100f324a6020a49bf16ea21360f98efb48c704adda5d0ac521176ebbd77fd9b0

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MillidaLauncherSetup.exe
Size 1.8MB
Sample261113-sle9sacz51
SHA256 100f324a6020a49bf16ea21360f98efb48c704adda5d0ac521176ebbd77fd9b0
MD5 8d59962cc350242576e085fdd8f6cd3e
SHA1 ed5b589fb306f4a0292e5b21bf3dc3cfc8e1a129
SHA512 f39857bc6b6aeed081c5c4430e9ab69f4a45184c5d8ea06156053dda7ca3be6f9070f87029c73b31bf2f1d7238c24c8618f887b6fd98402b3ed2f922d267262c
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+:/b2dZWWySHixrTza3OOvIl+5SfYIU6i
TLSH
T10F958D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
3192	millida-launcher-setup.exe
1792	millida-launcher.exe

Loads dropped DLL 6 IoCs

pid	Process
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\Millida Launcher = "C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe --autostart"	millida-launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	millida-launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_459588368\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_459588368\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_543891993\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_543891993\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_543891993\manifest.fingerprint	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	millida-launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	millida-launcher.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	MillidaLauncherSetup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	millida-launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	millida-launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	MillidaLauncherSetup.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	millida-launcher-setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 16 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell\open\command	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe,0"	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\URL Protocol	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell\open	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida	millida-launcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\URL Protocol	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\DefaultIcon	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\",0"	millida-launcher-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell\open\command	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Millida Launcher\\millida-launcher.exe\" \"%1\""	millida-launcher-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\ = "URL:net.millida.launcher protocol"	millida-launcher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\millida\DefaultIcon	millida-launcher.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	millida-launcher.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3192	millida-launcher-setup.exe
3192	millida-launcher-setup.exe
1792	millida-launcher.exe
1792	millida-launcher.exe
2744	msedgewebview2.exe
2744	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5204	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	3192	millida-launcher-setup.exe
Token: SeImpersonatePrivilege	3192	millida-launcher-setup.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1792	millida-launcher.exe
1792	millida-launcher.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
1792	millida-launcher.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 3192	2736	MillidaLauncherSetup.exe	88
PID 1792 wrote to memory of 5204	1792	millida-launcher.exe	92
PID 5204 wrote to memory of 1340	5204	msedgewebview2.exe	93
PID 5204 wrote to memory of 1840	5204	msedgewebview2.exe	94
PID 5204 wrote to memory of 1840	5204	msedgewebview2.exe	94
PID 5204 wrote to memory of 1840	5204	msedgewebview2.exe	94
PID 5204 wrote to memory of 1840	5204	msedgewebview2.exe	94
PID 5204 wrote to memory of 3052	5204	msedgewebview2.exe	95
PID 5204 wrote to memory of 2640	5204	msedgewebview2.exe	96
PID 5204 wrote to memory of 2640	5204	msedgewebview2.exe	96
PID 5204 wrote to memory of 2640	5204	msedgewebview2.exe	96
PID 5204 wrote to memory of 2580	5204	msedgewebview2.exe	97
PID 5204 wrote to memory of 2580	5204	msedgewebview2.exe	97
PID 5204 wrote to memory of 2580	5204	msedgewebview2.exe	97
PID 5204 wrote to memory of 2580	5204	msedgewebview2.exe	97
PID 5204 wrote to memory of 2580	5204	msedgewebview2.exe	97
PID 5204 wrote to memory of 2920	5204	msedgewebview2.exe	98
PID 5204 wrote to memory of 2920	5204	msedgewebview2.exe	98
PID 5204 wrote to memory of 2920	5204	msedgewebview2.exe	98
PID 5204 wrote to memory of 4936	5204	msedgewebview2.exe	103
PID 5204 wrote to memory of 4936	5204	msedgewebview2.exe	103
PID 5204 wrote to memory of 4936	5204	msedgewebview2.exe	103
PID 5204 wrote to memory of 2744	5204	msedgewebview2.exe	104
PID 5204 wrote to memory of 4976	5204	msedgewebview2.exe	105
PID 5204 wrote to memory of 4976	5204	msedgewebview2.exe	105
PID 5204 wrote to memory of 4976	5204	msedgewebview2.exe	105

C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup.exe
"C:\Users\Admin\AppData\Local\Temp\MillidaLauncherSetup.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-2736-0\millida-launcher-setup.exe
  "C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-2736-0\millida-launcher-setup.exe" /S /R
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3192
- - C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe
    "C:\Users\Admin\AppData\Local\Millida Launcher\millida-launcher.exe"
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - Checks whether UAC is enabled
    - Modifies trusted root certificate store through registry
    - Reads the TCP/IP host and domain name from the registry
    - Modifies registry class
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1792
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1792.1768.12952495880775344464 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5204
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView /prefetch:4 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x9c,0x194,0x7ffd1feb5fd8,0x7ffd1feb5fe4,0x7ffd1feb5ff0
        5⤵
        
        PID:1340
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:1840
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2192 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:3052
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2768 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:2640
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3372 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd /prefetch:1
        5⤵
        
        PID:2580
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3680 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:2920
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4672 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:4936
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4796 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2744
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView" --webview-exe-name=millida-launcher.exe --webview-exe-version=2.0.247 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4836 --field-trial-handle=1764,i,1582328223630708051,12530692809047017210,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d82c18771ed70880ee2024df621bb531fa97c9fd
        5⤵
        
        PID:4976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

uninstall.exe

Path C:\Users\Admin\AppData\Local\Millida Launcher\uninstall.exe
Size 84KB
SHA256 2cce78393fd3f18c260005def41b73c11d3621f21dd75c08b409e65aff4beca9
MD5 fb7b68afa79255a3c889dc4bc9d914a4
SHA1 d5e10484d4cdff19628e2d037c03e257123215f4
SHA512 0cffe555c5f5b9aa0973b31f819d64baa618de6055d9dcf110e0194915fd179b81582a7762a04ad3caed4058d870a5345b2d873ef415b530ac34cd15b4483b65
SSDEEP 1536:orX4tpfcUjrwLxZYE8ksuMgzk5RdLeAyqx4x5BagHw9ckkgQKgzzmFUyLnXmL2v:SX47fcIrwR8ksuMck57eAulagQ9ckfpl
TLSH
T17383CF0427A0C8F7E9B607314D7B57B76FF5E9250168574B23506B1E7E32282DE2E3A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

millida-launcher-setup.exe

Path C:\Users\Admin\AppData\Local\Millida\setup\millida-setup-2736-0\millida-launcher-setup.exe
Size 36.6MB
SHA256 5eeebdf2fcc8b52896e827bfc11878023d1b85efd05b850b6d6aada8cfe0c5ff
MD5 f9b1449df1a5d99a1fbfd5f0f42fc306
SHA1 1c7e152c854a82f63427717845d9c6ca42009c70
SHA512 8a4c2dc1c0768f8a735fd3b12629808c432545627d34178a5f4e3b3cb8e40d1c6390ad268cf4495017fb761d81d57c47ee0c7e015671c4dadcd86dc5d2f84505
SSDEEP 786432:huIMn/wkp6tQsLfiYaZNMgF81KukEhhFCMLuGK8aOQ4A29Lz9:huF/RprsLPEegFUNJCaJ19Lz9
TLSH
T13C8733C6F00A0D07E41C40B6927938BA4DBA37311AD9D6FE97877D8D78466832973B36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc2DBA.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc2DBA.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52ecdd7b-5a35-4445-b33c-e80b5b10deab.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\52ecdd7b-5a35-4445-b33c-e80b5b10deab.tmp
Size 3KB
SHA256 b47baf9a1296dae7c13056ef9e185ee41627f96cff276d6b661a821d820922a2
MD5 6d1da68bdf8541f9ac71322e3966545e
SHA1 8f1d4e430c25fe2dc332bd6f0476cbd3fdc8b091
SHA512 e7b40456001ffafc27b98de0a676f48c66950cf69a0b18d18d6610022b62b21a4895b4a226110aada45b4370067a5297ff713ab180b14734183d9a7cc55e9b10
TLSH
T12881947665B4AD378EF2D505B9863B03E7686033D5812FA5C9EC0F1C01DB28D2342C1B
MD5 SHA1 SHA512 TLSH

Submit Download

8739c8a7-84d1-42da-955d-42c90ba43deb.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\8739c8a7-84d1-42da-955d-42c90ba43deb.tmp
Size 3KB
SHA256 afe414deb4f8f721acbebc18daacb5b18e72a96a5ff73830a864b7d0df1cf929
MD5 c1c8ce369e3a326b35ec9dbca6be60fc
SHA1 43a318ddc77d4b70adba2b5782c815d043b928ec
SHA512 34ac3e37b2d342a9d7fbeb96b40f9886adb734ede11cc01fe7c94264f3dcf95fffaac389da5b0b1f3ac84d6e8e3cf49cd7738aaaf53ec4132720583f16008e90
TLSH
T1C161547A69B4AD378DE29605B9C63B13E7695133D9812F95C9EC0F1C01D72982342C16
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8a399255727f0cd467d6bbaef7dd954db799c6b13fc60e25e9406b922f2988d8
MD5 f929fc9550d0a93f157fec50b03faddd
SHA1 0e3ccd813a57a542863fcd10908deb8200f72b43
SHA512 703d12d9830bbfa1d483985825b2188ab20a77fe0264371744b3daf14f913d4ef2afab3212a6e841013fc7df0d37328b33d8e01c1de59a46c8dffcd19c45ab75
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 75436cb20df3c23c8700b4decacaebed4288de82d212e58d92fd16889feab18d
MD5 7d2b398977bd6b2ae0a83d679b43d517
SHA1 3cc34c3a07240d5f2f08ff8bcde2a47a422e8676
SHA512 4baf34ff11d14852294921cc0295e75414020139dc219ac755688d4a563569ecca500d1a9eb19ffe36824858f0da1fe992f7f276fb3736bb04df31e24efc4007
TLSH
T125D0121B32010234C81021330042758824C0C10B80468542582D862D2B440A01F0F483
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

0f9db2d2-2a77-4953-a886-73e465eed508.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\0f9db2d2-2a77-4953-a886-73e465eed508.tmp
Size 6KB
SHA256 535230387474d4262b164697076f15ef22c5a8ce1cbbf360582fc6791d80b1c7
MD5 1a8bf7eb50c2cfd13bc10dfe716d0bee
SHA1 bb01325809901fff3cc4457ee308d09a564a33f7
SHA512 fd3c3db88571206aa0de49a2d1f08b6152b4723c7eb0bfdcfda5f979bce2298d72c4ccc4e29a0cab35df82b3226dbb374b43019aa2a3fef580261f0bbbc90326
SSDEEP 96:steb/dsS8KG1b9Ck+o5h16Z0ws7/x+6MhmuecJsjS1eje9K+gX28XM1C7K:stYieVonwsV+FdsmQjLhG6K
TLSH
T1BCD183469E24797B4CC6F508BB297E52E3F9607261952E58E7F84A2C04EA6CD2207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28553137-5c7d-4315-bed6-40e13947adf7.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\28553137-5c7d-4315-bed6-40e13947adf7.tmp
Size 6KB
SHA256 f5732e59a85f9f96a838f9a4115d43489a7dca80344a9f47ef2836dd564200a7
MD5 70143d3f3e7f83f9fdbdd117686b9d26
SHA1 805662750ba22a3c6fbb0db7c942322fe4986537
SHA512 145eb6be361ed55411e7bd46d4e3b34b42a482f306171f8b6f2fb73e522486715628f2eae53006b9553f82eea4e4a8ac785742b0c17ef29a4dbdf958893bea68
SSDEEP 96:steb/dsS8b1b9Ck+o5h16Z0ws7/x+6MhmuecJsjS1eje9K+gX28XM1C7K:stYigVonwsV+FdsmQjLhG6K
TLSH
T13AD193469E247D7B4CC6F509BB297E52E3F9607260952E58E7F84A2C04EA6CD3307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f46ad2ae5d3ab41165999e01787a1afe4ab9a565ea7a680909c3a54ffebb7ad2
MD5 44ef839ab7aa608fe3b5f4264af7522d
SHA1 4e640a5c6f5200ee0883a976ffd319533cc2398f
SHA512 b07cb5d4946c5b6e7f62a34d3daa2c3f59ddec7a5cdf951ff04658d548c40f73594575985a03027c2613c379f43f9bfd220fd81947bd2be761d6fe2dbe0999b7
TLSH
T1C541FBE681AE36CAC73D8B3524CAB5903C7B7972E3370F81D48171FAA457380A74B261
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 de436cc38fabdb6268d4d371cc4ed9e5c2b9af0fbbf21b47a5a78ded3ea0daa9
MD5 1d18823674b6b01c81cf660a865867c7
SHA1 f8afb6beb120e5a47913bdb884bbcefe99155721
SHA512 e8a8b9645c9eebb0959ab577dc5495bd8984ecee5a4f6dfa984882ac4fdbca4943bd5d194e7e20198c886307d4183c4263b84ca79b60b1b8d98a63eba8e2e75c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

f9bd1368-ce75-48a6-9a31-df23af06f385.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Network\f9bd1368-ce75-48a6-9a31-df23af06f385.tmp
Size 239B
SHA256 d6556840187a454e65cc497ec88b7ba42a83c3e2ce5b4819dc5ef92aab65afff
MD5 d58e795fd2fc0b2efd45810c32b38dcf
SHA1 3a4500f33a83ffbb538374cfef9b451e3dbcbf10
SHA512 3898b9b2aea48e16867612bab7f4c7a894d0b710a5f51c38e3ea75f96e30eeeffddd50f17789b86aba33e68178d9231a96f53734ba41c1abc22658dbbce72912
TLSH
T1FCD095614170A8FE4F4043D019247403C9BE0002531C4D7ACAB577754652078D010403
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e5141804-4cf2-441a-a549-0c79e8ab619f.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Default\e5141804-4cf2-441a-a549-0c79e8ab619f.tmp
Size 5KB
SHA256 23052f1146aaf65ec35d2dd2f9487095aeca58c8d0a60342997970857377c25a
MD5 c89725bbc15fbaff6a2ef40709e937f2
SHA1 3abcc6e047460d2466c1dd288754002fd40cb966
SHA512 f384ca917335a340375030c21f0fa13f4ee5ba4c9316c66232270c3845c9b167f24cd92df5ce2a63aacb8bb5a47fb87ab98d05d86655ec6f7c787570c2e8057d
SSDEEP 96:reb/dsS8b1b9Ckgdo616Z0ws7/x+6MhmuecJsjS1eje9K+gE28XM1C7K:rYigzo6wsV+FdsmQjLKG6K
TLSH
T112C183469A24697B4CC6F508BA297E46E3F9603261D52E59E7F84A2C04DA6CD3317C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Local State
Size 1KB
SHA256 219c22da5f75142d8eeca5e61948cdc66e2c0903abcdda48c70b3b3ae5c6313c
MD5 409cbbdca86b8e933df6c0ec29227259
SHA1 93c61f6c4bf33bcf4fb5a80821b51746d6155d2e
SHA512 a4f8bf373d87fb311a59035ace190e17cf6b22a8849e7d6bbdd88d0525d35cd1c3b76fe77c93e4c05b035ba6e6ac8e634115edd591e9c386f92fd0fbdd4c6f2f
TLSH
T1602140B2A8F41F32DC91625221C77A13AF39207786808E0194DD0F3C01DB65DF66AC36
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\Speech Recognition\1.15.0.1\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

a3564474-5ed6-42f3-b0ed-4ea675fb1039.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\a3564474-5ed6-42f3-b0ed-4ea675fb1039.tmp
Size 16KB
SHA256 8fb0876aba10900763c357df7a80036d64a071cb77b1b34c2887f8e1e081abf3
MD5 effc2eaad3faecd73674dd052c4c5a9c
SHA1 3a5c8e6ff39663dfd355575e2ac8e1defc274085
SHA512 4c5de10a929aa8db1f9dd12e080e568b6138c659205c03a3e7d3026957fac6651436a905055dca389f68706a35128ca3cfd9afcc9a203a16cd2bd5f508574b7d
SSDEEP 384:O+OBqImmJvGBLx3NaFMJF/NBSt8cN+b+HDl8g6rk:LcvGtlNinJHJyA
TLSH
T1FA729D7AA8A59F232CF78689BB8A7787CB60235381C46BD4CCEC5F0E419B58D2342C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8e13b40-3485-4e0a-bbd7-5acf88d1ade6.tmp

Path C:\Users\Admin\AppData\Local\net.millida.launcher\EBWebView\c8e13b40-3485-4e0a-bbd7-5acf88d1ade6.tmp
Size 2KB
SHA256 58908716f13d7c41be7c6c505fa13dd5c905538f5c3dfa59ba1bd71c98b0c301
MD5 2abb00fa398b40a268b411465abf9968
SHA1 f746cd260affa05a38206afb4cdebf63b5eeafd2
SHA512 3debf77b7a7d96a7f9128ce2934b334c844090a17b1de3745d3594a0d6991749c60bbebc7a02785f7de1f92b095ce16117491b7271923179ffb886649193246e
TLSH
T11D51947369606F37C9E29644798A3E23CB3D61B2DA921F5189DD0F2C00CB65C2342C3B
MD5 SHA1 SHA512 TLSH

Submit Download

version_manifest_v2.json.1792.2.tmp

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\minecraft\version_manifest_v2.json.1792.2.tmp
Size 319KB
SHA256 f94ed846bcfa7db76adafe800b12f1b4e5c6d01645f65ba806b68a3906645ab6
MD5 c46e75eb75b499b4f5fc367b3c4e8d0b
SHA1 b82e76e69e23ed12d771d1ad15389644e654ac73
SHA512 28587a419db34972457d165c7dbfdff408d29f46cc5513521b178b547492e2033acf1ac0799ce8dd7e31a337a517949f467de9cc16e3259ff579e0de79dfa301
SSDEEP 1536:WWS4x0UOkT9Ee3YGLEqA9YHyUMiHLkbJRYUZ3sRZr5lYMNhM8fO3cS:WWS9kTdlLVHM8LkbJhZ3s/5lYifO3cS
TLSH
T18964EA65C1381DA71CD060FA482967C50B509B1B5DA4B94A3F8CA1DC4FAF87F2673B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

achievement.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\achievement.wav
Size 150KB
SHA256 e6ff475f0be341f14ef8f0d5e790fbe37c2063625d94cc5769b3e3833569a39a
MD5 282b900b6fe419907445696fd241e91a
SHA1 df8047d4c29c62f376b7c9532cbafe58ca51c11b
SHA512 145a60d634c6d882b88a2095c735f5864fb2b27af6b70d59b5b62a49cd174dba300be88af7167f9cfd1e14b7e33ca3f1b8855874350155a892b15170a85bc7a4
SSDEEP 3072:CIQdOoPbB2tFTx6QEj8ChvX3bNm6yZJpIX9qBEuK5cBJSrc++:UdOgB2tFTxJ3QbNm6yJIXUBEn4Src++
TLSH
T135E34A527301CA11C4351E7A1D66EBD41332FE8AEF0BA36730827F6F2DBA1E19E15691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

case_burst.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\case_burst.wav
Size 86KB
SHA256 c5ba824a1b1d5b9b7807d3cc8528b4b4de8b30df4d1d5b46c45dc6930328d816
MD5 ecb7e50724742b1325682545fdc2fcbb
SHA1 3f6702db33ba8345f67c3ca36cab33d54e7b098a
SHA512 008f019ad1d028be7058413abbbcd7ecc8fa06297b444a21874d3b50dfce401948f120ed9242372f30b0633bfbd92a025041030b4d6aa4618e604032a68d6397
SSDEEP 1536:UdDSkkPbq39vEPzEozfp2pGJ3ix3QKP3hJBjIIAS0hyAeF0R1y:UdDr8eNsnTpUBR7BjfASDM
TLSH
T1E893F752F342E950C410ADBA9E5AD7D85332FAC9DF46632B30809F3F7CF96818E59681
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_card.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_card.wav
Size 66KB
SHA256 e23e9d1712c4127546e82349ede32a2c55b69dcf9f75b7ab016df5a103251611
MD5 b831cb3aa8fa246a39a70289c25a7e89
SHA1 d68af28af417358957549989bca076d7f474589f
SHA512 3ee2763521af4fa2c9eede169cac648d020aa78779e294648a81ff250564a2bbe1a9ecc4dd2a5acc36325d5a573f5ff5d62bf3c18496b5ed48dfd8a46b11d2ad
SSDEEP 768:a/HY+E7++g1XndUQIkq+2WDr4itO7e8IoEcIb5vSWPQ8CvDA6cMj2V6w1ec5p9Fv:av+kPqKgpGdvl2vncwh7cdFMIlq/F
TLSH
T15A631892F201DA10C46A9E364D22DAD54332BD9AFF4757273081BB2F7DF61E28E15782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_crack.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_crack.wav
Size 34KB
SHA256 020ec3687602b1dea2b9bd28d5e81458019406e52888da454ca82ccff23b9844
MD5 212d6fdd3ca7c7c20566fb2224900ba1
SHA1 3db7cfd9e6670c43c017b52d1ddb6c41480c6348
SHA512 44be0d5f4d21e03bfad6622ecdd3daf47386cd5715386041f95da1919df000c669d1ffdf8f78cd97dc6a9244b97cf21f8185f704c63d27fc9cbceecfc9fa67f8
SSDEEP 768:KMN7BT/peWy+9h5E8R32lA8NRrkO8ij/u1tueO19tX97:/3pryshxaZN95B/0/OfN5
TLSH
T179F2AF82F6119A90C8A56D72CC52D9C44736B5EEFF43225331D0BF2B36BB181DA22A91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_epic.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_epic.wav
Size 1.2MB
SHA256 6acf0d241fdb9e2628b021f2f3447da8df61020e66c4a90561f77f3868459e84
MD5 05f8a3a0303c8d0001ec9830139f6bc1
SHA1 2cc0720b071e9a01f093ab03183a9442a5108ce7
SHA512 d327c92ea3143bdddd7188e7e4cce8a193b2ce7841860913bd2b46849ef366f049ce369d3c0f9f184b82bdcbd68ba132e5693fda26ced02b1886599bc2cb84af
SSDEEP 24576:7t9he3/0Yr1GzjbY58orzRSFQ8T3XgZWm03UyisB2OnIg+dbSNUIq64TG:7t9hNYgzjbhorV23XgAm03TphnSbSNMW
TLSH
T12055F1C2D011ABC058AD8A26A456DE5E07123A9BEF471B34302CEB6370D35537FA979F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_gold.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_gold.wav
Size 34KB
SHA256 a9463e1c43eb05254d2812e2075bcfb08baa34c00afb7124b91c9c9b9773feb2
MD5 3a99b2ea4903490479704f90e3290499
SHA1 780d1376107db638d51d5958f88e591f152b1944
SHA512 699cdc520c84b1e6cb54e6f7e99d0abf2ba708a930a048b1da5d3a0a64beef8b5da4bd969f0f16571e4035c0936108c12101755354da905bbcb3012b45b71f8f
SSDEEP 768:QYXryTOgAiJ9KnZ1nmUEOsnw3HvBXtcbbGLvkhesVKiS8Yc:/iOLkKnZ1mU0nw3P8b+Mr
TLSH
T14EF29DC2F181CA00CC364E3A4D278AA147317D9DFF421B6B7149FF1979671EAAB21396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_hit.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_hit.wav
Size 43KB
SHA256 ab0b448fac27a4b6e9e65416d42d2c743e2f124170f2c412e1683e846a6aa11d
MD5 26e5cfe3ef661b6ba39b76a744f756b5
SHA1 b2a0df412269ed68ef1bcff28ce74cd70003291b
SHA512 2ddf023c242f31002a569295b6d60fbb0df85141285c0ca59f744b37d92eeae18a03306034bf373210740ec6d89ac31ffb231179115ddf1de6201cdbdfb14f54
SSDEEP 384:Ezv6GN2aCxhr03Sn3x9+n7FpvT/TLzcAoXbxxaqNnXO:O6y2DtBY7FpvzTvrQXO
TLSH
T1F6135453F242CE11C89A4A354972EBAA4336BC16FF0B67073484BB0F6EB23D05B946D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_open.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_open.wav
Size 43KB
SHA256 01dda21e110cde5ab60511f02f15f019fb949db3c8e30fe032f24b96d645888d
MD5 f2f3b0c1acc335c26a66f85561bc11cd
SHA1 10edb71b925ca0aab6ba275423f1e508346b4e34
SHA512 f8cbb553cbad464dfb5dd03f4c08275c3d5803250bc2cadaf6571bc0a67a0111086d600785235eaa9f54501a91deb8870712f89bd5ad0a4895b8c43dd6c3c7d3
SSDEEP 768:b/mbY2a0QEwaTzqHnXfeE2CvgwwrQ6kUTrhmyY4upK53Qjcx38P:HU+HvB2xdkaMyGUhx3E
TLSH
T14413E156F465A807DC678F3699C214C455C6FE0B7F070A98250EA78270D7FD0663BB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chest_rare.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\chest_rare.wav
Size 116KB
SHA256 2f480ec5c59799545bdb07b0698acf731c580b5c182efe79dfb78265fc3c1471
MD5 615b00e4f2ef17fd7f1e2a74a9afe2f5
SHA1 5273c1f5dbd8c2f76aa2bd4f67ef8e0503169fb7
SHA512 3b0d73ef6450c5590cb754d980a363bb9b2fc43107217ddd3e2fc01a68314720049898ccd788faaf7d2f8ddc8e5809da3f19169ea5f5e4a432e4534539e6e455
SSDEEP 3072:V3+ey1M9os/fxJpHhxEGZ1aVsJ8E/KPB7zd:V3JHvxJpBxBZ1GA8lPB7zd
TLSH
T119C3F9D2F441CA50C8364F3A4D63AE6147377D2AFF4B5B073084BA1A39E31E29B26656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

click.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\click.wav
Size 13KB
SHA256 63a5a1b722fa701ddc04d09431da9a570538b8d077793000259a820e2de3212b
MD5 6543594de6fd85cef37893a4aacb247e
SHA1 84b9e704378afdcb574f554c0ee628209226dc37
SHA512 bf450669b856a805ca7c338dbe84f95498b23816116b3a284da49885ecc17f735e32dd6f32a2299680e85d246264a73f3f5ea4f68dd874c240cd5bee7b87adaf
SSDEEP 192:g9eM7tFsyVYU7d3HmUbqQe2FiM9nrdyjCTCMULCbMsUnkHSf9cFMlHepF33yAoOE:gR8U7d3HnRemiOoXLOrSq3JJd2YeJl
TLSH
T1BE5208C2F0028A51D8260E3D4C229B905576BCA9FF4AD3A73048FE5639B73D19A606E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\close.wav
Size 55KB
SHA256 07e14e7d28484a3df59b6137cc40573f9589e9ef07fe9fd6fdc8222625fa5990
MD5 02d05a12aedd40554a6da068b4a33364
SHA1 2a73578374b5ef691b5600e72d78ef11eb55a646
SHA512 c20f2f1b8b4dd54a8555da6b334c1a58ea122bb94b26bbb8d6477865e389065122245ad21f6883edc0572c337215ffcb0fc32f9b1def068e9d058f072895a0d9
SSDEEP 1536:zx0D+kirL2YWFOig9VEy6eG/mRR0sR5dmC:F0ixrL2YWz6VEy6p6RBdm
TLSH
T18F43B0A3F0634201D8670A3A66B3DD6106B9F85BFE25621F3444FF2872A7744BF25B85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crash.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\crash.wav
Size 41KB
SHA256 3a72af16e249368352f8c8f2a8bd3e39b6136ee67767dfedbf312f4bebba61c2
MD5 263bd11cea345024a33ce270b8cfa1b9
SHA1 4b503e19a658d2a8d75045d0dbf2d5c03169fc00
SHA512 ad1818c1ae49a84dfd549a45177eff90f9559a16bbded5bb82e557d3d542f1bf408f01f7a6022a07cf21e8582f661be2fbfb2a61375ab943b52b4d85c2cf4a8a
SSDEEP 768:xaNqoTJ5VWQMyQF396lsatHR/BxtipFcN1LqPKJdMzR+/uOQ:xeVW9B9Jatx7to+NYiJNm
TLSH
T12E1307A3F4868E01CE9B9E798533EF3106BA5D20FE5A174930847B066EB33D057599D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delete.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\delete.wav
Size 73KB
SHA256 34af832e911039593c6d2a9f92234686a2b3cd73f457c0c98d6dee57031c18d3
MD5 63ad923043954d6e3d2a83c8a7c1d013
SHA1 2fcd65ab08436dcf6d7254728a504fc4f3e3c458
SHA512 42f8ac17b379c8dd5667f0df63d0b3ef97d67a009956e05e84bfaf67f41e5952bbcc30b352c7b87a120576c7b5837a9c465c18f92f80536654134a17507fd4bb
SSDEEP 768:pEv+O0+Pd//i/18DwvKBuOgHt5G9Y+THSJEZn96JG/W1StDVV1NvmxKL:pEvV0+PX0KBiHt5G9GwnJ/sqLNB
TLSH
T168736B82F042DA50C83F8F318E17E9E686727E69FF47132B3040BB1F78A31E59615269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

error.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\error.wav
Size 43KB
SHA256 6e6486e040a6aa951cf2992d035d6c2bb3be8bf186bfe07f363b232d87859a0b
MD5 1cf2a0b7f1456bbb2d6bac55f91d948e
SHA1 aa6cdcf757cae6b7591e524e54753543dfb02f0b
SHA512 2ebbd69543e77f285eb4cde33df6029ce4b69bf6535bd688114ce69df9f2c41ef0c99b488a21cda5c20ba10cd77b99b55f4612be0826425a01976e75a98a1d7e
SSDEEP 768:8YEhC2eBiUHhah6PbrL2FuM4fDZpWJxHWi8dAP+CdQ2axLTjhOOBm6V5RyC2:tPBiUHcoPbXzb+JdP0AmoQ2apTjhJBmi
TLSH
T1A7135B92F983C811D94F4A39C673EE720273AD29FF0A470A35847B0679B33D16766587
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\install.wav
Size 103KB
SHA256 3b8712124dfcb33e1e11480bedd598d03429f027fb7b121fef495e3a19dbf3ee
MD5 c7193606faffc8fbb0de17f19acf6cc9
SHA1 797c7bb7778dd2eb5145fc860f56c44632b237a2
SHA512 374b4719472c6cc8f4cdfeddc01e077a4fd34a20cfc8e488ac293daeced4f18e79b21a4707487700d57afba0457995de95d640c6f0be0003d22281a571a64b71
SSDEEP 3072:3Uy6JlGL8h7FaDbH+fuwDwisTXwS+86ohhUBwQ4rd/t:3O+LkFaHH+3sTgS+86ojp
TLSH
T1B7A37DC2F0858A50DC375E398D73995247323D1AFF46462F7085FE2978E31E29A32B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\login.wav
Size 57KB
SHA256 ddb5030cc1885f35df3e8b09025a80eb98abcbff6cc06348ad0b813c89947d6a
MD5 889af1c95fac799e3bbfdbeb2ef82511
SHA1 cf100c84283b551f265bd2705a9e9a1bef31aa80
SHA512 e2713d542acd15c4ee2eb095e27203bee20a5f062069bb2452b67a13e19a32ed4237d8907d8435f9d77ad8d5e287e8041a0527490c93e749edabe7cb31e3029c
SSDEEP 768:kTU/REtxdrTlfmecfJK3UhmCDwmRh6sZ+q/88Vt/2LAikzHh0bXoyPSXI5wO:kTBntfcPhmAwKTd8MYAikLh0bYo
TLSH
T11E437F92B741C840D81A4F3A4D62EBEA4376FD65BF0AA34B30C47F5F6E721D04E22295
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\nav.wav
Size 37KB
SHA256 a256a59a16f41c435dc992a2a45ec08ec11553282283254f143eafeac5c087bc
MD5 4215c4ff85359f13e4542e86ba7a4578
SHA1 5d4ae67ab4e02626151b9f1ac24decdbd6c7dbd7
SHA512 b306b1ae2b354ebd24531d5bc45ad87a049ddade45b08d463d341d4aff4f8a01ffc084458f196cd587f1b6d525db8b66f9afa354191a04b6a5970371ef2c2546
SSDEEP 768:h7mCdU6TdpsyIYj4xnQ7/elEjOoxCEzGws:hniMOfYjgnHEjOod
TLSH
T1700391E2F5538E00C9564E398D33EF655736AC62FF0A970630847B4A6DB33C27A216D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notify.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\notify.wav
Size 41KB
SHA256 c1fc49ab6edaa87cc737391481cb52e3486836ecf9913433e4288c8372f44614
MD5 5f44a3239891038160d0f24ce4c09c80
SHA1 61d1d823beb87a8608594c044b450614de31d3f9
SHA512 caf2835c43104477d226e1d734337a666480dca7268f1b43f2100c266630f722a3f2a1e90ebbe94e480d1d298d96f626ab80d5d5eed26f06e205d1f6578bfddd
SSDEEP 768:r5+ZEw/8So16QGSn8pF57b0vYBAEEM8hS4ou3KpDUvt0OufH9:r5+x/FfBSn8J7byYGVkCt0Ou
TLSH
T16D138C12F5478100D8774B748D90DF981AAAFE847E526757714BAF2F3E332A0BD217A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toggle.wav

Path C:\Users\Admin\AppData\Roaming\net.millida.launcher\sounds-v2\toggle.wav
Size 15KB
SHA256 1f4aa2ea5f2c1fe4be41a79a57d36e87f3f8b84b05e13d38fa80923ae793e16e
MD5 8c46917a0d43524157f60ef2015cf3d0
SHA1 8103db6717f40bbdfbc48894cb7e88d6f8f7a6e3
SHA512 c4e41ecad0df72a030333e13bf4a8add3aa5212f1d64161094a7f3a9b6edd8fd760e20d072a1347eca428a9a991b4b2a9145e0132323b512d4932979a86044b0
SSDEEP 96:mgoT2/23R5OeQXQJQMSDwWbUzitIbXltXTNUiGxNonu4S1eU79i4QEiF4VxS:mgoa/2XtjmD/IzitIpyW41eO+VFoxS
TLSH
T167726E53B205CD06D9690F3A0D92EF989732BD89FF0B576B3080BB1AAD721D15E11AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_459588368\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.CognitiveServices.Speech.core.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_543891993\Microsoft.CognitiveServices.Speech.core.dll
Size 2.6MB
SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
MD5 0ee2b50c85a110689352fccfa77b5b18
SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
TLSH
T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5204_543891993\manifest.fingerprint
Size 66B
SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
MD5 5bbd09242392aacbb5fac763f9e3bd4e
SHA1 14bb7b23b459ce30193742ed1901a17b4dcf9645
SHA512 541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670
TLSH
T1CEA0026342648D9FBC1C042BD478A69DCD9115B088492445A925C75BB14203389F49A1
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1840-358-0x0000023986E90000-0x0000023986E96000-memory.dmp

Download

memory/1840-487-0x0000023986720000-0x0000023986729000-memory.dmp

Download

memory/1840-387-0x0000023986ED0000-0x0000023986EDF000-memory.dmp

Download

memory/1840-386-0x0000023986EE0000-0x0000023986EE8000-memory.dmp

Download

memory/1840-403-0x0000023986EF0000-0x0000023986EF2000-memory.dmp

Download

memory/1840-404-0x0000023986EE0000-0x0000023986EE4000-memory.dmp

Download

memory/1840-406-0x0000023986F00000-0x0000023986F07000-memory.dmp

Download

memory/1840-407-0x0000023986EF0000-0x0000023986EFD000-memory.dmp

Download

memory/1840-414-0x0000023985070000-0x000002398507D000-memory.dmp

Download

memory/1840-413-0x00000239850C0000-0x00000239850C7000-memory.dmp

Download

memory/1840-417-0x00000239850C0000-0x00000239850C4000-memory.dmp

Download

memory/1840-416-0x00000239850D0000-0x00000239850D2000-memory.dmp

Download

memory/1840-432-0x00000239866A0000-0x00000239866A2000-memory.dmp

Download

memory/1840-430-0x0000023985130000-0x0000023985139000-memory.dmp

Download

memory/1840-429-0x0000023986690000-0x0000023986695000-memory.dmp

Download

memory/1840-427-0x0000023986680000-0x0000023986682000-memory.dmp

Download

memory/1840-425-0x0000023985120000-0x0000023985128000-memory.dmp

Download

memory/1840-424-0x0000023985130000-0x0000023985134000-memory.dmp

Download

memory/1840-422-0x00000239850D0000-0x00000239850D1000-memory.dmp

Download

memory/1840-373-0x0000023986EA0000-0x0000023986EAF000-memory.dmp

Download

memory/1840-449-0x0000023986700000-0x0000023986701000-memory.dmp

Download

memory/1840-448-0x00000239866E0000-0x00000239866E4000-memory.dmp

Download

memory/1840-447-0x0000023986700000-0x0000023986702000-memory.dmp

Download

memory/1840-445-0x00000239866F0000-0x00000239866F2000-memory.dmp

Download

memory/1840-443-0x00000239866D0000-0x00000239866D8000-memory.dmp

Download

memory/1840-440-0x00000239866B0000-0x00000239866B4000-memory.dmp

Download

memory/1840-439-0x00000239866D0000-0x00000239866D2000-memory.dmp

Download

memory/1840-437-0x00000239866C0000-0x00000239866C2000-memory.dmp

Download

memory/1840-435-0x0000023986690000-0x0000023986698000-memory.dmp

Download

memory/1840-434-0x00000239866B0000-0x00000239866B4000-memory.dmp

Download

memory/1840-442-0x00000239866E0000-0x00000239866E4000-memory.dmp

Download

memory/1840-372-0x0000023986EC0000-0x0000023986EC8000-memory.dmp

Download

memory/1840-375-0x0000023986ED0000-0x0000023986ED2000-memory.dmp

Download

memory/1840-376-0x0000023986EC0000-0x0000023986EC4000-memory.dmp

Download

memory/1840-367-0x0000023986EA0000-0x0000023986EA2000-memory.dmp

Download

memory/1840-368-0x0000023986E90000-0x0000023986E94000-memory.dmp

Download

memory/1840-370-0x0000023986EB0000-0x0000023986EB2000-memory.dmp

Download

memory/1840-319-0x00000239857F0000-0x00000239857F1000-memory.dmp

Download

memory/1840-320-0x0000023985800000-0x0000023985801000-memory.dmp

Download

memory/1840-321-0x00000239865F0000-0x00000239865F3000-memory.dmp

Download

memory/1840-322-0x0000023985800000-0x0000023985806000-memory.dmp

Download

memory/1840-324-0x0000023986600000-0x0000023986602000-memory.dmp

Download

memory/1840-326-0x0000023986610000-0x0000023986613000-memory.dmp

Download

memory/1840-329-0x0000023986620000-0x0000023986624000-memory.dmp

Download

memory/1840-330-0x0000023986610000-0x0000023986618000-memory.dmp

Download

memory/1840-332-0x0000023986630000-0x0000023986632000-memory.dmp

Download

memory/1840-333-0x0000023986620000-0x0000023986624000-memory.dmp

Download

memory/1840-335-0x00000239865D0000-0x00000239865D6000-memory.dmp

Download

memory/1840-344-0x0000023986E50000-0x0000023986E56000-memory.dmp

Download

memory/1840-347-0x0000023986E60000-0x0000023986E62000-memory.dmp

Download

memory/1840-345-0x0000023986E40000-0x0000023986E4C000-memory.dmp

Download

memory/1840-349-0x0000023986E70000-0x0000023986E74000-memory.dmp

Download

memory/1840-350-0x0000023986E50000-0x0000023986E58000-memory.dmp

Download

memory/1840-353-0x0000023986E70000-0x0000023986E79000-memory.dmp

Download

memory/1840-359-0x0000023986E80000-0x0000023986E8C000-memory.dmp

Download

memory/1840-352-0x0000023986E80000-0x0000023986E85000-memory.dmp

Download

memory/1840-338-0x0000023986630000-0x0000023986635000-memory.dmp

Download

memory/1840-339-0x00000239865D0000-0x00000239865DA000-memory.dmp

Download

memory/1840-341-0x0000023986E40000-0x0000023986E42000-memory.dmp

Download

memory/1840-342-0x0000023986630000-0x0000023986634000-memory.dmp

Download

memory/1840-336-0x00000239865E0000-0x00000239865EC000-memory.dmp

Download

memory/1840-327-0x00000239865F0000-0x00000239865F6000-memory.dmp

Download

memory/1840-79-0x00007FFD41470000-0x00007FFD41471000-memory.dmp

Download

memory/2580-158-0x00007FFD41470000-0x00007FFD41471000-memory.dmp

Download