 103KB
SHA256 3b8712124dfcb33e1e11480bedd598d03429f027fb7b121fef495e3a19dbf3ee
MD5 c7193606faffc8fbb0de17f19acf6cc9
SHA1 797c7bb7778dd2eb5145fc860f56c44632b237a2
SHA512 374b4719472c6cc8f4cdfeddc01e077a4fd34a20cfc8e488ac293daeced4f18e79b21a4707487700d57afba0457995de95d640c6f0be0003d22281a571a64b71
SSDEEP 3072:3Uy6JlGL8h7FaDbH+fuwDwisTXwS+86ohhUBwQ4rd/t:3O+LkFaHH+3sTgS+86ojp
TLSH
T1B7A37DC2F0858A50DC375E398D73995247323D1AFF46462F7085FE2978E31E29A32B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\login.wav
Size 57KB
SHA256 ddb5030cc1885f35df3e8b09025a80eb98abcbff6cc06348ad0b813c89947d6a
MD5 889af1c95fac799e3bbfdbeb2ef82511
SHA1 cf100c84283b551f265bd2705a9e9a1bef31aa80
SHA512 e2713d542acd15c4ee2eb095e27203bee20a5f062069bb2452b67a13e19a32ed4237d8907d8435f9d77ad8d5e287e8041a0527490c93e749edabe7cb31e3029c
SSDEEP 768:kTU/REtxdrTlfmecfJK3UhmCDwmRh6sZ+q/88Vt/2LAikzHh0bXoyPSXI5wO:kTBntfcPhmAwKTd8MYAikLh0bYo
TLSH
T11E437F92B741C840D81A4F3A4D62EBEA4376FD65BF0AA34B30C47F5F6E721D04E22295
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\nav.wav
Size 37KB
SHA256 a256a59a16f41c435dc992a2a45ec08ec11553282283254f143eafeac5c087bc
MD5 4215c4ff85359f13e4542e86ba7a4578
SHA1 5d4ae67ab4e02626151b9f1ac24decdbd6c7dbd7
SHA512 b306b1ae2b354ebd24531d5bc45ad87a049ddade45b08d463d341d4aff4f8a01ffc084458f196cd587f1b6d525db8b66f9afa354191a04b6a5970371ef2c2546
SSDEEP 768:h7mCdU6TdpsyIYj4xnQ7/elEjOoxCEzGws:hniMOfYjgnHEjOod
TLSH
T1700391E2F5538E00C9564E398D33EF655736AC62FF0A970630847B4A6DB33C27A216D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notify.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\notify.wav
Size 41KB
SHA256 c1fc49ab6edaa87cc737391481cb52e3486836ecf9913433e4288c8372f44614
MD5 5f44a3239891038160d0f24ce4c09c80
SHA1 61d1d823beb87a8608594c044b450614de31d3f9
SHA512 caf2835c43104477d226e1d734337a666480dca7268f1b43f2100c266630f722a3f2a1e90ebbe94e480d1d298d96f626ab80d5d5eed26f06e205d1f6578bfddd
SSDEEP 768:r5+ZEw/8So16QGSn8pF57b0vYBAEEM8hS4ou3KpDUvt0OufH9:r5+x/FfBSn8J7byYGVkCt0Ou
TLSH
T16D138C12F5478100D8774B748D90DF981AAAFE847E526757714BAF2F3E332A0BD217A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toggle.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\toggle.wav
Size 15KB
SHA256 1f4aa2ea5f2c1fe4be41a79a57d36e87f3f8b84b05e13d38fa80923ae793e16e
MD5 8c46917a0d43524157f60ef2015cf3d0
SHA1 8103db6717f40bbdfbc48894cb7e88d6f8f7a6e3
SHA512 c4e41ecad0df72a030333e13bf4a8add3aa5212f1d64161094a7f3a9b6edd8fd760e20d072a1347eca428a9a991b4b2a9145e0132323b512d4932979a86044b0
SSDEEP 96:mgoT2/23R5OeQXQJQMSDwWbUzitIbXltXTNUiGxNonu4S1eU79i4QEiF4VxS:mgoa/2XtjmD/IzitIpyW41eO+VFoxS
TLSH
T167726E53B205CD06D9690F3A0D92EF989732BD89FF0B576B3080BB1AAD721D15E11AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1696-166-0x00007FF924990000-0x00007FF924991000-memory.dmp

Download

memory/6112-322-0x000002763B030000-0x000002763B036000-memory.dmp

Download

memory/6112-425-0x000002763BF50000-0x000002763BF52000-memory.dmp

Download

memory/6112-319-0x000002763B040000-0x000002763B042000-memory.dmp

Download

memory/6112-317-0x000002763B020000-0x000002763B026000-memory.dmp

Download

memory/6112-315-0x000002763B020000-0x000002763B021000-memory.dmp

Download

memory/6112-314-0x000002763AFF0000-0x000002763AFF1000-memory.dmp

Download

memory/6112-371-0x000002763B920000-0x000002763B924000-memory.dmp

Download

memory/6112-370-0x000002763B930000-0x000002763B932000-memory.dmp

Download

memory/6112-374-0x000002763B930000-0x000002763B93D000-memory.dmp

Download

memory/6112-373-0x000002763B940000-0x000002763B947000-memory.dmp

Download

memory/6112-334-0x000002763B080000-0x000002763B08A000-memory.dmp

Download

memory/6112-386-0x0000027639ED0000-0x0000027639EDD000-memory.dmp

Download

memory/6112-385-0x0000027639EE0000-0x0000027639EE7000-memory.dmp

Download

memory/6112-401-0x000002763AEB0000-0x000002763AEB2000-memory.dmp

Download

memory/6112-399-0x000002763A5D0000-0x000002763A5D9000-memory.dmp

Download

memory/6112-398-0x000002763AEA0000-0x000002763AEA5000-memory.dmp

Download

memory/6112-396-0x000002763A5E0000-0x000002763A5E2000-memory.dmp

Download

memory/6112-393-0x000002763A5C0000-0x000002763A5C8000-memory.dmp

Download

memory/6112-392-0x000002763A5D0000-0x000002763A5D4000-memory.dmp

Download

memory/6112-390-0x0000027639EE0000-0x0000027639EE1000-memory.dmp

Download

memory/6112-404-0x000002763BA40000-0x000002763BA44000-memory.dmp

Download

memory/6112-419-0x000002763BA90000-0x000002763BA91000-memory.dmp

Download

memory/6112-418-0x000002763BA70000-0x000002763BA74000-memory.dmp

Download

memory/6112-415-0x000002763BA80000-0x000002763BA82000-memory.dmp

Download

memory/6112-417-0x000002763BA90000-0x000002763BA92000-memory.dmp

Download

memory/6112-413-0x000002763BA60000-0x000002763BA68000-memory.dmp

Download

memory/6112-412-0x000002763BA70000-0x000002763BA74000-memory.dmp

Download

memory/6112-410-0x000002763BA40000-0x000002763BA44000-memory.dmp

Download

memory/6112-409-0x000002763BA60000-0x000002763BA62000-memory.dmp

Download

memory/6112-407-0x000002763BA50000-0x000002763BA52000-memory.dmp

Download

memory/6112-405-0x000002763AEA0000-0x000002763AEA8000-memory.dmp

Download

memory/6112-316-0x000002763B030000-0x000002763B033000-memory.dmp

Download

memory/6112-423-0x000002763BF60000-0x000002763BF71000-memory.dmp

Download

memory/6112-422-0x000002763BF50000-0x000002763BF59000-memory.dmp

Download

memory/6112-338-0x000002763B0B0000-0x000002763B0B2000-memory.dmp

Download

memory/6112-339-0x000002763B090000-0x000002763B094000-memory.dmp

Download

memory/6112-341-0x000002763B000000-0x000002763B006000-memory.dmp

Download

memory/6112-342-0x000002763B010000-0x000002763B01C000-memory.dmp

Download

memory/6112-344-0x000002763B0B0000-0x000002763B0B4000-memory.dmp

Download

memory/6112-345-0x000002763B000000-0x000002763B008000-memory.dmp

Download

memory/6112-347-0x000002763B8C0000-0x000002763B8C5000-memory.dmp

Download

memory/6112-348-0x000002763B0B0000-0x000002763B0B9000-memory.dmp

Download

memory/6112-350-0x000002763B8D0000-0x000002763B8D6000-memory.dmp

Download

memory/6112-353-0x000002763B8E0000-0x000002763B8E2000-memory.dmp

Download

memory/6112-354-0x000002763B8D0000-0x000002763B8D4000-memory.dmp

Download

memory/6112-356-0x000002763B8F0000-0x000002763B8F2000-memory.dmp

Download

memory/6112-358-0x000002763B900000-0x000002763B908000-memory.dmp

Download

memory/6112-359-0x000002763B8E0000-0x000002763B8EF000-memory.dmp

Download

memory/6112-361-0x000002763B910000-0x000002763B912000-memory.dmp

Download

memory/6112-362-0x000002763B900000-0x000002763B904000-memory.dmp

Download

memory/6112-367-0x000002763B920000-0x000002763B928000-memory.dmp

Download

memory/6112-368-0x000002763B910000-0x000002763B91F000-memory.dmp

Download

memory/6112-351-0x000002763B8C0000-0x000002763B8CC000-memory.dmp

Download

memory/6112-321-0x000002763B050000-0x000002763B053000-memory.dmp

Download

memory/6112-324-0x000002763B060000-0x000002763B064000-memory.dmp

Download

memory/6112-325-0x000002763B050000-0x000002763B058000-memory.dmp

Download

memory/6112-327-0x000002763B070000-0x000002763B072000-memory.dmp

Download

memory/6112-328-0x000002763B060000-0x000002763B064000-memory.dmp

Download

memory/6112-330-0x000002763B080000-0x000002763B086000-memory.dmp

Download

memory/6112-331-0x000002763B070000-0x000002763B07C000-memory.dmp

Download

memory/6112-333-0x000002763B090000-0x000002763B095000-memory.dmp

Download

memory/6112-336-0x000002763B0A0000-0x000002763B0A2000-memory.dmp

Download

memory/6112-81-0x00007FF924990000-0x00007FF924991000-memory.dmp

Download