Edit tour

Windows Analysis Report
Modrinth_Installer.exe

Overview

General Information

Sample name:	Modrinth_Installer.exe
Analysis ID:	1483227
MD5:	578b2c56cabfa2d2a29bc7c0184a8e1d
SHA1:	11326b4b732c5cdb0edf9541c70d2dea3411ad6f
SHA256:	cf7a4925fdb1f1add01d039751d168ecf9fc958efe3b926c14566d207de4b6b4
Tags:	exe
Infos:

Detection

XWorm

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Check if machine is in data center or colocation facility

Connects to many ports of the same IP (likely port scanning)

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Found strings related to Crypto-Mining

Machine Learning detection for dropped file

Machine Learning detection for sample

Protects its processes via BreakOnTermination flag

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Uses schtasks.exe or at.exe to add and modify task schedules

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for available system drives (often done to infect USB drives)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Queries keyboard layouts

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

Modrinth_Installer.exe (PID: 6944 cmdline: "C:\Users\user\Desktop\Modrinth_Installer.exe" MD5: 578B2C56CABFA2D2A29BC7C0184A8E1D)

Modrinth.exe (PID: 7100 cmdline: "C:\Users\user\AppData\Local\Temp\Modrinth.exe" MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

schtasks.exe (PID: 5480 cmdline: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7028 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msiexec.exe (PID: 6288 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi" MD5: 9D09DC1EDA745A5F87553048E57620CF)

msiexec.exe (PID: 5080 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 7052 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 825BAD695F088FC1F1B993AE41384B51 C MD5: 9D09DC1EDA745A5F87553048E57620CF)

Modrinth App.exe (PID: 7628 cmdline: "C:\Program Files\Modrinth App\Modrinth App.exe" MD5: 9C91D4E56002B6395D6CDAD016AB65FB)

msedgewebview2.exe (PID: 7716 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-GB --mojo-named-platform-channel-pipe=7628.7672.3230350393833385459 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 7752 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 8020 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 8032 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 8052 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 8064 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6112 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

notepad.exe (PID: 3300 cmdline: C:\Users\user\AppData\Roaming\notepad.exe MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 7292 cmdline: "C:\Users\user\AppData\Roaming\notepad.exe" MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 8116 cmdline: "C:\Users\user\AppData\Roaming\notepad.exe" MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 4312 cmdline: C:\Users\user\AppData\Roaming\notepad.exe MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 1068 cmdline: C:\Users\user\AppData\Roaming\notepad.exe MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 2364 cmdline: C:\Users\user\AppData\Roaming\notepad.exe MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

notepad.exe (PID: 5864 cmdline: C:\Users\user\AppData\Roaming\notepad.exe MD5: 6F56F305614CBAD9E5737ACBEE0F8894)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": ["she-vocal.gl.at.ply.gg"], "Port": "36704", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Modrinth_Installer.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Modrinth_Installer.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x4ef00:$s6: VirtualBox 0x4ee5e:$s8: Win32_ComputerSystem 0x4fd58:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x4fdf5:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x4ff0a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x4faaa:$cnc4: POST / HTTP/1.1

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\Modrinth.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Local\Temp\Modrinth.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\Modrinth.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
C:\Users\user\AppData\Roaming\notepad.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\notepad.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Roaming\notepad.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xb418:$s6: VirtualBox 0xb376:$s8: Win32_ComputerSystem 0xc270:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xc30d:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xc422:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xbfc2:$cnc4: POST / HTTP/1.1
00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa8e0:$s6: VirtualBox 0xa83e:$s8: Win32_ComputerSystem 0xb738:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb7d5:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb8ea:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb48a:$cnc4: POST / HTTP/1.1
00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xad00:$s6: VirtualBox 0xac5e:$s8: Win32_ComputerSystem 0xbb58:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xbbf5:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xbd0a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb8aa:$cnc4: POST / HTTP/1.1
00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa7a0:$s6: VirtualBox 0xa6fe:$s8: Win32_ComputerSystem 0xb5f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb695:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb7aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb34a:$cnc4: POST / HTTP/1.1
00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xbaf8:$s6: VirtualBox 0xba56:$s8: Win32_ComputerSystem 0xc950:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xc9ed:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xcb02:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xc6a2:$cnc4: POST / HTTP/1.1
Process Memory Space: Modrinth_Installer.exe PID: 6944	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: Modrinth.exe PID: 7100	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.Modrinth_Installer.exe.44b360.2.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Modrinth_Installer.exe.44b360.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.0.Modrinth_Installer.exe.44b360.2.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
1.2.Modrinth.exe.12ad1a78.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
1.2.Modrinth.exe.12ad1a78.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
1.2.Modrinth.exe.12ad1a78.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
1.2.Modrinth.exe.12ad1a78.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
1.2.Modrinth.exe.12ad1a78.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8ba0:$s6: VirtualBox 0x8afe:$s8: Win32_ComputerSystem 0x99f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x9a95:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9baa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x974a:$cnc4: POST / HTTP/1.1
1.0.Modrinth.exe.5d0000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
1.0.Modrinth.exe.5d0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
1.0.Modrinth.exe.5d0000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xa9a0:$s6: VirtualBox 0xa8fe:$s8: Win32_ComputerSystem 0xb7f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb895:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9aa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb54a:$cnc4: POST / HTTP/1.1
0.0.Modrinth_Installer.exe.44b360.2.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Modrinth_Installer.exe.44b360.2.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8ba0:$s6: VirtualBox 0x8afe:$s8: Win32_ComputerSystem 0x99f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x9a95:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9baa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x974a:$cnc4: POST / HTTP/1.1
0.3.Modrinth_Installer.exe.cf1158.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.3.Modrinth_Installer.exe.cf1158.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8ba0:$s6: VirtualBox 0x8afe:$s8: Win32_ComputerSystem 0x99f8:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x9a95:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9baa:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x974a:$cnc4: POST / HTTP/1.1
0.0.Modrinth_Installer.exe.400000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Modrinth_Installer.exe.400000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x4ef00:$s6: VirtualBox 0x4ee5e:$s8: Win32_ComputerSystem 0x4fd58:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x4fdf5:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x4ff0a:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x4faaa:$cnc4: POST / HTTP/1.1
Click to see the 15 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\notepad.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\Modrinth.exe, ProcessId: 7100, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\notepad

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\Modrinth.exe, ProcessId: 7100, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\notepad.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe", CommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe", CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\Modrinth.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\Modrinth.exe, ParentProcessId: 7100, ParentProcessName: Modrinth.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe", ProcessId: 5480, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Snort Signatures

⊘No Snort rule has matched

Suricata Signatures

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:07.559901+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:31.775682+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:07.392253+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:24.284516+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:07.952537+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:08.745377+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:19.962512+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:29.200676+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:43.664557+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:12.281723+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:19.500279+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:08.757672+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:42.282169+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:24.285977+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:29.490476+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:49.590890+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:07.950788+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:19.498979+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:59.382398+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:08.900865+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:19.359398+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:47.430786+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:29.343722+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:00.577787+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:03.885339+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:31.774060+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:26:54.238369+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:25.401302+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:13.481761+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:29.202764+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:39.477056+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:49.586085+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:53.228864+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:47.432523+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:00.840096+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:42.249276+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:58.700344+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:42.498893+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:44.487016+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:20.503605+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:54.903894+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:43.662753+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:14.858535+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:13.922430+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:42.270124+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:33.187488+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:54.236442+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:20.175880+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:44.481137+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:13.480026+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:08.899086+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:17.707121+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:06.337720+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:25.399329+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:00.825213+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:14.856825+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:29.791203+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:10.640331+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:43.303150+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:48.986637+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:17.642524+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:12.295588+0200
SID:	2852874
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:01.711533+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:15.400888+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:10.642766+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:07.561440+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:19.641298+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:26:29.793262+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:50.560451+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:26:29.551464+0200
SID:	2855924
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:08.759400+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:12.255897+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:46.301146+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:17.367067+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:38.833997+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:15.167797+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:02.844020+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:17.369594+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:07.393964+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:17.530442+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:02.845641+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:43.777123+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:03.883630+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:13.918164+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:48.984845+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:33.185753+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:08.747215+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:43.778724+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:46.296256+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:27.959013+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:54.659792+0200
SID:	2853193
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:42.285412+0200
SID:	2852874
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:26:41.978583+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:17.529235+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:39.482996+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:41.433500+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:54.923099+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:12.322000+0200
SID:	2852874
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 40.68.123.157 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:58.713123+0200
SID:	2022930
Source Port:	443
Destination Port:	49792
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:06.335999+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:29.485065+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:19.964511+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:50.559029+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:04.861221+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:18.920837+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:42.496244+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:26:17.644263+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:27.955970+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:15.399133+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:19.642518+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:15.018322+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:38.750746+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:09.887246+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:29.342604+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:43.304789+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:18.026155+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:00.585034+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:19.357679+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:15.296075+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:04.867464+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:59.384142+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:01.713514+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:17.867078+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:15.020028+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:28:18.918379+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:41.970623+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:12.251907+0200
SID:	2852874
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 40.68.123.157 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:26:18.904756+0200
SID:	2022930
Source Port:	443
Destination Port:	49732
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:07.230183+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:02.309775+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:20.504385+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:02.316969+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:07.227964+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:56.019025+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:30:00.828133+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:30:09.887973+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:15.153810+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:27:41.431837+0200
SID:	2852870
Source Port:	36704
Destination Port:	49731
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes - Source IP: 147.185.221.21 - Destination IP: 192.168.2.4

Timestamp:	2024-07-26T21:29:56.010860+0200
SID:	2852870
Source Port:	36704
Destination Port:	49815
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:28:20.177281+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:29:18.028249+0200
SID:	2852923
Source Port:	49815
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) - Source IP: 192.168.2.4 - Destination IP: 147.185.221.21

Timestamp:	2024-07-26T21:27:58.701932+0200
SID:	2852923
Source Port:	49731
Destination Port:	36704
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Modrinth_Installer.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Avira: detection malicious, Label: HEUR/AGEN.1311620

Found malware configuration

Source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: Xworm {"C2 url": ["she-vocal.gl.at.ply.gg"], "Port": "36704", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Modrinth_Installer.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: she-vocal.gl.at.ply.gg
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: 36704
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: <123456789>
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: <Xwormmm>
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: XWorm V5.2
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: USB.exe
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: %AppData%
Source: 1.0.Modrinth.exe.5d0000.0.unpack	String decryptor: notepad.exe

Bitcoin Miner

Found strings related to Crypto-Mining

Source: msedgewebview2.exe, 0000000D.00000002.4176430879.0000014802C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: jsecoin.com/
Source: msedgewebview2.exe, 0000000D.00000002.4176430879.0000014802C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: coinhive.com/

Source: Modrinth_Installer.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App\Modrinth App.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App\Uninstall Modrinth App.lnk	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{67E35770-3BE7-49CB-BE18-C8626CE846EE}

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49828 version: TLS 1.2

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: c:
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Network Persistent State
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\562f14b7-8a1a-48f1-b5fc-919e31247d70.tmp
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: she-vocal.gl.at.ply.gg

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 147.185.221.21 ports 0,36704,3,4,6,7

Yara detected Generic Downloader

Source: Yara match	File source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.0.Modrinth.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\notepad.exe, type: DROPPED

Source: global traffic

TCP traffic: 192.168.2.4:49731 -> 147.185.221.21:36704

Source: global traffic	HTTP traffic detected: GET /updates.json HTTP/1.1accept: application/jsonhost: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 208.95.112.1 208.95.112.1
Source: Joe Sandbox View	IP Address: 147.185.221.21 147.185.221.21

Source: Joe Sandbox View	ASN Name: TUT-ASUS TUT-ASUS
Source: Joe Sandbox View	ASN Name: SALSGIVERUS SALSGIVERUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

DNS query: name: ip-api.com

Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Regular.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Bold.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Medium.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v2/search?facets=[[%22project_type:modpack%22]]&limit=10&index=follows&filters= HTTP/1.1Host: api.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://tauri.localhostSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v2/search?facets=[[%22project_type:mod%22]]&limit=10&index=follows HTTP/1.1Host: api.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://tauri.localhostSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /onboarding/home.png HTTP/1.1Host: launcher-files.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /landing-new/landing-lower.webp HTTP/1.1Host: cdn.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /track/?verbose=1&ip=1&_=1722021993037 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveContent-Length: 1004sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://tauri.localhostSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /componentupdater/api/v1/update?cup2key=6:Psc5SVEDIRT4qALgec2ZDeObQHhqoVqrWR6tfN-x7AA&cup2hreq=af8fb5df36948fbef26e13e0800af283dd2850efd2b852d86fffd6f77f987455 HTTP/1.1Host: edge.microsoft.comConnection: keep-aliveContent-Length: 4921X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,kpfehajjjbbcifeehjgfgnabifknmdad,fppmbhmldokgmleojlplaaodlkibgikh,ndikpojcjlepofdkaaldkinkjbeeebkl,fgbafbciocncjfbbonhocjaohoknlaco,jbfaflocpnkhbgcijpkiafdpbjkedane,alpjnmnfbgfkmmpcfpejmmoebdndedno,ahmaebgpfccdhgidjaidaoojjcijckba,ojblfafjmiikbkepnnolpgbbhejhlcim,eeobbhfgfagbclfofmgbdfoicabjdbkn,ohckeflnhegojcjlcpbfpciadgikcohkX-Microsoft-Update-Interactivity: bgX-Microsoft-Update-Service-Cohort: 5839X-Microsoft-Update-Updater: msedge-117.0.2045.47Content-Type: application/jsonSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 1X-Client-Data: CPnzygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 130.211.34.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.239
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /updates.json HTTP/1.1accept: application/jsonhost: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /minecraft/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /forge/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /quilt/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/game_version HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/category HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/loader HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /fabric/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /neo/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/donation_platform HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/report_type HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Regular.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v2/tag/report_type HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/game_version HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /quilt/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /fabric/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /neo/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /minecraft/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/category HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /forge/v0/manifest.json HTTP/1.1accept: /user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com)host: meta.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/donation_platform HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /v2/tag/loader HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: api.modrinth.com
Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Bold.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /fonts/inter/Inter-Medium.woff2?v=3.19 HTTP/1.1Host: cdn-raw.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://tauri.localhostsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v2/search?facets=[[%22project_type:modpack%22]]&limit=10&index=follows&filters= HTTP/1.1Host: api.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://tauri.localhostSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v2/search?facets=[[%22project_type:mod%22]]&limit=10&index=follows HTTP/1.1Host: api.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://tauri.localhostSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /onboarding/home.png HTTP/1.1Host: launcher-files.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /landing-new/landing-lower.webp HTTP/1.1Host: cdn.modrinth.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tauri.localhost/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /detect.txt HTTP/1.1accept: /user-agent: modrinth/theseus/0.7.1 (support@modrinth.com)host: launcher-files.modrinth.com
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: msedgewebview2.exe, 00000013.00000003.1894943319.000023A001404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: &body=`+encodeURIComponent(o.value)),m=Ee(()=>"https://twitter.com/intent/tweet?text="+encodeURIComponent(o.value)),v=Ee(()=>"https://tootpick.org/#text="+encodeURIComponent(o.value)),_=Ee(()=>`https://www.reddit.com/submit?title=${encodeURIComponent(n.shareTitle)}&text=`+encodeURIComponent(o.value));return t({show:u}),(y,w)=>{const x=Ei("tooltip");return k(),X(g(qt),{ref_key:"shareModal",ref:i,header:e.header},{default:L(()=>[f("div",fue,[e.link?(k(),S("div",pue,[f("div",{ref_key:"qrCode",ref:s},[b(hue,{value:a.value,class:"qr-code",margin:"3"},null,8,["value"])],512),ke((k(),X(g(ne),{"icon-only":"",class:"copy-button",onClick:d},{default:L(()=>[b(g(Kt))]),_:1})),[[x,"Copy QR code"]])])):(k(),S("div",gue,[ke(f("textarea",{"onUpdate:modelValue":w[0]\|\|(w[0]=$=>o.value=$)},null,512),[[Ye,o.value]]),ke((k(),X(g(ne),{"icon-only":"",class:"copy-button transparent",onClick:h},{default:L(()=>[b(g(Kt))]),_:1})),[[x,"Copy Text"]])])),f("div",mue,[e.link?(k(),S("div",vue,[b(g(_0e)),f("input",{type:"text",value:a.value,readonly:""},null,8,_ue),ke((k(),X(g(ne),{onClick:h},{default:L(()=>[b(g(Kt))]),_:1})),[[x,"Copy Text"]])])):he("",!0),f("div",yue,[l.value?ke((k(),X(g(ne),{key:0,"icon-only":"",onClick:c},{default:L(()=>[b(g(xp))]),_:1})),[[x,"Share"]]):he("",!0),ke((k(),S("a",{class:"btn icon-only",target:"_blank",href:p.value},[b(g(ub))],8,bue)),[[x,"Send as an email"]]),e.link?ke((k(),S("a",{key:1,class:"btn icon-only",target:"_blank",href:a.value},[b(g(cs))],8,wue)),[[x,"Open link in browser"]]):he("",!0),ke((k(),S("a",{class:"btn mastodon icon-only",target:"_blank",href:v.value},[b(g(T_e))],8,kue)),[[x,"Toot about it"]]),ke((k(),S("a",{class:"btn twitter icon-only",target:"_blank",href:m.value},[b(g(V_e))],8,xue)),[[x,"Tweet about it"]]),ke((k(),S("a",{class:"btn reddit icon-only",target:"_blank",href:_.value},[b(g(D_e))],8,Cue)),[[x,"Share on Reddit"]])])])])]),_:1},8,["header"])}}},gy=At($ue,[["__scopeId","data-v-2989f3c4"]]);/*! equals www.twitter.com (Twitter)
Source: Modrinth App.exe, 0000000B.00000002.4178268046.0000061C002D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 200 OKcontent-type: image/svg+xmlaccess-control-allow-origin: https://tauri.localhostcontent-security-policy: default-src 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'; font-src https://cdn-raw.modrinth.com/fonts/inter/; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1904991287.0000014803280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 'self'1)https://cdn-raw.modrinth.com/fonts/inter/tlhttps://*.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'PHtauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000002.4191628139.0000014803E1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?www.facebook.com equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4157646060.0000014802398000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: HTTP/1.1 200 OKcontent-type:text/htmlaccess-control-allow-origin:https://tauri.localhostcontent-security-policy:font-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000003.1933655064.0000061C0033C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933689260.0000061C0023C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4196846754.000001AAD67D7000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: Zdefault-src 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'; font-src https://cdn-raw.modrinth.com/fonts/inter/; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000003.1892985940.0000061C0023C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893015353.0000061C0033C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Zfont-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000002.4176954191.0000061C00288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: content-security-policy: default-src 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'; font-src https://cdn-raw.modrinth.com/fonts/inter/; script-src https://.cloudflare.com ' equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC677000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: content-security-policy: default-src 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'; font-src https://cdn-raw.modrinth.com/fonts/inter/; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4157646060.0000014802398000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: content-security-policy:font-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1861146952.000001CACA43C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://.cloudflare.com https://api.mclo.gs; font-src https://cdn-raw.modrinth.com/fonts/inter/; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self'; frame-src https://*.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self' equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1904991287.0000014803280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: font-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000002.4157849736.00000148023A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: font-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs3b781c equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000002.4157849736.00000148023A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: font-src https://cdn-raw.modrinth.com/fonts/inter/; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; default-src 'self'; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; style-src unsafe-inline 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gsf72785 equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4168928016.0000014802818000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://*.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self' equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 00000013.00000003.1939060006.000023A00088C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1888874260.000023A00089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1903495531.000023A00088C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.cn/https://rewards.microsoft.com/https://www.microsoftnews.com/https://www.facebook.com/www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/https://rewards.bing.com/P equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000D.00000002.4164447547.000001480266E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1939060006.000023A00088C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1888874260.000023A00089C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/* equals www.facebook.com (Facebook)
Source: Modrinth App.exe, 0000000B.00000002.4186489239.00007FF788FDD000.00000002.00000001.01000000.00000009.sdmp, Modrinth App.exe, 0000000B.00000000.1857003897.00007FF788FDD000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: icons/128x128.pngicons/128x128@2x.pngdW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDIwMzM5QkE0M0FCOERBMzkKUldRNTJyZzZwSnN6SUdPRGdZREtUUGxMblZqeG9OVHYxRUlRTzJBc2U3MUNJaDMvZDQ1UytZZmYKhttps://launcher-files.modrinth.com/updates.jsondefault-src 'self'; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://.cloudflare.com https://api.mclo.gs; font-src https://cdn-raw.modrinth.com/fonts/inter/; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost; script-src https://.cloudflare.com 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'$APPDATA/caches/icons/$APPCONFIG/caches/icons/$CONFIG/caches/icons/http://localhost:1420/../dist/assets/index-WeuSTy9x.css[ equals www.youtube.com (Youtube)
Source: Modrinth App.exe, 0000000B.00000002.4175192308.0000061C00220000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: src 'self'; frame-src https://.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://discord.com 'self'; style-src unsafe-inline 'self'; font-src https://cdn-raw.modrinth.com/fonts/inter/; script-src https://.cloudflare.com 'self' 'sha256-wrmTlZOHKd65Djx69SROOZVzOvT31jev8HzVXx3/rVc=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; connect-src https://modrinth.com https://.modrinth.com https://mixpanel.com https://.mixpanel.com https://*.cloudflare.com https://api.mclo.gs; img-src tauri: https: data: blob: 'unsafe-inline' asset: https://asset.localhost equals www.youtube.com (Youtube)
Source: msedgewebview2.exe, 0000000D.00000002.4191628139.0000014803E1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4164447547.000001480266E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000D.00000002.4188781595.000001480324C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1911914689.0000014803198000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1905184892.0000014802794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ip-api.com
Source: global traffic	DNS traffic detected: DNS query: she-vocal.gl.at.ply.gg
Source: global traffic	DNS traffic detected: DNS query: launcher-files.modrinth.com
Source: global traffic	DNS traffic detected: DNS query: meta.modrinth.com
Source: global traffic	DNS traffic detected: DNS query: api.modrinth.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: cdn-raw.modrinth.com

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp	String found in binary or memory: http://ip-api.com/line/?fields=hosting
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: Modrinth.exe, 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Modrinth_Installer.exe, 00000000.00000003.1654501009.00000000038EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.0000000000988000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/kurkle/color#readme
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/scopewu)
Source: Modrinth App.exe, 0000000B.00000003.1974312999.000001CACE2C4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4171325523.000001CACE2C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrib
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.10.7.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.10.8.jsonr
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.0.jsonf
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.2.jsonV
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.3.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.5.jsonJ
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.6.jsonv
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.11.7.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.3.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.4.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.5.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.6.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.7.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.8.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.12.9.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.13.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.13.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.13.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.13.3.jsonj
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.3.jsonR
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.4.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.5.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.6.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.7.jsonN
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.8.jsonZ
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.14.9.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.3.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.4.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.5.jsonjp(
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.6.jsonbp
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.7.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.8.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.15.9.json&q
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/fabric/v0/versions/0.16.0.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.100.json.mL
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.103.jsonss
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.108.jsoneaX
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.109.jsoneri
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.110.json1b
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.114.json47A
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.121.jsonas
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.128.json:4.
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.141.jsonex0
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.146.jsonho?
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1943496276.000001CACDC74000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.160.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.168.jsonps
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1943496276.000001CACDC74000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.174.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.182.jsonsi#
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.189.json/ag
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1943496276.000001CACDC74000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.190.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.193.jsonet5
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.206.jsonle
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.84.jsondri
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.89.jsonmodV
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1943496276.000001CACDC74000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.91.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.92.jsone
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.93.jsonInd~
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.95.jsonasss
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.96.json:48t
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.99.json344K
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1001.jsonGE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1005.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1006.jsonoE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1007.json=E
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1008.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1010.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1011.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1012.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1013.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1014.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1018.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1019.jsoneE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1022.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1025.json6E
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1028.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1029.jsonIE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1030.jsonSE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1031.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1032.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1034.json8E
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1040.jsonjE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1041.jsonTE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1042.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1043.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1045.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1047.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1049.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1053.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1054.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1055.jsonBE
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1058.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1059.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.989.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.990.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.991.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.994.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.995.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.997.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.999.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1060.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1061.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1063.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1065.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1066.jsonpD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1067.json~C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1068.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1069.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1070.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1071.jsonRD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1072.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1073.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1074.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1075.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1076.jsondD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1077.jsonuD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1078.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1079.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1080.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1081.jsonWD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1082.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1083.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1084.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1085.json/D
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1087.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1088.jsonzD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1090.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1091.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1092.jsonHD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1093.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1094.json;D
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1095.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1096.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1097.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1098.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1099.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1100.jsoncD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1101.jsonFD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1103.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1104.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1105.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1106.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1107.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1108.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1109.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1110.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1111.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1112.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1113.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1114.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1115.jsonMD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1116.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1117.jsonnD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1118.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1119.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1120.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1121.json1D
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1122.jsonYD
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1123.json%Dv
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1124.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1125.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1126.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1127.jsoniC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1128.jsonbC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1129.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1130.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1131.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1132.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1133.jsongC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1145.jsonXC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1147.jsonVC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.0.1296.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.0.1297.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.0.1298.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.0.1299.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1301.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1302.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1302.jsonKC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1303.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1305.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1306.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1308.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1308.jsonLC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1309.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1310.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1310.json:C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1311.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1311.json?C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1312.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1313.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1314.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1315.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1315.jsontC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1316.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1316.jsonyB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1317.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1318.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1319.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1319.json5C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1320.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1321.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1322.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1323.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1323.json#C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1324.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1324.jsonrB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1325.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1326.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1327.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1327.jsonQB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1328.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1329.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1332.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1332.jsonJB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1333.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1334.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1334.jsonOB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1335.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1336.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1336.jsonEB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1337.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1338.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1338.json0C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1339.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1341.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1341.jsonsC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1349.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1349.jsonfB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1350.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1350.jsonwB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1353.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1354.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1357.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1357.jsonAC
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1359.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1359.jsonmB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1361.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1361.jsonhB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1371.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1375.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1375.json$Cq
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1390.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1390.json.C
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1392.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1396.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1397.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1398.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1402.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1404.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json3B
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1409.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1409.json)B
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1410.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1411.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1412.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1413.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1414.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1415.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1416.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1417.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1418.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1418.jsonvA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1419.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1421.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1423.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1423.jsonlA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1426.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1426.jsonZA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1427.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1429.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1429.jsonNA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1430.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1430.jsonaA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1431.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1431.jsonCA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1433.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1433.jsonkA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1434.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1435.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1436.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1436.json_A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1437.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1437.jsonDA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1439.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1439.json9A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1440.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1440.jsonxA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1441.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1441.json2A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1442.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1443.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1444.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1444.json&As
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1446.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1449.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1450.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1453.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1457.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1458.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1459.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1460.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1461.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1462.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1462.json4B
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1463.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1463.json7A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1464.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1465.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1466.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1467.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1468.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1473.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1473.jsonPA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1474.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1475.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1475.json(A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1476.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1479.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1479.jsonAm
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1480.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1482.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1483.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1484.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1485.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1486.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1487.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1487.jsonUA
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1491.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1493.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1493.json-A
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1494.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1495.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1496.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/min
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minec
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC697000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC66A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4167902955.000001CACDEFC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952341475.000001CACC626000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC691000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC691000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC66C000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC691000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.json.p
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.json2p
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.json:
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.jsonF
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.jsonRp0
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.jsonn
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC646000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1942828172.000001CACC657000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.jsonz
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.jsonzpX
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.18.json~
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4161914871.000001CACDB30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.7.3.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4161914871.000001CACDB30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978832232.000001CACDC13000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.7.4.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4167902955.000001CACDEFC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4161914871.000001CACDB30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978832232.000001CACDC13000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC16000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/1.8.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939978330.000001CACC734000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974060307.000001CACC734000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1938047480.000001CACC73C000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931228109.000001CACC741000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952023061.000001CACC73B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC72D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932998522.000001CACC73D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/14w25a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4157522988.000001CACC5E2000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/14w31a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1950827927.000001CACE148000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/assets/legacy.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC66A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC66C000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2193813840.0000017F008AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.1-rc3.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.1.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.jsonB
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc2.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.2.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre1.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre2.jsonson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre3.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre3.jsonjsonq
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-rc1.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-rc2.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-rc2.jsonjsonS
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3-rc3.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.3.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-pre1.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-pre2.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-pre3.jsonson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-pre3.jsonson6
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-pre4.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc1.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc2.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc3.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978192163.000001CACC70A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981831821.000001CACC710000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.19.4.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre1.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre2.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre3.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre4.jsona.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre5.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre6.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-pre7.jsona.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20-rc1.jsonta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.1.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.1.jsonbeta.jsone
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre1.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2193813840.0000017F008AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre2.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre3.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre4.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre4.jsonjson=
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-rc1.jsonjson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-rc1.jsonjsonI
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2-rc2.json.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.2.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.20.json4-beta.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.1.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.2.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.3.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.4.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.6-pre1.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.7.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.8-pre1.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/1.8-pre2.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/13w25c.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/13w26a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/13w49a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/14w10c.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/14w17a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/14w27b.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/14w34d.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/15w32a.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/15w32b.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/15w32c.json
Source: Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/15w33a.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w42a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w43a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w44a.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w44a.jsoneta.jsono
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977861493.000001CACC716000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2193813840.0000017F008AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w45a.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w45a.jsonj
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/22w46a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w03a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w04a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w05a.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w06a.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w06a.jsoneta.jsonG
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w07a.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w07a.jsoneta.json8
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978192163.000001CACC70A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981831821.000001CACC710000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w12a.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w13a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w13a_or_b.jsonson
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978192163.000001CACC70A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981831821.000001CACC710000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w14a.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w16a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w17a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w18a.jsoneta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w31a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w32a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w33a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w35a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w40a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w41a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w42a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w43a.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w43a.jsonbeta.jsonT
Source: Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/minecraft/v0/versions/23w43b.jsonbeta.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985226687.000001CACDCBD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/neo/v0/versions/neoforge-20.4.18-be
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985226687.000001CACDCBD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/neo/v0/versions/neoforge-20.4.18-be.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4167071518.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985226687.000001CACDCBD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/neo/v0/versions/neoforge-20.4.19-beta.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4167071518.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947551539.000001CACE27E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985226687.000001CACDCBD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/neo/v0/versions/neoforge-20.4.20-beta.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.20.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.21.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944767753.000001CACE2C8000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939711081.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935646372.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.21.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.21.1.json&p
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947170740.000001CACE2F3000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936116273.000001CACE2E0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2E3000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944767753.000001CACE2C8000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939711081.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935646372.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.21.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.22.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.23.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944767753.000001CACE2C8000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939711081.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935646372.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1951558738.000001CACE2BF000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.23.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.24.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947170740.000001CACE2F3000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936116273.000001CACE2E0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2E3000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944767753.000001CACE2C8000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939711081.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935646372.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.25.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.0.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.1.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.1.json~p
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4165937077.000001CACDD01000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.2.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4165937077.000001CACDD01000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.3.json
Source: Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://meta.modrinth.com/quilt/v0/versions/0.26.3.json:p
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1894943319.000023A001404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://modrinth.com/$
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1897030734.0000061C0077C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896775448.0000061C008AC000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896554810.0000061C0077C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896977967.0000061C00884000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896670014.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1975415376.000001CACE17E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896554810.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933655064.0000061C0033C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4178268046.0000061C002D0000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892985940.0000061C0023C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1897030734.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1861146952.000001CACA483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tauri.localhost
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tootpick.org/#text=
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.chartjs.org
Source: Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/submit?title=$

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.23.35:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.22.35:443 -> 192.168.2.4:49828 version: TLS 1.2

Source: Modrinth App.exe, 0000000B.00000000.1857003897.00007FF789202000.00000002.00000001.01000000.00000009.sdmp

Binary or memory string: RegisterRawInputDevices

memstr_025a73d0-4

Operating System Destruction

Protects its processes via BreakOnTermination flag

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Process information set: 01 00 00 00

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: Modrinth_Installer.exe, type: SAMPLE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 1.2.Modrinth.exe.12ad1a78.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 1.0.Modrinth.exe.5d0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Modrinth_Installer.exe.44b360.2.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.3.Modrinth_Installer.exe.cf1158.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Modrinth_Installer.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\notepad.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a222a.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{67E35770-3BE7-49CB-BE18-C8626CE846EE}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI3053.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE}\ProductIcon	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a222c.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a222c.msi	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\6a222c.msi

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB5FF6	1_2_00007FFD9BAB5FF6
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB1852	1_2_00007FFD9BAB1852
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB22C1	1_2_00007FFD9BAB22C1
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB6DA2	1_2_00007FFD9BAB6DA2
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB2021	1_2_00007FFD9BAB2021
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Code function: 1_2_00007FFD9BAB9BF8	1_2_00007FFD9BAB9BF8
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 6_2_00007FFD9BAC2021	6_2_00007FFD9BAC2021
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 8_2_00007FFD9BAB2021	8_2_00007FFD9BAB2021
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 20_2_00007FFD9BAA2021	20_2_00007FFD9BAA2021
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 27_2_00007FFD9BA92021	27_2_00007FFD9BA92021
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 29_2_00007FFD9BAB2021	29_2_00007FFD9BAB2021
Source: C:\Users\user\AppData\Roaming\notepad.exe	Code function: 31_2_00007FFD9BAC2021	31_2_00007FFD9BAC2021

Source: Joe Sandbox View

Dropped File: C:\Program Files\Modrinth App\Modrinth App.exe F9A00B54DEE51FB3B86BBFB3236A5A53C12A3CEB5FF37063A4013606E485C31C

Source: Modrinth_Installer.exe

Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Source: Modrinth_Installer.exe, 00000000.00000002.1658431023.0000000002C1C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsiexec.exe.muiX vs Modrinth_Installer.exe
Source: Modrinth_Installer.exe, 00000000.00000003.1654447812.0000000000CB2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsiexec.exeX vs Modrinth_Installer.exe
Source: Modrinth_Installer.exe, 00000000.00000002.1658004452.0000000000CB3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsiexec.exeX vs Modrinth_Installer.exe
Source: Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000D3F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameModrinth.exe4 vs Modrinth_Installer.exe
Source: Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameModrinth.exe4 vs Modrinth_Installer.exe

Source: Modrinth_Installer.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: Modrinth_Installer.exe, type: SAMPLE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 1.2.Modrinth.exe.12ad1a78.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 1.0.Modrinth.exe.5d0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Modrinth_Installer.exe.44b360.2.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.3.Modrinth_Installer.exe.cf1158.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Modrinth_Installer.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\notepad.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: Modrinth.exe.0.dr, k0QxBTslhCCE.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: Modrinth.exe.0.dr, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: Modrinth.exe.0.dr, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, k0QxBTslhCCE.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, k0QxBTslhCCE.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: notepad.exe.1.dr, k0QxBTslhCCE.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: notepad.exe.1.dr, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: notepad.exe.1.dr, JxQAliya76a2.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: notepad.exe.1.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: notepad.exe.1.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: Modrinth.exe.0.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Modrinth.exe.0.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal72.troj.evad.mine.winEXE@33/193@11/8

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files\Modrinth App

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

File created: C:\Users\user\AppData\Roaming\notepad.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\notepad.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7028:120:WilError_03
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Mutant created: \Sessions\1\BaseNamedObjects\com.modrinth.theseus-sim
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Mutant created: \Sessions\1\BaseNamedObjects\9G94Tds7X0C8GLR0

Source: C:\Users\user\Desktop\Modrinth_Installer.exe

File created: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Jump to behavior

Source: Modrinth_Installer.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.94%

Source: C:\Users\user\Desktop\Modrinth_Installer.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Modrinth_Installer.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: msedgewebview2.exe, 0000000D.00000002.4196996758.000001AAD81F5000.00000002.00000001.00040000.0000003A.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: unknown	Process created: C:\Users\user\Desktop\Modrinth_Installer.exe "C:\Users\user\Desktop\Modrinth_Installer.exe"
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Users\user\AppData\Local\Temp\Modrinth.exe "C:\Users\user\AppData\Local\Temp\Modrinth.exe"
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe"
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe C:\Users\user\AppData\Roaming\notepad.exe
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 825BAD695F088FC1F1B993AE41384B51 C
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe "C:\Users\user\AppData\Roaming\notepad.exe"
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files\Modrinth App\Modrinth App.exe "C:\Program Files\Modrinth App\Modrinth App.exe"
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-GB --mojo-named-platform-channel-pipe=7628.7672.3230350393833385459
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe "C:\Users\user\AppData\Roaming\notepad.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe C:\Users\user\AppData\Roaming\notepad.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe C:\Users\user\AppData\Roaming\notepad.exe
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe C:\Users\user\AppData\Roaming\notepad.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\notepad.exe C:\Users\user\AppData\Roaming\notepad.exe
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Users\user\AppData\Local\Temp\Modrinth.exe "C:\Users\user\AppData\Local\Temp\Modrinth.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe"	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 825BAD695F088FC1F1B993AE41384B51 C	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files\Modrinth App\Modrinth App.exe "C:\Program Files\Modrinth App\Modrinth App.exe"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2

Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: apphelp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dwmapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: secur32.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: pdh.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: powrprof.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: uxtheme.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: cryptbase.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: sspicli.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: umpdc.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: windows.storage.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: wldp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: explorerframe.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dataexchange.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: d3d11.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dcomp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dxgi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: version.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: propsys.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: edputil.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: userenv.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: profapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dbghelp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: textinputframework.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: coreuicomponents.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: coremessaging.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: ntmarta.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: coremessaging.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: wintypes.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: wintypes.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: wintypes.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: twinapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: mswsock.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: dnsapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: fwpuclnt.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: schannel.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: mskeyprotect.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: ntasn1.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: ncrypt.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: ncryptsslp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: msasn1.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: cryptsp.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: rsaenh.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: gpapi.dll
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Section loaded: cryptnet.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: version.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kbdus.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: gpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wkscli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netutils.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: omadmapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dmcmnutils.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iri.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dsreg.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: textinputframework.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coreuicomponents.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.ui.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windowmanagementapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: inputhost.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: propsys.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wtsapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mscms.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coloradapterclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winsta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winhttp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.security.authentication.web.core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iertutil.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: devobj.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rsaenh.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dataexchange.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uiautomationcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: atlthunk.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: oleacc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: directmanipulation.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwmapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwritecore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: vaultcli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: aadwamextension.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: sspicli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.web.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: tenantrestrictionsplugin.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netprofm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: npmproxy.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.userprofile.diagnosticssettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wevtapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: secur32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: bitsproxy.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mswsock.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncrypt.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncryptprov.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxilconv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3dscache.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\notepad.exe	Section loaded: rsaenh.dll

Source: C:\Users\user\Desktop\Modrinth_Installer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: notepad.lnk.1.dr	LNK file: ..\..\..\..\..\notepad.exe
Source: Modrinth App.lnk.3.dr	LNK file: ..\..\..\..\..\..\Program Files\Modrinth App\Modrinth App.exe
Source: ~odrinth App.tmp.3.dr	LNK file: ..\..\..\..\..\..\Program Files\Modrinth App\Modrinth App.exe
Source: Modrinth App.lnk0.3.dr	LNK file: ..\..\..\Program Files\Modrinth App\Modrinth App.exe
Source: Uninstall Modrinth App.lnk.3.dr	LNK file: ..\..\Windows\System32\msiexec.exe

Source: C:\Windows\SysWOW64\msiexec.exe	Automated click: Next
Source: C:\Windows\SysWOW64\msiexec.exe	Automated click: Next
Source: C:\Windows\SysWOW64\msiexec.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App\Modrinth App.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Directory created: C:\Program Files\Modrinth App\Uninstall Modrinth App.lnk	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{67E35770-3BE7-49CB-BE18-C8626CE846EE}

Jump to behavior

Source: Modrinth_Installer.exe

Static file information: File size 5896192 > 1048576

Source: Modrinth_Installer.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x59d600

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.iO8u1XxWaHOxRixHaGXb7lrPbdYCUX31y8ve1xwUpnkwE8Hsn875sU89Eg9E3W08UUQBOZ,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.s6oFq9Kw28cYHBdk7lUx93jIQhEkwHcnpVdKNiEznbdQUgOJP4eHBTjI4ot2RUO5S9pzZ8,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.WlYDkCUGhhsXXXbhTUEI0iQZSvgetmAbeXlZ0Erd1nwMC5W1PZ9GVTzeTEdlkPQTA7oxLj,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.Fi7uFAyvo2HUrGMGAJwsosL77LQLG2Saao8V82nK66brEsyfnrQQQPNDP4j4K8gwzIcFMe,JxQAliya76a2.kWdSvK1WbgXR()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{nbeMWOcfPaC6[2],JxQAliya76a2.BBYjLQIkvnoJ(Convert.FromBase64String(nbeMWOcfPaC6[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { nbeMWOcfPaC6[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.iO8u1XxWaHOxRixHaGXb7lrPbdYCUX31y8ve1xwUpnkwE8Hsn875sU89Eg9E3W08UUQBOZ,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.s6oFq9Kw28cYHBdk7lUx93jIQhEkwHcnpVdKNiEznbdQUgOJP4eHBTjI4ot2RUO5S9pzZ8,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.WlYDkCUGhhsXXXbhTUEI0iQZSvgetmAbeXlZ0Erd1nwMC5W1PZ9GVTzeTEdlkPQTA7oxLj,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.Fi7uFAyvo2HUrGMGAJwsosL77LQLG2Saao8V82nK66brEsyfnrQQQPNDP4j4K8gwzIcFMe,JxQAliya76a2.kWdSvK1WbgXR()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{nbeMWOcfPaC6[2],JxQAliya76a2.BBYjLQIkvnoJ(Convert.FromBase64String(nbeMWOcfPaC6[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { nbeMWOcfPaC6[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.iO8u1XxWaHOxRixHaGXb7lrPbdYCUX31y8ve1xwUpnkwE8Hsn875sU89Eg9E3W08UUQBOZ,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.s6oFq9Kw28cYHBdk7lUx93jIQhEkwHcnpVdKNiEznbdQUgOJP4eHBTjI4ot2RUO5S9pzZ8,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.WlYDkCUGhhsXXXbhTUEI0iQZSvgetmAbeXlZ0Erd1nwMC5W1PZ9GVTzeTEdlkPQTA7oxLj,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.Fi7uFAyvo2HUrGMGAJwsosL77LQLG2Saao8V82nK66brEsyfnrQQQPNDP4j4K8gwzIcFMe,JxQAliya76a2.kWdSvK1WbgXR()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{nbeMWOcfPaC6[2],JxQAliya76a2.BBYjLQIkvnoJ(Convert.FromBase64String(nbeMWOcfPaC6[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { nbeMWOcfPaC6[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.iO8u1XxWaHOxRixHaGXb7lrPbdYCUX31y8ve1xwUpnkwE8Hsn875sU89Eg9E3W08UUQBOZ,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.s6oFq9Kw28cYHBdk7lUx93jIQhEkwHcnpVdKNiEznbdQUgOJP4eHBTjI4ot2RUO5S9pzZ8,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.WlYDkCUGhhsXXXbhTUEI0iQZSvgetmAbeXlZ0Erd1nwMC5W1PZ9GVTzeTEdlkPQTA7oxLj,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.Fi7uFAyvo2HUrGMGAJwsosL77LQLG2Saao8V82nK66brEsyfnrQQQPNDP4j4K8gwzIcFMe,JxQAliya76a2.kWdSvK1WbgXR()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{nbeMWOcfPaC6[2],JxQAliya76a2.BBYjLQIkvnoJ(Convert.FromBase64String(nbeMWOcfPaC6[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { nbeMWOcfPaC6[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.iO8u1XxWaHOxRixHaGXb7lrPbdYCUX31y8ve1xwUpnkwE8Hsn875sU89Eg9E3W08UUQBOZ,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.s6oFq9Kw28cYHBdk7lUx93jIQhEkwHcnpVdKNiEznbdQUgOJP4eHBTjI4ot2RUO5S9pzZ8,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.WlYDkCUGhhsXXXbhTUEI0iQZSvgetmAbeXlZ0Erd1nwMC5W1PZ9GVTzeTEdlkPQTA7oxLj,_526zbaXnYvgAW9shRYozHjuNROpPWVwCAJkMoGoWy2a3WYw0aUzWUp2MCxl9ydc57Ns0fe4GisC9zYUQQJNe.Fi7uFAyvo2HUrGMGAJwsosL77LQLG2Saao8V82nK66brEsyfnrQQQPNDP4j4K8gwzIcFMe,JxQAliya76a2.kWdSvK1WbgXR()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{nbeMWOcfPaC6[2],JxQAliya76a2.BBYjLQIkvnoJ(Convert.FromBase64String(nbeMWOcfPaC6[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { nbeMWOcfPaC6[2] }}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p System.AppDomain.Load(byte[])
Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT System.AppDomain.Load(byte[])
Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p System.AppDomain.Load(byte[])
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT System.AppDomain.Load(byte[])
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p System.AppDomain.Load(byte[])
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT System.AppDomain.Load(byte[])
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p System.AppDomain.Load(byte[])
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT System.AppDomain.Load(byte[])
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p System.AppDomain.Load(byte[])
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT System.AppDomain.Load(byte[])
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	.Net Code: _6H0ne0dEGAGT

Source: notepad.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x5c2c8
Source: Modrinth.exe.0.dr	Static PE information: real checksum: 0x0 should be: 0x5c2c8
Source: Modrinth_Installer.exe	Static PE information: real checksum: 0x53922 should be: 0x5a4521

Source: Modrinth App.exe.3.dr

Static PE information: section name: _RDATA

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31CEA74 push E8000000h; ret	19_3_00007FFDC31CEA79
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31CBA70 push ecx; ret	19_3_00007FFDC31CBB25
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31CBA70 push ecx; ret	19_3_00007FFDC31CBC58
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31CC2CE push ecx; ret	19_3_00007FFDC31CC2F4
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31CC89E push ecx; ret	19_3_00007FFDC31CC8CE
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31C8EE4 push ecx; ret	19_3_00007FFDC31C8F0A
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Code function: 19_3_00007FFDC31C9131 push ecx; ret	19_3_00007FFDC31C9157

Source: Modrinth.exe.0.dr, 6yQiSQt0BREh.cs	High entropy of concatenated method names: 'PY4hExoQsQGM', 's2nu1oyVzQ6g', 'YLx3ERACValY', 'lzrDTVKsrrMA', 'wJR9RdWNNQY1', 'MkSvlVTAFmod', 'yTLZSxneqi9f', 'SnVF9Lhygd0T', 'CksPwvrj69u6', 'inJ4elK2WRTC'
Source: Modrinth.exe.0.dr, fJu9pg3l7E8K.cs	High entropy of concatenated method names: 'g2Rqa83dChjq', 'SBvWZiR3nxhS', 'HZvPGrygdHsU', 'RR6YGV7wglKA', 'IW5ZlXjnn7yC', 'rb0wzWfVlI3I', 'DfGSgnz7YqUh', 'e7G5tMvpIz5K', 'SCS8NWUV5lay', '_3LK0HM0e0Q1M'
Source: Modrinth.exe.0.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	High entropy of concatenated method names: 'OjkOaBJZg0gzEOMm3lsWkJHVJvlr0xHxxoub58q4UIljIy1lWeNArkOV04T2URy63OTwxV', '_3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p', 'weNdZLrvJSGCq5nIyRRzfRokTIl5eNfqqF2pUC6GDdrjW1Hfau5GZOTssDL2qKQaTBlBJ2', 'zGln2vIwK5e4pFoZNoAV8qzwdF5c2PhoEuOR6RlEP5PqXUKYST0ofFMNiNlMrvstPIxIeh', 'QHgvZB5bjlKbQS5G3k6BOQ5sYPTjqrYukqL3viGUdJRuFTt6wuOgAuwbYDbC1br4v57kIb', 'UifJa03rqtBIwZRePq3IUVwkLE1C5eagHicLG9s7no3xj2j51q8NMvl76MJtZsSBnJcUPl', 'vKWTO2vqshwV4SmqlvycNPwQkZdSTwvwgkgr2ZNbWI4fs9EhgBlB0seTIjPQWiZvZaA9Vx', 'HJ0cqs105tv8YLAQTFziNfctZri4AnNoD3LiYa6L11pdB0OyDK4bV7KqB7mIencnWlSXPo', 'IW2h1n0AMZMrbeOq7SeIaNvvFIzpqd9Mk6tGkxzRnuur9Ihkn6FAFK24fPIp5b8UOq7qZZ', 'Mm9KY0ZMAN3G'
Source: Modrinth.exe.0.dr, JxQAliya76a2.cs	High entropy of concatenated method names: 'ZDVwaxisl2o5', 'oXdqeiay2D5q', 'vR22zuNmO2xr', '_8Y3aqIDqwDLA', '_22aqvM8IIice', 'jOpoVm0mgGNR', 'Tk2ssNWTb1of', 'jrzuIncpGpoI', 'dQzYtDb4YqD7', 'zRlwxxokdEht'
Source: Modrinth.exe.0.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	High entropy of concatenated method names: 'zWTPtLQMYU0rTtTK7qqVh4ZNRaOTw43ZkrlBfqqN1ALmT6Jf2LfxDSz840vHikhlhQe12y', 'Ft5FapbZcu1uQseBS9ij9kTQEEKkYnytIeuXdZkmyKVjIqhNeEGSbLBMlGeswpmsIPQQIp', 'qZgishkEAcQ1Tq1gK63UJLbFULHvzojbeClVJHXoQ66ZhUg3qRAEUC1IRlHlvIcWabPkZw', 'u3Vjk6S2TiJXFCjv4B35EgBPrsaX6SQPxz25jQMVXfTo5Tb6fvq6pskoMR69zm9R1IwDor', 'MarFEQXeylS9IxA1OP305ziF0waXmN6CNYf3xvZ1ft9AKph7utYF7aCST3CBXhIaMdpMbW', 'iu6vA7alGKAKSd1ijfepWfs7azdE8iFOrT5yfQ7bIykTeXdmDtVqwBXDzXSNqreSjSAvEh', 'eO3NCctRUjtciDXHJOQrDongOQPaMcMfUZeHPs6fojNaZgLcyG8ybZbxl9OGSKIZuI9lKy', 'nRlCOmB4aGv9obtn81oaPoRhkPrJIQb1FY4OFPSoIa0Uk0BZKWChbigcioc1Z58c9sv9Rp', 's6ExhAVXHzOjD8pPuAkPL86Mm1PkYrXMKocqVihZwhL1mRkyp7bnT8IXy5uhHUubQAi52e', 'XU6Zlm70WrfDXfJRZU7M1RB5o5HQujEM3GrtWAXBiViRmdjwaxMaAegeO8Mm5WWWSGVeVp'
Source: Modrinth.exe.0.dr, h8QBktZZRE6od2jlJLZPAPSz4yFzgmUUtdkVINugjjgG2pCavaoGeFJUyVIoo5LoNkLFYw.cs	High entropy of concatenated method names: 'BSJMs7er22BxVCal6u5x7ozO5Qd6Bg8ByfcQiKKoFvhzpYQumZ3NUBy9VT5by68wW0tbVO', 'Vxb0BZi8KdXZpav5LmrgAcBMUUluVzcjmCPP8lEuc9ylQxTAOJkS5DJFHtET2c1dHUnUYf', 'KHgk64pgVz54KIrJuhOR70cMGKSESRFJZNozNCx8CC8JdOUfCzrZiv7Qgq7Vg6KjW2v2y5', 'Ej1Ak6MXqQCOgblZ88NofCzn20hzXI3cEaUOuVVInJVqZ7jGr3VAwnxbl4PilMJTKFJuzq', 'rOGQh49Xd3GjpNG21WyVFEU42hQc3TxiZo7AHH3ZBEBhRILHadIt8sCoxVuPwSw2jQRLsd', 'Ld0QrMMyCbfjWiTtTLX9cidnHW8mdYIs5i2bqMCbtrCTInxIKidPxuxVcE8JTprgJiqKp0', 'dIMjb8ITOf9cePTSbZIrBpM442Y1z2I57dhyvVGfFTVyhE3XUUgVpWro1pKpz9gjx3pBoh', 'sgtyxKArgoVW1gjHUuUslxIyzFJu8NJUQOKlELwM87xougnmhaZe9Vu4csNnyWhMoasWIJ', 'o11INyH6eEs1jS0oCuwQhNg4SSNGdkrK6yq1rxUI2zoMKAc13G9XfzockyV1YJaI45cq9s', 'SfGhoBIiOjsN9BggeY51T5ZGJRXvtcL2dDtw1kxpLReTrAGryZGuylmR1vLlkMip4bxDO7'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, 6yQiSQt0BREh.cs	High entropy of concatenated method names: 'PY4hExoQsQGM', 's2nu1oyVzQ6g', 'YLx3ERACValY', 'lzrDTVKsrrMA', 'wJR9RdWNNQY1', 'MkSvlVTAFmod', 'yTLZSxneqi9f', 'SnVF9Lhygd0T', 'CksPwvrj69u6', 'inJ4elK2WRTC'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, fJu9pg3l7E8K.cs	High entropy of concatenated method names: 'g2Rqa83dChjq', 'SBvWZiR3nxhS', 'HZvPGrygdHsU', 'RR6YGV7wglKA', 'IW5ZlXjnn7yC', 'rb0wzWfVlI3I', 'DfGSgnz7YqUh', 'e7G5tMvpIz5K', 'SCS8NWUV5lay', '_3LK0HM0e0Q1M'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	High entropy of concatenated method names: 'OjkOaBJZg0gzEOMm3lsWkJHVJvlr0xHxxoub58q4UIljIy1lWeNArkOV04T2URy63OTwxV', '_3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p', 'weNdZLrvJSGCq5nIyRRzfRokTIl5eNfqqF2pUC6GDdrjW1Hfau5GZOTssDL2qKQaTBlBJ2', 'zGln2vIwK5e4pFoZNoAV8qzwdF5c2PhoEuOR6RlEP5PqXUKYST0ofFMNiNlMrvstPIxIeh', 'QHgvZB5bjlKbQS5G3k6BOQ5sYPTjqrYukqL3viGUdJRuFTt6wuOgAuwbYDbC1br4v57kIb', 'UifJa03rqtBIwZRePq3IUVwkLE1C5eagHicLG9s7no3xj2j51q8NMvl76MJtZsSBnJcUPl', 'vKWTO2vqshwV4SmqlvycNPwQkZdSTwvwgkgr2ZNbWI4fs9EhgBlB0seTIjPQWiZvZaA9Vx', 'HJ0cqs105tv8YLAQTFziNfctZri4AnNoD3LiYa6L11pdB0OyDK4bV7KqB7mIencnWlSXPo', 'IW2h1n0AMZMrbeOq7SeIaNvvFIzpqd9Mk6tGkxzRnuur9Ihkn6FAFK24fPIp5b8UOq7qZZ', 'Mm9KY0ZMAN3G'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, JxQAliya76a2.cs	High entropy of concatenated method names: 'ZDVwaxisl2o5', 'oXdqeiay2D5q', 'vR22zuNmO2xr', '_8Y3aqIDqwDLA', '_22aqvM8IIice', 'jOpoVm0mgGNR', 'Tk2ssNWTb1of', 'jrzuIncpGpoI', 'dQzYtDb4YqD7', 'zRlwxxokdEht'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	High entropy of concatenated method names: 'zWTPtLQMYU0rTtTK7qqVh4ZNRaOTw43ZkrlBfqqN1ALmT6Jf2LfxDSz840vHikhlhQe12y', 'Ft5FapbZcu1uQseBS9ij9kTQEEKkYnytIeuXdZkmyKVjIqhNeEGSbLBMlGeswpmsIPQQIp', 'qZgishkEAcQ1Tq1gK63UJLbFULHvzojbeClVJHXoQ66ZhUg3qRAEUC1IRlHlvIcWabPkZw', 'u3Vjk6S2TiJXFCjv4B35EgBPrsaX6SQPxz25jQMVXfTo5Tb6fvq6pskoMR69zm9R1IwDor', 'MarFEQXeylS9IxA1OP305ziF0waXmN6CNYf3xvZ1ft9AKph7utYF7aCST3CBXhIaMdpMbW', 'iu6vA7alGKAKSd1ijfepWfs7azdE8iFOrT5yfQ7bIykTeXdmDtVqwBXDzXSNqreSjSAvEh', 'eO3NCctRUjtciDXHJOQrDongOQPaMcMfUZeHPs6fojNaZgLcyG8ybZbxl9OGSKIZuI9lKy', 'nRlCOmB4aGv9obtn81oaPoRhkPrJIQb1FY4OFPSoIa0Uk0BZKWChbigcioc1Z58c9sv9Rp', 's6ExhAVXHzOjD8pPuAkPL86Mm1PkYrXMKocqVihZwhL1mRkyp7bnT8IXy5uhHUubQAi52e', 'XU6Zlm70WrfDXfJRZU7M1RB5o5HQujEM3GrtWAXBiViRmdjwaxMaAegeO8Mm5WWWSGVeVp'
Source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, h8QBktZZRE6od2jlJLZPAPSz4yFzgmUUtdkVINugjjgG2pCavaoGeFJUyVIoo5LoNkLFYw.cs	High entropy of concatenated method names: 'BSJMs7er22BxVCal6u5x7ozO5Qd6Bg8ByfcQiKKoFvhzpYQumZ3NUBy9VT5by68wW0tbVO', 'Vxb0BZi8KdXZpav5LmrgAcBMUUluVzcjmCPP8lEuc9ylQxTAOJkS5DJFHtET2c1dHUnUYf', 'KHgk64pgVz54KIrJuhOR70cMGKSESRFJZNozNCx8CC8JdOUfCzrZiv7Qgq7Vg6KjW2v2y5', 'Ej1Ak6MXqQCOgblZ88NofCzn20hzXI3cEaUOuVVInJVqZ7jGr3VAwnxbl4PilMJTKFJuzq', 'rOGQh49Xd3GjpNG21WyVFEU42hQc3TxiZo7AHH3ZBEBhRILHadIt8sCoxVuPwSw2jQRLsd', 'Ld0QrMMyCbfjWiTtTLX9cidnHW8mdYIs5i2bqMCbtrCTInxIKidPxuxVcE8JTprgJiqKp0', 'dIMjb8ITOf9cePTSbZIrBpM442Y1z2I57dhyvVGfFTVyhE3XUUgVpWro1pKpz9gjx3pBoh', 'sgtyxKArgoVW1gjHUuUslxIyzFJu8NJUQOKlELwM87xougnmhaZe9Vu4csNnyWhMoasWIJ', 'o11INyH6eEs1jS0oCuwQhNg4SSNGdkrK6yq1rxUI2zoMKAc13G9XfzockyV1YJaI45cq9s', 'SfGhoBIiOjsN9BggeY51T5ZGJRXvtcL2dDtw1kxpLReTrAGryZGuylmR1vLlkMip4bxDO7'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, 6yQiSQt0BREh.cs	High entropy of concatenated method names: 'PY4hExoQsQGM', 's2nu1oyVzQ6g', 'YLx3ERACValY', 'lzrDTVKsrrMA', 'wJR9RdWNNQY1', 'MkSvlVTAFmod', 'yTLZSxneqi9f', 'SnVF9Lhygd0T', 'CksPwvrj69u6', 'inJ4elK2WRTC'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, fJu9pg3l7E8K.cs	High entropy of concatenated method names: 'g2Rqa83dChjq', 'SBvWZiR3nxhS', 'HZvPGrygdHsU', 'RR6YGV7wglKA', 'IW5ZlXjnn7yC', 'rb0wzWfVlI3I', 'DfGSgnz7YqUh', 'e7G5tMvpIz5K', 'SCS8NWUV5lay', '_3LK0HM0e0Q1M'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	High entropy of concatenated method names: 'OjkOaBJZg0gzEOMm3lsWkJHVJvlr0xHxxoub58q4UIljIy1lWeNArkOV04T2URy63OTwxV', '_3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p', 'weNdZLrvJSGCq5nIyRRzfRokTIl5eNfqqF2pUC6GDdrjW1Hfau5GZOTssDL2qKQaTBlBJ2', 'zGln2vIwK5e4pFoZNoAV8qzwdF5c2PhoEuOR6RlEP5PqXUKYST0ofFMNiNlMrvstPIxIeh', 'QHgvZB5bjlKbQS5G3k6BOQ5sYPTjqrYukqL3viGUdJRuFTt6wuOgAuwbYDbC1br4v57kIb', 'UifJa03rqtBIwZRePq3IUVwkLE1C5eagHicLG9s7no3xj2j51q8NMvl76MJtZsSBnJcUPl', 'vKWTO2vqshwV4SmqlvycNPwQkZdSTwvwgkgr2ZNbWI4fs9EhgBlB0seTIjPQWiZvZaA9Vx', 'HJ0cqs105tv8YLAQTFziNfctZri4AnNoD3LiYa6L11pdB0OyDK4bV7KqB7mIencnWlSXPo', 'IW2h1n0AMZMrbeOq7SeIaNvvFIzpqd9Mk6tGkxzRnuur9Ihkn6FAFK24fPIp5b8UOq7qZZ', 'Mm9KY0ZMAN3G'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, JxQAliya76a2.cs	High entropy of concatenated method names: 'ZDVwaxisl2o5', 'oXdqeiay2D5q', 'vR22zuNmO2xr', '_8Y3aqIDqwDLA', '_22aqvM8IIice', 'jOpoVm0mgGNR', 'Tk2ssNWTb1of', 'jrzuIncpGpoI', 'dQzYtDb4YqD7', 'zRlwxxokdEht'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	High entropy of concatenated method names: 'zWTPtLQMYU0rTtTK7qqVh4ZNRaOTw43ZkrlBfqqN1ALmT6Jf2LfxDSz840vHikhlhQe12y', 'Ft5FapbZcu1uQseBS9ij9kTQEEKkYnytIeuXdZkmyKVjIqhNeEGSbLBMlGeswpmsIPQQIp', 'qZgishkEAcQ1Tq1gK63UJLbFULHvzojbeClVJHXoQ66ZhUg3qRAEUC1IRlHlvIcWabPkZw', 'u3Vjk6S2TiJXFCjv4B35EgBPrsaX6SQPxz25jQMVXfTo5Tb6fvq6pskoMR69zm9R1IwDor', 'MarFEQXeylS9IxA1OP305ziF0waXmN6CNYf3xvZ1ft9AKph7utYF7aCST3CBXhIaMdpMbW', 'iu6vA7alGKAKSd1ijfepWfs7azdE8iFOrT5yfQ7bIykTeXdmDtVqwBXDzXSNqreSjSAvEh', 'eO3NCctRUjtciDXHJOQrDongOQPaMcMfUZeHPs6fojNaZgLcyG8ybZbxl9OGSKIZuI9lKy', 'nRlCOmB4aGv9obtn81oaPoRhkPrJIQb1FY4OFPSoIa0Uk0BZKWChbigcioc1Z58c9sv9Rp', 's6ExhAVXHzOjD8pPuAkPL86Mm1PkYrXMKocqVihZwhL1mRkyp7bnT8IXy5uhHUubQAi52e', 'XU6Zlm70WrfDXfJRZU7M1RB5o5HQujEM3GrtWAXBiViRmdjwaxMaAegeO8Mm5WWWSGVeVp'
Source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, h8QBktZZRE6od2jlJLZPAPSz4yFzgmUUtdkVINugjjgG2pCavaoGeFJUyVIoo5LoNkLFYw.cs	High entropy of concatenated method names: 'BSJMs7er22BxVCal6u5x7ozO5Qd6Bg8ByfcQiKKoFvhzpYQumZ3NUBy9VT5by68wW0tbVO', 'Vxb0BZi8KdXZpav5LmrgAcBMUUluVzcjmCPP8lEuc9ylQxTAOJkS5DJFHtET2c1dHUnUYf', 'KHgk64pgVz54KIrJuhOR70cMGKSESRFJZNozNCx8CC8JdOUfCzrZiv7Qgq7Vg6KjW2v2y5', 'Ej1Ak6MXqQCOgblZ88NofCzn20hzXI3cEaUOuVVInJVqZ7jGr3VAwnxbl4PilMJTKFJuzq', 'rOGQh49Xd3GjpNG21WyVFEU42hQc3TxiZo7AHH3ZBEBhRILHadIt8sCoxVuPwSw2jQRLsd', 'Ld0QrMMyCbfjWiTtTLX9cidnHW8mdYIs5i2bqMCbtrCTInxIKidPxuxVcE8JTprgJiqKp0', 'dIMjb8ITOf9cePTSbZIrBpM442Y1z2I57dhyvVGfFTVyhE3XUUgVpWro1pKpz9gjx3pBoh', 'sgtyxKArgoVW1gjHUuUslxIyzFJu8NJUQOKlELwM87xougnmhaZe9Vu4csNnyWhMoasWIJ', 'o11INyH6eEs1jS0oCuwQhNg4SSNGdkrK6yq1rxUI2zoMKAc13G9XfzockyV1YJaI45cq9s', 'SfGhoBIiOjsN9BggeY51T5ZGJRXvtcL2dDtw1kxpLReTrAGryZGuylmR1vLlkMip4bxDO7'
Source: notepad.exe.1.dr, 6yQiSQt0BREh.cs	High entropy of concatenated method names: 'PY4hExoQsQGM', 's2nu1oyVzQ6g', 'YLx3ERACValY', 'lzrDTVKsrrMA', 'wJR9RdWNNQY1', 'MkSvlVTAFmod', 'yTLZSxneqi9f', 'SnVF9Lhygd0T', 'CksPwvrj69u6', 'inJ4elK2WRTC'
Source: notepad.exe.1.dr, fJu9pg3l7E8K.cs	High entropy of concatenated method names: 'g2Rqa83dChjq', 'SBvWZiR3nxhS', 'HZvPGrygdHsU', 'RR6YGV7wglKA', 'IW5ZlXjnn7yC', 'rb0wzWfVlI3I', 'DfGSgnz7YqUh', 'e7G5tMvpIz5K', 'SCS8NWUV5lay', '_3LK0HM0e0Q1M'
Source: notepad.exe.1.dr, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	High entropy of concatenated method names: 'OjkOaBJZg0gzEOMm3lsWkJHVJvlr0xHxxoub58q4UIljIy1lWeNArkOV04T2URy63OTwxV', '_3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p', 'weNdZLrvJSGCq5nIyRRzfRokTIl5eNfqqF2pUC6GDdrjW1Hfau5GZOTssDL2qKQaTBlBJ2', 'zGln2vIwK5e4pFoZNoAV8qzwdF5c2PhoEuOR6RlEP5PqXUKYST0ofFMNiNlMrvstPIxIeh', 'QHgvZB5bjlKbQS5G3k6BOQ5sYPTjqrYukqL3viGUdJRuFTt6wuOgAuwbYDbC1br4v57kIb', 'UifJa03rqtBIwZRePq3IUVwkLE1C5eagHicLG9s7no3xj2j51q8NMvl76MJtZsSBnJcUPl', 'vKWTO2vqshwV4SmqlvycNPwQkZdSTwvwgkgr2ZNbWI4fs9EhgBlB0seTIjPQWiZvZaA9Vx', 'HJ0cqs105tv8YLAQTFziNfctZri4AnNoD3LiYa6L11pdB0OyDK4bV7KqB7mIencnWlSXPo', 'IW2h1n0AMZMrbeOq7SeIaNvvFIzpqd9Mk6tGkxzRnuur9Ihkn6FAFK24fPIp5b8UOq7qZZ', 'Mm9KY0ZMAN3G'
Source: notepad.exe.1.dr, JxQAliya76a2.cs	High entropy of concatenated method names: 'ZDVwaxisl2o5', 'oXdqeiay2D5q', 'vR22zuNmO2xr', '_8Y3aqIDqwDLA', '_22aqvM8IIice', 'jOpoVm0mgGNR', 'Tk2ssNWTb1of', 'jrzuIncpGpoI', 'dQzYtDb4YqD7', 'zRlwxxokdEht'
Source: notepad.exe.1.dr, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	High entropy of concatenated method names: 'zWTPtLQMYU0rTtTK7qqVh4ZNRaOTw43ZkrlBfqqN1ALmT6Jf2LfxDSz840vHikhlhQe12y', 'Ft5FapbZcu1uQseBS9ij9kTQEEKkYnytIeuXdZkmyKVjIqhNeEGSbLBMlGeswpmsIPQQIp', 'qZgishkEAcQ1Tq1gK63UJLbFULHvzojbeClVJHXoQ66ZhUg3qRAEUC1IRlHlvIcWabPkZw', 'u3Vjk6S2TiJXFCjv4B35EgBPrsaX6SQPxz25jQMVXfTo5Tb6fvq6pskoMR69zm9R1IwDor', 'MarFEQXeylS9IxA1OP305ziF0waXmN6CNYf3xvZ1ft9AKph7utYF7aCST3CBXhIaMdpMbW', 'iu6vA7alGKAKSd1ijfepWfs7azdE8iFOrT5yfQ7bIykTeXdmDtVqwBXDzXSNqreSjSAvEh', 'eO3NCctRUjtciDXHJOQrDongOQPaMcMfUZeHPs6fojNaZgLcyG8ybZbxl9OGSKIZuI9lKy', 'nRlCOmB4aGv9obtn81oaPoRhkPrJIQb1FY4OFPSoIa0Uk0BZKWChbigcioc1Z58c9sv9Rp', 's6ExhAVXHzOjD8pPuAkPL86Mm1PkYrXMKocqVihZwhL1mRkyp7bnT8IXy5uhHUubQAi52e', 'XU6Zlm70WrfDXfJRZU7M1RB5o5HQujEM3GrtWAXBiViRmdjwaxMaAegeO8Mm5WWWSGVeVp'
Source: notepad.exe.1.dr, h8QBktZZRE6od2jlJLZPAPSz4yFzgmUUtdkVINugjjgG2pCavaoGeFJUyVIoo5LoNkLFYw.cs	High entropy of concatenated method names: 'BSJMs7er22BxVCal6u5x7ozO5Qd6Bg8ByfcQiKKoFvhzpYQumZ3NUBy9VT5by68wW0tbVO', 'Vxb0BZi8KdXZpav5LmrgAcBMUUluVzcjmCPP8lEuc9ylQxTAOJkS5DJFHtET2c1dHUnUYf', 'KHgk64pgVz54KIrJuhOR70cMGKSESRFJZNozNCx8CC8JdOUfCzrZiv7Qgq7Vg6KjW2v2y5', 'Ej1Ak6MXqQCOgblZ88NofCzn20hzXI3cEaUOuVVInJVqZ7jGr3VAwnxbl4PilMJTKFJuzq', 'rOGQh49Xd3GjpNG21WyVFEU42hQc3TxiZo7AHH3ZBEBhRILHadIt8sCoxVuPwSw2jQRLsd', 'Ld0QrMMyCbfjWiTtTLX9cidnHW8mdYIs5i2bqMCbtrCTInxIKidPxuxVcE8JTprgJiqKp0', 'dIMjb8ITOf9cePTSbZIrBpM442Y1z2I57dhyvVGfFTVyhE3XUUgVpWro1pKpz9gjx3pBoh', 'sgtyxKArgoVW1gjHUuUslxIyzFJu8NJUQOKlELwM87xougnmhaZe9Vu4csNnyWhMoasWIJ', 'o11INyH6eEs1jS0oCuwQhNg4SSNGdkrK6yq1rxUI2zoMKAc13G9XfzockyV1YJaI45cq9s', 'SfGhoBIiOjsN9BggeY51T5ZGJRXvtcL2dDtw1kxpLReTrAGryZGuylmR1vLlkMip4bxDO7'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, 6yQiSQt0BREh.cs	High entropy of concatenated method names: 'PY4hExoQsQGM', 's2nu1oyVzQ6g', 'YLx3ERACValY', 'lzrDTVKsrrMA', 'wJR9RdWNNQY1', 'MkSvlVTAFmod', 'yTLZSxneqi9f', 'SnVF9Lhygd0T', 'CksPwvrj69u6', 'inJ4elK2WRTC'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, fJu9pg3l7E8K.cs	High entropy of concatenated method names: 'g2Rqa83dChjq', 'SBvWZiR3nxhS', 'HZvPGrygdHsU', 'RR6YGV7wglKA', 'IW5ZlXjnn7yC', 'rb0wzWfVlI3I', 'DfGSgnz7YqUh', 'e7G5tMvpIz5K', 'SCS8NWUV5lay', '_3LK0HM0e0Q1M'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, EdJ4CeJbugNBfIMA600M6nMpEZ19gupJA1SWlazRKPqmFOPCQjjMEhLCP9hlKCAXt0RYax.cs	High entropy of concatenated method names: 'OjkOaBJZg0gzEOMm3lsWkJHVJvlr0xHxxoub58q4UIljIy1lWeNArkOV04T2URy63OTwxV', '_3iY64OSt06N0qZmsEMnKNxF9UfwNOQgJ4KA9YGhRo65TxGvWnfl5JfANnI918u56NuCF6p', 'weNdZLrvJSGCq5nIyRRzfRokTIl5eNfqqF2pUC6GDdrjW1Hfau5GZOTssDL2qKQaTBlBJ2', 'zGln2vIwK5e4pFoZNoAV8qzwdF5c2PhoEuOR6RlEP5PqXUKYST0ofFMNiNlMrvstPIxIeh', 'QHgvZB5bjlKbQS5G3k6BOQ5sYPTjqrYukqL3viGUdJRuFTt6wuOgAuwbYDbC1br4v57kIb', 'UifJa03rqtBIwZRePq3IUVwkLE1C5eagHicLG9s7no3xj2j51q8NMvl76MJtZsSBnJcUPl', 'vKWTO2vqshwV4SmqlvycNPwQkZdSTwvwgkgr2ZNbWI4fs9EhgBlB0seTIjPQWiZvZaA9Vx', 'HJ0cqs105tv8YLAQTFziNfctZri4AnNoD3LiYa6L11pdB0OyDK4bV7KqB7mIencnWlSXPo', 'IW2h1n0AMZMrbeOq7SeIaNvvFIzpqd9Mk6tGkxzRnuur9Ihkn6FAFK24fPIp5b8UOq7qZZ', 'Mm9KY0ZMAN3G'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, JxQAliya76a2.cs	High entropy of concatenated method names: 'ZDVwaxisl2o5', 'oXdqeiay2D5q', 'vR22zuNmO2xr', '_8Y3aqIDqwDLA', '_22aqvM8IIice', 'jOpoVm0mgGNR', 'Tk2ssNWTb1of', 'jrzuIncpGpoI', 'dQzYtDb4YqD7', 'zRlwxxokdEht'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, C8ULLE9LF3P6ZpeR2O10isiOSx1CowjBHCKborsQCDHd5VZprdMYEg5rClI3i1UqN2NpHv.cs	High entropy of concatenated method names: 'zWTPtLQMYU0rTtTK7qqVh4ZNRaOTw43ZkrlBfqqN1ALmT6Jf2LfxDSz840vHikhlhQe12y', 'Ft5FapbZcu1uQseBS9ij9kTQEEKkYnytIeuXdZkmyKVjIqhNeEGSbLBMlGeswpmsIPQQIp', 'qZgishkEAcQ1Tq1gK63UJLbFULHvzojbeClVJHXoQ66ZhUg3qRAEUC1IRlHlvIcWabPkZw', 'u3Vjk6S2TiJXFCjv4B35EgBPrsaX6SQPxz25jQMVXfTo5Tb6fvq6pskoMR69zm9R1IwDor', 'MarFEQXeylS9IxA1OP305ziF0waXmN6CNYf3xvZ1ft9AKph7utYF7aCST3CBXhIaMdpMbW', 'iu6vA7alGKAKSd1ijfepWfs7azdE8iFOrT5yfQ7bIykTeXdmDtVqwBXDzXSNqreSjSAvEh', 'eO3NCctRUjtciDXHJOQrDongOQPaMcMfUZeHPs6fojNaZgLcyG8ybZbxl9OGSKIZuI9lKy', 'nRlCOmB4aGv9obtn81oaPoRhkPrJIQb1FY4OFPSoIa0Uk0BZKWChbigcioc1Z58c9sv9Rp', 's6ExhAVXHzOjD8pPuAkPL86Mm1PkYrXMKocqVihZwhL1mRkyp7bnT8IXy5uhHUubQAi52e', 'XU6Zlm70WrfDXfJRZU7M1RB5o5HQujEM3GrtWAXBiViRmdjwaxMaAegeO8Mm5WWWSGVeVp'
Source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, h8QBktZZRE6od2jlJLZPAPSz4yFzgmUUtdkVINugjjgG2pCavaoGeFJUyVIoo5LoNkLFYw.cs	High entropy of concatenated method names: 'BSJMs7er22BxVCal6u5x7ozO5Qd6Bg8ByfcQiKKoFvhzpYQumZ3NUBy9VT5by68wW0tbVO', 'Vxb0BZi8KdXZpav5LmrgAcBMUUluVzcjmCPP8lEuc9ylQxTAOJkS5DJFHtET2c1dHUnUYf', 'KHgk64pgVz54KIrJuhOR70cMGKSESRFJZNozNCx8CC8JdOUfCzrZiv7Qgq7Vg6KjW2v2y5', 'Ej1Ak6MXqQCOgblZ88NofCzn20hzXI3cEaUOuVVInJVqZ7jGr3VAwnxbl4PilMJTKFJuzq', 'rOGQh49Xd3GjpNG21WyVFEU42hQc3TxiZo7AHH3ZBEBhRILHadIt8sCoxVuPwSw2jQRLsd', 'Ld0QrMMyCbfjWiTtTLX9cidnHW8mdYIs5i2bqMCbtrCTInxIKidPxuxVcE8JTprgJiqKp0', 'dIMjb8ITOf9cePTSbZIrBpM442Y1z2I57dhyvVGfFTVyhE3XUUgVpWro1pKpz9gjx3pBoh', 'sgtyxKArgoVW1gjHUuUslxIyzFJu8NJUQOKlELwM87xougnmhaZe9Vu4csNnyWhMoasWIJ', 'o11INyH6eEs1jS0oCuwQhNg4SSNGdkrK6yq1rxUI2zoMKAc13G9XfzockyV1YJaI45cq9s', 'SfGhoBIiOjsN9BggeY51T5ZGJRXvtcL2dDtw1kxpLReTrAGryZGuylmR1vLlkMip4bxDO7'

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	File created: C:\Users\user\AppData\Roaming\notepad.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI10A6.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	File created: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files\Modrinth App\Modrinth App.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI4265.tmp	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe"

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\notepad.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\notepad.lnk	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\~odrinth App.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk~RF6a340c.TMP	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run notepad			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run notepad			Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Check if machine is in data center or colocation facility

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, Modrinth_Installer.exe, 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, Modrinth_Installer.exe, 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Memory allocated: C50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Memory allocated: 1AAC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 730000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1A530000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 15A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1B020000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: C60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1AA30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 960000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1A710000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 580000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1A3F0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: C80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1A960000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 15D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\notepad.exe	Memory allocated: 1B090000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Window / User API: threadDelayed 6864			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Window / User API: threadDelayed 2982			Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI10A6.tmp			Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI4265.tmp			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe TID: 6896	Thread sleep time: -12912720851596678s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 6188	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 7316	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 8164	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 7480	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 1988	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\notepad.exe TID: 6220	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\wasm FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\blob_storage\657cea3d-2792-4a0a-b33c-b65fb74c1a38 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data FullSizeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\notepad.exe	Thread delayed: delay time: 922337203685477

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Network Persistent State
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\562f14b7-8a1a-48f1-b5fc-919e31247d70.tmp
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\

Source: msedgewebview2.exe, 0000000D.00000002.4152619609.000001480226B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: msedgewebview2.exe, 0000000D.00000002.4186381619.00000148030E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware Virtual USB Mouse
Source: msedgewebview2.exe, 0000000D.00000002.4184570938.0000014802F48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=aa7032dd-8929-45a6-9711-1ba42a06561f
Source: Modrinth.exe, 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: vmware
Source: Modrinth App.exe, 0000000B.00000002.4157522988.000001CACC5E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllHC
Source: Modrinth.exe, 00000001.00000002.4151417363.000000001B944000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.4192344946.000001AAD1241000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000011.00000002.4134968636.0000024EEB64A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Code function: 1_2_00007FFD9BAB79B1 CheckRemoteDebuggerPresent,

1_2_00007FFD9BAB79B1

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\notepad.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Users\user\AppData\Local\Temp\Modrinth.exe "C:\Users\user\AppData\Local\Temp\Modrinth.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Modrinth_Installer.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files\Modrinth App\Modrinth App.exe "C:\Program Files\Modrinth App\Modrinth App.exe"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2

Source: C:\Program Files\Modrinth App\Modrinth App.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=mswebooui,mspdfooui,mssmartscreenprotection --enable-features=mojoipcz --lang=en-gb --mojo-named-platform-channel-pipe=7628.7672.3230350393833385459
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.modrinth.theseus\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.modrinth.theseus\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadoaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaabeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.modrinth.theseus\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.modrinth.theseus\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.modrinth.theseus\ebwebview" --webview-exe-name="modrinth app.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadoaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaabeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Modrinth.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation	Jump to behavior
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\profiles VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\profiles VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\profiles VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\tags.json VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\metadata.json VolumeInformation
Source: C:\Program Files\Modrinth App\Modrinth App.exe	Queries volume information: C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\WidevineCdm\manifest.json VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\notepad.exe	Queries volume information: C:\Users\user\AppData\Roaming\notepad.exe VolumeInformation

Source: C:\Program Files\Modrinth App\Modrinth App.exe

Code function: 11_2_00007FF788FB4ED4 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

11_2_00007FF788FB4ED4

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Modrinth.exe, 00000001.00000002.4151417363.000000001B944000.00000004.00000020.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4153957515.000000001B9FD000.00000004.00000020.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4153957515.000000001B9CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth.exe, 00000001.00000002.4118905304.0000000000BC1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected XWorm

Source: Yara match	File source: Modrinth_Installer.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.Modrinth.exe.12ad1a78.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.0.Modrinth.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.44b360.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Modrinth_Installer.exe.cf1158.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Modrinth_Installer.exe PID: 6944, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Modrinth.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\notepad.exe, type: DROPPED

Remote Access Functionality

Yara detected XWorm

Source: Yara match	File source: Modrinth_Installer.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.44b360.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Modrinth_Installer.exe.cf1158.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.Modrinth.exe.12ad1a78.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.Modrinth.exe.12ad1a78.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.0.Modrinth.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.44b360.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Modrinth_Installer.exe.cf1158.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Modrinth_Installer.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Modrinth_Installer.exe PID: 6944, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Modrinth.exe PID: 7100, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\notepad.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	11 Input Capture	1 System Time Discovery	Remote Services	11 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 Windows Service	1 Windows Service	1 Deobfuscate/Decode Files or Information	LSASS Memory	11 Peripheral Device Discovery	Remote Desktop Protocol	11 Input Capture	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	11 Process Injection	1 Obfuscated Files or Information	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	21 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	2 Software Packing	NTDS	34 System Information Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	21 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	1 Query Registry	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 File Deletion	Cached Domain Credentials	441 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	13 Masquerading	DCSync	1 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	151 Virtualization/Sandbox Evasion	Proc Filesystem	151 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	Dynamic API Resolution	Network Sniffing	1 Remote System Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	Stripped Payloads	Input Capture	1 System Network Configuration Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Modrinth_Installer.exe	100%	Avira	DR/Delphi.Gen
Modrinth_Installer.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\Modrinth.exe	100%	Avira	HEUR/AGEN.1311620
C:\Users\user\AppData\Local\Temp\Modrinth.exe	100%	Joe Sandbox ML
C:\Program Files\Modrinth App\Modrinth App.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI10A6.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI4265.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://twitter.com/intent/tweet?text=	0%	URL Reputation	safe
https://tootpick.org/#text=	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.20-pre6.json.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/quilt/v0/versions/0.22.0.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc3.json.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1059.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1392.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1091.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1301.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.13.1.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre2.jsonson	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1460.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.14.2.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.12.0.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1047.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1085.json/D	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.15.9.json&q	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/15w32a.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.174.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.99.json344K	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1402.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1088.jsonzD	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.16.0.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1359.jsonmB	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.206.jsonle	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1133.jsongC	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1031.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1487.jsonUA	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1334.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1409.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1484.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1459.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1043.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre1.jsonjson	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.11.5.jsonJ	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1025.json6E	0%	Avira URL Cloud	safe
https://meta.modrib	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1433.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1078.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1095.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1308.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/quilt/v0/versions/0.20.2.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.1-rc3.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.4.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1305.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.109.jsoneri	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1069.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/quilt/v0/versions/0.23.1.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1014.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1375.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/quilt/v0/versions/0.26.0.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1113.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.12.7.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1444.json&As	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.114.json47A	0%	Avira URL Cloud	safe
https://tauri.localhost	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1437.jsonDA	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/14w34d.json	0%	Avira URL Cloud	safe
https://api.modrinth.com/v2/search?facets=[[%22project_type:mod%22]]&limit=10&index=follows	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre2.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.20-pre7.jsona.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1464.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1324.jsonrB	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1354.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1479.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1463.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.11.0.jsonf	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/23w07a.jsoneta.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1493.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/assets/legacy.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.12.8.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1070.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1325.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.15.7.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/assets/14w25a.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.100.json.mL	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre3.jsonjsonq	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.84.jsondri	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/assets/14w31a.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1131.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/23w18a.jsoneta.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1317.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.jsonB	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1326.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json3B	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.14.3.jsonR	0%	Avira URL Cloud	safe
https://meta.modrinth.com/fabric/v0/versions/0.14.9.json	0%	Avira URL Cloud	safe
https://modrinth.com/$	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/22w44a.jsoneta.jsono	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc1.json.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1311.json?C	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1087.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1316.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1132.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1310.json	0%	Avira URL Cloud	safe
https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre4.jsonjson	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
api.modrinth.com	104.18.23.35	true	false	unknown
meta.modrinth.com	104.18.22.35	true	false	unknown
ip-api.com	208.95.112.1	true	true	unknown
she-vocal.gl.at.ply.gg	147.185.221.21	true	true	unknown
launcher-files.modrinth.com	104.18.22.35	true	false	unknown
cdn-raw.modrinth.com	104.18.22.35	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.modrinth.com/v2/search?facets=[[%22project_type:mod%22]]&limit=10&index=follows	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://meta.modrinth.com/minecraft/v0/versions/1.20-pre6.json.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.13.1.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.991.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://meta.modrinth.com/quilt/v0/versions/0.22.0.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1091.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1392.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc3.json.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1059.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tootpick.org/#text=	Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1301.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre2.jsonson	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.14.2.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1047.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1085.json/D	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1460.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/15w32a.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939546.0000017F008C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.174.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1943496276.000001CACDC74000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.12.0.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.15.9.json&q	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.99.json344K	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1402.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1359.jsonmB	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1088.jsonzD	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.16.0.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.206.jsonle	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1133.jsongC	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1031.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1334.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1409.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1487.jsonUA	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1484.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre1.jsonjson	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1459.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.11.5.jsonJ	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1043.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1078.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1025.json6E	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1433.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1095.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrib	Modrinth App.exe, 0000000B.00000003.1974312999.000001CACE2C4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4171325523.000001CACE2C4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.1-rc3.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC66A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC66D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC66C000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2193813840.0000017F008AA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1308.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/quilt/v0/versions/0.20.2.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.4.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976112484.000001CACDF0D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978192163.000001CACC70A000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4168398438.000001CACDF1E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981831821.000001CACC710000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1305.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1014.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/quilt/v0/versions/0.23.1.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945514448.000001CACE2CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944767753.000001CACE2C8000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939711081.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935646372.000001CACE2BE000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1951558738.000001CACE2BF000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.109.jsoneri	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1375.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/quilt/v0/versions/0.26.0.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952597030.000001CACDEFB000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2194155771.0000017F00A42000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1956470705.0000017F004C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1069.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1113.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.12.7.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1444.json&As	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tauri.localhost	Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1897030734.0000061C0077C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896775448.0000061C008AC000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896554810.0000061C0077C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896977967.0000061C00884000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896670014.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1975415376.000001CACE17E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1896554810.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933655064.0000061C0033C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4178268046.0000061C002D0000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892985940.0000061C0023C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC677000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1897030734.0000061C00754000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1861146952.000001CACA483000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.114.json47A	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.2.1437.jsonDA	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/14w34d.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre2.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2193813840.0000017F008AA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?text=	Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893381436.0000061C0060C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1891928331.000001CACC612000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892071890.000001CACC663000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893517807.0000061C0066C000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1464.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.20-pre7.jsona.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1479.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1324.jsonrB	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1354.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/23w07a.jsoneta.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.11.0.jsonf	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1463.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/assets/legacy.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981639042.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164640913.000001CACDBF6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1950827927.000001CACE148000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978129158.000001CACDBF0000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.3.1493.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.12.8.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1070.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1325.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/assets/14w25a.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939978330.000001CACC734000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974060307.000001CACC734000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1938047480.000001CACC73C000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931228109.000001CACC741000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1952023061.000001CACC73B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC72D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932998522.000001CACC73D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.3-pre3.jsonjsonq	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.15.7.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.0.1018.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1131.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.84.jsondri	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.13.2-forge-25.0.100.json.mL	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1936205233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/23w18a.jsoneta.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/assets/14w31a.json	Modrinth App.exe, 0000000B.00000002.4159971525.000001CACC6F9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937355807.000001CACC6CF000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932492331.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940171406.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4157522988.000001CACC5E2000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4163170624.000001CACDB84000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1974275977.000001CACE146000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1955704419.000001CACC6DD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979296256.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4169128346.000001CACE140000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1982984025.000001CACDB7F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1981444916.000001CACC6EA000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1932736839.000001CACC6E9000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1984671427.000001CACDB83000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946714950.000001CACC6CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1940745427.000001CACE141000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6E6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.2-rc1.json.jsonB	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1317.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1405.json3B	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1326.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/22w44a.jsoneta.jsono	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.14.3.jsonR	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/fabric/v0/versions/0.14.9.json	Modrinth App.exe, 0000000B.00000003.1938255395.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1930024320.000001CACC682000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1931960757.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1954908072.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4159618765.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1977048583.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4158669448.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979647446.000001CACC6CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944010571.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1941232434.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1933205424.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1969136233.000001CACC67E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1957183934.0000017F00442000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://modrinth.com/$	Modrinth App.exe, 0000000B.00000003.1895312362.0000061C00E04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895800204.000001CACDB31000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892416798.000001CACDC43000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894888314.0000061C01004000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895645054.0000061C00A04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894690565.0000061C01404000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892185742.000001CACDB3D000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894694904.0000061C01604000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1893802636.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1892585004.000001CACC616000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1895471263.0000061C00C04000.00000004.00000800.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1894005843.0000061C00804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894931348.0000014803A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894775825.0000014803C04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895391730.0000014803404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1894699684.0000014802A04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1895256014.0000014803604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.1894943319.000023A001404000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1311.json?C	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.19.4-rc1.json.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.1.1087.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1976190058.000001CACDC19000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1985100814.000001CACDC47000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4164890097.000001CACDC4F000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1980284791.000001CACDC30000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1978273504.000001CACDC2B000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.7.2-Forge10.12.2.1132.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1316.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/forge/v0/versions/1.8-Forge11.14.1.1310.json	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1934340999.000001CACE186000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945815054.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1935255157.000001CACE1BD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1939486966.000001CACE1CD000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000002.4173026064.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1937992991.000001CACE1CC000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1979078528.000001CACE323000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2199252291.0000017F00142000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000013.00000003.2192939787.0000017F00882000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://meta.modrinth.com/minecraft/v0/versions/1.20.2-pre4.jsonjson	Modrinth App.exe, 0000000B.00000003.1957599137.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1945103363.000001CACDE81000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1966993265.000001CACDE93000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1947817718.000001CACDEB7000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1946512004.000001CACDEB4000.00000004.00000020.00020000.00000000.sdmp, Modrinth App.exe, 0000000B.00000003.1944964026.000001CACDE6E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	true
130.211.34.183	unknown	United States	15169	GOOGLEUS	false
104.18.22.35	meta.modrinth.com	United States	13335	CLOUDFLARENETUS	false
104.18.23.35	api.modrinth.com	United States	13335	CLOUDFLARENETUS	false
147.185.221.21	she-vocal.gl.at.ply.gg	United States	12087	SALSGIVERUS	true
204.79.197.239	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1483227
Start date and time:	2024-07-26 21:25:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Modrinth_Installer.exe
Detection:	MAL
Classification:	mal72.troj.evad.mine.winEXE@33/193@11/8
EGA Information:	Successful, ratio: 8.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.42.16, 142.251.35.163, 142.251.40.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, l-0007.config.skype.com, config-edge-skype.l-0007.l-msedge.net, msedge.b.tlu.dl.delivery.mp.microsoft.com, ctldl.windowsupdate.com, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target Modrinth App.exe, PID 7628 because there are no executed function
Execution Graph export aborted for target msedgewebview2.exe, PID 8020 because there are no executed function
Execution Graph export aborted for target msedgewebview2.exe, PID 8052 because there are no executed function
Execution Graph export aborted for target msedgewebview2.exe, PID 8064 because there are no executed function
Execution Graph export aborted for target notepad.exe, PID 1068 because it is empty
Execution Graph export aborted for target notepad.exe, PID 2364 because it is empty
Execution Graph export aborted for target notepad.exe, PID 3300 because it is empty
Execution Graph export aborted for target notepad.exe, PID 4312 because it is empty
Execution Graph export aborted for target notepad.exe, PID 5864 because it is empty
Execution Graph export aborted for target notepad.exe, PID 7292 because it is empty
Execution Graph export aborted for target notepad.exe, PID 8116 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Modrinth_Installer.exe

Simulations

Behavior and APIs

Time	Type	Description
15:26:03	API Interceptor	17110794x Sleep call for process: Modrinth.exe modified
20:26:03	Task Scheduler	Run new task: notepad path: C:\Users\user\AppData\Roaming\notepad.exe
20:26:03	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run notepad C:\Users\user\AppData\Roaming\notepad.exe
20:26:12	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run notepad C:\Users\user\AppData\Roaming\notepad.exe
20:26:20	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\notepad.lnk

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
208.95.112.1	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse	ip-api.com/line/?fields=hosting
	CTIPUPiILj.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	ip-api.com/line/?fields=hosting
	Built.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	JGKjBsQrMc.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse	ip-api.com/json
	LisectAVT_2403002A_1.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	LisectAVT_2403002A_147.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	LisectAVT_2403002A_368.exe	Get hash	malicious	Blank Grabber, DCRat, Umbral Stealer	Browse	ip-api.com/json/?fields=225545
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	ip-api.com/line/?fields=hosting
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	ip-api.com/line/?fields=hosting
	LisectAVT_2403002A_52.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
147.185.221.21	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse
	sv6ieteV0j.exe	Get hash	malicious	Njrat, PureLog Stealer	Browse
	setup.exe	Get hash	malicious	RedLine	Browse
	setup.exe	Get hash	malicious	RedLine	Browse
	47up6MR64o.exe	Get hash	malicious	Njrat	Browse
	RdJ73GU3N1.exe	Get hash	malicious	Njrat	Browse
	python.exe	Get hash	malicious	XWorm	Browse
	setup.exe	Get hash	malicious	XWorm	Browse
	Avowed Beta.exe	Get hash	malicious	XWorm	Browse
	nebula.exe	Get hash	malicious	XWorm	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ip-api.com	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	CTIPUPiILj.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
	Built.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	JGKjBsQrMc.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse	208.95.112.1
	LisectAVT_2403002A_1.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	LisectAVT_2403002A_147.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	LisectAVT_2403002A_368.exe	Get hash	malicious	Blank Grabber, DCRat, Umbral Stealer	Browse	208.95.112.1
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	208.95.112.1
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	208.95.112.1
	LisectAVT_2403002A_52.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
chrome.cloudflare-dns.com	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	file.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Babadeda, Coinhive, Xmrig	Browse	162.159.61.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	https://disney.apexanalytix.com/Help/DownloadFile?ID=P%2fgMga3n7lQ%3d	Get hash	malicious	Unknown	Browse	172.64.41.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	file.exe	Get hash	malicious	Babadeda	Browse	162.159.61.3
cdn-raw.modrinth.com	Modrinth.exe	Get hash	malicious	DCRat	Browse	104.18.23.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://ringcentral-renarc.webflow.io/	Get hash	malicious	Unknown	Browse	104.18.28.203
	https://b8le2c5j.r.us-east-2.awstrack.me/L0/https:%2F%2Fslivtovara.ru%2Fbitrix%2Fredirect.php%3Fevent1=click_to_call%26event2=%26event3=%26goto=https:%2F%2F7qrw.wanianten.com%2FGhGNAL8%2F%23Pamy@derick.com/1/010f0190ec251e7b-a039cc69-e4b5-46b3-9c67-bbe921a600f9-000000/LLZuw2OBV0eOHt3bnXuAzTOkJoc=169	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	188.114.96.3
	https://www.mfsociety.org/page.php?pageID=787144692108%22%3E%3Cimg%20src%3D%22image.jpg%22%20onerror%3D%22var%20url1%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%20var%20url2%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%0D%0Avar%20url%20%3D%20%5B%27htt%27%2C%27ps%3A%2F%2Fw%27%2C%27ww%27%2C%27.da%27%2C%27ta%27%2C%274t%27%2C%27rai%27%2C%27l.co%27%2C%27m%2F2%27%2C%275P%27%2C%27BNZ%27%2C%2799%2F7C%27%2C%27DMX%27%2C%27ZZ%27%2C%27N%2F%3Fsub1%3D13%26sub2%3D350-15156%26sub3%3D1265-22455-21626%27%5D.join%28%27%27%29%3B%0D%0A%20url%20%3D%20url.replace%28%2F%2C%2Fg%2C%20%27%27%29%3B%20var%20win%20%3D%20window.open%28url%2C%20%27_self%27%29%3B%20win.opener%20%3D%20null%3B%20win.location.replace%28url%29%3B%22%3E#ALwqRdmzZAyXJwdL33Pq	Get hash	malicious	Unknown	Browse	104.17.25.14
	Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
	github_softwares_v1.18.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.159.243
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	https://intralinks.us.com/jallessI1Ae2APharrI1AsassoTxcz01coTxm	Get hash	malicious	HTMLPhisher	Browse	172.67.159.233
	https://mrlocksmithpenticton.com/mlc/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://new-sneww-online-nowz-all.azurewebsites.net/?referrer=appmetrica_tracking_id%3D173005530304969909%26ym_tracking_id%3D10094745761516744100	Get hash	malicious	Unknown	Browse	104.18.36.155
CLOUDFLARENETUS	https://ringcentral-renarc.webflow.io/	Get hash	malicious	Unknown	Browse	104.18.28.203
	https://b8le2c5j.r.us-east-2.awstrack.me/L0/https:%2F%2Fslivtovara.ru%2Fbitrix%2Fredirect.php%3Fevent1=click_to_call%26event2=%26event3=%26goto=https:%2F%2F7qrw.wanianten.com%2FGhGNAL8%2F%23Pamy@derick.com/1/010f0190ec251e7b-a039cc69-e4b5-46b3-9c67-bbe921a600f9-000000/LLZuw2OBV0eOHt3bnXuAzTOkJoc=169	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	188.114.96.3
	https://www.mfsociety.org/page.php?pageID=787144692108%22%3E%3Cimg%20src%3D%22image.jpg%22%20onerror%3D%22var%20url1%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%20var%20url2%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%0D%0Avar%20url%20%3D%20%5B%27htt%27%2C%27ps%3A%2F%2Fw%27%2C%27ww%27%2C%27.da%27%2C%27ta%27%2C%274t%27%2C%27rai%27%2C%27l.co%27%2C%27m%2F2%27%2C%275P%27%2C%27BNZ%27%2C%2799%2F7C%27%2C%27DMX%27%2C%27ZZ%27%2C%27N%2F%3Fsub1%3D13%26sub2%3D350-15156%26sub3%3D1265-22455-21626%27%5D.join%28%27%27%29%3B%0D%0A%20url%20%3D%20url.replace%28%2F%2C%2Fg%2C%20%27%27%29%3B%20var%20win%20%3D%20window.open%28url%2C%20%27_self%27%29%3B%20win.opener%20%3D%20null%3B%20win.location.replace%28url%29%3B%22%3E#ALwqRdmzZAyXJwdL33Pq	Get hash	malicious	Unknown	Browse	104.17.25.14
	Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
	github_softwares_v1.18.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.159.243
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Babadeda	Browse	172.64.41.3
	https://intralinks.us.com/jallessI1Ae2APharrI1AsassoTxcz01coTxm	Get hash	malicious	HTMLPhisher	Browse	172.67.159.233
	https://mrlocksmithpenticton.com/mlc/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://new-sneww-online-nowz-all.azurewebsites.net/?referrer=appmetrica_tracking_id%3D173005530304969909%26ym_tracking_id%3D10094745761516744100	Get hash	malicious	Unknown	Browse	104.18.36.155
TUT-ASUS	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	CTIPUPiILj.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
	Built.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	LisectAVT_2403002A_1.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	LisectAVT_2403002A_147.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	LisectAVT_2403002A_368.exe	Get hash	malicious	Blank Grabber, DCRat, Umbral Stealer	Browse	208.95.112.1
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	208.95.112.1
	LisectAVT_2403002A_473.exe	Get hash	malicious	Njrat, XWorm	Browse	208.95.112.1
	LisectAVT_2403002A_52.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	LisectAVT_2403002B_109.exe	Get hash	malicious	Blackshades	Browse	208.95.112.1
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Babadeda	Browse	204.79.197.237
	https://1drv.ms/b/c/0524e941baea8759/EbTQ6AvSTkdPuFAldWpGokYBh0MxWHPfUcZj1H5z_yZ5Ew?e=cIicc7	Get hash	malicious	Unknown	Browse	13.107.137.11
	file.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse	20.75.60.91
	file.exe	Get hash	malicious	Babadeda, Coinhive, Xmrig	Browse	20.75.60.91
	https://alamanaschool-my.sharepoint.com/:o:/g/personal/faridhajahan_kg_amanaschool_com/EjJ3Pc0GI4lCgL5xS_fmQD0Bn9XR0VtN5_yNafsBQyYJsg?e=OHPWmQ	Get hash	malicious	Unknown	Browse	52.108.9.12
	file.exe	Get hash	malicious	Babadeda	Browse	23.96.180.189
	FW_ Data Sync Completed Successfully - #BWYEIQF_.eml	Get hash	malicious	Unknown	Browse	52.109.76.240
	AKPSrAWl2G.elf	Get hash	malicious	Mirai	Browse	40.70.116.231
	TRn7934M3A.elf	Get hash	malicious	Mirai	Browse	52.165.41.83
SALSGIVERUS	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse	147.185.221.21
	CTIPUPiILj.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	147.185.221.20
	LisectAVT_2403002A_135.exe	Get hash	malicious	Njrat	Browse	147.185.221.19
	LisectAVT_2403002B_484.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	147.185.221.19
	LisectAVT_2403002B_484.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	147.185.221.19
	LisectAVT_2403002C_149.exe	Get hash	malicious	AsyncRAT	Browse	147.185.221.18
	LisectAVT_2403002C_28.exe	Get hash	malicious	Remcos	Browse	147.185.221.18
	sv6ieteV0j.exe	Get hash	malicious	Njrat, PureLog Stealer	Browse	147.185.221.21
	Ym4vc47pgk.elf	Get hash	malicious	Unknown	Browse	147.184.134.179
	Windows Defender.exe	Get hash	malicious	XWorm	Browse	147.185.221.20

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	VJV2AjJ7Na.exe	Get hash	malicious	XWorm	Browse	104.18.22.35 104.18.23.35
	zx.ps1	Get hash	malicious	Unknown	Browse	104.18.22.35 104.18.23.35
	https://b8le2c5j.r.us-east-2.awstrack.me/L0/https:%2F%2Fslivtovara.ru%2Fbitrix%2Fredirect.php%3Fevent1=click_to_call%26event2=%26event3=%26goto=https:%2F%2F7qrw.wanianten.com%2FGhGNAL8%2F%23Pamy@derick.com/1/010f0190ec251e7b-a039cc69-e4b5-46b3-9c67-bbe921a600f9-000000/LLZuw2OBV0eOHt3bnXuAzTOkJoc=169	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	104.18.22.35 104.18.23.35
	https://alamanaschool-my.sharepoint.com/:o:/g/personal/faridhajahan_kg_amanaschool_com/EjJ3Pc0GI4lCgL5xS_fmQD0Bn9XR0VtN5_yNafsBQyYJsg?e=OHPWmQ	Get hash	malicious	Unknown	Browse	104.18.22.35 104.18.23.35
	17220015066e9475efc6df52db0521bbe1501b782223eb28324fcb835a5fc91b6609347235811.dat-decoded.exe	Get hash	malicious	GuLoader, Remcos	Browse	104.18.22.35 104.18.23.35
	SecuriteInfo.com.Win32.MalwareX-gen.31904.27419.exe	Get hash	malicious	AgentTesla	Browse	104.18.22.35 104.18.23.35
	https://fiffr-12d16.web.app	Get hash	malicious	Unknown	Browse	104.18.22.35 104.18.23.35
	Swift Copy.exe	Get hash	malicious	AgentTesla	Browse	104.18.22.35 104.18.23.35
	https://pendingdelivery864.s3.us-east.cloud-object-storage.appdomain.cloud/%2540%2523%2524%2525%255E%2526%2526()(%2526%2526%255E%255E%2525%2525%2524%2524%2524%2523%2523.html#nogueira@carboclor.com.ar	Get hash	malicious	Unknown	Browse	104.18.22.35 104.18.23.35
	6SoKuOqyNh.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	104.18.22.35 104.18.23.35

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\MSI10A6.tmp	https://www.plexim.com/sites/default/files/packages/plecs-standalone-4-8-4_win64.exe	Get hash	malicious	Unknown	Browse
	Modrinth.exe	Get hash	malicious	DCRat	Browse
	BizCloud_3.2.0.2453.msi	Get hash	malicious	Unknown	Browse
	https://epicgames-download1.akamaized.net/Builds/UnrealEngineLauncher/Installers/Win32/EpicInstaller-15.17.1.msi?launcherfilename=EpicInstaller-15.17.1-unrealEngine.msi	Get hash	malicious	Unknown	Browse
	https://github.com/qupath/qupath/releases/download/v0.5.1/QuPath-v0.5.1-Windows.msi	Get hash	malicious	Unknown	Browse
	https://wetransfer.com/downloads/500e7f36ea6ce7e88cbd439526ad9f2e20240603080738/09d4ab8c84f1760fdcaa29af1c10b2c420240603080754/8b8539?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid	Get hash	malicious	Unknown	Browse
	https://wetransfer.com/downloads/500e7f36ea6ce7e88cbd439526ad9f2e20240603080738/09d4ab8c84f1760fdcaa29af1c10b2c420240603080754/8b8539?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid	Get hash	malicious	Unknown	Browse
	EmbravaConnect.msi	Get hash	malicious	PrivateLoader	Browse
	https://symless.com/synergy/synergy/api/download/synergy-win_x64-v3.0.79.1-rc3.msi	Get hash	malicious	Unknown	Browse
	https://github.com/StrawberryPerl/Perl-Dist-Strawberry/releases/download/SP_53822_64bit/strawberry-perl-5.38.2.2-64bit.msi	Get hash	malicious	Unknown	Browse
C:\Program Files\Modrinth App\Modrinth App.exe	Modrinth.exe	Get hash	malicious	DCRat	Browse

Created / dropped Files

C:\Config.Msi\6a222b.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	13273
Entropy (8bit):	5.4958026545474326
Encrypted:	false
SSDEEP:	192:C9ffrshySU0nUfyw/0uhnqe5fyxHGjyxHhaq4ZFGR1GWiikgpK:C9ffrshzm08k2kbiaXG
MD5:	0C4F73EF74AC470832B094D5F93C7B0C
SHA1:	A1591A082582C9C9FE324B443BC4EDB68D6A3911
SHA-256:	C70B488AB48C434C22A0121EE32C9707077BFB85DCFA360A378F05B73B9740AC
SHA-512:	601D7EB0FC03A3B0CB96B54C7CF9ACB4935F0A6C7C34D8A31876C9B0907362F22840DBC142297A3EB1AC833F1968BF6130E348D3A37B865939DA07E2DA5896EA
Malicious:	false
Preview:	...@IXOS.@.....@G{.X.@.....@.....@.....@.....@.....@......&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}..Modrinth App .Modrinth App_0.7.1_x64_en-US.msi.@.....@.....@.....@......ProductIcon..&.{C760B5F9-74CA-4082-83C4-12F6B36A93BB}.....@.....@.....@.....@.......@.....@.....@.......@......Modrinth App......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{2E37D8FF-ECDE-559E-8E0B-74257058D78B}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@......&.{A85DF90F-5FA4-530D-9BFA-C33807C29A55}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@......&.{8FBB1E5B-CACC-5447-BF83-51C73D6B4C3C}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@......&.{ABDBD5A5-D66D-5E6D-AF6E-CBB2D92B1885}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@......&.{7D1A1628-06F9-586F-AACD-E5A1ABE59028}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@......&.{220711B7-E0E0-5D9A-9BCC-810B1073EFE0}&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}.@........InstallFiles..Copying new f

C:\Program Files\Modrinth App\Modrinth App.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10292856
Entropy (8bit):	6.425652307974438
Encrypted:	false
SSDEEP:	98304:7BQhlPhW0W3zmFVHHb9zKMZ08LC2le/NmijwSvWH:V+lPo07v08LCAsNfx0
MD5:	9C91D4E56002B6395D6CDAD016AB65FB
SHA1:	97AF80CDD148E85FE50CF934ED6A224E12FB8122
SHA-256:	F9A00B54DEE51FB3B86BBFB3236A5A53C12A3CEB5FF37063A4013606E485C31C
SHA-512:	B6228EAAF7C9C33163FAB4CBD84FC5DD8DD36800F940851FE6590ADBA6760D41F65776067F6CBDD8B7C02F1E525BFBA4811E98DEEC4EFC45D2EDF2DF596711C8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Modrinth.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l .[(Aa.(Aa.(Aa.!9..8Aa..?d..Aa..?e.&Aa..?b.!Aa.c9`.+Aa.(A`..@a.>>e.pAa.(Aa..Aa.>>..)Aa.>>c.)Aa.Rich(Aa.........................PE..d...75(f.........."....$..s..T)......Eq........@.............................`............`..................................................!.......`..........D;.....x(...@..p...............................(.......@.............s..............................text...@.s.......s................. ..`.rdata..H.$...s...$...s.............@..@.data........`...~...B..............@....pdata..D;.......<..................@..@_RDATA..\....P......................@..@.rsrc........`......................@..@.reloc..p....@.....................@..B........................................................................................................................................................................................................

C:\Program Files\Modrinth App\Uninstall Modrinth App.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Archive, ctime=Sat Dec 7 08:09:44 2019, mtime=Fri Jul 26 18:25:57 2024, atime=Sat Dec 7 08:09:44 2019, length=69632, window=hide
Category:	dropped
Size (bytes):	957
Entropy (8bit):	4.724866446066348
Encrypted:	false
SSDEEP:	12:809CM0m/WDMjlXTVSX4jX1KN5pxQlSC8RJjATP1BdKG8gEoW+UcS4lSlD4c7CFga:8CJ+DCN/X1mbALdK7+/+QViqyfm
MD5:	6499494F725608BF1B2D3E6CA0274648
SHA1:	54B1755A20B696409FF8D69A6C3ACF33FD3F9E50
SHA-256:	FA1F5323E8D588AF166554F5953940C5164E65600A764006917EF1DDCBE0993B
SHA-512:	DE27C99CB87514A2098F4008628ACF52E0077DEC3DC80F6303559544475756D2F801A14E8367BC1AFC03031BBB7EC98725C1A281AF3C3A031F9B6FC66473D3D4
Malicious:	false
Preview:	L..................F.... ............ ....................................A....P.O. .:i.....+00.../C:\...................V.1.....DWP`..Windows.@......OwH.X<.....3......................g..W.i.n.d.o.w.s.....Z.1......X:...System32..B......OwH.X<............................~..S.y.s.t.e.m.3.2.....b.2......O7I .msiexec.exe.H......O7I.X=.....:...........x............m.s.i.e.x.e.c...e.x.e.......N...............-.......M............qx.....C:\Windows\System32\msiexec.exe....U.n.i.n.s.t.a.l.l.s. .M.o.d.r.i.n.t.h. .A.p.p.".....\.....\.W.i.n.d.o.w.s.\.S.y.s.t.e.m.3.2.\.m.s.i.e.x.e.c...e.x.e.)./.x. .{.6.7.E.3.5.7.7.0.-.3.B.E.7.-.4.9.C.B.-.B.E.1.8.-.C.8.6.2.6.C.E.8.4.6.E.E.}.........%...............wN....]N.D...Q......`.......X.......745773...........hT..CrF.f4... ..T..b...,.......hT..CrF.f4... ..T..b...,..............A...1SPS.XF.L8C....&.m.%................S.-.1.-.5.-.1.8.........9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Apr 23 18:26:12 2024, mtime=Fri Jul 26 18:26:13 2024, atime=Tue Apr 23 18:26:12 2024, length=10292856, window=hide
Category:	dropped
Size (bytes):	1998
Entropy (8bit):	3.6418521563042106
Encrypted:	false
SSDEEP:	24:8ddv//51ux+WKhjAeUArWdRdP+Mhj5uSeImy4Whj5hJRwhVyfm:8dd3qcWuEejKdRdP5CSXmNW6h6
MD5:	5C37832585A0F0C10F56BC4BC66596FB
SHA1:	5E87A6812F9A97A87F52A0F4F3AE541C8AAEC081
SHA-256:	52574DEC86748EACEF74F0570EF908F48E616ECF01D805BE4A113323A8C78B24
SHA-512:	32D959937E7EA768549E40278A57AA597E83A79834FB80F1222B1715831FF3D539C36D9E62AE54930FB2D985A0C3356BF73D13C086F5DF592E0C5EF25A2E1701
Malicious:	false
Preview:	L..................F.@.. ....b........^......b......x............................P.O. .:i.....+00.../C:\.....................1.....DW.V..PROGRA~1..t......O.IDWP`....B...............J.....i...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....b.1......XG...MODRIN~1..J.......XG..XG.....P.....................D..M.o.d.r.i.n.t.h. .A.p.p.....n.2.x....XF. .MODRIN~1.EXE..R......XF..XG.....S.........................M.o.d.r.i.n.t.h. .A.p.p...e.x.e.......]...............-.......\............qx.....C:\Program Files\Modrinth App\Modrinth App.exe....R.u.n.s. .M.o.d.r.i.n.t.h. .A.p.p.=.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.M.o.d.r.i.n.t.h. .A.p.p...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.G.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.6.7.E.3.5.7.7.0.-.3.B.E.7.-.4.9.C.B.-.B.E.1.8.-.C.8.6.2.6.C.E.8.4.6.E.E.}.\.P.r.o.d.u.c.t.I.c.o.n.........%SystemRoot%\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk~RF6a340c.TMP (copy)

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Apr 23 18:26:12 2024, mtime=Fri Jul 26 18:26:13 2024, atime=Tue Apr 23 18:26:12 2024, length=10292856, window=hide
Category:	dropped
Size (bytes):	1998
Entropy (8bit):	3.6418521563042106
Encrypted:	false
SSDEEP:	24:8ddv//51ux+WKhjAeUArWdRdP+Mhj5uSeImy4Whj5hJRwhVyfm:8dd3qcWuEejKdRdP5CSXmNW6h6
MD5:	5C37832585A0F0C10F56BC4BC66596FB
SHA1:	5E87A6812F9A97A87F52A0F4F3AE541C8AAEC081
SHA-256:	52574DEC86748EACEF74F0570EF908F48E616ECF01D805BE4A113323A8C78B24
SHA-512:	32D959937E7EA768549E40278A57AA597E83A79834FB80F1222B1715831FF3D539C36D9E62AE54930FB2D985A0C3356BF73D13C086F5DF592E0C5EF25A2E1701
Malicious:	false
Preview:	L..................F.@.. ....b........^......b......x............................P.O. .:i.....+00.../C:\.....................1.....DW.V..PROGRA~1..t......O.IDWP`....B...............J.....i...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....b.1......XG...MODRIN~1..J.......XG..XG.....P.....................D..M.o.d.r.i.n.t.h. .A.p.p.....n.2.x....XF. .MODRIN~1.EXE..R......XF..XG.....S.........................M.o.d.r.i.n.t.h. .A.p.p...e.x.e.......]...............-.......\............qx.....C:\Program Files\Modrinth App\Modrinth App.exe....R.u.n.s. .M.o.d.r.i.n.t.h. .A.p.p.=.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.M.o.d.r.i.n.t.h. .A.p.p...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.G.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.6.7.E.3.5.7.7.0.-.3.B.E.7.-.4.9.C.B.-.B.E.1.8.-.C.8.6.2.6.C.E.8.4.6.E.E.}.\.P.r.o.d.u.c.t.I.c.o.n.........%SystemRoot%\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\~odrinth App.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Tue Apr 23 18:26:12 2024, mtime=Fri Jul 26 18:26:13 2024, atime=Tue Apr 23 18:26:12 2024, length=10292856, window=hide
Category:	dropped
Size (bytes):	2087
Entropy (8bit):	3.6903090961546194
Encrypted:	false
SSDEEP:	24:8ddv//51ux+WKhjAeUArWdRdP+Mhj5uSeImy4Whj5hJRwhmyiEm:8dd3qcWuEejKdRdP5CSXmNW6hkE
MD5:	5D8CB0F7AF545603A478753EAA639EEC
SHA1:	CAD430DC3B081AFDC445316E66B27EAD01BF2624
SHA-256:	ACD0115CFA33B1A52CB453EE80D4592CDA222C386F9202FB187E0BAAC5215D8C
SHA-512:	CD3CBE5C13A3E2B6E5FC25FC864D51D46F9AF579BBB2B416ECF08B6F4E0FCA8009F4374F5442F65A903BE03F0A644F84D58734D84ECA16F28C5AA2BD4D75A0F5
Malicious:	false
Preview:	L..................F.@.. ....b........^......b......x............................P.O. .:i.....+00.../C:\.....................1.....DW.V..PROGRA~1..t......O.IDWP`....B...............J.....i...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....b.1......XG...MODRIN~1..J.......XG..XG.....P.....................D..M.o.d.r.i.n.t.h. .A.p.p.....n.2.x....XF. .MODRIN~1.EXE..R......XF..XG.....S.........................M.o.d.r.i.n.t.h. .A.p.p...e.x.e.......]...............-.......\............qx.....C:\Program Files\Modrinth App\Modrinth App.exe....R.u.n.s. .M.o.d.r.i.n.t.h. .A.p.p.=.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.M.o.d.r.i.n.t.h. .A.p.p...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.G.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.6.7.E.3.5.7.7.0.-.3.B.E.7.-.4.9.C.B.-.B.E.1.8.-.C.8.6.2.6.C.E.8.4.6.E.E.}.\.P.r.o.d.u.c.t.I.c.o.n.........%SystemRoot%\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE

C:\Users\Public\Desktop\Modrinth App.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Archive, ctime=Tue Apr 23 18:26:12 2024, mtime=Fri Jul 26 18:26:13 2024, atime=Tue Apr 23 18:26:12 2024, length=10292856, window=hide
Category:	dropped
Size (bytes):	1048
Entropy (8bit):	4.640105653638895
Encrypted:	false
SSDEEP:	24:8lT1kdv//51d+WKhjAeUAvdRdCJRwhVyfm:8d2d3UWuEejvdRd3h6
MD5:	C9F1AE805BD347DC6F8B7E224EC3AE6E
SHA1:	30A0915D1B74ECB0C250DAF8D875A073CFF1E815
SHA-256:	DFD196F81B93A657A4D30D179D80BE7AA1C5B3F8BF88841E6E75B61EF4455208
SHA-512:	256B78A875D9E2C1E8187190ACB79097C5BCB4021CB7F4BA616D6CBF48E16A08CE6CBFD52B55E6B55A039C95DB0D210F949FCA2EED1396E9E2BD9EF5E5F3E980
Malicious:	false
Preview:	L..................F.... ....b.......7.......b......x............................P.O. .:i.....+00.../C:\.....................1......XG...PROGRA~1..t......O.I.XG.....B...............J.....D..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....b.1......XG...MODRIN~1..J.......XG..XG.....P.......................z.M.o.d.r.i.n.t.h. .A.p.p.....n.2.x....XF. .MODRIN~1.EXE..R......XF..XG.....S.........................M.o.d.r.i.n.t.h. .A.p.p...e.x.e.......]...............-.......\............qx.....C:\Program Files\Modrinth App\Modrinth App.exe....R.u.n.s. .M.o.d.r.i.n.t.h. .A.p.p.4.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.M.o.d.r.i.n.t.h. .A.p.p...e.x.e...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.M.o.d.r.i.n.t.h. .A.p.p.\.........&................c^...NI..e.2.......`.......X.......745773...........hT..CrF.f4... .J.T..b...,.......hT..CrF.f4... .J.T..b...,..............A...1SPS.XF.L8C....&.m.%................S.-.1.-.5.-.1.8.........9...1SPS..mD..pH.

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	65552
Entropy (8bit):	0.01267959957008888
Encrypted:	false
SSDEEP:	3:JklGlll/l/lXp9ZjrPBY0Ll4lt/Qf1DP:q0dPBY0y4dz
MD5:	F82406D91DAD32A842033CE56EA73522
SHA1:	4864C2D6780FF0F8211C4A561EE90F76AE2840E0
SHA-256:	CF1AE0AB6FEB70464C9305F3355383B901CCBF0810F335ED5EA2FEB822C46638
SHA-512:	F340D5B65B840BF7C9699AEF837F2107F8204E2ADE706175C415576B049C00FFD97328B59C7F4EC3A51B27724A0C4AB1C0E3075B53A3C78B51B224947B13FEC3
Malicious:	false
Preview:	".7a........................................f...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:R:R
MD5:	F49655F856ACB8884CC0ACE29216F511
SHA1:	CB0F1F87EC0455EC349AAA950C600475AC7B7B6B
SHA-256:	7852FCE59C67DDF1D6B8B997EAA1ADFAC004A9F3A91C37295DE9223674011FBA
SHA-512:	599E93D25B174524495ED29653052B3590133096404873318F05FD68F4C9A5C9A3B30574551141FBB73D7329D6BE342699A17F3AE84554BAB784776DFDA2D5F8
Malicious:	false
Preview:	EERF

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Matlab v4 mat-file (little endian) (, numeric, rows 0, columns 16, imaginary
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.03435668575671323
Encrypted:	false
SSDEEP:	6:G9q0SbdlrYoWcV0Ndlg1IGiFTS2tGAYkAtD2Hrn:bpbdpYrNg1IlFoAzc2L
MD5:	16D388D094ECDC534C83C4403965A9F4
SHA1:	F18AC7E0A3D71E92B794DCE0A3832A119A45A4B7
SHA-256:	A982B3BE404EBC13123D18E30EF704FA7860379DFD77FE6C0427A43931D6FBC6
SHA-512:	D4502577A673595A8F3E63BA0F083090ECEF5AFF0EDC09FF5E84C8855ADE46955A1C62C216A7D3D790D7B1E21815365332ACCAB5CE8304A309A7D9534EB53333
Malicious:	false
Preview:	....................(....x:no.&A.e.u~+..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.W.e.b.V.i.e.w.\.A.p.p.l.i.c.a.t.i.o.n.\.1.1.7...0...2.0.4.5...4.7.\.m.s.e.d.g.e.w.e.b.v.i.e.w.2...e.x.e...........................(...p.DJ!.IL.....Zm.F............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\notepad.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\notepad.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8496455649874415
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxvxl9Il8uB+WzW8Azfvn539HiD2UdY9cId1rc:m2YHzW8AzfvnzCD2Ue8
MD5:	66E4FEFF124BE1B457B868EB8888BA94
SHA1:	9EB8AF33B691D18BFA2CB06BE3E65A5CE73C78F5
SHA-256:	36337BFEA4137C9CEC2C4F47690E1C59ED4B372904B4C52640C986AD8D550680
SHA-512:	8A944E7A706631CD26E88EA2BA9CC16B19FA97414B1BE3B78AFE97F88697DEFFCD71F74B7498C356D007CDBD8990641E85D2798D6BEB783A7806C690B32A135B
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.H.W.z.G.Z.r.f.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.F.A./.L.K.O.

C:\Users\user\AppData\Local\Temp\0016789f-7083-4f11-bb30-bb60e549d85e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	modified
Size (bytes):	423905
Entropy (8bit):	7.979918765119474
Encrypted:	false
SSDEEP:	12288:5nlx0wFcqhs8Z17KY6gQ179U+2XmccDjr:H/flezR179U+7vr
MD5:	87292199620322E30DFE6EB8D1D4AC4D
SHA1:	F5AF33B6397FE133A3C3CCBA69828A8459CD8360
SHA-256:	C0A6305C9D3D3E21AC19EF6BB4C49DAE4EF3F1A32B65D0D3C4F251E3F84994DF
SHA-512:	1179303C1C82B3E1FD779910BF2E68C3FAA06F5645C38570B8A6F7DD77FB27113A2A9DFCFB8B770EEFA27BA38B0D6750ADBC5E0565CA5C9A5ED7C0689CF39300
Malicious:	false
Preview:	RIFF.8..WEBPVP8X..............ALPH......P....H...'#......?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?............VP8 .7..p........>.n.V)./. ... ..in...._......N'.g........r?.......;U...c.....v.....`........D\|.............?..+g...fQ..1.h.P.....\.e..lQ#..z.W..$\...^."f.......+.c.p}.=.,....~.1.2W...:S..IL...j..nm.:,.\GM...@...L...@...V...+.+..B3X....s..U.p...T...yDX\.hU.. ..-...v.@...e........Q. qY.%..g.c..g.4...E..76.PwPD..n.@.=.........((\|..Q.....N..f.0.=H..~#K..F...0^...-5..=?.G.Z.....r0....c.",...P...gh.?.b.>y.#B.H.%......_.>\Xy.....p..p....&.d>....g.&..]..;...B.3...h.. ..@...........]..V.U.c8.S[..eSY..c...h.,....\.t.S......jjX...(.Y....L..5%E.)p......ad..t.../....j.-...,...Ph...R?..;.E.I..Q1#J.&~g..bp.....D.h.`9M.)`L.~].H...../....@.I .N.p...K.G.p.. ..*.acx5Z.W).... :..c.z..X.#,..:..8\|...X-...@#.)c.7P..n...8j..4..+h.......qu....d.........9dL..:@{~(..l>...t.l.Z...3g

C:\Users\user\AppData\Local\Temp\MSI10A6.tmp

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	116144
Entropy (8bit):	6.633672738599962
Encrypted:	false
SSDEEP:	1536:YImZwomOndvrhsgz56GoiFmntw1ebC0fsWk0FlcdOJKJpPpxyNokVbY4:jewOdvregz5L/mxb7FUOsrPpxyN7/
MD5:	4FDD16752561CF585FED1506914D73E0
SHA1:	F00023B9AE3C8CE5B7BB92F25011EAEBE6F9D424
SHA-256:	AECD2D2FE766F6D439ACC2BBF1346930ECC535012CF5AD7B3273D2875237B7E7
SHA-512:	3695E7EB1E35EC959243A91AB5B4454EB59AEEF0F2699AA5DE8E03DE8FBB89F756A89130526DA5C08815408CB700284A17936522AD2CAD594C3E6E9D18A3F600
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: , Detection: malicious, Browse Filename: Modrinth.exe, Detection: malicious, Browse Filename: BizCloud_3.2.0.2453.msi, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: EmbravaConnect.msi, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........z.b...1...1...1/.^1...1/.\1...1/.]1...1.s.0...1.s.0...1.s.0...1.c<1...1...1^..1.r.0...1.r.0...1.rP1...1..81...1.r.0...1Rich...1........................PE..L....p.]...........!.................4....... ......................................Y.....@.........................p...\..............x...............................T...........................8...@............ ..(............................text...k........................... ..`.rdata...w... ...x..................@..@.data...<"..........................@....rsrc...x...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI4265.tmp

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	216496
Entropy (8bit):	6.646208142644182
Encrypted:	false
SSDEEP:	3072:/Jz/kyKA1X1dxbOZU32KndB4GLvyui2lhQtEaY4IDflQn0xHuudQ+cxEHSiZxaQ:/t/kE1jOZy2KL4GBiwQtEa4L2sV
MD5:	A3AE5D86ECF38DB9427359EA37A5F646
SHA1:	EB4CB5FF520717038ADADCC5E1EF8F7C24B27A90
SHA-256:	C8D190D5BE1EFD2D52F72A72AE9DFA3940AB3FACEB626405959349654FE18B74
SHA-512:	96ECB3BC00848EEB2836E289EF7B7B2607D30790FFD1AE0E0ACFC2E14F26A991C6E728B8DC67280426E478C70231F9E13F514E52C8CE7D956C1FAD0E322D98E0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........................^.......\......].........................,.......<.........L...'.....'.....'.P.......8.....'.....Rich............................PE..L...Ap.]...........!.........P............................................................@.........................@................P..x....................`..........T...............................@...............<............................text...[........................... ..`.rdata..............................@..@.data...."... ......................@....rsrc...x....P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi

Download File

Process:	C:\Users\user\Desktop\Modrinth_Installer.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Modrinth App, Author: modrinth, Keywords: Installer, Comments: This installer database contains the logic and data required to install Modrinth App., Template: x64;0, Revision Number: {C760B5F9-74CA-4082-83C4-12F6B36A93BB}, Create Time/Date: Tue Apr 23 23:26:10 2024, Last Saved Time/Date: Tue Apr 23 23:26:10 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Category:	dropped
Size (bytes):	5292032
Entropy (8bit):	7.946423046698208
Encrypted:	false
SSDEEP:	98304:fNT+6HE4ThcGalSS9d+udj3mYcCqQcgT3XV8tEbETvsDHaLqV710ZZ9rPzrPW:1/HMlS2JxmYcmcg7XGqb6Msq51GP
MD5:	5003486A784143BC96C3577172BBB44A
SHA1:	9A960998807126041FAE5B4FE9488D7FF3C5CA42
SHA-256:	B1AC36000CEE14B9C36AEA4CEF7F53ED2E7C18C9534B4FF66F07DA11E8C07B59
SHA-512:	3FD871414CFFE35AE649DBB02935EDDCAD75EE094F2D61F2CEF48827DFB852FF3B8E4211F913BF65E4619B2A4989A2807D876A920A105735AC3E59362802EE19
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Modrinth.exe

Download File

Process:	C:\Users\user\Desktop\Modrinth_Installer.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	324096
Entropy (8bit):	4.609404833302635
Encrypted:	false
SSDEEP:	3072:DKShuWbilT4O9sByOkitG/iJpXnc858j:DKCRb+OkiYcRnh
MD5:	6F56F305614CBAD9E5737ACBEE0F8894
SHA1:	8FEB8EB68FD2A0B8B502032073277961EC5D9AB9
SHA-256:	7389AAA07392F6533DC7A4B1F0377AB9B694BB5C08A45F7B871062E7F9F0BDFF
SHA-512:	BCFA430E336735785D988C3276D0524A0C66F629A8B26A39D6B4F93607F6F435F7ADE02F68F963CF4BCBC6A42C63EA99AD6DA8020F41DEFAB242BD197121A26C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...9..f.....................(......n.... ........@.. .......................`............@.....................................S........%...................@....................................................... ............... ..H............text...t.... ...................... ..`.rsrc....%.......&..................@..@.reloc.......@......................@..B................P.......H........\..........&.....................................................(.....r...p. ..}...(.....r...p. p{..s.........s.........s.........s..........r5..p. .....rO..p. M....ri..p. .d...r...p. S....r...p. (.^...((....r...p. ~.H..r...p. .....(...-.(+...,.+.(,...,.+.()...,.+.((...,..(R...&(....&+..+5sd... .... .'..oe...(...~....-.(Y...(K...~....of...&.-..r...p.r...p. .O...r...p.r...p. .%<..r-..p.rG..p. ..e..ra..p.r{..p. .=l..r...p*. .6..

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\1deb9ae8-4e7d-49f6-9963-cd82dfa8f7b6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16624
Entropy (8bit):	6.06604637661126
Encrypted:	false
SSDEEP:	384:RtM7XKnG7EtlXrFJOg5+VCKP4gW5CiUMzcBhqNBScPB4q9r4OJim:LM7X2zt1jOXtXi3zahQ19rJH
MD5:	2087F58CA270B0C96083BEBF0DCB9828
SHA1:	795B697AFB8C93806784EBEF4C0C6F5F2896A8AF
SHA-256:	CC6F638161F138E5135F180394BA83122839BAD347B0C0B5AE8463E5738716F9
SHA-512:	BB1DCE1450B353614D692BA9A0BBB6D908A529032DE6078F3EC51840E1DFC7E27BDF038C10ADC04F1027780E4816D96C109C23F294CFAF0CA6C73AC666AC03D5
Malicious:	false
Preview:	{"desktop_session_duration_tracker":{"last_session_end_timestamp":"1722021990"},"domain_actions_config":"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

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\1e113dfa-612f-48a6-b637-eb99eae77bf0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17858
Entropy (8bit):	6.061381321348914
Encrypted:	false
SSDEEP:	384:RtM7XKnG7EtlXrFJOg5+VCKP4gW5CiUMzcBh8NBScPB4uJjVyU9r4OJim:LM7X2zt1jOXtXi3zah+npVyU9rJH
MD5:	16C2276B1D77846C3E9428B34AAFA693
SHA1:	9061AC46E528523F813557A255E973485E797514
SHA-256:	08B4F90EAE660F456FD85E285C29F6AA5A1B5BEF348DCE198612028DBC50E6DB
SHA-512:	492AA95A9B2CA7C1BB04A4054014A66C285F6B49AF50D8B87E01C98370D37DD2A7981E0525D7321CB7726E9F61E02F66C31BE011D5DA02A4E200CDD4D6532ADE
Malicious:	false
Preview:	{"desktop_session_duration_tracker":{"last_session_end_timestamp":"1722021990"},"domain_actions_config":"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

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\65b94235-7c50-4389-ab77-2bf4acb85c3f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2052
Entropy (8bit):	5.472821013076046
Encrypted:	false
SSDEEP:	48:YDEFMsFiHC0afypjrJZFCci5njHB++drxwBVZHWfRsT6BG/d2a:PNkC1fypjrJqc07BjCnZ2ZsT6I4a
MD5:	82F8BE3895E64530C4488E87EB178D58
SHA1:	3187AABFEF355B9BA178FE37B8D4324B1B1451DA
SHA-256:	9328EDE453F3AF810910D80C88A2159A51FE1B009A1D7697E0DFA52C51C3A5E3
SHA-512:	771D63BC08DCE03E645F5C3F874A99F2AECC4C2E3A511EDE8B2F8AFF71D53C200D1BB43E93AE06EBC97BCDDCF86F6D8F1FFFC9ECB8723760B8BA4519F5E75F8F
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"policy":{"last_statistics_update":"13366495579066899"},"profile":{"info_cache":{},"profile_counts_reported":"13366495579094267","profiles_order":[]},

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\9fb045a1-1cd1-49da-ae36-343a024c8fb5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\BrowserMetrics\BrowserMetrics-66A3F85A-1E24.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.7801384132590393
Encrypted:	false
SSDEEP:	1536:klkK4BNc4D0hqVfRGg1DRFFPfRGSFHaYSR7F/4QqW2hwZURG32NOmBcB0oaH:g/4BB0hqVIg1HFPIOOR7aQqAZRXm
MD5:	8C275DCD14B90AC09C73994A820AB344
SHA1:	A01B832168355B2CF4054BA7244EE3D8F833B9C1
SHA-256:	079095BC14976300B5ECDE88DBAF953056AB7EFDEB75F01127065F1E58E44083
SHA-512:	E530BC569C2FAF918E4D6CABD14ED5DC67C32BA675DEC9E9D224B5324E02F8C4FA0EE87AC33E3F6A546355F0441DFBABFCCD75C1917B7F900A395975097DAC3E
Malicious:	false
Preview:	...@............C.].....@...................................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....?.........117.0.2045.47-64".en-GB...Windows NT..10.0.190452(..x86_64..?........".turewo20,1...x86_64J....?.^o..P......................>........lW:00000000000000000000000000000000000000000000!00000000000000000000000000000000000000000000!Modrinth App.exe.$1900/01/01:00:00:00!Modrinth App.exe".0.7.12...".*.:..............,..(.......EarlyProcessSingleton.......Default3.(..$.......msEdgeEDropUI.......triggered....8..4... ...msDelayLoadAuthenticationManager....triggered....<..8...#...msSleepingTabsShorterTimeoutDefault.....triggered....8..4... ...msEdgeMouseGestureDefaultEnabled....triggered....8..4.......msEdgeShowHomeButtonByDefault.......triggered....<..8...$...msConsumerIEModeToolbarB

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	1.8887884248653348
Encrypted:	false
SSDEEP:	3:FiWWltl5iE1NEjYb1gmlx/ll:o15iCfCmlZl
MD5:	3DA2CC7B64FDE8A8E643CC2D83825DC8
SHA1:	9010DABE8D2AFFDF89A7E89691AAA18D2BA1F72B
SHA-256:	DFEDEABE9BA65A4BF0850BE120AA1A9C2DF73CCD6D2D3D506530752332C71C0F
SHA-512:	CF3D40EAB45C7BE63FA431CCD54815B972F1A7F6BA0E46A7E02D03150A3F18238533A715E27AC07C83D10EBD5C6B173B76C62BE7D90B906078F1735A830A0A50
Malicious:	false
Preview:	sdPC.....................q...G....C.R.................................................................................................................................................................................................{F3017226-FE2A-4295-8BDF-00C3A9A7E4C.}C:........

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad\throttle_store.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.6219280948873624
Encrypted:	false
SSDEEP:	3:8g6Vvn:8g6Vv
MD5:	9E4E94633B73F4A7680240A0FFD6CD2C
SHA1:	E68E02453CE22736169A56FDB59043D33668368F
SHA-256:	41C91A9C93D76295746A149DCE7EBB3B9EE2CB551D84365FFF108E59A61CC304
SHA-512:	193011A756B2368956C71A9A3AE8BC9537D99F52218F124B2E64545EEB5227861D372639052B74D0DD956CB33CA72A9107E069F1EF332B9645044849D14AF337
Malicious:	false
Preview:	level=none expiry=0.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\0c1520ec-4f98-41b7-8956-73ae2a6722a3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\14e6410b-80f2-465f-a700-146b2d26c963.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580512300619593
Encrypted:	false
SSDEEP:	96:vfipPlf/ROoBpkF5d1KiX7VaTEv9V5h5pg5vezodIU8SSPSpsA5IOrMn3YPo0MGj:Sxr+R9l5FSpFIOAn3go0iuH
MD5:	2557331F0D6B6A339B39E676147D813F
SHA1:	ADAA8B49E6B2A6A2C9D38D62C188A2F2A4275E64
SHA-256:	C1B422E7FC8401F13AA3903E50D89CD33DE0F0B1E2DD312828ACB473216D2373
SHA-512:	E69937B1134133F120498C6EED2DAFF9FC2B3782F439B0AF3076DD73313BA57DA73FFF6343D04CFBB0E940F2D5422D4201C22F116B2349663558E0BEC92C360D
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13366495579163143","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13366495579163143","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\4279f7db-252a-45f5-a992-3a06c0a596e7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6183
Entropy (8bit):	4.837810906841369
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8zD85eh6Cb7/x+6Mhmuec2ZS1e1ee7vtU2MR7K:stbusbAGkD88bV+FaIQ1zyPhK
MD5:	B01869DF63A9826D420E0FACC3D57C00
SHA1:	14F588CFE7D7D2B2A2093B5D5A8528C49534BEC7
SHA-256:	1B838C0B74C95F326F1A6997DA4517E484440F7E15076C9C878947FEDAAE9833
SHA-512:	453FB5115DFA0C57F3B3092B9FA066B449A446FE98E21FEFA6AA9919ED9734BA66745E3B73EA5FDFAEBDC43C6C20D01BA42FF99568E0C495D966F243E33BA40B
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\8155a7d7-0c1b-4468-b682-71264f626339.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6391
Entropy (8bit):	4.8430854271588535
Encrypted:	false
SSDEEP:	96:stj/uxps1mGjpmb9PG8zD85eh6Cb7/x+6Mhmuec2ZS1e1ee7vqXT2MR7K:stbusxAGkD88bV+FaIQ1zCPhK
MD5:	6A1B7404481CC71DD76BA0A61ECCFFAB
SHA1:	0E9A07449E1ED5334766F357C667F55742E1DD98
SHA-256:	D978058724F3A39E1B58C279F07005353C634DD79323DD345B818D5548135BE5
SHA-512:	9F38865BF227E22B4E42BAF2272D668655AF9A151DE3D2534008E90D361C9C7139CA329C6E4C3BBEF3ECDD3A2BE4D9CF36C4EDD19C6BF9B7396B6B35A88ED8BC
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\AssistanceHome\AssistanceHomeSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.3202460253800455
Encrypted:	false
SSDEEP:	6:l9bNFlEuWk8TRH9MRumWEyE4gLueXdNOmWxFxCxmWxYgCxmW5y/mWz4ynLAtD/W4:TLiuWkMORuHEyESeXdwDQ3SOAtD/ie
MD5:	40B18EC43DB334E7B3F6295C7626F28D
SHA1:	0E46584B0E0A9703C6B2EC1D246F41E63AF2296F
SHA-256:	85E961767239E90A361FB6AA0A3FD9DAA57CAAF9E30599BB70124F1954B751C8
SHA-512:	8BDACDC4A9559E4273AD01407D5D411035EECD927385A51172F401558444AD29B5AD2DC5562D1101244665EBE86BBDDE072E75ECA050B051482005EB6A52CDBD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.05877619251908723
Encrypted:	false
SSDEEP:	6:/FoEXEiHoOyO5gY9kY3Nc/sL48cI6Paak/fqLvP8NWuN5Ykw6:d7X735gYkY9cap8pEfqLc7Ik3
MD5:	9C362A6080EB55AF7435323BF078348F
SHA1:	314EC66E9B0CE055E047D65DC1A380C6DE41F3AF
SHA-256:	E223E286C626E91DAC8A6469A1A4A04626711A534CE879706D816F7EFE526967
SHA-512:	0AEB661AF2BC4700036A3C9A156DD586E40E4D2F3AEB995EC0562DA15B10D627497001C128050F90966C0B50FC12DC545FA7F64F6331E24746D93FA67DB38F6C
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.06085351323479766
Encrypted:	false
SSDEEP:	12:U/Fd3q6k06kEVtfp4r4Y6k06kcQy1QpJyBSC6k06kEV4pHUd/06k06kEV8ppy36a:iebp1JyBS2pd8mxMCrtxMCpHkTr
MD5:	BC68A6176B3BCC678EC905DECEDAD371
SHA1:	36FBE7DBD599FF82C5CD73794D28497661AECC49
SHA-256:	25CEA048DE7132549B4EE33528AA0CBBB2FAE96661C10C24CA23755CC988950A
SHA-512:	8284F55E6E1C398127ECFAC49B0158BCB09CF17D773A4404715CC8012B3F491F3375A93A24F93A273E82461DDA834D0C9E52478C49B65C99C9C3F65A90D87CCF
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1056768
Entropy (8bit):	0.33293495258731703
Encrypted:	false
SSDEEP:	768:5F5JtLYQJtVFJt4FJtwF5JtwF5JtLF4Jt:Wx
MD5:	57723A989A25BEEFF1A4C4BEE602E25F
SHA1:	CB3B0FB84AB141067D01B5FAA15845DD28E7473D
SHA-256:	8B90BD0ACAF8F0E8D695653F75A391FFC6763D13D2546D08C8D19E84A57810F2
SHA-512:	362A8464B3C122E4525854EB19E4DDE81744508C3A19C7E7344BC5F617415934480EA755B3F0D07EA31267F9C0C84A2055FC6BC4362045E0C055B248FF56551E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	4202496
Entropy (8bit):	0.10592123143150398
Encrypted:	false
SSDEEP:	768:Jt0rGNXhGWegARbXb0YVfrXoF7vlViWZAc1buIKUNHr7CPqRprer:JtDNXGJ
MD5:	2EED3B1C3E5431F909A9F8CDEF29F581
SHA1:	52D5FF7D35EA25588E5D90A4C2D903553DA559F6
SHA-256:	38ED1B1344E237C0CBCE63C6C065B9B9B5C68D1C1B058443A479D9336F16CAF1
SHA-512:	5C16AF9D9E62D98554EEB6EE5C35DFB006D8D0DAA019875F1DF7A53BC42ED45A81C6F8B0EB37A376BC1B2C5D5C8C4AC5E63344D06F6E5139E7861FBD8187B646
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\f_000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 98868, version 1.0
Category:	dropped
Size (bytes):	98868
Entropy (8bit):	7.997348664849209
Encrypted:	true
SSDEEP:	1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH
MD5:	DC131113894217B5031000575D9DE002
SHA1:	F96348260751EA78B1D23E9557DB297290BDAF28
SHA-256:	D612F1212B452AF07F1A5DEFB2B672E76A91F7139E7499FA48BB9B2B985C22D6
SHA-512:	0AA4420C7B7DCC70238371F9D21D521D0673CAF4C1883EEB2D3254C5A1DAD941F4569F418350FFC61E93303466C504179B90BA0ACF008250DC9C2C6DDF6F850B
Malicious:	false
Preview:	wOF2.......4..........................................F...J.`..........9..T..6.$..N. ..r...-[....Jl..\Z 8...B.J.....9..m..nN...g....?^.AD!.......J.u.YW.s..)..[.J.<...............o$.....}.y#/!a.....(.2.V.X.G.j$...!d1/:.P.U..(.C..1.3...,.G..Y.'..\....$s....Y...h.........C}...yE\|.e.k..WK.b[U.P].b.P..J&U.......o...9..p...2...N#....)..U,..".=..q[...S..E...U..U...`......r.Vx...T.*K.."j....q....R\......1.J9w..H]<..w..A..\o..:./...U..n.G..S...>...Z3.....&4.z.......^...d..J}L.U].-?...z..M.(.u.t.v.......['...iNP..VP..3.....{D...((l...^.....=..P...=.'....ry..aa....\ba.m.#.^...d..p.\|.g.l...e..o.CB..k..2:....b,.".......=a.5.l./..............@../y...<..w1.C.(imM9...jW..L`...~...a....#....8.....(.Xg.t.9...s...m.H.?.x.v...v.....z'k6.?..y~.c%....>..[%S...(..k.{....+......)s.=.....!.+...7C.../..G/.....!X:...6+-..,<...&..4.....^.S...E>\|Gi0....?.?^..r.M..E...3FT.&;..9....<..Sw-:..f.z9.}=Kn......"&...8...^s.mf.B..9...oh.O...2...lj\|.#.U.H'...{.`..X.....e .AZ...T...

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\f_000002

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18465
Entropy (8bit):	5.307539020042561
Encrypted:	false
SSDEEP:	384:2FrWCEWNWXWUWdWpWHWGWjWQcHCzm0Yku3VO27tbHvyRqWDf92q2bK+feOYJSSge:2FrWCEWNWXWUWdWpWHWGWjWQcH+mVkuG
MD5:	66A17B0D06225ECE8ADEE1E9B5DDCBB3
SHA1:	01A024552F9E0A1215A6221854353A4FBC698709
SHA-256:	9B8B06CF4D86C28A9CC30CE5E5E09B1E7920A1731B3CA78D3B2459DA36FD7671
SHA-512:	3E6515B7C60B9F783BA9D8C35DA5C6957A8010F9AD565C230B2376BB2B958731F960E652B67A0FE67E02DEF1B1C409537062A4AA80FCB0C974A49D5FFB3B63AF
Malicious:	false
Preview:	{"hits":[{"project_id":"1KVo5zza","project_type":"modpack","slug":"fabulously-optimized","author":"robotkoer","title":"Fabulously Optimized","description":"Improve your graphics and performance with this simple modpack. 1.21 beta!","categories":["fabric","lightweight","multiplayer","optimization"],"display_categories":["lightweight","multiplayer","optimization"],"versions":["1.16.5","1.17.1","1.18.1","1.18.2","1.19","1.19.1","1.19.2","1.19.3","1.19.4","1.20","1.20.1","1.20.2","1.20.3","1.20.4","1.20.5","1.20.6","1.21"],"downloads":1639713,"follows":1566,"icon_url":"https://cdn.modrinth.com/data/1KVo5zza/d8152911f8fd5d7e9a8c499fe89045af81fe816e.png","date_created":"2022-02-10T06:28:19.045034Z","date_modified":"2024-07-24T11:02:20.757500Z","latest_version":"s31b9bmL","license":"BSD-3-Clause","client_side":"required","server_side":"unsupported","gallery":["https://cdn.modrinth.com/data/1KVo5zza/images/0659c64f7b90087b83ac47cb5806b46350a94c7e.png","https://cdn.modrinth.com/data/1KVo5zza/im

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\f_000003

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105924, version 1.0
Category:	dropped
Size (bytes):	105924
Entropy (8bit):	7.99656515123012
Encrypted:	true
SSDEEP:	3072:7Jk35GDAni+UzuVEjLH8MSP02J5E4ZjJffp:7ys0iIEjz8MNGRfp
MD5:	75DB5319E7E87C587019A5DF08D7272C
SHA1:	92B30527304B5DC80F45E997E0B1AC4C70110A18
SHA-256:	1B498B959E5B7DECBF9185803591D25BC1FBF83E798372ED30D32D5C79D82FF6
SHA-512:	4E556D80B52DDBADDDF9287F6CDAEF0D12113D0FA4A07728FD67767B97806EBA5FA0F82711F71E76EE2875192D7618A9B6C277CEB6D69A30F76CA8E3EBB74AA1
Malicious:	false
Preview:	wOF2...................e..............................r...J.`.......0.....T..6.$..N. ......-[U4.....9-.I..J.h....O .kD3=,(].e.Q.{..Ip...Q..-E~x...^...Y.....g..............7.....7.....$...;....'H...V..0.j...F1..A..H.sL...+..%.j."I...n......c0..1..&.L.%.U.M.)f>A<'.9......Z....+n..)$8...F.)..4..l......a.A.\...2.....c..\....},...Y.i.W.'.x.....y.T......ev$..`G.$m.O"B..k;n...t...N.'r..w..C8.fcb.LJ%j...$i=.I.P2.ns.L..l.."\|......j.....8.^.i.....p.[.i.:...0.E....}4pS<...y............=..LI%..[5..#n...2o..^..F!.G"...XV^.D......;.@.......#2.m.g.....fq~..u..A.CS..d.c.)R...D.4&..[.$.....U.W.id.+..r...Z&..._....P..)...;..v.9/.a..z......kf>c......_...k..e0Y......eF.8..}K......{.SH ......p.....X...kN.4..".Q......#s...../. ...1..C.....]P+2Pv!d/.,..8.4VNw...q..<A....m.Y...B..".>P{.L._......6H.9...4..l\|......Z..e..../^B..}E..o.;......bk7.r..C.v..5.3..Wv..T..#X+Q...0.G.d..j_...<.....s.F.-...<..qq..d......}..i..A...;.Y+.]UU)"..'.9..N.4M.W..?.0.C...d.+.......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\f_000004

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 106140, version 1.0
Category:	dropped
Size (bytes):	106140
Entropy (8bit):	7.996661600980398
Encrypted:	true
SSDEEP:	3072:JNQdKgDRY2QEdOWASkVB09yzqr4hP7a/lR8A:IdKgDRHcDsbt/rh
MD5:	444A7284663A3BC886683EB81450B294
SHA1:	1E94A0DFAC8BAB0947EA9B0B6FB663EBAD5CCEB5
SHA-256:	C63158BABCB7902203ED73476CCF901DB34825EA524D4A36A52B5E5F97E1ABF7
SHA-512:	7BE12803AAB99AC90DCB4D56EBDB682612F8ECFACA95A2B60A9B5B06F461ED2222CCF757280E40CF1D4860E67BC35D5391AE5479D6B7282EA075F7EE56BF53D1
Malicious:	false
Preview:	wOF2............... ...>..............................(...J.`.......,..Q..T..6.$..N. ..Z...-[.3.....y/.%....x.iYkf?.}t....Z......d.....M}A........%oV.n(n.N...m.d...>..............okYD:....^.R.W.H..D..c.l.J..c.N J3.h..B.#.c6A.0QY.JDI^p.bKa(.4..5..Mk....<Sh...mKXD..rA.........$..Zw.4..1..Me.....d0.%.+.....(....j..B/aV(``..}...1..d...a.4.$...1J.."D..j(h!JX...@+U.QUg.....L...n.V..!..M.H.<..q2..n.....$.G.pp.\..PYO...""......E}}....Y.[...5kOq.....^.q.5...mN.;..1......:xx+...=.\.s<.Ql....sl.{N$..[...s........z0.O..>.Ur~.G.>:..i^.{.)tQ......G....y.a....9.bB{mE?C....9...54......6..f...+....j].jt..i_&.i.....].hzv...gp....;.9...!2n..e...W.dZ\|.C...3.).?^../..)..D...........=q...dYp...6t..X@.@.C.......[/!.. B.....x.aB"......-.......%Y...VU..`Y.q..2..:.r..G1.H`...../Y.eR.`....k....+h.C;..%'6BA.....m..5fT1wL...c^.=.b.S?.........s1.G.^4.s.MH.n..6;..d.a...:7...[9.>X....;w.....m.LS.6..H..7..........&..<^..$.........=........}.mI.8....GQ.....Gx.E..w.(...._

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\f_000005

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	362614
Entropy (8bit):	7.988730918895651
Encrypted:	false
SSDEEP:	6144:F5ydwCJmYlTFw6YaGIGAFomBg91wFFOlQ/1uVHW/WtP5eZx1RmXG/b4redfV:XgrJmYX/YaGgox9GCnVHWM5I1w2krer
MD5:	64B58CE7CD6AE6E0BCC588297F5504EE
SHA1:	3C7C8560273D21CB77D5907B26352E78AD75FB5B
SHA-256:	B9BEB76245CB351ECFA524972E5B1BA5867FD207DF9CCF9BE31635130F95D3BF
SHA-512:	E4E0FF954575407B7DE2AF0505A7035C6FF719723CE426EB95577D92739FF0A364EF1402825628CCB21EC0336FA3B63DE50B1A2B0A7EAB6EBAE5B194BD2731D6
Malicious:	false
Preview:	RIFFn...WEBPVP8Lb.../wI...@.$9nS...`......!...?....d..K......K.<..vO.>,.._..Z#@...B$..i.....G.`...2.b#. R.z..N.^.<.)O'..\|.........N.....bK. .FY.o.M%.jl...r.Z...5Y.HR.dK.1.......E..[J..&.t..a...iYI.T.R.X..K.)q....#..,..4i..rL........;.....^../+m.........h..#....=.n...-...@Z(m).(...AYT....)[J..)..g.2..lP>gA..1Y..+.6.\..3&;0.q...l3.>n....>Q.l....B.\f7.).9b.v.feH.C\|.6rM...L'-...W3....R..Wg..2...B..=..I.u...:c.K#7.3.I....V.!?_.]........K.`CY.6..s......e.B....cLa.!.(.J....H.k....M.h..k.........l..b8.h#.@]..E....K.$I...?F..\|..u..... ....;p.I......7.?.?g..i...N.._].....TZ.....ICCgMM]jjjjh./5....u......V.....]S..:[O......./a..^./..a....\M...7.j..n......(........eX..z.Ri...vJ..R.....}...]C..^...~..M....7...a.$....k.. =.. )I.ZJn_(P.#.-.d.J....R........v.7v.!g...3..FcQ<..92....6.12...gz.'.g.;B......c6...~".r.c.B..qx4..(.R....~..c.c(.....R..Uy.W.:\..Ja...'.....V.o.=K....Aa..'......U.~..b.$.Qn.t..)7.H........C....pA^o..s.}._r..."wf.b.a.G.........

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Cache\Cache_Data\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	524656
Entropy (8bit):	4.989325630401085E-4
Encrypted:	false
SSDEEP:	3:LsulSg:LsZ
MD5:	AF2D0C7521D715C8A5AB3C91BABA9AAB
SHA1:	3784886BE76D5229FCF8C3122381809F29293787
SHA-256:	351CCCC3BE3598E417ED5CBEF9A4EDC08963D1DF9C912EEF23CC7A2C6742046F
SHA-512:	895E4B7D0AE39D9257C931D88A8FA7768D8EF4039CF9E0BA98927DA9FED7C26F7D345C61792FA0786C7B908A11B8E48657F6B0FF9E4FA90CEBF70301558A6AD7
Malicious:	false
Preview:	.........................................XA..\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js\ac0a8a50cebbb6e1_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	258
Entropy (8bit):	5.6255791471918135
Encrypted:	false
SSDEEP:	6:mEZXY00NQwl9R4Vd0N96tyl2lWmCol8ajWVn4nAw:/v6Quud6969Wpa
MD5:	A76BB6564A036B8217253F4264744D62
SHA1:	D75F5786F5AB15DBE7C6E93770B93E772268D46B
SHA-256:	2F68EB54A88B1EA9ECBB00C12AF57B198615DBFE2EFE2E15D470A7FA02983F61
SHA-512:	E06EFB67012A9A453DC2E9FB237D2BEC39468A40CE525EC6DA560CC1B00C4431C6BBD279BA8557ABBB7F62D69E22A130326EF35AD1F2774364FFF79A99326E4C
Malicious:	false
Preview:	0\r..m......N..........._keyhttps://tauri.localhost/assets/index-CMUFYLZP.js .https://tauri.localhost/.A..Eo...................I...\|/.@...........z.K.3...#R..E8...F..24.;.V..F....Z............Zj.........`>..2.e....A...B!l.{.XZ't.p.A..Eo......Rx..L.......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.7149960083567057
Encrypted:	false
SSDEEP:	3:PZLMyXl/ldldllE7n:9m7
MD5:	94EAA3FA27CF4A716C9C8E86F3F03906
SHA1:	D601B8A16F10F1CBBFAD8BE7D1C75BCD206CC653
SHA-256:	92117E18F70E58EE86E579AEC57BABCE17C5D9015D3F88B6DB3A9015F5B4392D
SHA-512:	D39CAB407497B7367B90CD0242F13570D4D1FF39FE463E562FC5B249548C5853733BB1AC4E94A2764F39601ABCF030C9B1751017F5A366D73204011E9AA2B45D
Malicious:	false
Preview:	@....<..oy retne..........................P........\|/..........."..\|/.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.7149960083567057
Encrypted:	false
SSDEEP:	3:PZLMyXl/ldldllE7n:9m7
MD5:	94EAA3FA27CF4A716C9C8E86F3F03906
SHA1:	D601B8A16F10F1CBBFAD8BE7D1C75BCD206CC653
SHA-256:	92117E18F70E58EE86E579AEC57BABCE17C5D9015D3F88B6DB3A9015F5B4392D
SHA-512:	D39CAB407497B7367B90CD0242F13570D4D1FF39FE463E562FC5B249548C5853733BB1AC4E94A2764F39601ABCF030C9B1751017F5A366D73204011E9AA2B45D
Malicious:	false
Preview:	@....<..oy retne..........................P........\|/..........."..\|/.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF6aa796.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.7149960083567057
Encrypted:	false
SSDEEP:	3:PZLMyXl/ldldllE7n:9m7
MD5:	94EAA3FA27CF4A716C9C8E86F3F03906
SHA1:	D601B8A16F10F1CBBFAD8BE7D1C75BCD206CC653
SHA-256:	92117E18F70E58EE86E579AEC57BABCE17C5D9015D3F88B6DB3A9015F5B4392D
SHA-512:	D39CAB407497B7367B90CD0242F13570D4D1FF39FE463E562FC5B249548C5853733BB1AC4E94A2764F39601ABCF030C9B1751017F5A366D73204011E9AA2B45D
Malicious:	false
Preview:	@....<..oy retne..........................P........\|/..........."..\|/.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\wasm\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\wasm\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:JlUTEQwln:YgJ
MD5:	F7558037959218846B7737493D630200
SHA1:	5D5583D7BEB8AAF40C6DE4955C9940D4CB0DA6E2
SHA-256:	A0833375799DDA18C8FD3C2AB2D096B0E70509CD71A425CF68A1051C45D2632A
SHA-512:	4A4A32908D28ABEA6AAE85EE19F7382F946EF178CC617D18DD682177CE732EEAAE5AE10C74165D0C775F16C96129DABBDBFC657614BAFB65880AEBE9A2EF0F1C
Malicious:	false
Preview:	(....0.oy retne.............................\|/.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:JlUTEQwln:YgJ
MD5:	F7558037959218846B7737493D630200
SHA1:	5D5583D7BEB8AAF40C6DE4955C9940D4CB0DA6E2
SHA-256:	A0833375799DDA18C8FD3C2AB2D096B0E70509CD71A425CF68A1051C45D2632A
SHA-512:	4A4A32908D28ABEA6AAE85EE19F7382F946EF178CC617D18DD682177CE732EEAAE5AE10C74165D0C775F16C96129DABBDBFC657614BAFB65880AEBE9A2EF0F1C
Malicious:	false
Preview:	(....0.oy retne.............................\|/.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.468416174299058
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBtnizc:TouQq3qh7z3bY2LNW9WMcUvBt
MD5:	6B0187E2C66C0B20EC012656A6E44366
SHA1:	2354258DBC6333CDE56A92495C26E5BED3559646
SHA-256:	A9F49C9837F355969DF8210D8EB8533DAB22199DDDCAEEA6A4E76E36CC80A400
SHA-512:	05CA1176857E32E0D40AE9AE9AC121F3ACEAC98875A8AE1E476FD683B19ABD59EB610E84EE53553A386BA1AD6A59CFAFED53CBCFF2250580A0CF8D326A11DAAF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.47693366977411E-4
Encrypted:	false
SSDEEP:	3:LsNl/yZ+l:Ls3r
MD5:	C4A569FA13F532BA26649ED5EA998764
SHA1:	C2B341BF10941A507432A12B62CE89B6FF3A12A1
SHA-256:	7467AF442A02C0E29F29D4977ED137C853EF2005E5D26D7A6E1995A8CFBF1404
SHA-512:	ACD609EF914AA75491783CF97F6AC7883A5C783607F0FDC5B3352D46DCAAD2F08FD0F0392D927335663AB4C6938609F2A48AFECBDC63AAAE6E811F739CA78025
Malicious:	false
Preview:	.............................................\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\EdgeEDrop\EdgeEDropSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 14, database pages 8, cookie 0xe, schema 4, UTF-8, version-valid-for 14
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.494709561094235
Encrypted:	false
SSDEEP:	24:TLEC30OIcqIn2o0FUFlA2cs0US5S693Xlej2:ThLaJUnAg0UB6I
MD5:	CF7760533536E2AF66EA68BC3561B74D
SHA1:	E991DE2EA8F42AE7E0A96A3B3B8AF87A689C8CCD
SHA-256:	E1F183FAE5652BA52F5363A7E28BF62B53E7781314C9AB76B5708AF9918BE066
SHA-512:	38B15FE7503F6DFF9D39BC74AA0150A7FF038029F973BE9A37456CDE6807BCBDEAB06E624331C8DFDABE95A5973B0EE26A391DB2587E614A37ADD50046470162
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...i............t...c................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlX:qTCT
MD5:	51A2CBB807F5085530DEC18E45CB8569
SHA1:	7AD88CD3DE5844C7FC269C4500228A630016AB5B
SHA-256:	1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
SHA-512:	B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
Malicious:	false
Preview:	.f.5................f.5...............

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.314071701115691
Encrypted:	false
SSDEEP:	6:BMG3B1wkn23GK/SGdpaVdg2KLlrMG59t+q2Pwkn23GK/SGdpaPrqIFUv:v0ft6GdHL3novYft6Gdo3FUv
MD5:	E5DABF35D72864FDC746EFEA99EC9D8C
SHA1:	BD6C4287168EC5D4DD8E78708EAB3656B32E341D
SHA-256:	C800FC64703A1BA67910E74D79C1BD23C0759D63DB439676FA0B01748313B579
SHA-512:	813312D1197164B6D317B0C78CA2DB792D74A810685D75CC6C388906EBAC760E8990D9E9F1D5395BAE0D303C12113A44EA2B7A5484548E8142360B4060BB80BE
Malicious:	false
Preview:	2024/07/26-15:26:19.176 1ef8 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules since it was missing..2024/07/26-15:26:19.246 1ef8 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Rules\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlX:qTCT
MD5:	51A2CBB807F5085530DEC18E45CB8569
SHA1:	7AD88CD3DE5844C7FC269C4500228A630016AB5B
SHA-256:	1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
SHA-512:	B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
Malicious:	false
Preview:	.f.5................f.5...............

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	297
Entropy (8bit):	5.318866004181586
Encrypted:	false
SSDEEP:	6:BMGVjGR1wkn23GK/SGdp6FB2KLlrMG4lpM+q2Pwkn23GK/SGdp65IFUv:vVBft6GdQFFL34lpM+vYft6GdQWFUv
MD5:	4785572A1C809108935987D3F3F204B9
SHA1:	D2F1EA1F56E2BD31BD00DE998597BCC3BCBAD5EC
SHA-256:	A893F2F8F367C9788F30EDD58CE796292FBE58A37D3945D5D22B022DD3B834D6
SHA-512:	2BBF3EB6DD804CBA4ACF02A3702C9BE3E8C8C9D5DE90AC17945B49A6E2DA8CBDEF5C82CEE3723CB35F4F5C57CBCABF398A083B3F0DF37319F56F9125A48FE037
Malicious:	false
Preview:	2024/07/26-15:26:19.321 1e8c Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts since it was missing..2024/07/26-15:26:19.344 1e8c Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension Scripts\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlXNQxlXNQxlXNQxlXNQxlX:qTCTCTCTCTCT
MD5:	891A884B9FA2BFF4519F5F56D2A25D62
SHA1:	B54A3C12EE78510CB269FB1D863047DD8F571DEA
SHA-256:	E2610960C3757D1757F206C7B84378EFA22D86DCF161A98096A5F0E56E1A367E
SHA-512:	CD50C3EE4DFB9C4EC051B20DD1E148A5015457EE0C1A29FFF482E62291B32097B07A069DB62951B32F209FD118FD77A46B8E8CC92DA3EAAE6110735D126A90EE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.288635069670723
Encrypted:	false
SSDEEP:	6:BMGkR1wkn23GK/SGdpYg2KLlrMGo2M+q2Pwkn23GK/SGdpNIFUv:vk0ft6GdNL3BM+vYft6GdwFUv
MD5:	F6038ADB990AB457EEBDEB8C98D23810
SHA1:	122C06334861AF61348FBD45E02A1C2EA981B15B
SHA-256:	A403CD3CE15810E459C9CE4ABAFEF5D09FF636DE357B09DE0449F6A6559049CC
SHA-512:	16728C333B8993C9C5DDE3FBF23E89FA65A8D369DB4B6A5B93F19927969616BC8B72B2A41E2089990877E5259A6BA0547F0E189554213966E3E2670BC38AF056
Malicious:	false
Preview:	2024/07/26-15:26:19.615 1e8c Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State since it was missing..2024/07/26-15:26:19.640 1e8c Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Extension State\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\ExtensionActivityComp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 1, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.3169096321222068
Encrypted:	false
SSDEEP:	3:lSWbNFl/sl+ltl4ltllOl83/XWEEabIDWzdWuAzTgdWj3FtFIU:l9bNFlEs1ok8fDEPDadUTgd81Z
MD5:	2554AD7847B0D04963FDAE908DB81074
SHA1:	F84ABD8D05D7B0DFB693485614ECF5204989B74A
SHA-256:	F6EF01E679B9096A7D8A0BD8151422543B51E65142119A9F3271F25F966E6C42
SHA-512:	13009172518387D77A67BBF86719527077BE9534D90CB06E7F34E1CCE7C40B49A185D892EE859A8BAFB69D5EBB6D667831A0FAFBA28AC1F44570C8B68F8C90A4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\ExtensionActivityEdge

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 8, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.40981274649195937
Encrypted:	false
SSDEEP:	24:TL1WK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/5eQQ:Tmm+/9ZW943WOT/
MD5:	1A7F642FD4F71A656BE75B26B2D9ED79
SHA1:	51BBF587FB0CCC2D726DDB95C96757CC2854CFAD
SHA-256:	B96B6DDC10C29496069E16089DB0AB6911D7C13B82791868D583897C6D317977
SHA-512:	FD14EADCF5F7AB271BE6D8EF682977D1A0B5199A142E4AB353614F2F96AE9B49A6F35A19CC237489F297141994A4A16B580F88FAC44486FCB22C05B2F1C3F7D1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j............M.....8...b..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Favicons

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 10, cookie 0x8, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6975083372685086
Encrypted:	false
SSDEEP:	24:LLiZxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:EBmw6fU1zBmI
MD5:	F5BBD8449A9C3AB28AC2DE45E9059B01
SHA1:	C569D730853C33234AF2402E69C19E0C057EC165
SHA-256:	825FF36C4431084C76F3D22CE0C75FA321EA680D1F8548706B43E60FCF5B566E
SHA-512:	96ACDED5A51236630A64FAE91B8FA9FAB43E22E0C1BCB80C2DD8D4829E03FBFA75AA6438053599A42EC4BBCF805BF0B1E6DFF9069B2BA182AD0BB30F2542FD3F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\GPUCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\GPUCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\GPUCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\GPUCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.47693366977411E-4
Encrypted:	false
SSDEEP:	3:LsNlj5:Ls3
MD5:	B5D457198B23A39B9E1C2DF1803CCACE
SHA1:	95A669C2AEBBBD8AAB3B273505B8824479DF5605
SHA-256:	AF9C4C275A74C72A5F2188DD00EF1AC78C3B1F43014FC7CEC670226CF1E68AC8
SHA-512:	8BC19E3FB5355D5E3AF2657261E48C34EF68FC5692108C8EFE4674C8EF9EB9E9A0A97906BB18AE5C71F57F164BA199D1CC5697F8469157A7D5B6738D98A8814B
Malicious:	false
Preview:	.........................................?...\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5882174682010175
Encrypted:	false
SSDEEP:	96:+0OZH/SWyejzH+bDoYysX0IxQztkHtpVJNlYDLjGQLBE3CeE0kEkfxv+:+fDhH+bDo3iN0t2TVJkXBBE3ybrfE
MD5:	B82F0AA10468B1557F84C6AE7B59744F
SHA1:	1564D3B627ACFF3C9A70D6F60063BCB8221C3CF4
SHA-256:	51A5ECC6A385B8873E6DD6DB5817C11FC0D584C9D28E18254E510836CC6778E9
SHA-512:	A1148F77E260ED97FD266D540B43213B955F4A454939DA7D99CB45DB67EEE0AF7A062509CDDCB2E68A48D108A142A2DC4F6770154C6E3163A0D1A2E1F2E1A808
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.2191763562065486
Encrypted:	false
SSDEEP:	3:Dxt7ntFlljq7A/mhWJFuQ3yy7IOWUzZl4/dweytllrE9SFcTp4AGbNCV9RUIM6a:tC75fOu/d0Xi99pEY0
MD5:	59BEDE4096B97B334005D7DB11A61062
SHA1:	38BF4787C9147D1580D8754C934D29EB5A5C9178
SHA-256:	F8462EB8CFA5ECA326E3F3854C7FF844A8F52A9FC4A3B81B76CF818DE7B9A2B7
SHA-512:	3F137D0CEE31AB7629141A1888D4568937E91A5BEAD7AD5B46DBF0BBE0D16712E5EC8A9F8E82DB4FA9660C591F7FF145569E470F2B805E6EDCB59BDF098D56B8
Malicious:	false
Preview:	...............?...&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	modified
Size (bytes):	1982
Entropy (8bit):	5.493991473829483
Encrypted:	false
SSDEEP:	48:794X2o9cQTUpevmpksq+vqbHHF6KDCFigat6CFv:7BoOQYeZsqyqbJZ
MD5:	3458E193A3EFBC7F7BB2420D022F3F33
SHA1:	82B7B3F92FBEC40D1DDD16A71805DC0B2348E2E5
SHA-256:	F1B1FCA6A0EBDF8AA0C94FED95A6FFDEB6D6FD3D781E292FBF4E434738E86859
SHA-512:	2B0EF395D96EADD02FDA45AB64651BF3A6B24B67A0A1224341AE64C24132125C6B6E578A99492B0233B4DC95C454A2C6D11BB6F539D8FFAC19D606E2A70139C5
Malicious:	false
Preview:	.VI./................VERSION.1..META:https://tauri.localhost.............C_https://tauri.localhost..__mpq_014c7d6a336d0efaefe3aca91063748d_ev...[{"id":"r6z084xifk1evvql","flushAfter":1722021998049,"payload":{"event":"Launched","properties":{"$os":"Windows","$browser":"Microsoft Edge","$current_url":"https://tauri.localhost/","$browser_version":117,"$screen_height":1024,"$screen_width":1280,"mp_lib":"web","$lib_version":"2.49.0","$insert_id":"16246aunvwwqk2id","time":1722021988.049,"distinct_id":"$device:190f08246cd1b56-03b4b4182ca14e-78505775-140000-190f08246cd1b57","$device_id":"190f08246cd1b56-03b4b4182ca14e-78505775-140000-190f08246cd1b57","$initial_referrer":"$direct","$initial_referring_domain":"$direct","version":"0.7.1","dev":false,"fully_onboarded":false,"token":"014c7d6a336d0efaefe3aca91063748d"}}}].F_https://tauri.localhost..mp_014c7d6a336d0efaefe3aca91063748d_mixpanel...{"distinct_id": "$device:190f08246cd1b56-03b4b4182ca14e-78505775-140000-190f08246cd1b57","$device_id": "1

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	305
Entropy (8bit):	5.296591112007023
Encrypted:	false
SSDEEP:	6:BMGXS5b1wkn23GK/SGd1a2jM8B2KLlrMGXeobVq2Pwkn23GK/SGd1a2jMGIFUv:vX+6ft6Gd1jFL3XvbVvYft6Gd1EFUv
MD5:	2662C04B08A2EFE6BE522E2C66C22271
SHA1:	EDB2D35648198BF5701AC7B8BD01AFA8505F35A8
SHA-256:	E3A70F28A6E107394C72F49A1DFC01DF74D7AA994966CDB137D43CAA8FFCDD8E
SHA-512:	2B79C0ABF026A4C4228F288B29E9FFCEEBAC607CD6F60855F0A30B1DF16470812208305BA680E00FCB3D56F7E9905648616C61FD612D6A5001B32A3C860ACFD2
Malicious:	false
Preview:	2024/07/26-15:26:20.146 1fa0 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb since it was missing..2024/07/26-15:26:20.184 1fa0 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Login Data

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 21, cookie 0xc, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	43008
Entropy (8bit):	0.9009435143901008
Encrypted:	false
SSDEEP:	96:C2BeymwLCn8MouB6wzFlXqiEqUvJKLuyn:C2TLG7IwRFqidn
MD5:	FB3D677576C25FF04A308A1F627410B7
SHA1:	97D530911F9CB0C37717ABB145D748982ADA0440
SHA-256:	A79300470D18AF26E3C5B4F23F81915B92D490105CE84A8122BF8100EC0C7517
SHA-512:	ED6666B064958B107E55BD76E52D2E5BF7A4791379902D208EF909A6B68803240D372CE03641249EB917C241B36A5684656A48D099A8A084AD34BA009857B098
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network Action Predictor

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.40293591932113104
Encrypted:	false
SSDEEP:	24:TLVgTjDk5Yk8k+/kCkzD3zzbLGfIzLihje90xq/WMFFfeFzfXVVlYWOT/CUFSe:Tmo9n+8dv/qALihje9kqL42WOT/9F
MD5:	ADC0CFB8A1A20DE2C4AB738B413CBEA4
SHA1:	238EF489E5FDC6EBB36F09D415FB353350E7097B
SHA-256:	7C071E36A64FB1881258712C9880F155D9CBAC693BADCC391A1CB110C257CC37
SHA-512:	38C8B7293B8F7BEF03299BAFB981EEEE309945B1BDE26ACDAD6FDD63247C21CA04D493A1DDAFC3B9A1904EFED998E9C7C0C8E98506FD4AC0AB252DFF34566B66
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......=......\.t.+.>...,...=........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\318816ab-6009-4101-9768-d21aefb2f51f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\45000fb2-fb92-482d-b855-15ca5012acfc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\562f14b7-8a1a-48f1-b5fc-919e31247d70.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	170
Entropy (8bit):	4.89042451592505
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDHERW6JfYoR6oJbRHeHBYMKWKWMS7PMVKJq0nMb1KKtiVY:YHpo03h6ubIa4MS7PMVKJTnMRK3VY
MD5:	633DDD1B4920EC5BE074DBE9C025C0CA
SHA1:	544DEC5ED8BD3FBAB234940BEA45390B5CEF13D1
SHA-256:	8FCAE56F81D49DE83AC45BB8848E818C99462EEE03D017124E895D39630B3889
SHA-512:	CB89ABA6C2D59A7D520BD1BBDB85CBDF5CFBBE3DC9DFD02E06071F8597E3EB0D3B3BE3587AE58870B92127379A2C875A856F11B6792D4A68C5204837814549A6
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\7787e538-7f4c-4ba3-8fb7-79a9c4daa4a5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Network Persistent State~RF6b76ae.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.5559635235158827
Encrypted:	false
SSDEEP:	48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:OIEumQv8m1ccnvS6
MD5:	9AAAE8C040B616D1378F3E0E17689A29
SHA1:	F91E7DE07F1DA14D15D067E1F50C3B84A328DBB7
SHA-256:	5B94D63C31AE795661F69B9D10E8BFD115584CD6FEF5FBB7AA483FDC6A66945B
SHA-512:	436202AB8B6BB0318A30946108E6722DFF781F462EE05980C14F57F347EDDCF8119E236C3290B580CEF6902E1B59FB4F546D6BD69F62479805B39AB0F3308EC1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\SCT Auditing Pending Reports~RF6a4ea9.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.36515621748816035
Encrypted:	false
SSDEEP:	24:TLH3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:Tb31DtX5nDOvyKDhU1cSB
MD5:	25363ADC3C9D98BAD1A33D0792405CBF
SHA1:	D06E343087D86EF1A06F7479D81B26C90A60B5C3
SHA-256:	6E019B8B9E389216D5BDF1F2FE63F41EF98E71DA101F2A6BE04F41CC5954532D
SHA-512:	CF7EEE35D0E00945AF221BEC531E8BF06C08880DA00BD103FA561BC069D7C6F955CBA3C1C152A4884601E5A670B7487D39B4AE9A4D554ED8C14F129A74E555F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......X..g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Network\c97e8e16-9f20-4bb0-af29-9e1567babdb9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Preferences~RF6a9e01.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Preferences~RF6ae701.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Preferences~RF6b5c21.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Preferences~RF6c46fe.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5796
Entropy (8bit):	4.824852979537212
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8z3d81h6Cb7/x+6Mhmuec2ZS1eAee7v92MR7K:stbusbAGkt8vbV+FaIQAz9PhK
MD5:	3208F362F109BAAE5839F06A35DF800B
SHA1:	B48D97920455260C75F874A13EB9F97CA21629EA
SHA-256:	0833783F267D906CA6E30AC606C62BA559BFBA7489A4D2A3C0650536558498D7
SHA-512:	CA66E34E5487C4B0B9FDEFB22EC373405AA6ECFA84068CE35AE0DCEB912DCBD9710EF1909EE067B20FB3597E9C24C639BA1303E29C5BCD5538A7297E67AA5E81
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\PreferredApps

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\README

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.2629097520179995
Encrypted:	false
SSDEEP:	3:RGXKRjg0QwVIWRKXECSAV6jDyhjgHGAW+LB2Z4MKLFE1SwhiFAfXQmWyKBPMwRgK:z3frsUpAQQgHGwB26MK8Sw06fXQmWtRT
MD5:	643E00B0186AA80523F8A6BED550A925
SHA1:	EC4056125D6F1A8890FFE01BFFC973C2F6ABD115
SHA-256:	A0C9ABAE18599F0A65FC654AD36251F6330794BEA66B718A09D8B297F3E38E87
SHA-512:	D91A934EAF7D9D669B8AD4452234DE6B23D15237CB4D251F2C78C8339CEE7B4F9BA6B8597E35FE8C81B3D6F64AE707C68FF492903C0EDC3E4BAF2C6B747E247D
Malicious:	false
Preview:	Microsoft Edge settings and storage represent user-selected preferences and information and MUST not be extracted, overwritten or modified except through Microsoft Edge defined APIs.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580512300619593
Encrypted:	false
SSDEEP:	96:vfipPlf/ROoBpkF5d1KiX7VaTEv9V5h5pg5vezodIU8SSPSpsA5IOrMn3YPo0MGj:Sxr+R9l5FSpFIOAn3go0iuH
MD5:	2557331F0D6B6A339B39E676147D813F
SHA1:	ADAA8B49E6B2A6A2C9D38D62C188A2F2A4275E64
SHA-256:	C1B422E7FC8401F13AA3903E50D89CD33DE0F0B1E2DD312828ACB473216D2373
SHA-512:	E69937B1134133F120498C6EED2DAFF9FC2B3782F439B0AF3076DD73313BA57DA73FFF6343D04CFBB0E940F2D5422D4201C22F116B2349663558E0BEC92C360D
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13366495579163143","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13366495579163143","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	151
Entropy (8bit):	5.003601534862072
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGcvXdllaWuGpdBJg1cJM/lfCKANv:S85ahvXla391Qylf0Nv
MD5:	6BBCEC719184A449C2447DDF5D6A8804
SHA1:	2BF5332EAE7AAF8197F727C8C7C07D7A21A82769
SHA-256:	3E07BCAB70FA49B795CC53D0558AAB8E74F6952790619A720F271D5487F0ECD1
SHA-512:	9014CEE3ED2C38F6E2F275B8C22DF036B0090F3B8AB53615487FBB1A61685B72DF5CE9608AA1989B8B7F86412108B0D5E84E4CBD677D72837F34ABDB069F8267
Malicious:	false
Preview:	*...#................version.1..namespace-H.y.f................next-map-id.1.Gnamespace-4077abf8_db9d_4b94_870b_b411f0bd13ce-https://tauri.localhost/.0

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.263219090569057
Encrypted:	false
SSDEEP:	6:BMGXc1U1wkn23GK/SGdWQM72KLlrMGX5gVq2Pwkn23GK/SGdWQMxIFUv:vXcBft6GdIL3X5gVvYft6GdHFUv
MD5:	B1C3D4232945952C38AD8156237B2F60
SHA1:	2C69547A90B7724AD366439102FB5FE010DF00CF
SHA-256:	FFA0E12DD5E031E1D01784330976A596E94095450FB1DD5573296714D4ED9E99
SHA-512:	7F10AEE1456AD3136940A8F3FE170B87A195D880DDB96EFE8498E5B8D34D11372FCE53EA121010CA38397A88C1574D3CCB79CD8150404C01457116AE0EE3B97A
Malicious:	false
Preview:	2024/07/26-15:26:21.195 1fa0 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage since it was missing..2024/07/26-15:26:21.258 1fa0 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Session Storage\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	3.473726825238924
Encrypted:	false
SSDEEP:	3:41tt0diERGn:et084G
MD5:	148079685E25097536785F4536AF014B
SHA1:	C5FF5B1B69487A9DD4D244D11BBAFA91708C1A41
SHA-256:	F096BC366A931FBA656BDCD77B24AF15A5F29FC53281A727C79F82C608ECFAB8
SHA-512:	C2556034EA51ABFBC172EB62FF11F5AC45C317F84F39D4B9E3DDBD0190DA6EF7FA03FE63631B97AB806430442974A07F8E81B5F7DC52D9F2FCDC669ADCA8D91F
Malicious:	false
Preview:	.On.!................database_metadata.1

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.2234830003199715
Encrypted:	false
SSDEEP:	6:BMGnvuM1wkn23GK/SGdUUh2gr52KLlrMGfRN4q2Pwkn23GK/SGdUUh2ghZIFUv:vvurft6GdrhHJL3T4vYft6GdrhHh2FUv
MD5:	63A45D382FCBEBF691D0E00C1817F05F
SHA1:	06CECDA921CB9461DF42DF6D1CC3BEA2C73A731D
SHA-256:	A3F18C9DCFAD72A06E4DEDC8063BE34E4C70A08DE978F59A31A03B7532FB7B31
SHA-512:	3B684250DF7986A1AAFF9B573A6BD0EEBAB91A0D22BD9D5D8920D702B6344C6EAFBB45C8BEAC3598AA3ACEFF04DFFAABB2D1E5DD81EEB4529C03EDA37C7F510F
Malicious:	false
Preview:	2024/07/26-15:26:19.237 1ef4 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database since it was missing..2024/07/26-15:26:19.264 1ef4 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.019797536844534
Encrypted:	false
SSDEEP:	3:sLollttz6sjlGXU2tkn:qolXtWswXU2tkn
MD5:	90881C9C26F29FCA29815A08BA858544
SHA1:	06FEE974987B91D82C2839A4BB12991FA99E1BDD
SHA-256:	A2CA52E34B6138624AC2DD20349CDE28482143B837DB40A7F0FBDA023077C26A
SHA-512:	15F7F8197B4FC46C4C5C2570FB1F6DD73CB125F9EE53DFA67F5A0D944543C5347BDAB5CCE95E91DD6C948C9023E23C7F9D76CFF990E623178C92F8D49150A625
Malicious:	false
Preview:	...n'................_mts_schema_descriptor...

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	297
Entropy (8bit):	5.3477891273235185
Encrypted:	false
SSDEEP:	6:BMGs6R1wkn23GK/SGdgx2KLlrMGEVM+q2Pwkn23GK/SGdWIFUv:vs60ft6GdgVL3EVM+vYft6GdPFUv
MD5:	A5426651E23D2F04E33A43B2A4887F94
SHA1:	2DBD91AE1B103E535D30D592F4944E6123B71C24
SHA-256:	529436A4428732E6A49D7F5F97E1B12BA30F5158DF3E4A5BE3A0B36573FBEB12
SHA-512:	6E25663614C672C209567FBC13EDC21212A18332D9CA421301ED9DBCB225DA9BCAB1BA303FB93E725DDF173ACBA589D783019B5E9EDE94E5D925C48999CA7253
Malicious:	false
Preview:	2024/07/26-15:26:19.551 1e8c Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB since it was missing..2024/07/26-15:26:19.559 1e8c Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Top Sites

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.3528485475628876
Encrypted:	false
SSDEEP:	12:TLiN6CZhDu6MvDOF5yEHFxOUwa5qguYZ75fOSiPe2d:TLiwCZwE8I6Uwcco5fBtC
MD5:	F2B4FB2D384AA4E4D6F4AEB0BBA217DC
SHA1:	2CD70CFB3CE72D9B079170C360C1F563B6BF150E
SHA-256:	1ECC07CD1D383472DAD33D2A5766625009EA5EACBAEDE2417ADA1842654CBBC8
SHA-512:	48D03991660FA1598B3E002F5BC5F0F05E9696BCB2289240FA8CCBB2C030CDD23245D4ECC0C64DA1E7C54B092C3E60AE0427358F63087018BF0E6CEDC471DD34
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....4....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0033464165558137224
Encrypted:	false
SSDEEP:	3:ImtVuqSdiq:IiVuqZq
MD5:	CF6E0A38C854B1456BA2C498E2D53CB1
SHA1:	0398462417D974A2464B738F1691E038B75F1E23
SHA-256:	244FE65A5E22C80056CCC9D04DE2CAB101A8FF02AD455DFC877069E07713944D
SHA-512:	EFAE2AF98AD0F16E922DC382A5011FDEE252A93050DBFB491141C337751F07B25B12E1D16DFA625CD692728AD03CDB87D3E429DF016E08DB4770D419F93F8221
Malicious:	false
Preview:	VLnk.....?.......p.u1f.t................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 87, cookie 0x36, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	178176
Entropy (8bit):	0.9328712687751187
Encrypted:	false
SSDEEP:	192:R2qAdB9TbTbuDDsnxCkvSAE+WslKOMq+c:R2qOB1nxCkvSAELyKOMq+c
MD5:	6B2D5ED0A90C99FD05D58FE8E924C886
SHA1:	34E1103E18E57E9D1769C89DFB2DAD84BFDD54B5
SHA-256:	2873E973AB5B91CD07405FD5D35E2A843A408AD53696372BEC794F4582368E49
SHA-512:	08373748A19C0381866090CB60929A4642BB624AF777240CB63B918180CEEE0C80DFAD852830FC6821AD6266DF1A865940A90D2089621F612617C5E92A4B29B2
Malicious:	false
Preview:	SQLite format 3......@ .......W...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\a157f035-0ed7-4d93-9606-55d045ad6ee5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6245
Entropy (8bit):	4.84240395807377
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8zD85eh6Cb7/x+6Mhmuec2ZS1e1ee7v9XU2MR7K:stbusbAGkD88bV+FaIQ1zOPhK
MD5:	AD615564131B76C1F5BD73D0B13632E5
SHA1:	A68168A949D406CC9E2365661BC2F3D3417C8EDD
SHA-256:	96E6548FA3442BBAD05F24E27C9462FAE23831E18649E301894A4976861549FB
SHA-512:	204DF19C5EFB4D3BED9549C09CE4342A16827B80263C6297C7E9B76A74D3415A37AF7D0BB3073A28E608F24FCA7F733201D3F18AD5B1BCD4E1FD4520908A676B
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\edf3684c-d172-4ea6-bb2f-29901bcebc5a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6347
Entropy (8bit):	4.8455274066792295
Encrypted:	false
SSDEEP:	96:stj/uxps13jpmb9PG8zD85eh6Cb7/x+6Mhmuec2ZS1e1ee7vqXT2MR7K:stbusbAGkD88bV+FaIQ1zCPhK
MD5:	47E6564A118CE2159B566243812D5254
SHA1:	5D24BB84D9B7B0BA98DD5A1E3131DBA6DEF7D852
SHA-256:	3ADF7D79A925968FB1874DB4FB373FCA005720BBD8C28E319F5B685D4B866E9D
SHA-512:	5B4EA13346AC69E99B2E9F0C330640433E24DC12E71FA6458BC734801877180566702CCD5875C344B19DB1AEA5EE2ABDE3FC673E579F7EC576CA585C1E7DD7D7
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13366495579231307","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13366495579529421","domain_diversity":{"last_reporting_timestamp":"13366495579621630"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\heavy_ad_intervention_opt_out.db

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.35226517389931394
Encrypted:	false
SSDEEP:	12:TLC+waBg9LBgVDBgQjiZBgKuFtuQkMbmgcVAzO5kMCgGUg5OR:TLPdBgtBgJBgQjiZS53uQFE27MCgGZsR
MD5:	D2CCDC36225684AAE8FA563AFEDB14E7
SHA1:	3759649035F23004A4C30A14C5F0B54191BEBF80
SHA-256:	080AEE864047C67CB1586A5BA5EDA007AFD18ECC2B702638287E386F159D7AEE
SHA-512:	1A915AF643D688CA68AEDC1FF26C407D960D18DFDE838B417C437D7ADAC7B91C906E782DCC414784E64287915BD1DE5BB6A282E59AA9FEB8C384B4D4BC5F70EC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......Q......Q......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	195
Entropy (8bit):	2.7998631831187235
Encrypted:	false
SSDEEP:	3:VVXntjQPEnjQvxljljljljljljl:/XntM+4ljljljljljljl
MD5:	00C0DEFAC69CFE6E18C6FD4D684D6625
SHA1:	F80E1AB029E1116EE2FE85B2ECBF0959CCE884A7
SHA-256:	1FCAFCF037F8CE32A6EB94539F4A7D67FC51FE2BD8EDBD95C1D0322841EEC8A2
SHA-512:	C9411AEDDD3937D778BFE37FD489409E49304EBF3D3E7D686BDE4EE9C71E23A57224B622902948AD4BB422FFF3FB9386D02F956807FFF0185E9EF99FA2E157CF
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..&f.................&f.................&f.................&f.................&f.................&f.................&f...............

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.363136889303526
Encrypted:	false
SSDEEP:	6:BMGh0q1wkn23GK/SGd4rl2KLlrMG0uAkq2Pwkn23GK/SGd4rK+IFUv:vh01ft6GdqL30MvYft6Gd53FUv
MD5:	93E76717D990E60B06040BE54F9AE104
SHA1:	74BA60E337AD994A3CEFF011BC78138FE44CCEF7
SHA-256:	27F768C1742DA6DA7F8140890065715CCE1E34D977EBF68AE6A9159FCD033AC4
SHA-512:	EC871FB92228D6D3C074361EF6EAE70EC10E1425614DF985C4DEBB0FE8DA19018BFF159F7324E7BCAD6D06C5BB0E71BF7AF927DEA3A69AB1432BBD1BE1BA5076
Malicious:	false
Preview:	2024/07/26-15:26:19.286 1ef0 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db since it was missing..2024/07/26-15:26:19.348 1ef0 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	443
Entropy (8bit):	3.8607946201633463
Encrypted:	false
SSDEEP:	6:G0Xtqcsqc9Ct3msNJ4mv1m9p//3mQtmF2lHDNm8L/3mtyWmF2lpgll1mF2lA3m8e:G0nYUtTNop//z3p/F+iPAHlT0
MD5:	364DFD4B8549676511C5040355D18C46
SHA1:	C4E6FD741615C440860F5581962E5F533819D136
SHA-256:	325CC7FA8CB19396ADA70323CDA06CE125364E5D754825D47950F6A7BA31A236
SHA-512:	CCB5500742B49D6609C83C72BF4E8EA46C9B3EF684B85643E7B63DA4ABE29435C7EC726FA17C244E0C18760699AFE8E4076CDD777A6354413461E423919E31DB
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_......Q...................20_.......w<.................20_.......ln.................19_......Y...................18_.....%.{..................9_.....f..U.................9_.....

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.294020985345195
Encrypted:	false
SSDEEP:	6:BMGzq1wkn23GK/SGd4rzs52KLlrMGwIq2Pwkn23GK/SGd4rzAdIFUv:vz1ft6Gd59L3hvYft6GduFUv
MD5:	578027581486E0611B484B0793E2EC8B
SHA1:	D25E03C10C9D75DA5D5A27533BBEC7598F10A9DE
SHA-256:	94AFC56FFF9856174AD2B55DFCC85AC601B8BF0E20EDCE8E5E78481A2180E22E
SHA-512:	DFCCEE5E54DED55C662DB6E8E0E641700FB938515E3025EE710AB275DB77D0031849D1212C624D00C6FF7B2DDE2615885B16AB8AA91AB619740777E9DAB851DC
Malicious:	false
Preview:	2024/07/26-15:26:19.243 1ef0 Creating DB C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata since it was missing..2024/07/26-15:26:19.270 1ef0 Reusing MANIFEST C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata/MANIFEST-000001.

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GrShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GrShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GrShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GrShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GrShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.47693366977411E-4
Encrypted:	false
SSDEEP:	3:LsNljZ+l:Ls3jc
MD5:	24E2E207BA01442A5A5B08316F2F7604
SHA1:	D62452F3E8768D3E6B5C88D7E951F9794A2B049B
SHA-256:	8B84CC49EE672000D5D048A15926D5AB7EFFDB741D0D2E2BA9B74BCA6D2F9DEB
SHA-512:	D48AD6186335570EE4216FD095144984A59020D3EB7191C1FCBFBC1311E286CD69821614EF1EDCF4B05930357377281420AD6A1599657E7494110CDB22104880
Malicious:	false
Preview:	........................................$....\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GraphiteDawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GraphiteDawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GraphiteDawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GraphiteDawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\GraphiteDawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.47693366977411E-4
Encrypted:	false
SSDEEP:	3:LsNlN:Ls3
MD5:	88E8E55EE5243BEE25AA2400AED95AE2
SHA1:	AD685DAC9F3272DF6AA394D062F9360F7E8E6D49
SHA-256:	FE47C095FDC62986DDAA1A450E3D043444E24013AEF813235772905E7A18703F
SHA-512:	DB920290E787FC2DE32F9787463CBE78CAF2816F5847E6080855A3DF4CFDFD51B35BB2365AB2FA50E90E3D13BC7A3BC68D91758930EE347B07A3F8DAC1C5864F
Malicious:	false
Preview:	.............................................\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6a494a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6a4979.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6a7089.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6a9e01.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6b5a9a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Local State~RF6be1cc.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.69511172331613
Encrypted:	false
SSDEEP:	24:YKWJu5rrtW6n+qSoXa9rJZPtD8BVaeCUWOa1qbvXlQQRCYfYg:YqfypjrJZF8BVZHosv6B0
MD5:	4E1BD969E4D6A4F09D8C6C1BF53E9CF3
SHA1:	E3D8643A43CF464F1CF99F08F6E8FE2D451FD753
SHA-256:	1EF6A981056AFC0DDC3CEB820EF56AAC92CE47CF4701874598278FD608AD1354
SHA-512:	55BA901CD8B38F9C9E0A2207C636BBAE4EF86788C4536CECDACD584A55C85ABC1B649563B5AB3839B4F9F88261067CB6DC7E1C0631D70363967AB02D2C805203
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"uninstall_metrics":{"installation_date2":"1722021978"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":3431,"pseudo_low_entropy_source":916,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13366495578869597","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.47693366977411E-4
Encrypted:	false
SSDEEP:	3:LsNlDc:Ls3Q
MD5:	4E7E158184358D4DA01861650DB8E6E9
SHA1:	E0CF677B6862C1990B30D1500E859C1F979312DD
SHA-256:	97FFCC45CC8056BC9F97AB456D07FBA58B08ED1B78697CE8A6E5008E92682DD1
SHA-512:	4241B193253C6FDD0B97D2198CEE208D7542C9A9F8085F80BB8130C75F2F2FE8F8C63F1CA8666EA4CD5359C0A7528932B47DCEDBC0830332FB07B13CAC082EC7
Malicious:	false
Preview:	.............................................\|/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQan:YQ3Kq9X0dMgAEwjM
MD5:	961E3604F228B0D10541EBF921500C86
SHA1:	6E00570D9F78D9CFEBE67D4DA5EFE546543949A7
SHA-256:	F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED
SHA-512:	535F930AFD2EF50282715C7E48859CC2D7B354FF4E6C156B94D5A2815F589B33189FFEDFCAF4456525283E993087F9F560D84CFCF497D189AB8101510A09C472
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":0}

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\aba78bb1-66b0-4efd-862a-2501ff562cf2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3514
Entropy (8bit):	5.284961447297828
Encrypted:	false
SSDEEP:	96:PNkGSCBmKYfypjrJqi8rh/cIyURoDoto+4T3nB4BknZ2ZsT6X4u:PNBScmKLzAVoDUgB4BZ00
MD5:	A7E96E84219C6718A3508FF2B1178A1A
SHA1:	063208ACA3AB3592B5077459AB221E75CB0B3EBB
SHA-256:	70960557A31DECAA1E9CD3CD8E71A2D08F477C01656A3A16150462B519E0EC32
SHA-512:	B5FC2E8F57755BA5B32F679806A7BF7BA62D5C35E84FA84BB6718514171CE56E9CFB0C7C50A2A137A670A99D075864820A9D89ECD3B9E5DB7FE3844EEBEC665C
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"is_dsp_recommended":true,"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.722021980829333e+12,"network":1.722021981e+12,"ticks":6967404123.0,"uncertainty":2076149.0}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGj

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\dc7aa6f7-9250-4dd7-8729-5433c759fdea.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17909
Entropy (8bit):	6.06054396736917
Encrypted:	false
SSDEEP:	384:RtM7XKnG7EtlXrFJOg5+VCKP4gW5CiUMzcBh8NlcPB4uJjVyU9r4OJim:LM7X2zt1jOXtXi3zahtnpVyU9rJH
MD5:	2439374392FEF5DE0C3807F523C7D52D
SHA1:	B70DE71C45B003D0D0F269725007542E916937B1
SHA-256:	C40152443904A24A3FEC6885A240B694017551109A7C90A0AE054384C1A3B798
SHA-512:	7DF6C312BD4AADA0F82938C6F28F67D8874CFD995F308F68613C92614F7A18DE6E61953169CC7DA72049A2879B3C969AD4BDEAE53FDECF861EB0997AA4B911C9
Malicious:	false
Preview:	{"desktop_session_duration_tracker":{"last_session_end_timestamp":"1722021990"},"domain_actions_config":"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

C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\e212f0c0-44ed-4fa6-862a-9e88c2c2430b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2899
Entropy (8bit):	5.3062959357902075
Encrypted:	false
SSDEEP:	48:YDEFMsFiHGS0afypjrJZFC3p8QSh/cIgwLURMYXylVotoWFd5K1DiHB++drxwBVZ:PNkGS1fypjrJq58rh/cI9URoDotomTDA
MD5:	0618347D29FD570F77360FE55F24E593
SHA1:	2EB1B619D9A6E63FB57CD090684F378A503DF730
SHA-256:	5F3A48445C651BA949EF5EDF98B5E61A6500BD48466581F1D7FDCCDFED95FE59
SHA-512:	41A2BBA6DDCBE4353A69670D67A45C92D89B394ED8E2BAE818E1B8FB6F4FE38EAFA396752DDA45D2C76D2D261A1966B38C8BF80BB14924AFE8969B01288B9451
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAAUD8so6nFjS6VdwMrQywD0EAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAADHN51qVwYMIR/qe2TGSiHJo5yxA+W6hrBN1F8hStSyVAAAAAAOgAAAAAIAACAAAAAZAo6vGmSymjLwJSpu4dEiqhbOqDjBdY9BwkSwqmkO1DAAAAA7IlgQUdirJqkpsNjiFWL0tGU6t8BERInT5eNMZk6wKZ9yyEA7R5dCJXd8b30tmJVAAAAAcajurcF77+ATUQgEbATSC58WFuZZtINnzwVRFGjsRo8vw94nakEc9mTgHwTx3J5XVJ/Pyvodidu4mA+16R/ZZQ=="},"policy":{"last_statistics_update":"13366495579066899"},"profile":{"info_cache":{"Default":{"avatar_icon":"chrome://t

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\notepad.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\Modrinth.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Jul 26 18:26:02 2024, mtime=Fri Jul 26 18:26:02 2024, atime=Fri Jul 26 18:26:02 2024, length=324096, window=hide
Category:	dropped
Size (bytes):	764
Entropy (8bit):	5.033838839686713
Encrypted:	false
SSDEEP:	12:87y5X424/WCX6gdY//gYlLSJNdjAsHmrHROCzBmV:87y5yug+YkkAsGDzBm
MD5:	6F8988CC9578516CFBA0DE875153687D
SHA1:	70762B695F8ED81576EB5C715F2F0AE524EAE3FF
SHA-256:	BF73F001D461B9F4CBC57C3B1C2CFE54D924C9157B2FB88411C7FB3119BC81A1
SHA-512:	30E35B3C3E11690F1B4CEC9D3CCBCD7066E0715AA75AC75645257AF8C9D0E715A46B6CB1FAFBAB07E434F7A837AB3E8816746B24675560E3B4F798BF717F5F47
Malicious:	false
Preview:	L..................F.... ...................................................v.:..DG..Yr?.D..U..k0.&...&......vk.v....q.......IYc.........t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^.X;............................%..A.p.p.D.a.t.a...B.V.1......X:...Roaming.@......CW.^.X:............................W..R.o.a.m.i.n.g.....b.2......XB. .notepad.exe.H.......XB..XB...........................qH..n.o.t.e.p.a.d...e.x.e.......Y...............-.......X............qx.....C:\Users\user\AppData\Roaming\notepad.exe........\.....\.....\.....\.....\.n.o.t.e.p.a.d...e.x.e.`.......X.......745773...........hT..CrF.f4... ..T..b...,.......hT..CrF.f4... ..T..b...,......E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\metadata.json

Download File

Process:	C:\Program Files\Modrinth App\Modrinth App.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	906194
Entropy (8bit):	5.014736628239519
Encrypted:	false
SSDEEP:	1536:frTMSv9/D8jFVDJBBb3qSy7OKto63tBrJAXAisrTP63li3SVmgIpOjpfIK/RPf3I:jvv9gHDJdF6blh
MD5:	32047C42DDC3B1F9D29532E9DB642165
SHA1:	897057CA5FA8D95BD5F36F87581F155715CD411C
SHA-256:	8E38D25DA3DF6A1BC60F1A77CB8C0CB161A63227105BCB8E20FEC1FF3D974815
SHA-512:	61C1BB7437E46E88B75711FD0485D324797F0084395A8E8FDD14DA88F1F85C8782816797F55D61832051BF613ACFE145E754AE9583D69A56A65052646E9F54FB
Malicious:	false
Preview:	{"minecraft":{"latest":{"release":"1.20.2","snapshot":"23w44a"},"versions":[{"id":"1.21","type":"release","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21.json","time":"2024-06-13T08:24:03Z","releaseTime":"2024-06-13T08:24:03Z","sha1":"94892583713ae86d96823083616b2cba011fea14","complianceLevel":1,"assetsIndexUrl":"fab15439bdef669e389e25e815eee8f1b2aa915e","assetsIndexSha1":"fab15439bdef669e389e25e815eee8f1b2aa915e"},{"id":"1.21-rc1","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21-rc1.json","time":"2024-06-10T12:24:08Z","releaseTime":"2024-06-10T12:24:08Z","sha1":"5de863039d674d4ef0c905f888825dbbec4e10c6","complianceLevel":1,"assetsIndexUrl":"7ee724e8d201ae2a05faeeb59421d8403a94b8a8","assetsIndexSha1":"7ee724e8d201ae2a05faeeb59421d8403a94b8a8"},{"id":"1.21-pre4","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21-pre4.json","time":"2024-06-07T12:00:15Z","releaseTime":"2024-06-07T12:00:15Z","sha1":"63a5af24b0b658f545eb121

C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\metadata.json.bak

Download File

Process:	C:\Program Files\Modrinth App\Modrinth App.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	906194
Entropy (8bit):	5.014736628239519
Encrypted:	false
SSDEEP:	1536:frTMSv9/D8jFVDJBBb3qSy7OKto63tBrJAXAisrTP63li3SVmgIpOjpfIK/RPf3I:jvv9gHDJdF6blh
MD5:	32047C42DDC3B1F9D29532E9DB642165
SHA1:	897057CA5FA8D95BD5F36F87581F155715CD411C
SHA-256:	8E38D25DA3DF6A1BC60F1A77CB8C0CB161A63227105BCB8E20FEC1FF3D974815
SHA-512:	61C1BB7437E46E88B75711FD0485D324797F0084395A8E8FDD14DA88F1F85C8782816797F55D61832051BF613ACFE145E754AE9583D69A56A65052646E9F54FB
Malicious:	false
Preview:	{"minecraft":{"latest":{"release":"1.20.2","snapshot":"23w44a"},"versions":[{"id":"1.21","type":"release","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21.json","time":"2024-06-13T08:24:03Z","releaseTime":"2024-06-13T08:24:03Z","sha1":"94892583713ae86d96823083616b2cba011fea14","complianceLevel":1,"assetsIndexUrl":"fab15439bdef669e389e25e815eee8f1b2aa915e","assetsIndexSha1":"fab15439bdef669e389e25e815eee8f1b2aa915e"},{"id":"1.21-rc1","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21-rc1.json","time":"2024-06-10T12:24:08Z","releaseTime":"2024-06-10T12:24:08Z","sha1":"5de863039d674d4ef0c905f888825dbbec4e10c6","complianceLevel":1,"assetsIndexUrl":"7ee724e8d201ae2a05faeeb59421d8403a94b8a8","assetsIndexSha1":"7ee724e8d201ae2a05faeeb59421d8403a94b8a8"},{"id":"1.21-pre4","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21-pre4.json","time":"2024-06-07T12:00:15Z","releaseTime":"2024-06-07T12:00:15Z","sha1":"63a5af24b0b658f545eb121

C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\tags.json

Download File

Process:	C:\Program Files\Modrinth App\Modrinth App.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118711
Entropy (8bit):	5.147802502197978
Encrypted:	false
SSDEEP:	768:3mfB4tsU6zpDTjf+up8qsyV0RBNjM67Ts188CTzE5H1l/djn61++8LXsu4wYyj:3XslJTjf+LqwBNjM67TS8bu56E1
MD5:	4BC8B691B3B62872D99960D7721011F5
SHA1:	8EB29096C054D0BED4BD57376A394323C00D5432
SHA-256:	6F8254E21509C8F8CE278E4A0E13C5503FB9C6A76D91FE724C98D1870AF08D48
SHA-512:	09B972AD2ABDBB6A449873842E1F79B3557BAC0A5DC16FE841355D87A035BD19B78CDFF032F0314A800579C65B73483DFD9DDE35417D81B0D0E710435ACAA6A6
Malicious:	false
Preview:	{"categories":[{"name":"128x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"16x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"256x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"32x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"48x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"512x+","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"64x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"8x-","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"adventure","project_type":"mod","header":"categories","icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><polygon points=\"16.24 7.76 14.12 14.12 7.76 16.24 9.88 9.88 16.24 7.76\"/></svg>"},{"name":"adventure","project

C:\Users\user\AppData\Roaming\com.modrinth.theseus\caches\metadata\tags.json.bak

Download File

Process:	C:\Program Files\Modrinth App\Modrinth App.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118711
Entropy (8bit):	5.147802502197978
Encrypted:	false
SSDEEP:	768:3mfB4tsU6zpDTjf+up8qsyV0RBNjM67Ts188CTzE5H1l/djn61++8LXsu4wYyj:3XslJTjf+LqwBNjM67TS8bu56E1
MD5:	4BC8B691B3B62872D99960D7721011F5
SHA1:	8EB29096C054D0BED4BD57376A394323C00D5432
SHA-256:	6F8254E21509C8F8CE278E4A0E13C5503FB9C6A76D91FE724C98D1870AF08D48
SHA-512:	09B972AD2ABDBB6A449873842E1F79B3557BAC0A5DC16FE841355D87A035BD19B78CDFF032F0314A800579C65B73483DFD9DDE35417D81B0D0E710435ACAA6A6
Malicious:	false
Preview:	{"categories":[{"name":"128x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"16x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"256x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"32x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"48x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"512x+","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"64x","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"8x-","project_type":"resourcepack","header":"resolutions","icon":""},{"name":"adventure","project_type":"mod","header":"categories","icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><polygon points=\"16.24 7.76 14.12 14.12 7.76 16.24 9.88 9.88 16.24 7.76\"/></svg>"},{"name":"adventure","project

C:\Users\user\AppData\Roaming\com.modrinth.theseus\launcher_logs\theseus.log.2024-07-26

Download File

Process:	C:\Program Files\Modrinth App\Modrinth App.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.004139069789416
Encrypted:	false
SSDEEP:	3:tRwswjbAbVvsjDW8VRFxBFnrGEBZFXhMlsutWvULmzWd/KvsjMcGNMADWiRus4mS:vwjbW6/WQL7EsmJ/ngcawivLm
MD5:	E27C58C0C33F02C192FEA1407BE22EDB
SHA1:	75AB2C654E4D544B53AA748FDAD42F1D86D409D0
SHA-256:	528DD7C769283B7359CD9D6B7FCB45386CF4B6BA67522CBE8F17710632472229
SHA-512:	453287786B82B6AC0715BBEE0C6EBB3FF129A4274EDB6C258F843F9836A1C44066A4ABB9C0050607098B5FBF71E629A249C71600376F61C17AA9C760A6FBEAF5
Malicious:	false
Preview:	2024-07-26T17:19:16.597465500-04:00 INFO theseus_gui: Initialized tracing subscriber. Loading Modrinth App!.2024-07-26T17:19:21.922263800-04:00 INFO init_watcher: theseus::state: Initting watcher.

C:\Users\user\AppData\Roaming\notepad.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\Modrinth.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	324096
Entropy (8bit):	4.609404833302635
Encrypted:	false
SSDEEP:	3072:DKShuWbilT4O9sByOkitG/iJpXnc858j:DKCRb+OkiYcRnh
MD5:	6F56F305614CBAD9E5737ACBEE0F8894
SHA1:	8FEB8EB68FD2A0B8B502032073277961EC5D9AB9
SHA-256:	7389AAA07392F6533DC7A4B1F0377AB9B694BB5C08A45F7B871062E7F9F0BDFF
SHA-512:	BCFA430E336735785D988C3276D0524A0C66F629A8B26A39D6B4F93607F6F435F7ADE02F68F963CF4BCBC6A42C63EA99AD6DA8020F41DEFAB242BD197121A26C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: ditekSHen
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...9..f.....................(......n.... ........@.. .......................`............@.....................................S........%...................@....................................................... ............... ..H............text...t.... ...................... ..`.rsrc....%.......&..................@..@.reloc.......@......................@..B................P.......H........\..........&.....................................................(.....r...p. ..}...(.....r...p. p{..s.........s.........s.........s..........r5..p. .....rO..p. M....ri..p. .d...r...p. S....r...p. (.^...((....r...p. ~.H..r...p. .....(...-.(+...,.+.(,...,.+.()...,.+.((...,..(R...&(....&+..+5sd... .... .'..oe...(...~....-.(Y...(K...~....of...&.-..r...p.r...p. .O...r...p.r...p. .%<..r-..p.rG..p. ..e..ra..p.r{..p. .=l..r...p*. .6..

C:\Windows\Installer\6a222a.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Modrinth App, Author: modrinth, Keywords: Installer, Comments: This installer database contains the logic and data required to install Modrinth App., Template: x64;0, Revision Number: {C760B5F9-74CA-4082-83C4-12F6B36A93BB}, Create Time/Date: Tue Apr 23 23:26:10 2024, Last Saved Time/Date: Tue Apr 23 23:26:10 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Category:	dropped
Size (bytes):	5292032
Entropy (8bit):	7.946423046698208
Encrypted:	false
SSDEEP:	98304:fNT+6HE4ThcGalSS9d+udj3mYcCqQcgT3XV8tEbETvsDHaLqV710ZZ9rPzrPW:1/HMlS2JxmYcmcg7XGqb6Msq51GP
MD5:	5003486A784143BC96C3577172BBB44A
SHA1:	9A960998807126041FAE5B4FE9488D7FF3C5CA42
SHA-256:	B1AC36000CEE14B9C36AEA4CEF7F53ED2E7C18C9534B4FF66F07DA11E8C07B59
SHA-512:	3FD871414CFFE35AE649DBB02935EDDCAD75EE094F2D61F2CEF48827DFB852FF3B8E4211F913BF65E4619B2A4989A2807D876A920A105735AC3E59362802EE19
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\6a222c.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Modrinth App, Author: modrinth, Keywords: Installer, Comments: This installer database contains the logic and data required to install Modrinth App., Template: x64;0, Revision Number: {C760B5F9-74CA-4082-83C4-12F6B36A93BB}, Create Time/Date: Tue Apr 23 23:26:10 2024, Last Saved Time/Date: Tue Apr 23 23:26:10 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
Category:	dropped
Size (bytes):	5292032
Entropy (8bit):	7.946423046698208
Encrypted:	false
SSDEEP:	98304:fNT+6HE4ThcGalSS9d+udj3mYcCqQcgT3XV8tEbETvsDHaLqV710ZZ9rPzrPW:1/HMlS2JxmYcmcg7XGqb6Msq51GP
MD5:	5003486A784143BC96C3577172BBB44A
SHA1:	9A960998807126041FAE5B4FE9488D7FF3C5CA42
SHA-256:	B1AC36000CEE14B9C36AEA4CEF7F53ED2E7C18C9534B4FF66F07DA11E8C07B59
SHA-512:	3FD871414CFFE35AE649DBB02935EDDCAD75EE094F2D61F2CEF48827DFB852FF3B8E4211F913BF65E4619B2A4989A2807D876A920A105735AC3E59362802EE19
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI3053.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	58346
Entropy (8bit):	7.949319533301057
Encrypted:	false
SSDEEP:	1536:fvL089poXChi+IUEc79w7k/hjM60XPDl2:fvA8PoXCgUEc79k69d0X52
MD5:	5D80D860E085C03ECF509D2E21043B46
SHA1:	4771F5FD636FE0477340F9F598E55B2FE85FCBA6
SHA-256:	DD8E8B9C669F604DDC11E3E3E10D6436BAC8C8013FE436B5FDE68581DF3728BD
SHA-512:	99AB8910389A7FE4B64AB54F82B7F10C68EFFD68A33ADF431333C72556D4B746AA3C97F056D14455244DD5D70E021F6055626B1DAF5447CBB95A97218D4F5075
Malicious:	false
Preview:	...@IXOS.@.....@G{.X.@.....@.....@.....@.....@.....@......&.{67E35770-3BE7-49CB-BE18-C8626CE846EE}..Modrinth App .Modrinth App_0.7.1_x64_en-US.msi.@.....@.....@.....@......ProductIcon..&.{C760B5F9-74CA-4082-83C4-12F6B36A93BB}.....@.....@.....@.....@.......@.....@.....@.......@......Modrinth App......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration.....@.....@.....@.]....&.{2E37D8FF-ECDE-559E-8E0B-74257058D78B}3.21:\Software\modrinth\Modrinth App\Desktop Shortcut.@.......@.....@.....@......&.{A85DF90F-5FA4-530D-9BFA-C33807C29A55}-.21:\Software\modrinth\Modrinth App\InstallDir.@.......@.....@.....@......&.{8FBB1E5B-CACC-5447-BF83-51C73D6B4C3C}..C:\Program Files\Modrinth App\Modrinth App.exe.@.......@.....@.....@......&.{ABDBD5A5-D66D-5E6D-AF6E-CBB2D92B1885}7.21:\Software\modrinth\Modrinth App\Uninstaller Shortcut.@.......@.....@.....@......&.{7D1A1628-06F9-586F-AACD-E5A1ABE59028}+.

C:\Windows\Installer\SourceHash{67E35770-3BE7-49CB-BE18-C8626CE846EE}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1745113879475513
Encrypted:	false
SSDEEP:	12:JSbX72Fj+iAGiLIlHVRpbh/7777777777777777777777777vDHFpjXJBxbOCM1z:JTQI5/bXJa38F
MD5:	42CB70BE68DEF7081E1C9ED3000D544A
SHA1:	A28321A44DAF692EA13956D8A33B28370680E696
SHA-256:	2C1A46DE2A6C8774F90F62E7817E526A67DEDC96E3F75C6CF5E4A1D7A071557D
SHA-512:	8D47CF27B7F38FBCCD934E5C783ECB1F786D854B20B4FDC7D5971004E601F86326BD7644237ED015F8DF2529C367A329F451008AD9F8EB71461F04F81DFB08DD
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5417117097046689
Encrypted:	false
SSDEEP:	48:+8PhzuRc06WX4ejT5t49ZuVduF6AdyS5owxPydySIlNpXs:xhz1ujTLOuC6M7i
MD5:	5DE122C25F52DA3487F8570E8F625E43
SHA1:	516ADEEB9BC752258B975DC6DB2A687A784F7E74
SHA-256:	B34D61DB542ADA40CC9FC04E7D5689FE14D2E4C4CCC7E48F273EF62AB55F26C8
SHA-512:	A3F877B0A66CCFD1C9D57753B1314309896E10FFF40C8DEF43E871BDA7DCEA89E4F5DD331FD75E5EC5A056FE6EBC980A38E30CAC11E831AC873211765BF06B38
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{67E35770-3BE7-49CB-BE18-C8626CE846EE}\ProductIcon

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows icon resource - 6 icons, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	53242
Entropy (8bit):	7.985318909302482
Encrypted:	false
SSDEEP:	768:sUvL0bomOt4coXNYhi/Qp7WwIxfSQCADo7y4w9ZjLtC+F7g/hcSAzG90d1nP/m:pvL089poXChi+IUEc79w7k/hjM60XPu
MD5:	97D81CB0E98D22BB7992FD673BB65C4F
SHA1:	F5A3E4AFBDFCE7880B3AA373990D5EBC361C4CBA
SHA-256:	26F91F63041A4CA7F5889FB87C087C6A8C432EFE35BDFA910D43DB971839A0E7
SHA-512:	1C9AD54FD074BF41B9D06607BA4E28BFA4F3A14B0DED7A5B177B2673336DFE21194577F5BD1A83A2396FDD97D57628070CEE556CA579A1EF8FE6BEBABF5B31E5
Malicious:	false
Preview:	...... .... .T...f......... ............... .....@...00.... .D.......@@.... ......)........ .>....H...PNG........IHDR... ... .....szz.....IDATx..Wi.]U...s.o_f..N..N[.......,6E... \|p..0..j...../..$@.%a1.....VJ...Neh.v...f.........T...x...{.........)....Ru.#.-v8...R.n!D.i.+....{...r.q^.}o.qX......e.\|h...........[..)D...hz...")..B.d>[...P....ns....E.4.....w#..Z&S...D...~..H.#.,.K.G.....Qi......)..d".F.T.U.4...5.7.....K.....>P.Z.im{!.........v%6u.......+@.....uW.........=.-.......No.<w..........s.`.B.Z..;.w./..bC[H..'.".D.."sDc..n..q.h..i.f.d..?......4e:l..W.....&9.M.p..~.W.....[s....q]m6q...y...F.......<0C..2..2.o..+...n.V..f..B?u.x.hS$B!..K...%D....O...R.*....B.J]i4.V..^.K.eP.`..P...s..7f.$I.2h.!3DaC....+....B?\|.).v.Yo...'.p..@..,..t._G..-.<a...._]...w......Z..bm..~.......>...%.KZ!.c...p......a.vqn..4\|..N7B.H...7...k..\|.....c..,.g..s....D....h.....:..k!.. q....GKPw.Bm.."fA...'R.^,K.\|'.....R...P"z.S.>.}?o.@"......i.W.Z..@.....E_..o6A

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	432221
Entropy (8bit):	5.375165436228508
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26Kgau6:zTtbmkExhMJCIpErz
MD5:	648E92436FD5AC29BACC0D58FEB5D6FD
SHA1:	CA9CA0812F8878A4A383129A79CEE558F5797802
SHA-256:	D2AAFDB09CE454B4C72F473815E5136C61F3016B60672D525A88B4685B51A580
SHA-512:	877A74098B170167B4F4A3329DAF1F7D5B4B67A7271642C9C26C1B1E72E41D076C4871A718AB9977796EFFB902CB3AAD9B68647012919BB36C5DF744321C07D9
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF0150A68402F75138.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF173ADAEC389301CB.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF39BD558DD7C725C6.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2358590342811728
Encrypted:	false
SSDEEP:	48:Y+rugI+xFX45T5NC49ZuVduF6AdyS5owxPydySIlNpXs:/rjaTmOuC6M7i
MD5:	3D29536BC06FF7347A3F03B2819B43A6
SHA1:	BF4D6DC65B01EBC3388F10AEC9FDDFDFC7D93280
SHA-256:	D33BEB959D454AFE7E801B2AAA9D1DE7DC890A46226EBC0E9EE3EEDF8B2D7B18
SHA-512:	A0739F67A7D5C6791B9CCA7846AA3B8F8A6F005CCDA9A8EA888A59ACCCF7C169ABAA1FF89D70FC8397C30B6C523927B45759D5838D8D49A4282B861B4F901316
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF4B9E390C32129C38.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5417117097046689
Encrypted:	false
SSDEEP:	48:+8PhzuRc06WX4ejT5t49ZuVduF6AdyS5owxPydySIlNpXs:xhz1ujTLOuC6M7i
MD5:	5DE122C25F52DA3487F8570E8F625E43
SHA1:	516ADEEB9BC752258B975DC6DB2A687A784F7E74
SHA-256:	B34D61DB542ADA40CC9FC04E7D5689FE14D2E4C4CCC7E48F273EF62AB55F26C8
SHA-512:	A3F877B0A66CCFD1C9D57753B1314309896E10FFF40C8DEF43E871BDA7DCEA89E4F5DD331FD75E5EC5A056FE6EBC980A38E30CAC11E831AC873211765BF06B38
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF50C9F1B32334789D.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2358590342811728
Encrypted:	false
SSDEEP:	48:Y+rugI+xFX45T5NC49ZuVduF6AdyS5owxPydySIlNpXs:/rjaTmOuC6M7i
MD5:	3D29536BC06FF7347A3F03B2819B43A6
SHA1:	BF4D6DC65B01EBC3388F10AEC9FDDFDFC7D93280
SHA-256:	D33BEB959D454AFE7E801B2AAA9D1DE7DC890A46226EBC0E9EE3EEDF8B2D7B18
SHA-512:	A0739F67A7D5C6791B9CCA7846AA3B8F8A6F005CCDA9A8EA888A59ACCCF7C169ABAA1FF89D70FC8397C30B6C523927B45759D5838D8D49A4282B861B4F901316
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF729E97EE94F545C4.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF7CA8598823228EE1.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFAA83BE2FA08D5F0C.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2358590342811728
Encrypted:	false
SSDEEP:	48:Y+rugI+xFX45T5NC49ZuVduF6AdyS5owxPydySIlNpXs:/rjaTmOuC6M7i
MD5:	3D29536BC06FF7347A3F03B2819B43A6
SHA1:	BF4D6DC65B01EBC3388F10AEC9FDDFDFC7D93280
SHA-256:	D33BEB959D454AFE7E801B2AAA9D1DE7DC890A46226EBC0E9EE3EEDF8B2D7B18
SHA-512:	A0739F67A7D5C6791B9CCA7846AA3B8F8A6F005CCDA9A8EA888A59ACCCF7C169ABAA1FF89D70FC8397C30B6C523927B45759D5838D8D49A4282B861B4F901316
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFAC1A1BE010E22A39.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5417117097046689
Encrypted:	false
SSDEEP:	48:+8PhzuRc06WX4ejT5t49ZuVduF6AdyS5owxPydySIlNpXs:xhz1ujTLOuC6M7i
MD5:	5DE122C25F52DA3487F8570E8F625E43
SHA1:	516ADEEB9BC752258B975DC6DB2A687A784F7E74
SHA-256:	B34D61DB542ADA40CC9FC04E7D5689FE14D2E4C4CCC7E48F273EF62AB55F26C8
SHA-512:	A3F877B0A66CCFD1C9D57753B1314309896E10FFF40C8DEF43E871BDA7DCEA89E4F5DD331FD75E5EC5A056FE6EBC980A38E30CAC11E831AC873211765BF06B38
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFD959BFA42BB7DD34.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFE6450DEB847108BD.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	69632
Entropy (8bit):	0.13382910811815177
Encrypted:	false
SSDEEP:	24:i7lNpkEsh+dyipVs+duTpAdWmgdyipV7V2BwGGKSxkW+O+89Zx:OlNpXsIdySFduF6AdyS5owxPJR9Zx
MD5:	24F057C17CE4DB0776D1E105F9F83197
SHA1:	8BDE8A66C044CC00CB041A1578C87E42B76A1C7C
SHA-256:	4AB24545A1C9BE3EB99360B724A162DCAE608781D61F652D450C0F0D89942AA7
SHA-512:	AC25A3B3FDBCF28D2E9DA4C01D2EDC0E3360318CE5B1256B3FF3A545E1D23F2559242FF731946A10AE234D37771DA0096C91A79209E7AA22F726C73BF1063726
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFED37D601D7BF7D7B.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.0792217144677373
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOpLPEeJJE/sAAbhsIXIVky6lMt/:2F0i8n0itFzDHFpjXJBxbOCM1
MD5:	0E9565C889C066B7F70CA27CC0876969
SHA1:	76233AF764036360D84050BE2E77BE3F19E69666
SHA-256:	207322B246ECB9DCF7237E8C34CBE6E3A009A45B54CA49568E6EDD1CC6B1876F
SHA-512:	FA98AA86B741BDB08A5AD7F8B191031AAEB9BEF7CBDEDA8D34CFBBC845A2F33DBD3C6DEC835C6A878EA7DE9FA7DC8792CDB8AAD225B8FD4F12A5AA6457D2162E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.831036235075347
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.94% Win32 Executable (generic) a (10002005/4) 49.89% Win32 Executable Delphi generic (14689/80) 0.07% Windows Screen Saver (13104/52) 0.07% Win16/32 Executable Delphi generic (2074/23) 0.01%
File name:	Modrinth_Installer.exe
File size:	5'896'192 bytes
MD5:	578b2c56cabfa2d2a29bc7c0184a8e1d
SHA1:	11326b4b732c5cdb0edf9541c70d2dea3411ad6f
SHA256:	cf7a4925fdb1f1add01d039751d168ecf9fc958efe3b926c14566d207de4b6b4
SHA512:	7ef67f3e50ad6bfb49b4fe62c7b44982d9b1620627c6514c535fb7df5c56aceb16a0392d7c9af82016d42a809ea2475eb1c4595bf87cedb3657a73d0fa6b57d8
SSDEEP:	98304:AxdENT+6HE4ThcGalSS9d+udj3mYcCqQcgT3XV8tEbETvsDHaLqV710ZZ9rPzrPH:v/HMlS2JxmYcmcg7XGqb6Msq51GPf
TLSH:	EC56EF233D878D39FA751F344DFA8321F968EC105E28C146EF82AC69DAFC5C819952D9
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	71cc8a9adccad831

Static PE Info

General

Entrypoint:	0x4020cc
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	d59a4a699610169663a929d37c90be43

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
mov ecx, 0000000Ch
push 00000000h
push 00000000h
dec ecx
jne 00007FFBC4B8BFEBh
push ecx
push ebx
push esi
push edi
mov eax, 0040209Ch
call 00007FFBC4B8BA60h
xor eax, eax
push ebp
push 00402361h
push dword ptr fs:[eax]
mov dword ptr fs:[eax], esp
lea edx, dword ptr [ebp-14h]
mov eax, 00402378h
call 00007FFBC4B8BE39h
mov eax, dword ptr [ebp-14h]
call 00007FFBC4B8BF09h
mov edi, eax
test edi, edi
jng 00007FFBC4B8C226h
mov ebx, 00000001h
lea edx, dword ptr [ebp-20h]
mov eax, ebx
call 00007FFBC4B8BEC8h
mov ecx, dword ptr [ebp-20h]
lea eax, dword ptr [ebp-1Ch]
mov edx, 00402384h
call 00007FFBC4B8B658h
mov eax, dword ptr [ebp-1Ch]
lea edx, dword ptr [ebp-18h]
call 00007FFBC4B8BDFDh
mov edx, dword ptr [ebp-18h]
mov eax, 00404680h
call 00007FFBC4B8B530h
lea edx, dword ptr [ebp-2Ch]
mov eax, ebx
call 00007FFBC4B8BE96h
mov ecx, dword ptr [ebp-2Ch]
lea eax, dword ptr [ebp-28h]
mov edx, 00402390h
call 00007FFBC4B8B626h
mov eax, dword ptr [ebp-28h]
lea edx, dword ptr [ebp-24h]
call 00007FFBC4B8BDCBh
mov edx, dword ptr [ebp-24h]
mov eax, 00404684h
call 00007FFBC4B8B4FEh
lea edx, dword ptr [ebp-38h]
mov eax, ebx
call 00007FFBC4B8BE64h
mov ecx, dword ptr [ebp-38h]
lea eax, dword ptr [ebp-34h]
mov edx, 0040239Ch

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5000	0x302	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x9000	0x59d5fc	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x8000	0x1c8	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x7000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0x13b8	0x1400	e5913936857bed3b3b2fbac53e973471	False	0.6318359375	data	6.340990548290613	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0x3000	0x7c	0x200	cef89de607e490725490a3cd679af6bb	False	0.162109375	Matlab v4 mat-file (little endian) , numeric, rows 0, columns 4230400	1.1176271682252383	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0x4000	0x695	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5000	0x302	0x400	3d2f2fc4e279cba623217ec9de264c4f	False	0.3876953125	data	3.47731642923935	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x6000	0x4	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x7000	0x18	0x200	467f29e48f3451df774e13adae5aafc2	False	0.05078125	data	0.1991075177871819	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0x8000	0x1c8	0x200	9859d413c7408cb699cca05d648c2502	False	0.876953125	data	5.7832974211095225	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0x9000	0x59d5fc	0x59d600	06a9471f15f99c188fee0844ddcd9ffe	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x9338	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 262144	0.15308311388584786
RT_RCDATA	0x4b360	0x4f200	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows	0.2257880381121643
RT_RCDATA	0x9a560	0x50c000	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Modrinth App, Author: modrinth, Keywords: Installer, Comments: This installer database contains the logic and data required to install Modrinth App., Template: x64;0, Revision Number: {C760B5F9-74CA-4082-83C4-12F6B36A93BB}, Create Time/Date: Tue Apr 23 23:26:10 2024, Last Saved Time/Date: Tue Apr 23 23:26:10 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2	0.9872808456420898
RT_RCDATA	0x5a6560	0xc	ASCII text, with no line terminators	1.6666666666666667
RT_RCDATA	0x5a656c	0x20	ASCII text, with no line terminators	1.25
RT_RCDATA	0x5a658c	0x1	very short file (no magic)	9.0
RT_RCDATA	0x5a6590	0x1	very short file (no magic)	9.0
RT_RCDATA	0x5a6594	0x1	very short file (no magic)	9.0
RT_RCDATA	0x5a6598	0x1	very short file (no magic)	9.0
RT_RCDATA	0x5a659c	0x10	data	1.5
RT_RCDATA	0x5a65ac	0x1	very short file (no magic)	9.0
RT_RCDATA	0x5a65b0	0x38	data	1.0714285714285714
RT_GROUP_ICON	0x5a65e8	0x14	data	1.2

Imports

DLL	Import
kernel32.dll	GetCurrentThreadId, SetCurrentDirectoryA, GetCurrentDirectoryA, ExitProcess, RtlUnwind, RaiseException, TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA, FreeLibrary, HeapFree, HeapReAlloc, HeapAlloc, GetProcessHeap
kernel32.dll	WriteFile, SizeofResource, SetFilePointer, LockResource, LoadResource, GetWindowsDirectoryA, GetTempPathA, GetSystemDirectoryA, FreeResource, FindResourceA, CreateFileA, CloseHandle
shfolder.dll	SHGetFolderPathA
shell32.dll	ShellExecuteA

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-26T21:29:07.559901+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:31.775682+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:07.392253+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:24.284516+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:07.952537+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:08.745377+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:19.962512+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:29.200676+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:43.664557+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:12.281723+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:19.500279+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:08.757672+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:42.282169+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:24.285977+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:29.490476+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:49.590890+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:07.950788+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:28:19.498979+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:59.382398+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:08.900865+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:19.359398+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:47.430786+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:29.343722+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:00.577787+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:03.885339+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:31.774060+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:26:54.238369+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:25.401302+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:13.481761+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:29.202764+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:39.477056+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:49.586085+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:53.228864+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:47.432523+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:00.840096+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:26:42.249276+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:58.700344+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:42.498893+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:44.487016+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:20.503605+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:54.903894+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:43.662753+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:14.858535+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:13.922430+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:42.270124+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:33.187488+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:26:54.236442+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:20.175880+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:44.481137+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:13.480026+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:08.899086+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:17.707121+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:06.337720+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:25.399329+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:00.825213+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:28:14.856825+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:26:29.791203+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:10.640331+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:43.303150+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:48.986637+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:26:17.642524+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:30:12.295588+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:01.711533+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:15.400888+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:10.642766+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:07.561440+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:19.641298+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:26:29.793262+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:50.560451+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:26:29.551464+0200	TCP	2855924	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:08.759400+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:12.255897+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:46.301146+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:17.367067+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:38.833997+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:15.167797+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:02.844020+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:17.369594+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:07.393964+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:17.530442+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:02.845641+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:43.777123+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:03.883630+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:13.918164+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:48.984845+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:33.185753+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:08.747215+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:43.778724+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:46.296256+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:27.959013+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:54.659792+0200	TCP	2853193	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:42.285412+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:26:41.978583+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:17.529235+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:39.482996+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:41.433500+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:54.923099+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:12.322000+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:26:58.713123+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49792	40.68.123.157	192.168.2.4
2024-07-26T21:27:06.335999+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:27:29.485065+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:19.964511+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:50.559029+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:04.861221+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:18.920837+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:42.496244+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:26:17.644263+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:27.955970+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:15.399133+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:28:19.642518+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:15.018322+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:38.750746+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:09.887246+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:27:29.342604+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:43.304789+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:18.026155+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:00.585034+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:19.357679+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:28:15.296075+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:04.867464+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:59.384142+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:01.713514+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:17.867078+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:15.020028+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:18.918379+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:26:41.970623+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:26:12.251907+0200	TCP	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:26:18.904756+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49732	40.68.123.157	192.168.2.4
2024-07-26T21:29:07.230183+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:02.309775+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:20.504385+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:02.316969+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:07.227964+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:29:56.019025+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:30:00.828133+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:30:09.887973+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:28:15.153810+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:41.431837+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49731	147.185.221.21	192.168.2.4
2024-07-26T21:29:56.010860+0200	TCP	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	36704	49815	147.185.221.21	192.168.2.4
2024-07-26T21:28:20.177281+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21
2024-07-26T21:29:18.028249+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49815	36704	192.168.2.4	147.185.221.21
2024-07-26T21:27:58.701932+0200	TCP	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	49731	36704	192.168.2.4	147.185.221.21

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 26, 2024 21:26:02.492271900 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:26:02.497234106 CEST	80	49730	208.95.112.1	192.168.2.4
Jul 26, 2024 21:26:02.497317076 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:26:02.497965097 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:26:02.503582954 CEST	80	49730	208.95.112.1	192.168.2.4
Jul 26, 2024 21:26:02.963386059 CEST	80	49730	208.95.112.1	192.168.2.4
Jul 26, 2024 21:26:03.003051043 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:26:05.135515928 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:05.140852928 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:05.140944004 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:05.184533119 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:05.189613104 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:12.251907110 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:12.299964905 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:17.367146969 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:17.372586012 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:17.642524004 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:17.644263029 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:17.652019024 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:22.310005903 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.310094118 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:22.310179949 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.376609087 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.376657009 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:22.894386053 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:22.894484043 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.900717974 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.900738001 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:22.901371956 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:22.955936909 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:22.966424942 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:23.012495041 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:23.084933996 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:23.085011959 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:23.085087061 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:23.085222960 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:23.085243940 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:23.085299969 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:23.087160110 CEST	49743	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:23.087194920 CEST	443	49743	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.396478891 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.396519899 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.396586895 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.398530006 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.398541927 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.870026112 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.870101929 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.871990919 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.872009039 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.872415066 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:24.873085976 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:24.920538902 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.005266905 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.005337954 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.005654097 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.007968903 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.007991076 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.008083105 CEST	49747	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.008089066 CEST	443	49747	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.023211002 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.023267031 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.023375988 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.023840904 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.023864031 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.024024010 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024074078 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.024135113 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024135113 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024151087 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.024283886 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024307966 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024329901 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.024521112 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024533033 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.024559975 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024585009 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024974108 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.024990082 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.025258064 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.025296926 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.025391102 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.025399923 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.025412083 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.025440931 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.026189089 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.026201010 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.026356936 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.026384115 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.026472092 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.026659012 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.026679039 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.026889086 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.026899099 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.026983976 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.026995897 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.027124882 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.027138948 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.027154922 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.027286053 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.027299881 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.027405024 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.027431965 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.027532101 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.027549982 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.027668953 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.027688026 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.027740002 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.027919054 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.027931929 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.499982119 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.500080109 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.502564907 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.502598047 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.502835035 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.503215075 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.503288984 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.506131887 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.507066965 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.507137060 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.508161068 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.508187056 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.508605003 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.509673119 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.509701014 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.510065079 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.510132074 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.510195017 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.510561943 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.512762070 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.512779951 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.513011932 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.513036013 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.513771057 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.514581919 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.514693975 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.516129017 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.516166925 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.516707897 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.521389008 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.532977104 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.533067942 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.536252022 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.536336899 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.536654949 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.536672115 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.537930012 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.537956953 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.538177967 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.539727926 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.539813995 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.540071964 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.547760963 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.547868013 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.548516989 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.549017906 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.549105883 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.552537918 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.556580067 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.557554960 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.559220076 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.559269905 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.559638977 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.560524940 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.561240911 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.561292887 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.562221050 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.563034058 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.563082933 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.563149929 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.563945055 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.564141035 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.564219952 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.568502903 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.570281982 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.600548029 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.604518890 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.604537964 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.604536057 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.616501093 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.653089046 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.653156042 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.653353930 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.653434992 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.653450012 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.653474092 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654026031 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654061079 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654067993 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.654074907 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654114008 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.654601097 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654665947 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654706001 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.654710054 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.654767990 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.670368910 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.670419931 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.670603991 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.670607090 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.670624971 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.670685053 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.670731068 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.670746088 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.671139956 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.671442032 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.671499968 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.671610117 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.671618938 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.672044039 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.672087908 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.672094107 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.674779892 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.675592899 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.716933012 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.716968060 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717061996 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.717098951 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717343092 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717361927 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717581034 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.717593908 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717979908 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.717998028 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.718015909 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.718040943 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.718049049 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.718065977 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.718085051 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.718837023 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.719149113 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.720400095 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.720444918 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.720499992 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.720510006 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.720536947 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.720558882 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.722862005 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.722987890 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723032951 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723042965 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723052025 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723087072 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723093033 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723145962 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723236084 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723241091 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723248959 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723300934 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723349094 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723403931 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723416090 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723474026 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723721981 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723790884 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.723849058 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.723854065 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.724347115 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.724349976 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.724380970 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.724415064 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.724423885 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.724452019 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.724457979 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.724498034 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.727972984 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.730798960 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.740978003 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741040945 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741099119 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741153002 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.741168022 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741179943 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741380930 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.741398096 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.741453886 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.742342949 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.743617058 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.743684053 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.743907928 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.743926048 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.743941069 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.743978977 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.743980885 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.743999004 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.744024038 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.744033098 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.744082928 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.744239092 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.744278908 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.744298935 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.744301081 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.744307995 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.744308949 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.744349003 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.744944096 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.745021105 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.745069981 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.745078087 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.750741005 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.750885010 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.750962973 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.751019955 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.751307011 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.751369953 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.751384974 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.768992901 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.769021034 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.769072056 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.770436049 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.770509005 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.770525932 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.770536900 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.770565987 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.770642042 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.770689964 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.770720959 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.770723104 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.770760059 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.770771027 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.770917892 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.776479006 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.776669979 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.776756048 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.776784897 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.776794910 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.776916027 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.776956081 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.777074099 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.777141094 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.777192116 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.778078079 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.778136969 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.778143883 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.778234959 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.778285027 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.778290987 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779046059 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779120922 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.779125929 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779207945 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779256105 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.779262066 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779907942 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.779993057 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.780044079 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.780050993 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.780699968 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.780733109 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.780757904 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.780764103 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.780808926 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.781181097 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.781420946 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.781594992 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.781625032 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.781677008 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.781673908 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.781685114 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.781718969 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.781732082 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.781737089 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.782613993 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.782639027 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.782668114 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.782694101 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.782708883 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.782725096 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.782890081 CEST	49757	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.782915115 CEST	443	49757	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.783587933 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.783612013 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.783639908 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.783654928 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.783663034 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.783678055 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.784982920 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.784985065 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.784996033 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.785021067 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785496950 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785522938 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785547972 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785566092 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.785573006 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785594940 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.785600901 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785636902 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785648108 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785689116 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.785698891 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.785753012 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.785811901 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.785870075 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.785897017 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.785949945 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.785999060 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.786935091 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.786942005 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.787014961 CEST	49755	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.787024021 CEST	443	49755	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.797698975 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.797895908 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.797913074 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.798069000 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.798084974 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.798108101 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.798161030 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.798194885 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.798218966 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.798615932 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799143076 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799160004 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799194098 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.799220085 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799400091 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.799552917 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799609900 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799631119 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799899101 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.799921036 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.799981117 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.800370932 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.800729036 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.800754070 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.800812006 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.800832033 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.800904036 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.801343918 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.801651955 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.801863909 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.801909924 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.801912069 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.801938057 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.801986933 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.801999092 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.802102089 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.803406954 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.803464890 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.803518057 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.803546906 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.803591967 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.803903103 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.804330111 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.804380894 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.804388046 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.804656982 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.804703951 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.804954052 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.804961920 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.805063009 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.805183887 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.805635929 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.805675030 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.805682898 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.805690050 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.805730104 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.806164980 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.806648970 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.806703091 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.806740046 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.806749105 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.806755066 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.806859970 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.807529926 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.807594061 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.807646990 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.807849884 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.807878971 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.808000088 CEST	49751	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.808013916 CEST	443	49751	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.814575911 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.815041065 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.815124989 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.815273046 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.815285921 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.815406084 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.815934896 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816087961 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816165924 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816220045 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.816229105 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816286087 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.816421986 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816590071 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.816847086 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.816854000 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.817487001 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.817526102 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.817560911 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.817609072 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.817626953 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.817675114 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.817687988 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.818171978 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.818240881 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.818290949 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.819612026 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.819632053 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.819782972 CEST	49756	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.819793940 CEST	443	49756	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.833688021 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.833868027 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.833975077 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.833972931 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.834049940 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.834084988 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.834613085 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.834666967 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.834672928 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.834708929 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.834825993 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.834841967 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.835237980 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.835319996 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.835403919 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.835470915 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.835489988 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.836050034 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.836096048 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.836163044 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.836179018 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.836795092 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.836885929 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.836941957 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.836957932 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.837083101 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.837750912 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.837862968 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.837867975 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.837938070 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.837944984 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.837966919 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.837999105 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.838006973 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.838635921 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.838677883 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.838697910 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.838712931 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.838767052 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.838781118 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.839500904 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.839647055 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.839799881 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.839804888 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.840390921 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.840396881 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.840444088 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.840461016 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.840470076 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.840512037 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.840553045 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.840781927 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.840790987 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.840850115 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.840863943 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.841056108 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.841093063 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.841104031 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.841119051 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.841135025 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.841164112 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.841232061 CEST	49753	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.841245890 CEST	443	49753	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.841254950 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.841543913 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.841579914 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.841613054 CEST	49748	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.841628075 CEST	443	49748	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.842065096 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842076063 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842153072 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.842164993 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842654943 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842695951 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842709064 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.842737913 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842762947 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842784882 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.842797041 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842807055 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.842811108 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.842864037 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.843044996 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.843688011 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.843743086 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.843748093 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.844024897 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.844563961 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.844626904 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.845283985 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.845339060 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.845371962 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.845422983 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.846072912 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.846189976 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.860475063 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.860913992 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.860940933 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.860964060 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.860990047 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.860996008 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.861021042 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.861391068 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.861439943 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.861443996 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.862376928 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.862445116 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.862447977 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.862458944 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.862503052 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.862956047 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.863159895 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.863456011 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.863521099 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.864418030 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.864495993 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.864516020 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.864522934 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.864537954 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.865398884 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.865447044 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.865452051 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.865844011 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.866192102 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.866250038 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.883618116 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.883646965 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.886920929 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.887062073 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.887248993 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.887279987 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.887411118 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.887516022 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.887525082 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888099909 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888143063 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888165951 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.888186932 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888228893 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.888926983 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888966084 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.888986111 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.888999939 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.889045954 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.889060974 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.889338970 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.889339924 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.889441013 CEST	49754	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:25.889470100 CEST	443	49754	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:25.926054001 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.926918983 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.926994085 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.927027941 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.927081108 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.927474976 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.927539110 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.928009033 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.928078890 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.928705931 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.928755045 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.928781986 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.928838968 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.929591894 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.929644108 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.930497885 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.930563927 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.930605888 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.930634975 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.930672884 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.930732965 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.930742979 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.931356907 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.931462049 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.931476116 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932353020 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932379007 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932404995 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.932414055 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932426929 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.932440042 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932446003 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.932473898 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.932518005 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.933352947 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.933358908 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.933403969 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.934046030 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.934056044 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.934109926 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.934144020 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.934170008 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.934180021 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.934182882 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.934773922 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.934984922 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935041904 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.935064077 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935112953 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.935725927 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935774088 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.935791016 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935810089 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935868025 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.935910940 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.935945988 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.948194981 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.948266029 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.948276043 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.948298931 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.948337078 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.948779106 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.948828936 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.949467897 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.949529886 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.950109959 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.950165033 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.950174093 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.950186968 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.950222969 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.951426029 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.951482058 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.952032089 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.952084064 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.952101946 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.952138901 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.952151060 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.952155113 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.952181101 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.952214956 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.952752113 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.952804089 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.953885078 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.953929901 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.953947067 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.953949928 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:25.954073906 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:25.995709896 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.008454084 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.008522987 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.008795023 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.008857965 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.009128094 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.009180069 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.009794950 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.009849072 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.010149002 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.010199070 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.010700941 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.010750055 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.011157036 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.011204004 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.011428118 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.011486053 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.012119055 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.012176991 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.012840033 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.012902021 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.012924910 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.012975931 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.013731956 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.013813019 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.013926029 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.013981104 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.014549971 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.014602900 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.014997005 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.015049934 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.015539885 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.015585899 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.015789986 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.015841961 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.016530991 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.016587973 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.016712904 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.016767979 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.018438101 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.018456936 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.018502951 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.018515110 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.018564939 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.020230055 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.020271063 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.020294905 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.020301104 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.020328999 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.020335913 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.035301924 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.035377979 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.035631895 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.035686970 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.036057949 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.036123991 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.036547899 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.036581993 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.036607027 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.036612988 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.036624908 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.037451982 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.037508965 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.037585974 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.037589073 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.037596941 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.037633896 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.038410902 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.038455963 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.038981915 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.039035082 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.039040089 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.039083004 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.040071011 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.040122986 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.040127039 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.040172100 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.040174007 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.040183067 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.040220022 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.040925026 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.040991068 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.041465998 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.041523933 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.041528940 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.041570902 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.042397022 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.042455912 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.043159008 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.043210983 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.043214083 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.043260098 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.044235945 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.044250965 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.044301033 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.044305086 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.044406891 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.091321945 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.096118927 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.096173048 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.096218109 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.096230984 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.096256018 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.096268892 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.097042084 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.097086906 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.097110987 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.097117901 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.097141027 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.097156048 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.098669052 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.098691940 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.098742962 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.098752022 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.098773003 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.098793983 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.100574017 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.100604057 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.100641966 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.100650072 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.100672960 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.100688934 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.102155924 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.102183104 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.102216005 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.102221966 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.102247953 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.102268934 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.103357077 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.103379965 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.103413105 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.103420973 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.103441000 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.103456020 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.104228020 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.104285002 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.104290009 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.104336023 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.122014999 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.122035027 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.122081995 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.122102022 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.122117996 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.122164011 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.123276949 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123291969 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123356104 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.123361111 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123387098 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.123393059 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.123807907 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123881102 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.123888016 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123902082 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.123965025 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.182431936 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.182539940 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.182569027 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.182629108 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.183022976 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.183079958 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.183098078 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.183105946 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.183135986 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.183151007 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.184617043 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.184669018 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.184688091 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.184693098 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.184722900 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.184736967 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.185596943 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.185674906 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.185683012 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.185724974 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.257899046 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.257899046 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.257936954 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.257992983 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.259572029 CEST	49749	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.259586096 CEST	443	49749	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.259668112 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.259671926 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.259682894 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.259790897 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.259797096 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.259839058 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.259865999 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.262039900 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.262099028 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.262278080 CEST	49752	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.262295961 CEST	443	49752	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.264761925 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.264827967 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.265510082 CEST	49750	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.265512943 CEST	443	49750	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.420335054 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.420377016 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.420667887 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.442567110 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.442615032 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.442795992 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.442996025 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.443016052 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.511476040 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.511502981 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.520533085 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:26.520558119 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:26.520616055 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:26.520863056 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:26.520874977 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:26.532022953 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.532057047 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:26.532108068 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:26.533632994 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.533699036 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.533773899 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.546452045 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.546484947 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.921530962 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.923795938 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.923826933 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.924741030 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.924806118 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.946228027 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.946398020 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.946536064 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:26.946549892 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:26.996706009 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.010099888 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:27.010169983 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:27.030141115 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.030590057 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.030611992 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.031460047 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.031507969 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.031930923 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.032002926 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.035701990 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.035712957 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.036056995 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.037138939 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.037184000 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.037511110 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.051745892 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.051798105 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.051873922 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.052161932 CEST	49760	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.052203894 CEST	443	49760	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.058957100 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.059031963 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.062735081 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.062762976 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.092082977 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.108099937 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.156701088 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.156732082 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.156936884 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.157097101 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.157104015 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.171586037 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.171638966 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.171828985 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.177867889 CEST	49763	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:27.177884102 CEST	443	49763	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:27.472975969 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.516503096 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.586747885 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.586838961 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.586968899 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.649533987 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.651046991 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.651062965 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.651901960 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.651954889 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.653682947 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.653682947 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.653706074 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.653743029 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.706634045 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.706662893 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.751652956 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.799560070 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.799597025 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.799659967 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.799684048 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.799705029 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.799942970 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.799942970 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.799972057 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800056934 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800077915 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800219059 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.800219059 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.800228119 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800406933 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800426960 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800621033 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.800627947 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.800944090 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.804455042 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.846004963 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.893990040 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894202948 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894224882 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894345999 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.894382954 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894586086 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894607067 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894740105 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.894747972 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894803047 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.894895077 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.895256042 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.895266056 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895351887 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895572901 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895596027 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895615101 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895840883 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.895840883 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.895860910 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.895926952 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.896141052 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.896229982 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.896410942 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.896435976 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.896507978 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.896524906 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.897308111 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.897330046 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.897546053 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.897567034 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.897587061 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.898015976 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.898061991 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.898061991 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.898061991 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.898061991 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.898083925 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.898744106 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.984394073 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.984437943 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.984555960 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.984576941 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.984781981 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.984885931 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.984893084 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.984935045 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.985214949 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.985264063 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.985306025 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.985306025 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.985311985 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.985780954 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.985944986 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.985950947 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.986061096 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.986423969 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.986455917 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.986478090 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.986495972 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.986495972 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.986502886 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.986522913 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.987328053 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.987359047 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.987396955 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.987474918 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:27.988506079 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.988506079 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.988506079 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:27.988506079 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.099534988 CEST	49766	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.099566936 CEST	443	49766	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.180402994 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.180464029 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.180550098 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.180685997 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.180691004 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.180766106 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.182255983 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.182302952 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.182352066 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.440237045 CEST	49759	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.440303087 CEST	443	49759	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.441600084 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.441652060 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.441838026 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.441922903 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.441983938 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442011118 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.442015886 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.442054033 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442440033 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442445993 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.442468882 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442492008 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442503929 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.442574978 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.442749023 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442749023 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442780018 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.442833900 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442845106 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.442981005 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.442991972 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.443171024 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.443177938 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.443340063 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.443347931 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.443489075 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.443505049 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.443624973 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.443659067 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.444123030 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.444145918 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.444251060 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.444262981 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.444325924 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.488503933 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.605139017 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.605353117 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.605416059 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.750200987 CEST	49761	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.750237942 CEST	443	49761	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.918977022 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.919069052 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.920542002 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.920563936 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.920773983 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.925276995 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.925666094 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.929922104 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.930013895 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.930720091 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.930782080 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.935930014 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.936522007 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.939519882 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.940892935 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.940984011 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.942147970 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.942164898 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.942992926 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.944211960 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.944227934 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.944606066 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.945290089 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.945305109 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.945656061 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.946295977 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.946305037 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.946553946 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.947928905 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.947962999 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.948215008 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.951683044 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:28.951762915 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.952650070 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.952719927 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.964358091 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.964430094 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:28.980499029 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:28.986706018 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.986717939 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.986722946 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:28.987000942 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.001893044 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.042979002 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.043342113 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.043342113 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.045059919 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.045074940 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.045491934 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.046717882 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.046756983 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.047167063 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.047276974 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.048607111 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.048671007 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.049251080 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.049331903 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.049386024 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.049416065 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.049706936 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.088496923 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.088514090 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.088535070 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.092499971 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.092503071 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.092504025 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.092516899 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.092524052 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099168062 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099201918 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099221945 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099248886 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099257946 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.099284887 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099298000 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.099764109 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.099811077 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.099817991 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.100239038 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.100326061 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.100343943 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.100368977 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.100378990 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.100389957 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.103998899 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.104157925 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.104168892 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.146729946 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.205163956 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205208063 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205234051 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205262899 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205279112 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.205295086 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205311060 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.205358028 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205389023 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205408096 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205442905 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.205451965 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.205538034 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.205992937 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.206115961 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.206156015 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.206173897 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.206281900 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.206331968 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.206337929 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222302914 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222361088 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.222364902 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222378969 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222490072 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222501993 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222745895 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.222753048 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222768068 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.222804070 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.222845078 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.222877979 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.222939968 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223067999 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223109007 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.223114967 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223210096 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223285913 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223364115 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223412991 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.223417044 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.223458052 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.226799965 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.226937056 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.227014065 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.227061987 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.227072001 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.227128029 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.227133989 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.227304935 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.229465961 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229583025 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229631901 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.229641914 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229729891 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229809046 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229892015 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229912043 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.229918003 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.229952097 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230027914 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230068922 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230068922 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230073929 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230200052 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230293036 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230336905 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230345011 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230395079 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230397940 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230407953 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230477095 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230479002 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230566978 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230595112 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230601072 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230664015 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230707884 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230745077 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230746031 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230752945 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230782986 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.230833054 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.230866909 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.231182098 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231302977 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231328964 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231359005 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.231395006 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231451035 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.231653929 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231729031 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.231858015 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.231872082 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233308077 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233360052 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233376026 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.233392000 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233452082 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.233568907 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233655930 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.233669043 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233872890 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233907938 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233943939 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.233971119 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234030008 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234093904 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234157085 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234206915 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234220028 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234234095 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234239101 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234261990 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234287977 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234288931 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234302044 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234302998 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234350920 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234694004 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234874010 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234901905 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.234930992 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.234942913 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235004902 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.235122919 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235145092 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235163927 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235172033 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.235184908 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235203028 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.235416889 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.235471964 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.235485077 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.236109018 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.236350060 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.236430883 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.236753941 CEST	49769	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.236782074 CEST	443	49769	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.236955881 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237091064 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237152100 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.237166882 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237250090 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237301111 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.237313032 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237390041 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237437963 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.237451077 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237529993 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237577915 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.237590075 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237679005 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.237729073 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.237740993 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.241585016 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.241646051 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.241658926 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.248513937 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.248650074 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.248703003 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.248717070 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249309063 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249387026 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249432087 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.249442101 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249643087 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249671936 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.249687910 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.249778986 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.249789000 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250391006 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250509977 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.250525951 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250607014 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250668049 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.250674963 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250830889 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250912905 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250941992 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.250950098 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.250998974 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.251796961 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.251863956 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.251929998 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.252058029 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.252135038 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.252312899 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.252329111 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.252378941 CEST	49772	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.252383947 CEST	443	49772	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256580114 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256628036 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256668091 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256686926 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.256706953 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256717920 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.256743908 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256784916 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.256957054 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.256962061 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.257488966 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.258888960 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.258965969 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259004116 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259027958 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.259036064 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259072065 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.259076118 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259494066 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259546041 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259561062 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.259567022 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259603977 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259605885 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.259618044 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259721994 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.259732962 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.259856939 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.260050058 CEST	49773	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.260061979 CEST	443	49773	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.269926071 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270102024 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270184994 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270200968 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.270212889 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270241976 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.270265102 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270554066 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270605087 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.270612001 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270632982 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270637035 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270694971 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.270775080 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.270826101 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.270837069 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271173000 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271251917 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271328926 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271379948 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.271379948 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.271389961 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271784067 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271919012 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.271995068 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272062063 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272068024 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272102118 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272102118 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272110939 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272120953 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272164106 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272183895 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272234917 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272238970 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272347927 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272499084 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272502899 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272531986 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272608995 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272620916 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272629976 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272917032 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272969007 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.272978067 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.272998095 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273015976 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273027897 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273032904 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273075104 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273096085 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273097038 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273159027 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273197889 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273197889 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273202896 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273221016 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273271084 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273288012 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273710012 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273761034 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273766041 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273827076 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.273883104 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.273888111 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274121046 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274177074 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.274178028 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274190903 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274202108 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274230003 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.274235964 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274291039 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.274326086 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.274564981 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.274574041 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.285310030 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.285335064 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.285382032 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.310592890 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310643911 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310723066 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310760021 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310790062 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310802937 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.310820103 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.310858011 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.310946941 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311157942 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.311372042 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.311384916 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311537027 CEST	49767	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.311542034 CEST	443	49767	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311551094 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311573982 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311754942 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.311765909 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.311918974 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.312412024 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.312555075 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.312648058 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.312721014 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.312975883 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.312975883 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.313241005 CEST	49770	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.313256979 CEST	443	49770	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.317447901 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.317449093 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.317465067 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.318298101 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318367958 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318397045 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.318404913 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318483114 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318528891 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.318535089 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318772078 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.318782091 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318793058 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.318875074 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.319313049 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319323063 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319487095 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.319493055 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319739103 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319765091 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319827080 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.319829941 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.320018053 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.320018053 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.320734978 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.320784092 CEST	49768	443	192.168.2.4	104.18.23.35
Jul 26, 2024 21:26:29.320789099 CEST	443	49768	104.18.23.35	192.168.2.4
Jul 26, 2024 21:26:29.320941925 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321036100 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321125031 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321208954 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321222067 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321239948 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321270943 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321388960 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321470022 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321521997 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321530104 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321661949 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321811914 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321829081 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321829081 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321837902 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.321943998 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.321948051 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.322594881 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.322683096 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.322694063 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.322704077 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.322745085 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.322756052 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.358866930 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359082937 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359164000 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359179974 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.359199047 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359266996 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.359273911 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359618902 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359735012 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359894991 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.359903097 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.359993935 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.360075951 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360157967 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360208988 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.360215902 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360280037 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360301018 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.360306025 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360436916 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.360488892 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361112118 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361187935 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361251116 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361258030 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361285925 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361370087 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361376047 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361433983 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361454964 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361748934 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361788988 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361794949 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361836910 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.361845970 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361901999 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.361913919 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.362149000 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.362552881 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.362745047 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.362751961 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.362910986 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363013029 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363100052 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363152027 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363158941 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363214016 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363214016 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363709927 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363795996 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363820076 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363827944 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.363970995 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.363970995 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.364290953 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.364322901 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.364412069 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.364507914 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.364603996 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.364844084 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.364923000 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.364942074 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.364990950 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.365061045 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.365137100 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.365520000 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.365592957 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.365631104 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.365638971 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.365848064 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366055965 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366206884 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366290092 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366307020 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366318941 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366429090 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366750002 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366759062 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366780996 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366851091 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366852999 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366862059 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366871119 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366877079 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.366925955 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.366961956 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.367933989 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.368062973 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.368072033 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.412942886 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.413034916 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.413043976 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.413228035 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.413724899 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.413731098 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.413794994 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.413960934 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.413960934 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.414473057 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.414473057 CEST	49765	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.414504051 CEST	443	49765	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450011015 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450128078 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450172901 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450196028 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450220108 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450221062 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450340033 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450340986 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450362921 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450386047 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450386047 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450489044 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450571060 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450571060 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450577021 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450592041 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450845957 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450880051 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.450885057 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.450968981 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.451136112 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.451136112 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.451142073 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.451514006 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.451870918 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.451941013 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.451970100 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452049971 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452080965 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.452085018 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452464104 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452527046 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.452820063 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452894926 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.452924013 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.452929020 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.453321934 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.453356028 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.453356028 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.453361034 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.453780890 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.453996897 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454246044 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454276085 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.454276085 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.454282999 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454297066 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454715014 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.454722881 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454957008 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.454967976 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.454992056 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455053091 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455053091 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455053091 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455058098 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455424070 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455459118 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455492020 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455492020 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455496073 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455740929 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455773115 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455773115 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455780029 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455794096 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.455842018 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455842018 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.455842018 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.456238985 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.456285000 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.456438065 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.456468105 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.456468105 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.456473112 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.456509113 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.457036972 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.457214117 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.457256079 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.457288027 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.457321882 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.457321882 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.457326889 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458055019 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458085060 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.458085060 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.458089113 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458101034 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458169937 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458204031 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.458204031 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.458209038 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.458745956 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.458976984 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459146023 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459180117 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459180117 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459192038 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459214926 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459214926 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459300995 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459722996 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459769964 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459805012 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459806919 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459816933 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.459836006 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.459846973 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.460098028 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.460098028 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.460103035 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.460676908 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.460725069 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.461303949 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.461303949 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.461308956 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.505394936 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.538697004 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.538836956 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.538849115 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.538878918 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.538908005 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.539032936 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539074898 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.539084911 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539169073 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.539185047 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539309978 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.539318085 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539340973 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539645910 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.539895058 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.539969921 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.540026903 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.540030956 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.540359974 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.540370941 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.540442944 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.540450096 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.540465117 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.540523052 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.540716887 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541070938 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541136980 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.541142941 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541197062 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.541487932 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541562080 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.541567087 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541594982 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541682959 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.541738987 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.541743040 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.542020082 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.542824030 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.542901993 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.542953014 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.542953014 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.542958975 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.543013096 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.543735981 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.543776989 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544090033 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544128895 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544128895 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544133902 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544181108 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544222116 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544222116 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544228077 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544338942 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544358969 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544397116 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544512033 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544517040 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544563055 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544656038 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544683933 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544704914 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544764042 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544764042 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544764042 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544770956 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544806004 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544841051 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544908047 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.544967890 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544967890 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544967890 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.544975042 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.545197010 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.545268059 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.545305967 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.545305967 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.545320034 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.545331955 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.545341969 CEST	49762	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.545341969 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.545346975 CEST	443	49762	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.546176910 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.546240091 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.546279907 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.546279907 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.546284914 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.546341896 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.546660900 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.550786972 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.550833941 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.550874949 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.550874949 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.550880909 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.551012039 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.551012039 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.551132917 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.551173925 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.551223040 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.551227093 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.551260948 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.551331997 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.551464081 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:29.552184105 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.552234888 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.552273035 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.552277088 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.552313089 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.552472115 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.553292036 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.553330898 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.553376913 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.553380966 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.553417921 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.554316998 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.554362059 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.554364920 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.554397106 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.554430008 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.554430008 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.554644108 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.558685064 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:29.657776117 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.657836914 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.657942057 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.657942057 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.657968044 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.658162117 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.658823013 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.658868074 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.658914089 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.658919096 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.658993959 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.658993959 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.659946918 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660003901 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660060883 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.660065889 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660108089 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.660108089 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.660784006 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660834074 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660880089 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.660882950 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.660923958 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.661526918 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.661576033 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.661616087 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.661616087 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.661621094 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.661653042 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.662175894 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.662336111 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.662375927 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.662538052 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.662543058 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.662746906 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.662892103 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.663283110 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.663326979 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.663367987 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.663372040 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.663408995 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.664151907 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.664227962 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.664274931 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.664324045 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.664328098 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.664355993 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.664422989 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.713208914 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.713248968 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.713330984 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.713876009 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.713888884 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.713884115 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.713960886 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.714118958 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.714400053 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.714430094 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.716114044 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.716123104 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.716147900 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.716169119 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.716228008 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.716233015 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718173981 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718178034 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718180895 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.718188047 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.718242884 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718244076 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718764067 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718776941 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.718895912 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.718909025 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.719130039 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.719132900 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:29.719139099 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.719146013 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:29.723881006 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.724014044 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.724035025 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.724057913 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:29.724134922 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:29.791203022 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:29.793262005 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:29.798877001 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:30.190390110 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.193291903 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.199645996 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.203650951 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.213350058 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.216303110 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.236556053 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.236557961 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.249749899 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.249778032 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.250735044 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.250737906 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.250761986 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.250766039 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.251084089 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.251086950 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.251091003 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.251104116 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.251405001 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.251439095 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.251449108 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.251472950 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.251770020 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.252034903 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.252060890 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.252319098 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.252345085 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.252382040 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.252413034 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.252643108 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.252654076 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.252768993 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.255791903 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.255795002 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.255872965 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.255896091 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.256627083 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.256628036 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.256701946 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.256731987 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.270703077 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.270783901 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.278753042 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.278894901 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.299051046 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.299058914 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.299066067 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.299094915 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.314666986 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.314685106 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.314692974 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.314708948 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.314709902 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.314717054 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.330291033 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.330303907 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.345926046 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.346170902 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.361541033 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.361560106 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.361562967 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.377175093 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.393668890 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.393723011 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.393790960 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.394045115 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.394103050 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.394155025 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.394908905 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.394925117 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.395217896 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.395231962 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.395695925 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.395704985 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.395747900 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.395967007 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.395994902 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.396037102 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.396440983 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.396454096 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.396497011 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.396816015 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.396823883 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.396868944 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.397058010 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.397066116 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.397197962 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.397209883 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.415390968 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.415421963 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.427583933 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.427603960 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.608530998 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.615259886 CEST	49771	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.615289927 CEST	443	49771	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.857541084 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.857928038 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.857964993 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.859083891 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.859152079 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.859564066 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.859635115 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.862514973 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.871546030 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.872580051 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.872598886 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.874026060 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.874084949 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.879429102 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.908442020 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.908472061 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.909368992 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.909555912 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.909781933 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.909789085 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.909930944 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.909950018 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.910100937 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.910161018 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.910172939 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.911048889 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.911112070 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.911768913 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.911847115 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.926767111 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.927028894 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.927045107 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.928440094 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.928518057 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.930186987 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.930515051 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.930542946 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.932049990 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.932106018 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.934478045 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.934551954 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.934591055 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.934674978 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.934850931 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.934871912 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.935106993 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.935117006 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.952543974 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.955295086 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.966053963 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.966233015 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.966247082 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.966267109 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.976016998 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.976084948 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.976368904 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.976378918 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:30.986546040 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:30.986763000 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.017798901 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.017806053 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.017831087 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018095970 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018219948 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018265963 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.018280029 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018423080 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018469095 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.018477917 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018579006 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018629074 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.018635988 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018750906 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018800974 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.018806934 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018915892 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.018956900 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.018964052 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020113945 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020234108 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020286083 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.020318985 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020412922 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020473003 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.020488977 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020611048 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020663023 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.020673990 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020762920 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020813942 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.020826101 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.020963907 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.021012068 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.021023989 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.022787094 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.022835970 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.022859097 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.024806023 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.024887085 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.024900913 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.064722061 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.064722061 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.064779997 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.088185072 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088241100 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088279963 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088308096 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.088315010 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088376045 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088412046 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.088665962 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088718891 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.088726997 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088743925 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.088785887 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.088877916 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.089582920 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.089620113 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.089637041 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.089653015 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.089709044 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.092777967 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105038881 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105238914 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105292082 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.105310917 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105398893 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105451107 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.105464935 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105565071 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105614901 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.105627060 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105730057 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105782032 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.105793953 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105897903 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.105948925 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.105961084 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106061935 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106117964 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.106129885 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106226921 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106277943 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.106288910 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106703043 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106756926 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.106769085 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106921911 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.106980085 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.106991053 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.107064009 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.107115030 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.107125998 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.108757019 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.108944893 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109013081 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.109035015 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109062910 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109210968 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109270096 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.109321117 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109344006 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109378099 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.109493017 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109549999 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.109579086 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109673977 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.109730959 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.109745026 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110074997 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110127926 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.110140085 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110272884 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110325098 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.110336065 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110421896 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110472918 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.110483885 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.110980034 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111037970 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.111049891 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111133099 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111185074 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.111196041 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111277103 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111330032 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.111341000 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.111989021 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.112046957 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.112060070 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.125859022 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.126137018 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.126177073 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.126194000 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.126202106 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.126226902 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.126246929 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.128511906 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.128565073 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.128577948 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.128689051 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.128710985 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.128727913 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.128741026 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.128782988 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.129122019 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129338026 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129499912 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129564047 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.129582882 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129731894 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129796028 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.129806995 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129925966 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.129981995 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.129992962 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130105972 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130150080 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.130160093 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130290985 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130333900 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.130342960 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130530119 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130578995 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.130800962 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130805969 CEST	49785	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.130835056 CEST	443	49785	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.130856037 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.130867958 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.137643099 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.156645060 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.157099009 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.172272921 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181026936 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181092978 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181150913 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181170940 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181291103 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181329966 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181339025 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181354046 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181401968 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181440115 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181582928 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181618929 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181626081 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181637049 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.181682110 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.181694984 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182358027 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182414055 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.182426929 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182485104 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182528019 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.182539940 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182591915 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182625055 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182635069 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.182646990 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.182691097 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.182703018 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.183191061 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.183238983 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.183252096 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191596985 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191663980 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191695929 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191711903 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.191734076 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191778898 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.191790104 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191860914 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191889048 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191907883 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.191919088 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.191960096 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.192449093 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.192533016 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.192663908 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.192714930 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.192724943 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.193365097 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.193392992 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.193418026 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.193429947 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.193456888 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.194118023 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.194163084 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.194174051 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.194216967 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.194287062 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.194335938 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.194483995 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.194530964 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.195254087 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.195281029 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.195307016 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.195317984 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.195344925 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.195360899 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.200794935 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.200957060 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201082945 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201100111 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201131105 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201180935 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201215982 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201277018 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201292992 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201350927 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201399088 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201479912 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201535940 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201550007 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201574087 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201597929 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201613903 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201632977 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201693058 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201749086 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201761007 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201782942 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201812029 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201829910 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201853991 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201868057 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201921940 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201934099 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201956034 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.201983929 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.201996088 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202023983 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.202038050 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202095032 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.202105999 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202138901 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202157021 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.202167988 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202193022 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.202214956 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202270031 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.202281952 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.202330112 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.216270924 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.216404915 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.216697931 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.217309952 CEST	49783	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.217331886 CEST	443	49783	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.228415012 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.228564978 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.228629112 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.228661060 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.228775024 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.228822947 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.228836060 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230040073 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230094910 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.230107069 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230249882 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230298996 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.230309010 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230406046 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230453014 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.230462074 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230679989 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.230727911 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.234776020 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.239248037 CEST	49782	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.239279985 CEST	443	49782	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.239439964 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.239515066 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.239532948 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.239557028 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.239583969 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.239605904 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.242427111 CEST	49781	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.242444992 CEST	443	49781	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274147987 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274240017 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274282932 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274296045 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.274332047 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274372101 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274374962 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.274388075 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.274432898 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.275007963 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275226116 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275279045 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.275295019 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275404930 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275450945 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.275459051 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275496006 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.275537014 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275796890 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275836945 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275840044 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.275852919 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.275880098 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.276550055 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.276597023 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.276603937 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.276640892 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.276777029 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.276829958 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.278698921 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.278748035 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.278757095 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.278764009 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.278790951 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.278809071 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.278909922 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.278954029 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.278959036 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.279000044 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.279021978 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.279059887 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.366478920 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.366530895 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.366544962 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.366568089 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.366586924 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.366611958 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.366698027 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.366746902 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.366940022 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.366991043 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.367113113 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.367161036 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.367255926 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.367296934 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.368098021 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.368149996 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.368287086 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.368334055 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.368510962 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.368561029 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.368666887 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.368710995 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.368846893 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.368891001 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.369132042 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.369179964 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.369406939 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.369452000 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.369646072 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.369690895 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.369888067 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.369932890 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.431487083 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.432748079 CEST	49780	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.432777882 CEST	443	49780	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459336996 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459383011 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459404945 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459433079 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459450006 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459471941 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459518909 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459566116 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459724903 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459772110 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459839106 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459877014 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459882021 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459892988 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.459917068 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.459933996 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.460391998 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.460441113 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.460640907 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.460680008 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.460711956 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.460721016 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.460736036 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461019993 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461065054 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461071968 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461086988 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461127996 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461137056 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461461067 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461493015 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461504936 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461513042 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461538076 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461859941 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.461903095 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.461910963 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462049961 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462091923 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.462100029 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462424040 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462466002 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462471008 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.462487936 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462511063 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.462523937 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462567091 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.462575912 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.462770939 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.463221073 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.463265896 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.463284016 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.463290930 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.463324070 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.464219093 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.464237928 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.464284897 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.464317083 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.464323997 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.464415073 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.465106010 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.465264082 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.465284109 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.465316057 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.465322971 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.465352058 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.465372086 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.466922998 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552246094 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552273989 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552321911 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552344084 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552361965 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552390099 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552459955 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552490950 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552520037 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552527905 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.552552938 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.552567959 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.553649902 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.553678989 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.553714991 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.553721905 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.553745985 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.553760052 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.554548979 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.554569960 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.554605007 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.554613113 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.554636002 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.554653883 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.555205107 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.555226088 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.555262089 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.555269003 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.555291891 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.555308104 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.557272911 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557301998 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557343960 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.557347059 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557363033 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557378054 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.557400942 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.557406902 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557446957 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.557450056 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:31.557496071 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.609441042 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.676065922 CEST	49784	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:31.676106930 CEST	443	49784	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.454467058 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.454557896 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.454648972 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.454972982 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.455009937 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.936656952 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.936750889 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.938143015 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.938158035 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.938677073 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:33.939368010 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:33.980549097 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:34.060905933 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:34.060986042 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:34.061258078 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:34.061479092 CEST	49786	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:34.061513901 CEST	443	49786	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:34.398035049 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.398070097 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.398139000 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.398355007 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.398375034 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.975157976 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.975472927 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.975508928 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.976401091 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.976499081 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.979655027 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.979743958 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.980353117 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:34.980392933 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:34.980446100 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:35.024519920 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:35.033674002 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:35.146534920 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:35.147397041 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:35.147500992 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:35.150279045 CEST	49787	443	192.168.2.4	130.211.34.183
Jul 26, 2024 21:26:35.150331974 CEST	443	49787	130.211.34.183	192.168.2.4
Jul 26, 2024 21:26:39.065711021 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.065788031 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.065875053 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.066175938 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.066191912 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.528218985 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.528310061 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.529753923 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.529769897 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.529992104 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.530575037 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.576499939 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.668107986 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.668164015 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:39.668243885 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.668617010 CEST	49788	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:39.668651104 CEST	443	49788	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:41.731612921 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:41.737221956 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:41.970623016 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:41.978583097 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:41.983716011 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:42.249275923 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:42.298963070 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:44.679501057 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:44.679617882 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:44.679704905 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:44.690814018 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:44.690857887 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:45.123977900 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124006033 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124046087 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124058962 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124070883 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124106884 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:45.124130964 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124129057 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:45.124139071 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124176979 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124201059 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:45.124270916 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124274969 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:45.124404907 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124444962 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124455929 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:45.124665976 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:45.124723911 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:46.182997942 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.183166981 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.184448004 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.184474945 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.185441971 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.186041117 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.232500076 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.335087061 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.335160017 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.335350037 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.335709095 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.335709095 CEST	49789	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:46.335748911 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:46.335772991 CEST	443	49789	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:49.855272055 CEST	80	49730	208.95.112.1	192.168.2.4
Jul 26, 2024 21:26:49.859333038 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:26:51.348031998 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.348089933 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:51.348191023 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.348543882 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.348555088 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:51.878315926 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:51.878804922 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.879857063 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.879884958 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:51.880312920 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:51.880958080 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:51.924546003 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:52.020467043 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:52.020661116 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:52.021049023 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:52.021049976 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:52.021090031 CEST	443	49790	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:52.021116972 CEST	49790	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:53.908658981 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:53.913613081 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:54.236442089 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:54.238368988 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:26:54.245620012 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:26:57.033735991 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.033792019 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.033916950 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.049258947 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.049272060 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.540757895 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.540838003 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.542757988 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.542762995 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.543231010 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.560062885 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.604505062 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.696264982 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.696350098 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:26:57.696440935 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.696763039 CEST	49791	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:26:57.696779966 CEST	443	49791	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:02.706547022 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:02.706605911 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:02.706696033 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:02.707022905 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:02.707045078 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.234949112 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.235125065 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:03.236275911 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:03.236304998 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.237426996 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.237848997 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:03.284497023 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.389735937 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.389817953 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.390332937 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:03.390389919 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.390410900 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:03.390419960 CEST	443	49793	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:03.390474081 CEST	49793	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:06.096055984 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:06.101176977 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:06.335999012 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:06.337719917 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:06.342628002 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.393867970 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.393965960 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:08.394963026 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.395267010 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.395304918 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:08.518129110 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:08.525506973 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.533314943 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:08.541969061 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.757672071 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.759399891 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:08.764558077 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.897491932 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:08.897721052 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.898947954 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.898982048 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:08.899085999 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.899477959 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:08.900017977 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:08.900865078 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:08.905725956 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:08.940537930 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:09.035326958 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:09.035407066 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:09.035940886 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:09.036206007 CEST	49794	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:09.036246061 CEST	443	49794	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:12.255897045 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:12.300424099 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:13.236550093 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:13.242240906 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:13.480026007 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:13.481760979 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:13.486936092 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:13.595916986 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:13.600977898 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:13.918164015 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:13.922430038 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:13.927668095 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:14.049911022 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.050008059 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.050088882 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.050523043 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.050559044 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.668216944 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.668346882 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.670825005 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.670845032 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.671175957 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.672534943 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.716517925 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.820022106 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.820096016 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.820211887 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.822813988 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.822813988 CEST	49795	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:14.822839975 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:14.822851896 CEST	443	49795	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:19.831970930 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:19.832027912 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:19.832110882 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:19.832627058 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:19.832664967 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.336539030 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.336585045 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.336658955 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.336925030 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.336934090 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.336972952 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.337202072 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.337218046 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.337479115 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.337487936 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.359055042 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.359124899 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.360624075 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.360636950 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.360948086 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.361499071 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.404490948 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.493508101 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.493640900 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.495198011 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.495198011 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.498811960 CEST	49796	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:20.498833895 CEST	443	49796	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:20.817368984 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.819920063 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.819967031 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.821408987 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.821921110 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.843205929 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.843312979 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.851257086 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.853280067 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.853297949 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.854727983 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.854825020 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.855142117 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.855227947 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.893253088 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.893284082 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.910829067 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.910857916 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939794064 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.941457033 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:20.941521883 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:20.941682100 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:20.941874981 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:20.941893101 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:20.955368042 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:21.562249899 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.579196930 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.579251051 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.582739115 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.582808971 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.584326982 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.584561110 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.584630013 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.584646940 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.584713936 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.584750891 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.626586914 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.704075098 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.704122066 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.704195976 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.704232931 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.704283953 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.704334021 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.704395056 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.704808950 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.704870939 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.705282927 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.705388069 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:21.705440998 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.707015991 CEST	49799	443	192.168.2.4	204.79.197.239
Jul 26, 2024 21:27:21.707050085 CEST	443	49799	204.79.197.239	192.168.2.4
Jul 26, 2024 21:27:23.864025116 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:24.016613007 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:24.284516096 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:24.285976887 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:24.290880919 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:25.503302097 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:25.503396034 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:25.504659891 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:25.504944086 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:25.504976034 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.022986889 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.023078918 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.024449110 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.024471045 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.024885893 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.025401115 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.072491884 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.176646948 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.176724911 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.176785946 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.177145958 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.177167892 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:26.177263021 CEST	49800	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:26.177269936 CEST	443	49800	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:28.940305948 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:28.946439028 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.080916882 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:29.085968018 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.112205029 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:29.118588924 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.200675964 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.202764034 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:29.208167076 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.342603922 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.343722105 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:29.349107027 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.485064983 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:29.490475893 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:29.495940924 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:30.127460003 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127460957 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127465010 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127466917 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127466917 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127466917 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:30.127533913 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:30.127536058 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:30.127536058 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:30.127563953 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:30.127566099 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:30.127582073 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:31.191845894 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.191943884 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:31.192015886 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.192322969 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.192359924 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:31.697525024 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:31.697621107 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.698863029 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.698888063 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:31.699244022 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:31.699987888 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:31.744496107 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:32.258886099 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:32.259038925 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:32.259321928 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:32.259701014 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:32.259701014 CEST	49801	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:32.259742975 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:32.259754896 CEST	443	49801	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:32.753146887 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:32.951939106 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:33.185753107 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:33.187488079 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:33.192622900 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:36.343764067 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:36.343794107 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:36.343936920 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:36.343967915 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:36.344788074 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:36.344788074 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:37.268639088 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.268723965 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.268799067 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.269264936 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.269296885 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.804016113 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.804321051 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.806854010 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.806881905 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.807696104 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.810854912 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.852509975 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.953728914 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.953881979 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.954005003 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.954289913 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.954334974 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:37.954632044 CEST	49802	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:37.954649925 CEST	443	49802	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:39.236592054 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:39.242229939 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:39.477056026 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:39.482995987 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:39.494998932 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:41.140906096 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:41.164444923 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:41.431837082 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:41.433500051 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:41.440617085 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:42.270123959 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:42.314985991 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:42.958749056 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:42.958852053 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:42.959167004 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:42.959475040 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:42.959518909 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:42.989728928 CEST	49730	80	192.168.2.4	208.95.112.1
Jul 26, 2024 21:27:42.994791985 CEST	80	49730	208.95.112.1	192.168.2.4
Jul 26, 2024 21:27:43.393388987 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:43.427468061 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:43.466509104 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.468537092 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.468538046 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.468565941 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.469194889 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.474869013 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.516532898 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.615077019 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.615226984 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.618985891 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.618985891 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.618985891 CEST	49803	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:43.619081020 CEST	443	49803	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:43.662753105 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:43.664556980 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:43.669688940 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:46.034663916 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:46.057621002 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:46.296256065 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:46.301146030 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:46.306253910 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:48.628248930 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:48.628345966 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:48.628443956 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:48.643194914 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:48.643275976 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.153268099 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.153367996 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:49.155155897 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:49.155186892 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.156213999 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.156811953 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:49.200535059 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.296808004 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.296941042 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.297008038 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:49.297267914 CEST	49804	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:49.297300100 CEST	443	49804	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:49.346111059 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:49.351480007 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:49.586085081 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:49.590889931 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:49.596065044 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:50.316860914 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:50.323921919 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:50.559029102 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:50.560451031 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:50.566900015 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:54.300318956 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.300389051 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.302987099 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.315514088 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.315546989 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.659791946 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:54.666703939 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:54.832532883 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.832617044 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.833996058 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.834017992 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.834357977 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.835052013 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.876540899 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.903893948 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:54.923099041 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:54.927989006 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:54.974510908 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.974576950 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:54.974620104 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.975020885 CEST	49805	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:54.975049019 CEST	443	49805	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:58.461452007 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:58.466557026 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:58.700344086 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:58.701931953 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:27:58.707010031 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:27:59.988895893 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:59.988985062 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:27:59.989082098 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:59.993199110 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:27:59.993227959 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.478549004 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.478701115 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:00.480341911 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:00.480355978 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.480684996 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.482872963 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:00.524544954 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.770771980 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.770910978 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:00.770993948 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:00.812671900 CEST	49806	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:00.812720060 CEST	443	49806	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:04.521105051 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:04.569406986 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:04.861221075 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:04.867464066 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:04.874027967 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:05.815299034 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:05.815340996 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:05.817492962 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:05.817780018 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:05.817794085 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.302934885 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.303021908 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:06.306001902 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:06.306018114 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.306379080 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.308521986 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:06.356503963 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.456257105 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.456413984 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.456549883 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:06.456743956 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:06.456760883 CEST	443	49807	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:06.456895113 CEST	49807	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:10.377962112 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:10.396651030 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:10.640331030 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:10.642765999 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:10.647898912 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:11.471592903 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:11.471633911 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:11.471719980 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:11.486511946 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:11.486543894 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:11.987703085 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:11.987796068 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:11.989135027 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:11.989146948 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:11.989537954 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:11.996526003 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:12.040525913 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:12.128631115 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:12.128789902 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:12.128875971 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:12.129345894 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:12.129345894 CEST	49808	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:12.129367113 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:12.129379988 CEST	443	49808	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:12.281723022 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:12.330174923 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.611709118 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.616811991 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.627104998 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.637038946 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.642805099 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.649851084 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.658426046 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.663408041 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.705224991 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.710500002 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.752559900 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.757870913 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.767925024 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.773972034 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.783483028 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.788417101 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.814752102 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.819830894 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.856825113 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:14.858535051 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:14.910132885 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.018321991 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.020028114 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.025201082 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.128865004 CEST	49776	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.128894091 CEST	443	49776	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.128921986 CEST	49779	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.128926039 CEST	443	49779	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.128925085 CEST	49775	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.128947020 CEST	443	49775	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.142587900 CEST	49778	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.142595053 CEST	49774	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.142621994 CEST	443	49774	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.142623901 CEST	443	49778	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.142641068 CEST	49777	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:15.142647982 CEST	443	49777	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:15.151295900 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.153810024 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.160794973 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.160840034 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.167732954 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.167797089 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.174707890 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.294348001 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.296075106 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.301134109 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:15.301186085 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:15.306616068 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:17.132606030 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:17.132638931 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:17.132695913 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:17.133179903 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:17.133191109 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:17.966583967 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:17.966908932 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:17.968537092 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:17.968547106 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:17.968853951 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:17.970916033 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:18.016508102 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.118505955 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.118575096 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.124516010 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.124566078 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:18.127425909 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:18.127425909 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:18.127439976 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.129102945 CEST	49809	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:18.129107952 CEST	443	49809	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:18.675595045 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:18.680519104 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:18.918379068 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:18.920836926 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:18.927068949 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.019079924 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.024477005 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.050353050 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.055399895 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.222301006 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.228405952 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.357678890 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.359397888 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.367336035 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.498979092 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.500278950 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.505250931 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.641298056 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.642518044 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.648614883 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:19.895009995 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:19.909907103 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:20.175879955 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:20.177280903 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:20.200386047 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:21.345632076 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:21.345633030 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:28:21.345712900 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:21.345741987 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:28:23.144192934 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.144258976 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:23.144336939 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.144987106 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.145001888 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:23.869040966 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:23.869132042 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.870311022 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.870325089 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:23.870536089 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:23.871407986 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:23.912529945 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:24.006870031 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:24.006939888 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:24.007160902 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:24.007795095 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:24.007795095 CEST	49810	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:24.007816076 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:24.007822037 CEST	443	49810	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:25.174170017 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:25.533312082 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:26.134536028 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:26.279398918 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:26.279470921 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:26.279522896 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:29.014681101 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.014740944 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.014806032 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.015357971 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.015394926 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.504892111 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.504995108 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.506547928 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.506575108 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.506915092 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.507395983 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.552509069 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.651354074 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.651524067 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.651671886 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.658330917 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.658330917 CEST	49811	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:29.658402920 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.658436060 CEST	443	49811	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:29.786525011 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:29.792323112 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:34.663796902 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:34.663876057 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:34.663954020 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:34.664418936 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:34.664448023 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.258265972 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.258342028 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:35.260401011 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:35.260417938 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.260637999 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.261229992 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:35.304536104 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.425045967 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.425187111 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:35.425246954 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:35.425756931 CEST	49812	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:35.425791979 CEST	443	49812	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.430937052 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.431027889 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.435034990 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.438940048 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.438973904 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.752501011 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:40.757972956 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:40.814990997 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:40.820111036 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:40.929131031 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.929231882 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.931040049 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.931071043 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.931286097 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:40.931833982 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:40.976506948 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:41.079876900 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:41.079941034 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:41.079991102 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:41.080507040 CEST	49813	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:41.080533028 CEST	443	49813	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:42.282169104 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:42.441920042 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:46.096555948 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.096640110 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.099051952 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.100549936 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.100581884 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.596980095 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.597060919 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.599173069 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.599200964 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.599436998 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.600059986 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.640536070 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.739641905 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.739695072 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:46.739746094 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.740295887 CEST	49814	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:46.740324974 CEST	443	49814	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:47.127978086 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:47.155791044 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:48.084366083 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:48.086935997 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:51.300446033 CEST	49731	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:51.302715063 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:51.306015015 CEST	36704	49731	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:51.309606075 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:51.309654951 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:51.354975939 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:51.361458063 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:51.753273964 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:51.753304958 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:51.758068085 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:51.758068085 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:51.758105040 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.287220001 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.287389994 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.289427996 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.289433956 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.289745092 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.293718100 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.340504885 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.430902958 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.430986881 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.431266069 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.431811094 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.431811094 CEST	49816	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:52.431828022 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.431832075 CEST	443	49816	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:52.970947027 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:52.976129055 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:53.228863955 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:53.233067036 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:28:53.238013983 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:28:57.440879107 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:57.440956116 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:57.441025019 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:57.441540956 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:57.441560984 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:57.972816944 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:57.975919962 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:57.978966951 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:57.978995085 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:57.979922056 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:57.986975908 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:58.032497883 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:58.497112989 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:58.497277021 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:58.502968073 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:58.507707119 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:58.507707119 CEST	49817	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:28:58.507754087 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:28:58.507764101 CEST	443	49817	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:01.456397057 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:01.461996078 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:01.711533070 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:01.713514090 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:01.718565941 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:01.752902985 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:02.052644014 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:02.309775114 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:02.316968918 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:02.321984053 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:03.519334078 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:03.519371033 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:03.519429922 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:03.519853115 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:03.519862890 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:03.627960920 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:03.633608103 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:03.883630037 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:03.885339022 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:03.890778065 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:04.001285076 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.001360893 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:04.004194021 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:04.004199982 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.004537106 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.005167961 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:04.048501015 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.152138948 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.152297020 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.152735949 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:04.152760029 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:04.152786016 CEST	49818	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:04.152791977 CEST	443	49818	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:06.362968922 CEST	49798	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:29:06.362970114 CEST	49797	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:29:06.363054037 CEST	443	49798	172.64.41.3	192.168.2.4
Jul 26, 2024 21:29:06.363085032 CEST	443	49797	172.64.41.3	192.168.2.4
Jul 26, 2024 21:29:06.971088886 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:06.976681948 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.002310038 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.008513927 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.049221992 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.054235935 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.227963924 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.230182886 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.235409021 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.392252922 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.393964052 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.399040937 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.559900999 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.561439991 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.570266962 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.646972895 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.654151917 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.950788021 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:07.952537060 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:07.958475113 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:08.487005949 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:08.492218018 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:08.745377064 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:08.747215033 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:08.752317905 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:09.159529924 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.159569025 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.159651041 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.174269915 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.174278975 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.658122063 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.658390999 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.662961960 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.662967920 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.663358927 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.664191008 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.704574108 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.786696911 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.786854982 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:09.787329912 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.787329912 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.787566900 CEST	49819	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:09.787580967 CEST	443	49819	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:12.322000027 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:12.378978968 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:14.800503969 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:14.800534964 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:14.800606012 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:14.800920963 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:14.800934076 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.143635988 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:15.150269032 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:15.284948111 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.285024881 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:15.287008047 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:15.287014008 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.287607908 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.288168907 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:15.332494020 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.399132967 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:15.400887966 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:15.405932903 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:15.412941933 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.413018942 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:15.413065910 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:15.413508892 CEST	49820	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:15.413521051 CEST	443	49820	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:17.080354929 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.096987009 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.174288988 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.179600954 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.240232944 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.245095015 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.252341032 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.257313967 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.267874002 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.272675991 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.330316067 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.335170031 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.345774889 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.350950003 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.367067099 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.369594097 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.418025970 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.418087959 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.424444914 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.439543962 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.444500923 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.529234886 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.530441999 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.535475969 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.700475931 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.707120895 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.712186098 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.718981981 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.724066973 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.864132881 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.867078066 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.872710943 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:17.875066996 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:17.880091906 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:18.026154995 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:18.028249025 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:18.033931971 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:19.674968958 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:19.680870056 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:19.962512016 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:19.964510918 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:19.969536066 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:20.427069902 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.427112103 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:20.431361914 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.431361914 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.431396008 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:20.910052061 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:20.910118103 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.911844015 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.911856890 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:20.912178993 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:20.912777901 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:20.960499048 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:21.039572001 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:21.039719105 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:21.039772987 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:21.040666103 CEST	49821	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:21.040685892 CEST	443	49821	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:25.143573999 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:25.148900986 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:25.399328947 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:25.401302099 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:25.406514883 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:26.052565098 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.052648067 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.055049896 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.055464983 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.055505037 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.539132118 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.541266918 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.545459986 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.545488119 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.545900106 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.550024033 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.596493006 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.676187038 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.676331043 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:26.676398039 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.676716089 CEST	49822	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:26.676753998 CEST	443	49822	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:27.676582098 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:27.681968927 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:27.955970049 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:27.959012985 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:27.964010954 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:31.683016062 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:31.683101892 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:31.687391043 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:31.687391996 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:31.687509060 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.270925999 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.272272110 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:32.272272110 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:32.272339106 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.273287058 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.275481939 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:32.320497990 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.397242069 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.397458076 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.397897959 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:32.397963047 CEST	443	49823	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:32.398008108 CEST	49823	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.409548998 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.409579039 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:37.409638882 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.410124063 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.410136938 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:37.903116941 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:37.903256893 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.905359983 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.905366898 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:37.906267881 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:37.913897991 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:37.960537910 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:38.046577930 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:38.046717882 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:38.047163010 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:38.047163010 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:38.047190905 CEST	443	49824	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:38.047220945 CEST	49824	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:38.488055944 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:38.494049072 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:38.750746012 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:38.799192905 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:38.833997011 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:38.840342045 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:42.096585035 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:42.101782084 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:42.285412073 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:42.332828045 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:42.496243954 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:42.498893023 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:42.507035017 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:42.916455030 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:43.050254107 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.050311089 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.050371885 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.051316977 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.051333904 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.053589106 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:43.303149939 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:43.304789066 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:43.309751987 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:43.330724001 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:43.335829020 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:43.528409004 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.528479099 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.536135912 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.536149979 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.536448956 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.536921024 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.580496073 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.675710917 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.675873995 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.675942898 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.676773071 CEST	49825	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:43.676784039 CEST	443	49825	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:43.777122974 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:43.778723955 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:43.783812046 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:44.225308895 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:44.230690002 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:44.481137037 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:44.487015963 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:44.492222071 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:47.002104998 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:47.175673008 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:47.430785894 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:47.432523012 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:47.437501907 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:48.629545927 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:48.691374063 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:48.691417933 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:48.691500902 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:48.691932917 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:48.691947937 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:48.705792904 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:48.984844923 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:48.986637115 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:48.991849899 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:49.181720972 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.181790113 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:49.184293985 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:49.184299946 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.184801102 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.185353994 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:49.232500076 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.329754114 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.329912901 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:49.329967976 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:49.330509901 CEST	49826	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:49.330523014 CEST	443	49826	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.342289925 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.342329025 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.342694998 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.349066019 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.349080086 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.830998898 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.831073046 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.833101988 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.833110094 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.833430052 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:54.833913088 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:54.880491018 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:55.001892090 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:55.001966953 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:55.002013922 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:55.002372980 CEST	49827	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:29:55.002387047 CEST	443	49827	104.18.22.35	192.168.2.4
Jul 26, 2024 21:29:55.755014896 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:55.760591984 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:56.010859966 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:56.019025087 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:56.025933027 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:59.127655029 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:59.132591963 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:59.382397890 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:29:59.384141922 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:29:59.390554905 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.021590948 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.021616936 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.025957108 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.029067993 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.029078007 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.206712961 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:00.212033033 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.300169945 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:00.306667089 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.577786922 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.585033894 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:00.825212955 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.828133106 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.829745054 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:00.830108881 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.830231905 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.832555056 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.837413073 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.837423086 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.837598085 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.838232040 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.840095997 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:00.845068932 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:00.884509087 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.981309891 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.981357098 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:00.981404066 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.981739998 CEST	49828	443	192.168.2.4	104.18.22.35
Jul 26, 2024 21:30:00.981750011 CEST	443	49828	104.18.22.35	192.168.2.4
Jul 26, 2024 21:30:02.581047058 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:02.586143970 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:02.844019890 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:02.845640898 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:02.851313114 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:09.424257994 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:09.623965025 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:09.887245893 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:09.887973070 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:09.893263102 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:12.295588017 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:12.345896006 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:20.239044905 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:20.244220972 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:20.503604889 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:20.504384995 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:20.509303093 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:31.048542023 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:31.353506088 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:31.485652924 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:31.485702991 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:31.774060011 CEST	36704	49815	147.185.221.21	192.168.2.4
Jul 26, 2024 21:30:31.775681973 CEST	49815	36704	192.168.2.4	147.185.221.21
Jul 26, 2024 21:30:31.780831099 CEST	36704	49815	147.185.221.21	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 26, 2024 21:26:02.476950884 CEST	51428	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:02.485769033 CEST	53	51428	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:04.930989027 CEST	54677	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:05.127572060 CEST	53	54677	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:22.281461954 CEST	65134	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:22.292279959 CEST	53	65134	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:25.011703968 CEST	57105	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:25.013854027 CEST	49920	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:25.022488117 CEST	53	49920	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:25.022524118 CEST	53	57105	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:26.431412935 CEST	55652	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:26.431642056 CEST	54869	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:26.440854073 CEST	53	55652	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:26.440896988 CEST	53	54869	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:26.516906023 CEST	56578	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:26.517858028 CEST	55048	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:26.524369955 CEST	53	56578	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:26.525264978 CEST	53	55048	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:27.139561892 CEST	50318	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:27.140315056 CEST	58497	53	192.168.2.4	1.1.1.1
Jul 26, 2024 21:26:27.150871038 CEST	53	58497	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:27.153052092 CEST	53	50318	1.1.1.1	192.168.2.4
Jul 26, 2024 21:26:29.713215113 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.022749901 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.177771091 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.177826881 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.177915096 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.177943945 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.178025007 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.249221087 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.253458977 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.254287958 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.254626989 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279098034 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279098034 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279289961 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279443979 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279642105 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.279642105 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.280035973 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.280404091 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.350665092 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.350747108 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.350759029 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.350835085 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.354599953 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.354599953 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.378987074 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381468058 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381515980 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381629944 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381688118 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381700039 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.381721973 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.382384062 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.382514000 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.386744022 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.394188881 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.394474030 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.394474030 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:30.450319052 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:30.492844105 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:34.140522957 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:34.140659094 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:26:34.396886110 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:34.396917105 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:34.396939993 CEST	443	59652	172.64.41.3	192.168.2.4
Jul 26, 2024 21:26:34.397623062 CEST	59652	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.336503029 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.644644976 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.815388918 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.815613031 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.815648079 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.815726042 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.815742970 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.817142010 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.819901943 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.819901943 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.819901943 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.819901943 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.939097881 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939124107 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939810038 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939825058 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939858913 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.939893007 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.939908028 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:20.940453053 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:20.940453053 CEST	64479	443	192.168.2.4	172.64.41.3
Jul 26, 2024 21:27:21.116556883 CEST	443	64479	172.64.41.3	192.168.2.4
Jul 26, 2024 21:27:21.158916950 CEST	64479	443	192.168.2.4	172.64.41.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 26, 2024 21:26:02.476950884 CEST	192.168.2.4	1.1.1.1	0xe24e	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:04.930989027 CEST	192.168.2.4	1.1.1.1	0xb9d5	Standard query (0)	she-vocal.gl.at.ply.gg	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:22.281461954 CEST	192.168.2.4	1.1.1.1	0xfc13	Standard query (0)	launcher-files.modrinth.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.011703968 CEST	192.168.2.4	1.1.1.1	0xf119	Standard query (0)	meta.modrinth.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.013854027 CEST	192.168.2.4	1.1.1.1	0x785	Standard query (0)	api.modrinth.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.431412935 CEST	192.168.2.4	1.1.1.1	0x8891	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.431642056 CEST	192.168.2.4	1.1.1.1	0x7447	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jul 26, 2024 21:26:26.516906023 CEST	192.168.2.4	1.1.1.1	0xcfa5	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.517858028 CEST	192.168.2.4	1.1.1.1	0x59f7	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jul 26, 2024 21:26:27.139561892 CEST	192.168.2.4	1.1.1.1	0xbe23	Standard query (0)	cdn-raw.modrinth.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:27.140315056 CEST	192.168.2.4	1.1.1.1	0x12c1	Standard query (0)	cdn-raw.modrinth.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 26, 2024 21:26:02.485769033 CEST	1.1.1.1	192.168.2.4	0xe24e	No error (0)	ip-api.com	208.95.112.1	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:05.127572060 CEST	1.1.1.1	192.168.2.4	0xb9d5	No error (0)	she-vocal.gl.at.ply.gg	147.185.221.21	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:22.292279959 CEST	1.1.1.1	192.168.2.4	0xfc13	No error (0)	launcher-files.modrinth.com	104.18.22.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:22.292279959 CEST	1.1.1.1	192.168.2.4	0xfc13	No error (0)	launcher-files.modrinth.com	104.18.23.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.022488117 CEST	1.1.1.1	192.168.2.4	0x785	No error (0)	api.modrinth.com	104.18.23.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.022488117 CEST	1.1.1.1	192.168.2.4	0x785	No error (0)	api.modrinth.com	104.18.22.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.022524118 CEST	1.1.1.1	192.168.2.4	0xf119	No error (0)	meta.modrinth.com	104.18.22.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:25.022524118 CEST	1.1.1.1	192.168.2.4	0xf119	No error (0)	meta.modrinth.com	104.18.23.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.440854073 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	chrome.cloudflare-dns.com	172.64.41.3	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.440854073 CEST	1.1.1.1	192.168.2.4	0x8891	No error (0)	chrome.cloudflare-dns.com	162.159.61.3	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.440896988 CEST	1.1.1.1	192.168.2.4	0x7447	No error (0)	chrome.cloudflare-dns.com		65	IN (0x0001)	false
Jul 26, 2024 21:26:26.524369955 CEST	1.1.1.1	192.168.2.4	0xcfa5	No error (0)	chrome.cloudflare-dns.com	172.64.41.3	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.524369955 CEST	1.1.1.1	192.168.2.4	0xcfa5	No error (0)	chrome.cloudflare-dns.com	162.159.61.3	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:26.525264978 CEST	1.1.1.1	192.168.2.4	0x59f7	No error (0)	chrome.cloudflare-dns.com		65	IN (0x0001)	false
Jul 26, 2024 21:26:27.150871038 CEST	1.1.1.1	192.168.2.4	0x12c1	No error (0)	cdn-raw.modrinth.com		65	IN (0x0001)	false
Jul 26, 2024 21:26:27.153052092 CEST	1.1.1.1	192.168.2.4	0xbe23	No error (0)	cdn-raw.modrinth.com	104.18.22.35	A (IP address)	IN (0x0001)	false
Jul 26, 2024 21:26:27.153052092 CEST	1.1.1.1	192.168.2.4	0xbe23	No error (0)	cdn-raw.modrinth.com	104.18.23.35	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

launcher-files.modrinth.com

meta.modrinth.com

api.modrinth.com

chrome.cloudflare-dns.com

https:

cdn-raw.modrinth.com

cdn.modrinth.com

api-js.mixpanel.com

edge.microsoft.com

ip-api.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	208.95.112.1	80	7100	C:\Users\user\AppData\Local\Temp\Modrinth.exe

Timestamp	Bytes transferred	Direction	Data
Jul 26, 2024 21:26:02.497965097 CEST	80	OUT	GET /line/?fields=hosting HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Jul 26, 2024 21:26:02.963386059 CEST	175	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 66 61 6c 73 65 0a Data Ascii: false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:22 UTC	91	OUT	GET /updates.json HTTP/1.1 accept: application/json host: launcher-files.modrinth.com
2024-07-26 19:26:23 UTC	531	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:23 GMT Content-Type: application/json Content-Length: 2888 Connection: close ETag: "09f96440683e5171440938917d541356" Last-Modified: Tue, 23 Apr 2024 22:44:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6315 Expires: Mon, 26 Aug 2024 19:26:23 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c7f1d995c452-EWR
2024-07-26 19:26:23 UTC	838	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 37 2e 31 22 2c 22 6e 6f 74 65 73 22 3a 22 41 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 4d 6f 64 72 69 6e 74 68 20 41 70 70 20 68 61 73 20 62 65 65 6e 20 72 65 6c 65 61 73 65 64 21 22 2c 22 70 75 62 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 32 33 54 32 32 3a 34 32 3a 35 30 2e 37 39 35 39 38 32 36 30 30 5a 22 2c 22 70 6c 61 74 66 6f 72 6d 73 22 3a 7b 22 6c 69 6e 75 78 2d 78 38 36 5f 36 34 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 64 57 35 30 63 6e 56 7a 64 47 56 6b 49 47 4e 76 62 57 31 6c 62 6e 51 36 49 48 4e 70 5a 32 35 68 64 48 56 79 5a 53 42 6d 63 6d 39 74 49 48 52 68 64 58 4a 70 49 48 4e 6c 59 33 4a 6c 64 43 42 72 5a 58 6b 4b 55 6c 56 52 4e 54 4a 79 5a 7a 5a 77 53 6e 4e 36 53 55 31 Data Ascii: {"version":"0.7.1","notes":"A new version of the Modrinth App has been released!","pub_date":"2024-04-23T22:42:50.795982600Z","platforms":{"linux-x86_64":{"signature":"dW50cnVzdGVkIGNvbW1lbnQ6IHNpZ25hdHVyZSBmcm9tIHRhdXJpIHNlY3JldCBrZXkKUlVRNTJyZzZwSnN6SU1
2024-07-26 19:26:23 UTC	1369	IN	Data Raw: 73 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 31 2f 6c 69 6e 75 78 2f 6d 6f 64 72 69 6e 74 68 2d 61 70 70 5f 30 2e 37 2e 31 5f 61 6d 64 36 34 2e 41 70 70 49 6d 61 67 65 22 5d 7d 2c 22 77 69 6e 64 6f 77 73 2d 78 38 36 5f 36 34 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 64 57 35 30 63 6e 56 7a 64 47 56 6b 49 47 4e 76 62 57 31 6c 62 6e 51 36 49 48 4e 70 5a 32 35 68 64 48 56 79 5a 53 42 6d 63 6d 39 74 49 48 52 68 64 58 4a 70 49 48 4e 6c 59 33 4a 6c 64 43 42 72 5a 58 6b 4b 55 6c 56 52 4e 54 4a 79 5a 7a 5a 77 53 6e 4e 36 53 55 35 36 56 45 5a 79 54 54 46 59 56 6c 6c 34 4b 30 4d 31 55 30 39 32 57 46 42 31 53 55 73 78 4e 6d 35 73 4e 6d 78 78 52 6c 52 6e 54 47 39 54 65 6b 30 7a 59 30 64 79 4e 55 31 57 54 54 64 4e 4d 48 56 Data Ascii: s.modrinth.com/versions/0.7.1/linux/modrinth-app_0.7.1_amd64.AppImage"]},"windows-x86_64":{"signature":"dW50cnVzdGVkIGNvbW1lbnQ6IHNpZ25hdHVyZSBmcm9tIHRhdXJpIHNlY3JldCBrZXkKUlVRNTJyZzZwSnN6SU56VEZyTTFYVll4K0M1U092WFB1SUsxNm5sNmxxRlRnTG9Tek0zY0dyNU1WTTdNMHV
2024-07-26 19:26:23 UTC	681	IN	Data Raw: 74 68 25 32 30 41 70 70 5f 30 2e 37 2e 31 5f 75 6e 69 76 65 72 73 61 6c 2e 64 6d 67 22 5d 7d 2c 22 64 61 72 77 69 6e 2d 61 61 72 63 68 36 34 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 64 57 35 30 63 6e 56 7a 64 47 56 6b 49 47 4e 76 62 57 31 6c 62 6e 51 36 49 48 4e 70 5a 32 35 68 64 48 56 79 5a 53 42 6d 63 6d 39 74 49 48 52 68 64 58 4a 70 49 48 4e 6c 59 33 4a 6c 64 43 42 72 5a 58 6b 4b 55 6c 56 52 4e 54 4a 79 5a 7a 5a 77 53 6e 4e 36 53 55 64 6d 63 45 31 4b 64 31 68 77 4d 47 46 5a 5a 56 64 46 4d 56 49 72 52 47 70 54 62 7a 5a 75 59 6e 70 76 62 6e 56 68 5a 6b 78 33 52 56 70 54 65 48 41 77 53 6e 68 6d 54 6b 78 51 4e 6d 52 6c 64 44 4e 6c 5a 30 52 32 53 47 70 54 59 6d 46 48 59 54 5a 6c 61 6e 4a 71 55 33 70 4d 63 45 5a 73 55 46 59 79 4e 54 42 34 57 56 52 36 Data Ascii: th%20App_0.7.1_universal.dmg"]},"darwin-aarch64":{"signature":"dW50cnVzdGVkIGNvbW1lbnQ6IHNpZ25hdHVyZSBmcm9tIHRhdXJpIHNlY3JldCBrZXkKUlVRNTJyZzZwSnN6SUdmcE1Kd1hwMGFZZVdFMVIrRGpTbzZuYnpvbnVhZkx3RVpTeHAwSnhmTkxQNmRldDNlZ0R2SGpTYmFHYTZlanJqU3pMcEZsUFYyNTB4WVR6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:24 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:25 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:24 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6487 Expires: Mon, 26 Aug 2024 19:26:24 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c7fde9e41851-EWR
2024-07-26 19:26:25 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	143	OUT	GET /minecraft/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:25 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Content-Length: 287070 Connection: close ETag: "492d16f4ce67f02b74852799b385b656" Last-Modified: Sat, 15 Jun 2024 11:48:09 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13548 Expires: Sat, 27 Jul 2024 00:26:25 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c801fe67433a-EWR
2024-07-26 19:26:25 UTC	837	IN	Data Raw: 7b 22 6c 61 74 65 73 74 22 3a 7b 22 72 65 6c 65 61 73 65 22 3a 22 31 2e 32 30 2e 32 22 2c 22 73 6e 61 70 73 68 6f 74 22 3a 22 32 33 77 34 34 61 22 7d 2c 22 76 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 31 22 2c 22 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 73 68 61 31 22 3a 22 39 34 38 39 32 35 38 33 37 31 33 61 65 38 36 64 39 36 38 32 33 Data Ascii: {"latest":{"release":"1.20.2","snapshot":"23w44a"},"versions":[{"id":"1.21","type":"release","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21.json","time":"2024-06-13T08:24:03Z","releaseTime":"2024-06-13T08:24:03Z","sha1":"94892583713ae86d96823
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 31 2d 70 72 65 34 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 31 32 3a 30 30 3a 31 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 31 32 3a 30 30 3a 31 35 5a 22 2c 22 73 68 61 31 22 3a 22 36 33 61 35 61 66 32 34 62 30 62 36 35 38 66 35 34 35 65 62 31 32 31 31 36 31 37 39 32 66 39 65 30 36 38 36 62 34 39 63 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 61 32 39 64 61 65 34 33 64 66 66 65 32 35 66 66 39 64 30 38 62 34 38 37 36 65 37 62 31 61 38 64 66 63 62 34 64 66 35 32 22 2c 22 61 73 73 65 74 Data Ascii: .modrinth.com/minecraft/v0/versions/1.21-pre4.json","time":"2024-06-07T12:00:15Z","releaseTime":"2024-06-07T12:00:15Z","sha1":"63a5af24b0b658f545eb121161792f9e0686b49c","complianceLevel":1,"assetsIndexUrl":"a29dae43dffe25ff9d08b4876e7b1a8dfcb4df52","asset
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 35 33 35 64 31 66 64 63 31 32 36 31 36 37 35 66 36 32 61 38 32 32 66 30 30 62 34 32 61 39 35 65 66 31 61 36 31 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 32 31 62 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 32 31 62 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 32 54 31 36 3a 32 35 3a 34 31 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 32 54 31 36 3a 32 35 3a 34 31 5a 22 2c 22 73 68 61 31 22 3a 22 36 62 39 32 35 36 33 64 65 61 62 64 39 61 36 30 30 63 61 32 36 38 37 38 35 66 35 64 39 61 63 32 62 64 63 63 39 61 39 Data Ascii: 535d1fdc1261675f62a822f00b42a95ef1a61"},{"id":"24w21b","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w21b.json","time":"2024-05-22T16:25:41Z","releaseTime":"2024-05-22T16:25:41Z","sha1":"6b92563deabd9a600ca268785f5d9ac2bdcc9a9
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 78 55 72 6c 22 3a 22 62 32 34 35 30 30 61 37 66 34 39 37 35 32 39 33 65 34 61 30 63 34 30 31 62 32 35 62 30 63 66 32 34 31 61 66 61 38 35 62 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 62 32 34 35 30 30 61 37 66 34 39 37 35 32 39 33 65 34 61 30 63 34 30 31 62 32 35 62 30 63 66 32 34 31 61 66 61 38 35 62 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 31 39 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 31 39 61 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 32 3a 31 35 3a 33 31 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 Data Ascii: xUrl":"b24500a7f4975293e4a0c401b25b0cf241afa85b","assetsIndexSha1":"b24500a7f4975293e4a0c401b25b0cf241afa85b"},{"id":"24w19a","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w19a.json","time":"2024-05-10T12:15:31Z","releaseTime"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 61 31 22 3a 22 35 65 39 65 37 32 39 36 66 39 61 33 33 31 36 33 64 61 64 66 63 31 35 38 32 63 62 33 35 61 61 63 34 63 64 38 32 35 34 65 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 38 30 31 34 61 37 31 39 61 66 66 31 65 35 63 35 36 35 31 65 31 61 30 34 66 35 37 39 39 33 34 36 30 64 37 36 34 30 34 61 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 38 30 31 34 61 37 31 39 61 66 66 31 65 35 63 35 36 35 31 65 31 61 30 34 66 35 37 39 39 33 34 36 30 64 37 36 34 30 34 61 22 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 35 22 2c 22 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d Data Ascii: a1":"5e9e7296f9a33163dadfc1582cb35aac4cd8254e","complianceLevel":1,"assetsIndexUrl":"8014a719aff1e5c5651e1a04f57993460d76404a","assetsIndexSha1":"8014a719aff1e5c5651e1a04f57993460d76404a"},{"id":"1.20.5","type":"release","url":"https://meta.modrinth.com/m
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 35 2d 72 63 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 31 3a 34 35 3a 34 30 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 31 3a 34 35 3a 34 30 5a 22 2c 22 73 68 61 31 22 3a 22 65 39 38 61 65 37 63 36 65 38 30 30 31 30 30 62 36 30 62 38 66 65 64 66 64 63 33 34 62 66 62 33 35 65 61 37 61 62 64 38 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 30 30 30 38 63 37 64 65 64 35 63 63 37 61 30 34 36 36 39 38 64 62 62 37 33 30 31 31 32 38 35 36 62 32 35 37 35 63 65 65 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 30 30 30 38 63 37 64 65 64 35 63 63 37 61 30 Data Ascii: rsions/1.20.5-rc1.json","time":"2024-04-18T11:45:40Z","releaseTime":"2024-04-18T11:45:40Z","sha1":"e98ae7c6e800100b60b8fedfdc34bfb35ea7abd8","complianceLevel":1,"assetsIndexUrl":"0008c7ded5cc7a046698dbb730112856b2575cee","assetsIndexSha1":"0008c7ded5cc7a0
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 34 63 34 61 62 36 66 64 65 37 65 38 33 31 30 37 37 64 39 64 34 22 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 35 2d 70 72 65 31 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 35 2d 70 72 65 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 30 54 31 32 3a 34 34 3a 32 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 30 54 31 32 3a 34 34 3a 32 35 5a 22 2c 22 73 68 61 31 22 3a 22 65 35 32 32 63 62 65 61 63 35 35 63 30 61 38 63 35 33 31 34 39 37 35 34 39 39 66 32 34 61 33 34 61 65 32 38 30 63 64 64 22 2c 22 63 6f Data Ascii: 4c4ab6fde7e831077d9d4"},{"id":"1.20.5-pre1","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.20.5-pre1.json","time":"2024-04-10T12:44:25Z","releaseTime":"2024-04-10T12:44:25Z","sha1":"e522cbeac55c0a8c5314975499f24a34ae280cdd","co
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 49 6e 64 65 78 55 72 6c 22 3a 22 30 62 37 37 39 62 66 61 38 61 63 33 37 39 37 61 35 38 66 32 66 30 66 34 39 36 31 32 64 34 31 30 38 61 32 33 31 36 64 63 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 30 62 37 37 39 62 66 61 38 61 63 33 37 39 37 61 35 38 66 32 66 30 66 34 39 36 31 32 64 34 31 30 38 61 32 33 31 36 64 63 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 31 32 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 31 32 61 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 30 54 31 34 3a 33 38 3a 33 37 5a 22 2c 22 72 65 6c 65 61 73 65 54 Data Ascii: IndexUrl":"0b779bfa8ac3797a58f2f0f49612d4108a2316dc","assetsIndexSha1":"0b779bfa8ac3797a58f2f0f49612d4108a2316dc"},{"id":"24w12a","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w12a.json","time":"2024-03-20T14:38:37Z","releaseT
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 3a 22 39 34 38 36 66 65 37 63 64 36 35 62 33 30 35 33 62 38 66 37 39 34 30 64 36 37 66 34 36 35 34 64 35 66 65 31 36 37 38 38 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 32 66 38 35 62 66 65 33 31 36 64 64 63 64 33 36 66 36 33 39 33 34 33 38 65 63 66 66 65 36 32 35 34 39 32 34 34 35 36 63 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 32 66 38 35 62 66 65 33 31 36 64 64 63 64 33 36 66 36 33 39 33 34 33 38 65 63 66 66 65 36 32 35 34 39 32 34 34 35 36 63 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 30 37 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e Data Ascii: :"9486fe7cd65b3053b8f7940d67f4654d5fe16788","complianceLevel":1,"assetsIndexUrl":"2f85bfe316ddcd36f6393438ecffe6254924456c","assetsIndexSha1":"2f85bfe316ddcd36f6393438ecffe6254924456c"},{"id":"24w07a","type":"snapshot","url":"https://meta.modrinth.com/min
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 32 34 54 31 33 3a 34 32 3a 34 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 32 34 54 31 33 3a 34 32 3a 34 35 5a 22 2c 22 73 68 61 31 22 3a 22 66 33 61 34 62 35 30 63 65 33 37 63 36 65 30 64 32 34 33 63 39 64 37 38 34 66 62 35 39 39 64 32 37 35 32 62 33 36 31 64 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 63 35 39 33 38 61 31 65 64 65 31 65 65 34 63 62 35 64 39 31 30 35 35 30 30 65 33 64 65 63 66 30 36 65 35 65 63 35 35 66 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 63 35 39 33 38 61 31 65 64 65 31 65 65 34 63 62 35 64 39 31 30 35 35 30 30 65 33 64 65 63 66 30 36 65 35 65 63 35 35 66 22 Data Ascii: ime":"2024-01-24T13:42:45Z","releaseTime":"2024-01-24T13:42:45Z","sha1":"f3a4b50ce37c6e0d243c9d784fb599d2752b361d","complianceLevel":1,"assetsIndexUrl":"c5938a1ede1ee4cb5d9105500e3decf06e5ec55f","assetsIndexSha1":"c5938a1ede1ee4cb5d9105500e3decf06e5ec55f"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	139	OUT	GET /forge/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:25 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Content-Length: 465811 Connection: close ETag: "d3da00811820c3c12b519da657fff679" Last-Modified: Fri, 08 Dec 2023 17:27:14 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13548 Expires: Sat, 27 Jul 2024 00:26:25 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c801fda2447a-EWR
2024-07-26 19:26:25 UTC	837	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 34 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 34 2d 34 39 2e 30 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 34 2d 66 6f 72 67 65 34 39 2e 30 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 33 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 33 2d 34 39 2e 30 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e Data Ascii: {"gameVersions":[{"id":"1.20.4","stable":true,"loaders":[{"id":"1.20.4-49.0.3","url":"https://meta.modrinth.com/forge/v0/versions/1.20.4-forge49.0.3.json","stable":false}]},{"id":"1.20.3","stable":true,"loaders":[{"id":"1.20.3-49.0.2","url":"https://meta.
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 34 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 34 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 34 22 2c 22 75 72 Data Ascii: :"1.20.2-48.0.47","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.47.json","stable":false},{"id":"1.20.2-48.0.45","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.45.json","stable":false},{"id":"1.20.2-48.0.44","ur
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 34 38 2e 30 2e 33 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 33 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 33 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 33 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 33 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 Data Ascii: 48.0.35.json","stable":false},{"id":"1.20.2-48.0.34","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.34.json","stable":false},{"id":"1.20.2-48.0.33","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.33.json","stable
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 31 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 31 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 31 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 31 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 Data Ascii: com/forge/v0/versions/1.20.2-forge-48.0.19.json","stable":false},{"id":"1.20.2-48.0.18","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.18.json","stable":false},{"id":"1.20.2-48.0.17","url":"https://meta.modrinth.com/forge/v0/versions
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 32 2e 31 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 32 2e 31 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 Data Ascii: :"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.0.json","stable":false}]},{"id":"1.20.1","stable":true,"loaders":[{"id":"1.20.1-47.2.17","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.2.17.json","stable":false},{"id":"1
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 67 65 2d 34 37 2e 31 2e 34 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 34 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 34 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 34 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 34 34 2e 6a 73 6f 6e 22 2c 22 73 74 Data Ascii: rge-47.1.47.json","stable":false},{"id":"1.20.1-47.1.46","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.46.json","stable":false},{"id":"1.20.1-47.1.44","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.44.json","st
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 33 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 32 39 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 32 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 32 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 Data Ascii: nth.com/forge/v0/versions/1.20.1-forge-47.1.30.json","stable":false},{"id":"1.20.1-47.1.29","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.29.json","stable":false},{"id":"1.20.1-47.1.28","url":"https://meta.modrinth.com/forge/v0/vers
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2d 34 37 2e 31 2e 31 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: -47.1.16","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.16.json","stable":false},{"id":"1.20.1-47.1.15","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.15.json","stable":false},{"id":"1.20.1-47.1.14","url":"http
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 Data Ascii: e":false},{"id":"1.20.1-47.1.1","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.1.json","stable":false},{"id":"1.20.1-47.1.0","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.0.json","stable":false},{"id":"1.20.1-4
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 33 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 30 2e 31 39 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 31 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 30 2e 31 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 31 38 2e 6a 73 Data Ascii: 20.1-forge-47.0.34.json","stable":false},{"id":"1.20.1-47.0.19","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.0.19.json","stable":false},{"id":"1.20.1-47.0.18","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.0.18.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	139	OUT	GET /quilt/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:25 UTC	531	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Content-Length: 40036 Connection: close ETag: "7d315153e27df1622755617c8a4e379f" Last-Modified: Sun, 14 Jul 2024 18:14:36 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 11313 Expires: Sat, 27 Jul 2024 00:26:25 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c801fc4d176c-EWR
2024-07-26 19:26:25 UTC	838	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 24 7b 6d 6f 64 72 69 6e 74 68 2e 67 61 6d 65 56 65 72 73 69 6f 6e 7d 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 30 2e 32 36 2e 34 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 34 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 33 Data Ascii: {"gameVersions":[{"id":"${modrinth.gameVersion}","stable":true,"loaders":[{"id":"0.26.4-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.4-beta.1.json","stable":false},{"id":"0.26.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.3
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 Data Ascii: ilt/v0/versions/0.26.0-beta.4.json","stable":false},{"id":"0.26.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.0-beta.3.json","stable":false},{"id":"0.26.0-beta.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.0-beta.2.json","
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 34 2e 30 2d 62 65 74 61 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 34 2e 30 2d 62 65 74 61 2e 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 34 2e 30 2d 62 65 74 61 2e 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 34 2e 30 2d 62 65 74 61 2e 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 Data Ascii: meta.modrinth.com/quilt/v0/versions/0.24.0-beta.7.json","stable":false},{"id":"0.24.0-beta.6","url":"https://meta.modrinth.com/quilt/v0/versions/0.24.0-beta.6.json","stable":false},{"id":"0.24.0-beta.5","url":"https://meta.modrinth.com/quilt/v0/versions/0
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 32 2e 31 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 32 2e 31 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 32 2e 31 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 32 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f Data Ascii: a.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.22.1-beta.2.json","stable":false},{"id":"0.22.1-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.22.1-beta.1.json","stable":false},{"id":"0.22.0","url":"https://meta.modrinth.com/quilt/
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 31 2e 30 2d 62 65 74 61 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 31 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 31 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 31 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 Data Ascii: l":"https://meta.modrinth.com/quilt/v0/versions/0.21.0-beta.4.json","stable":false},{"id":"0.21.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.21.0-beta.3.json","stable":false},{"id":"0.21.0-beta.2","url":"https://meta.modrinth.com/quilt/v
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 33 2e 6a 73 6f Data Ascii: modrinth.com/quilt/v0/versions/0.20.0-beta.14.json","stable":false},{"id":"0.20.0-beta.13","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.13.json","stable":false},{"id":"0.19.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.3.jso
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: ,{"id":"0.20.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.3.json","stable":false},{"id":"0.20.0-beta.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.2.json","stable":false},{"id":"0.20.0-beta.1","url":"https:/
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 31 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 31 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 31 39 22 2c 22 75 72 6c 22 3a 22 Data Ascii: son","stable":false},{"id":"0.19.1-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.1-beta.1.json","stable":false},{"id":"0.19.0","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0.json","stable":false},{"id":"0.19.0-beta.19","url":"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 Data Ascii: versions/0.19.0-beta.9.json","stable":false},{"id":"0.19.0-beta.8","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0-beta.8.json","stable":false},{"id":"0.19.0-beta.7","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0-beta.7.json","stable"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 2d 70 72 65 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 34 2d 70 72 65 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 2d 70 72 Data Ascii: ersions/0.18.5.json","stable":false},{"id":"0.18.4","url":"https://meta.modrinth.com/quilt/v0/versions/0.18.4.json","stable":false},{"id":"0.18.4-pre.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.18.4-pre.3.json","stable":false},{"id":"0.18.4-pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	133	OUT	GET /v2/tag/game_version HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:25 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 299 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c801ee3d8c41-EWR
2024-07-26 19:26:25 UTC	877	IN	Data Raw: 37 64 39 32 0d 0a 5b 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 30 54 31 32 3a 32 34 3a 30 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 2d 70 72 65 34 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 Data Ascii: 7d92[{"version":"1.21","version_type":"release","date":"2024-06-13T08:24:03Z","major":true},{"version":"1.21-rc1","version_type":"snapshot","date":"2024-06-10T12:24:08Z","major":false},{"version":"1.21-pre4","version_type":"snapshot","date":"2024-06-07T
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 34 3a 33 32 3a 34 32 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 39 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 32 3a 31 35 3a 33 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 38 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 31 32 3a 30 38 3a 32 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 36 22 2c 22 76 65 Data Ascii: hot","date":"2024-05-10T14:32:42Z","major":false},{"version":"24w19a","version_type":"snapshot","date":"2024-05-10T12:15:31Z","major":false},{"version":"24w18a","version_type":"snapshot","date":"2024-05-03T12:08:27Z","major":false},{"version":"1.20.6","ve
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6f 6e 22 3a 22 32 34 77 31 33 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 31 34 3a 33 30 3a 32 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 32 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 30 54 31 34 3a 33 38 3a 33 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 31 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 31 34 54 31 34 3a 32 31 3a 33 33 5a 22 2c 22 6d 61 6a Data Ascii: on":"24w13a","version_type":"snapshot","date":"2024-03-27T14:30:20Z","major":false},{"version":"24w12a","version_type":"snapshot","date":"2024-03-20T14:38:37Z","major":false},{"version":"24w11a","version_type":"snapshot","date":"2024-03-14T14:21:33Z","maj
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2e 32 30 2e 34 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 30 36 54 31 34 3a 33 38 3a 30 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 30 34 54 31 32 3a 31 30 3a 33 32 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 33 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 33 30 54 31 33 3a 34 31 3a 34 35 5a 22 2c 22 6d 61 Data Ascii: .20.4-rc1","version_type":"snapshot","date":"2023-12-06T14:38:01Z","major":false},{"version":"1.20.3","version_type":"release","date":"2023-12-04T12:10:32Z","major":false},{"version":"1.20.3-rc1","version_type":"snapshot","date":"2023-11-30T13:41:45Z","ma
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 39 2d 32 30 54 30 39 3a 30 32 3a 35 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 39 2d 31 38 54 31 32 3a 33 34 3a 35 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 Data Ascii: r":false},{"version":"1.20.2","version_type":"release","date":"2023-09-20T09:02:57Z","major":true},{"version":"1.20.2-rc2","version_type":"snapshot","date":"2023-09-18T12:34:57Z","major":false},{"version":"1.20.2-rc1","version_type":"snapshot","date":"202
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2d 30 35 2d 33 31 54 31 32 3a 33 33 3a 33 33 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 37 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 35 2d 32 39 54 31 33 3a 34 34 3a 33 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 36 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 35 2d 32 35 54 31 32 3a 32 32 3a 30 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 35 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 Data Ascii: -05-31T12:33:33Z","major":false},{"version":"1.20-pre7","version_type":"snapshot","date":"2023-05-29T13:44:34Z","major":false},{"version":"1.20-pre6","version_type":"snapshot","date":"2023-05-25T12:22:00Z","major":false},{"version":"1.20-pre5","version_ty
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 34 54 31 32 3a 35 36 3a 31 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 34 2d 72 63 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 33 54 31 30 3a 30 33 3a 31 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 34 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 30 54 31 32 3a 34 32 3a 35 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 Data Ascii: release","date":"2023-03-14T12:56:18Z","major":true},{"version":"1.19.4-rc3","version_type":"snapshot","date":"2023-03-13T10:03:11Z","major":false},{"version":"1.19.4-rc2","version_type":"snapshot","date":"2023-03-10T12:42:54Z","major":false},{"version":"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6e 22 3a 22 31 2e 31 39 2e 33 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 32 2d 30 35 54 31 33 3a 32 31 3a 33 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 33 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 32 2d 30 31 54 31 33 3a 34 35 3a 31 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 33 2d 70 72 65 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 31 2d 32 39 54 31 34 3a Data Ascii: n":"1.19.3-rc2","version_type":"snapshot","date":"2022-12-05T13:21:34Z","major":false},{"version":"1.19.3-rc1","version_type":"snapshot","date":"2022-12-01T13:45:18Z","major":false},{"version":"1.19.3-pre3","version_type":"snapshot","date":"2022-11-29T14:
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 33 35 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 31 54 31 36 3a 32 35 3a 35 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 70 72 65 36 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 30 54 31 35 3a 34 39 3a 33 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 70 72 65 35 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 Data Ascii: 35Z","major":false},{"version":"1.19.1-rc2","version_type":"snapshot","date":"2022-07-21T16:25:50Z","major":false},{"version":"1.19.1-pre6","version_type":"snapshot","date":"2022-07-20T15:49:31Z","major":false},{"version":"1.19.1-pre5","version_type":"sna
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 32 35 54 30 39 3a 35 36 3a 34 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2d 70 72 65 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 32 33 54 31 34 3a 35 34 3a 30 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2d 70 72 65 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 31 38 54 31 33 3a 35 31 3a 35 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 Data Ascii: _type":"snapshot","date":"2022-05-25T09:56:47Z","major":false},{"version":"1.19-pre2","version_type":"snapshot","date":"2022-05-23T14:54:00Z","major":false},{"version":"1.19-pre1","version_type":"snapshot","date":"2022-05-18T13:51:54Z","major":false},{"ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	129	OUT	GET /v2/tag/category HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:25 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 298 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8021c9c0f41-EWR
2024-07-26 19:26:25 UTC	877	IN	Data Raw: 37 64 38 37 0d 0a 5b 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 31 32 38 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 31 36 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 32 35 36 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 Data Ascii: 7d87[{"icon":"","name":"128x","project_type":"resourcepack","header":"resolutions"},{"icon":"","name":"16x","project_type":"resourcepack","header":"resolutions"},{"icon":"","name":"256x","project_type":"resourcepack","header":"resolutions"},{"icon":"","
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 38 20 31 36 2e 32 34 20 37 2e 37 36 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 61 64 76 65 6e 74 75 72 65 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 5c 22 31 32 5c 22 20 63 79 3d 5c 22 31 Data Ascii: 8 16.24 7.76\"/></svg>","name":"adventure","project_type":"mod","header":"categories"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"1
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 31 20 31 36 56 38 61 32 20 32 20 30 20 30 20 30 2d 31 2d 31 2e 37 33 6c 2d 37 2d 34 61 32 20 32 20 30 20 30 20 30 2d 32 20 30 6c 2d 37 20 34 41 32 20 32 20 30 20 30 20 30 20 33 20 38 76 38 61 32 20 32 20 30 20 30 20 30 20 31 20 31 2e 37 33 6c 37 20 34 61 32 20 32 20 30 20 30 20 30 20 32 20 30 6c 37 2d 34 41 32 20 32 20 30 20 30 20 30 20 32 31 20 31 36 7a 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 2e 32 37 20 36 2e 39 36 20 31 32 20 31 32 2e 30 31 20 32 30 2e 37 33 20 36 2e 39 36 5c 22 2f 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 32 5c Data Ascii: \" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z\"/><polyline points=\"3.27 6.96 12 12.01 20.73 6.96\"/><line x1=\"12\
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 20 32 20 30 20 30 30 32 2d 32 7a 6d 30 20 30 56 39 61 32 20 32 20 30 20 30 31 32 2d 32 68 32 61 32 20 32 20 30 20 30 31 32 20 32 76 31 30 6d 2d 36 20 30 61 32 20 32 20 30 20 30 30 32 20 32 68 32 61 32 20 32 20 30 20 30 30 32 2d 32 6d 30 20 30 56 35 61 32 20 32 20 30 20 30 31 32 2d 32 68 32 61 32 20 32 20 30 20 30 31 32 20 32 76 31 34 61 32 20 32 20 30 20 30 31 2d 32 20 32 68 2d 32 61 32 20 32 20 30 20 30 31 2d 32 2d 32 7a 5c 22 20 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 63 68 61 6c 6c 65 6e 67 69 6e 67 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 Data Ascii: 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z\" /></svg>","name":"challenging","project_type":"modpack","header":"categories"},{"icon":"<svg viewBox=\"0 0 24
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 37 2e 35 37 33 20 32 30 2e 30 33 38 4c 33 2e 38 34 39 20 37 2e 39 31 33 20 32 2e 37 35 33 20 32 2e 37 35 35 20 37 2e 38 33 38 20 34 2e 30 36 20 31 39 2e 34 37 20 31 38 2e 32 30 36 6c 2d 31 2e 38 39 38 20 31 2e 38 33 32 7a 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 2e 34 35 20 31 34 2e 34 35 35 6c 2d 33 2e 30 34 33 20 33 2e 36 36 31 20 31 2e 38 38 37 20 31 2e 38 34 33 20 33 2e 37 31 37 2d 33 2e 32 35 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 36 2e 37 35 20 31 30 2e 38 32 6c 33 2e 33 33 33 2d 32 2e 39 31 33 20 31 2e 31 32 33 2d 35 2e 31 35 32 2d 35 2e 30 39 31 20 31 2e Data Ascii: oke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M17.573 20.038L3.849 7.913 2.753 2.755 7.838 4.06 19.47 18.206l-1.898 1.832z\"/><path d=\"M7.45 14.455l-3.043 3.661 1.887 1.843 3.717-3.25\"/><path d=\"M16.75 10.82l3.333-2.913 1.123-5.152-5.091 1.
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 5c 22 20 72 78 3d 5c 22 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 20 31 32 2e 35 20 34 20 31 34 2e 35 20 37 20 31 34 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 32 20 31 32 2e 35 20 32 30 20 31 34 2e 35 20 31 37 20 31 34 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 20 32 31 2e 35 20 35 20 31 38 2e 35 20 37 20 31 37 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 31 20 32 31 2e 35 20 31 39 20 31 38 2e 35 20 31 37 20 31 37 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 20 38 2e 35 20 35 20 31 30 2e 35 20 37 20 31 31 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 31 20 Data Ascii: \" rx=\"5\"/><polyline points=\"2 12.5 4 14.5 7 14.5\"/><polyline points=\"22 12.5 20 14.5 17 14.5\"/><polyline points=\"3 21.5 5 18.5 7 17.5\"/><polyline points=\"21 21.5 19 18.5 17 17.5\"/><polyline points=\"3 8.5 5 10.5 7 11.5\"/><polyline points=\"21
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 72 65 63 74 20 78 3d 5c 22 37 5c 22 20 79 3d 5c 22 37 2e 35 5c 22 20 77 69 64 74 68 3d 5c 22 31 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 34 5c 22 20 72 78 3d 5c 22 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 20 31 32 2e 35 20 34 20 31 34 2e 35 20 37 20 31 34 2e 35 5c 22 2f 3e Data Ascii: ries"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><rect x=\"7\" y=\"7.5\" width=\"10\" height=\"14\" rx=\"5\"/><polyline points=\"2 12.5 4 14.5 7 14.5\"/>
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2c 22 6e 61 6d 65 22 3a 22 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 32 5c 22 20 79 31 3d 5c 22 31 5c 22 20 78 32 3d 5c 22 31 32 5c 22 20 79 32 3d 5c 22 32 33 5c 22 2f 3e Data Ascii: ,"name":"decoration","project_type":"mod","header":"categories"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><line x1=\"12\" y1=\"1\" x2=\"12\" y2=\"23\"/>
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 32 32 5c 22 20 79 31 3d 5c 22 31 39 2e 37 38 5c 22 20 78 32 3d 5c 22 35 2e 36 34 5c 22 20 79 32 3d 5c 22 31 38 2e 33 36 5c 22 2f 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 38 2e 33 36 5c 22 20 79 31 3d 5c 22 35 2e 36 34 5c 22 20 78 32 3d 5c 22 31 39 2e 37 38 5c 22 20 79 32 3d 5c 22 34 2e 32 32 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 66 65 61 74 75 72 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 Data Ascii: 22\" y1=\"19.78\" x2=\"5.64\" y2=\"18.36\"/><line x1=\"18.36\" y1=\"5.64\" x2=\"19.78\" y2=\"4.22\"/></svg>","name":"environment","project_type":"resourcepack","header":"features"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2e 32 38 20 31 2e 32 38 61 31 2e 32 20 31 2e 32 20 30 20 30 20 30 20 31 2e 37 32 20 30 4c 32 31 2e 36 34 20 35 2e 33 36 61 31 2e 32 20 31 2e 32 20 30 20 30 20 30 20 30 2d 31 2e 37 32 5a 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 6d 31 34 20 37 20 33 20 33 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 35 20 36 76 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 39 20 31 34 76 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 30 20 32 76 32 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 20 38 48 33 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 31 20 31 36 68 2d 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 31 20 33 48 39 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 66 61 6e 74 61 73 79 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 Data Ascii: .28 1.28a1.2 1.2 0 0 0 1.72 0L21.64 5.36a1.2 1.2 0 0 0 0-1.72Z\"/><path d=\"m14 7 3 3\"/><path d=\"M5 6v4\"/><path d=\"M19 14v4\"/><path d=\"M10 2v2\"/><path d=\"M7 8H3\"/><path d=\"M21 16h-4\"/><path d=\"M11 3H9\"/></svg>","name":"fantasy","project_type"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	127	OUT	GET /v2/tag/loader HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:25 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 296 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c80229944321-EWR
2024-07-26 19:26:25 UTC	877	IN	Data Raw: 33 66 63 62 0d 0a 5b 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 39 32 20 33 31 39 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 30 2c 2d 35 29 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 32 2c 31 30 39 2e 35 4c 31 32 2c 31 35 35 4c 33 34 2e 35 2c 32 32 34 4c 35 37 2e 35 2c 32 32 34 4c 35 37 2e 35 2c 32 37 31 4c 38 31 2c 32 Data Ascii: 3fcb[{"icon":"<svg viewBox=\"0 0 292 319\" style=\"fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;\" stroke=\"currentColor\"><g transform=\"matrix(1,0,0,1,0,-5)\"><path d=\"M12,109.5L12,155L34.5,224L57.5,224L57.5,271L81,2
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 3b 5c 22 3e 5c 6e 20 20 20 20 3c 72 65 63 74 20 69 64 3d 5c 22 42 75 6e 67 65 65 63 6f 72 64 5c 22 20 78 3d 5c 22 2d 30 5c 22 20 79 3d 5c 22 30 5c 22 20 77 69 64 74 68 3d 5c 22 32 34 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 34 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 3a 6e 6f 6e 65 3b 5c 22 2f 3e 5c 6e 20 20 20 20 3c 70 61 74 68 20 64 3d 5c 22 4d 33 2e 37 37 38 2c 31 39 2e 37 37 38 43 33 2e 37 37 38 2c 32 31 2e 30 30 34 20 34 2e 37 37 34 2c 32 32 20 36 2c 32 32 43 37 2e 32 32 36 2c 32 32 20 38 2e 32 32 32 2c 32 31 2e 30 30 34 20 38 2e 32 32 32 2c 31 39 2e 37 37 38 4c 38 2e 32 32 32 2c 31 36 2e 34 34 34 43 38 2e 32 32 32 2c 31 35 2e 32 31 38 20 37 2e 32 32 36 2c 31 34 2e 32 32 32 20 36 2c 31 34 2e 32 32 32 4c 36 2c 37 2e 35 35 36 43 36 2c 35 2e 37 32 37 Data Ascii: ;\">\n <rect id=\"Bungeecord\" x=\"-0\" y=\"0\" width=\"24\" height=\"24\" style=\"fill:none;\"/>\n <path d=\"M3.778,19.778C3.778,21.004 4.774,22 6,22C7.226,22 8.222,21.004 8.222,19.778L8.222,16.444C8.222,15.218 7.226,14.222 6,14.222L6,7.556C6,5.727
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 73 68 61 64 65 72 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 30 20 32 30 5c 22 20 66 69 6c 6c 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 64 3d 5c 22 4d 39 2e 35 30 34 20 31 2e 31 33 32 61 31 20 31 20 30 20 30 31 2e 39 39 32 20 30 6c 31 2e 37 35 20 31 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 20 31 2e 37 33 36 4c 31 30 20 33 2e 31 35 32 6c 2d 31 2e 32 35 34 2e 37 31 36 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 2d 31 2e 37 33 36 6c 31 2e 37 35 2d 31 7a 4d 35 2e 36 31 38 20 34 2e 35 30 34 61 31 20 31 Data Ascii: supported_project_types":["shader","project"]},{"icon":"<svg viewBox=\"0 0 20 20\" fill=\"currentColor\"><path fill-rule=\"evenodd\" d=\"M9.504 1.132a1 1 0 01.992 0l1.75 1a1 1 0 11-.992 1.736L10 3.152l-1.254.716a1 1 0 11-.992-1.736l1.75-1zM5.618 4.504a1 1
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 33 5c 22 20 64 3d 5c 22 6d 38 32 30 20 37 36 31 2d 38 35 2e 36 2d 38 37 2e 36 63 2d 34 2e 36 2d 34 2e 37 2d 31 30 2e 34 2d 39 2e 36 2d 32 35 2e 39 20 31 2d 31 39 2e 39 20 31 33 2e 36 2d 38 2e 34 20 32 31 2e 39 2d 35 2e 32 20 32 35 2e 34 20 38 2e 32 20 39 20 38 34 2e 31 20 38 39 20 39 37 2e 32 20 31 30 34 20 32 2e 35 20 32 2e 38 2d 32 30 2e 33 2d 32 32 2e 35 2d 36 2e 35 2d 33 39 2e 37 20 35 2e 34 2d 37 20 31 38 2d 31 32 20 32 36 2d 33 20 36 2e 35 20 37 2e 33 20 31 30 2e 37 20 31 38 2d 33 2e 34 20 32 39 2e 37 2d 32 34 2e 37 20 32 30 2e 34 2d 31 30 32 20 38 32 2e 34 2d 31 32 37 20 31 30 33 2d 31 32 2e 35 20 31 30 2e 33 2d 32 38 2e 35 20 32 2e 33 2d 33 35 2e 38 2d Data Ascii: "currentColor\" stroke-width=\"23\" d=\"m820 761-85.6-87.6c-4.6-4.7-10.4-9.6-25.9 1-19.9 13.6-8.4 21.9-5.2 25.4 8.2 9 84.1 89 97.2 104 2.5 2.8-20.3-22.5-6.5-39.7 5.4-7 18-12 26-3 6.5 7.3 10.7 18-3.4 29.7-24.7 20.4-102 82.4-127 103-12.5 10.3-28.5 2.3-35.8-
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 6d 32 32 2e 35 39 20 31 32 2e 30 31 33 2d 33 2e 30 31 20 33 2e 31 32 36 76 34 2e 34 30 35 6c 2e 30 30 35 2e 30 31 39 2d 34 2e 32 35 31 2d 2e 30 30 35 2d 32 2e 39 39 34 20 33 2e 31 31 35 68 2d 2e 30 30 33 6c 2d 33 2e 30 30 33 2d 33 2e 31 33 32 48 35 2e 31 6c 2d 2e 30 31 38 2e 30 30 35 2e 30 30 35 2d 34 2e 34 32 34 2d 32 2e 39 39 34 2d 33 2e 31 31 36 2d 2e 30 30 33 2d 2e 30 32 33 4c 35 2e 31 20 38 2e 38 35 38 56 34 2e 34 35 32 6c 2d 2e 30 30 35 2d 2e 30 31 39 20 34 2e 32 35 32 2e 30 30 35 20 32 2e 39 39 33 2d 33 2e 31 31 35 68 2e 30 30 Data Ascii: 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><path d=\"m22.59 12.013-3.01 3.126v4.405l.005.019-4.251-.005-2.994 3.115h-.003l-3.003-3.132H5.1l-.018.005.005-4.424-2.994-3.116-.003-.023L5.1 8.858V4.452l-.005-.019 4.252.005 2.993-3.115h.00
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6c 69 74 65 6c 6f 61 64 65 72 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 6d 6f 64 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 30 20 32 30 5c 22 20 66 69 6c 6c 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 64 3d 5c 22 4d 39 2e 35 30 34 20 31 2e 31 33 32 61 31 20 31 20 30 20 30 31 2e 39 39 32 20 30 6c 31 2e 37 35 20 31 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 20 31 2e 37 33 36 4c 31 30 20 33 2e 31 35 32 6c 2d 31 2e 32 35 34 2e 37 31 36 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 2d 31 2e 37 33 Data Ascii: /svg>","name":"liteloader","supported_project_types":["mod","project"]},{"icon":"<svg viewBox=\"0 0 20 20\" fill=\"currentColor\"><path fill-rule=\"evenodd\" d=\"M9.504 1.132a1 1 0 01.992 0l1.75 1a1 1 0 11-.992 1.736L10 3.152l-1.254.716a1 1 0 11-.992-1.73
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 35 68 31 2e 35 56 36 68 33 2e 38 76 31 32 48 39 2e 37 76 2d 35 2e 33 48 39 76 31 2e 35 48 36 76 2d 31 2e 35 68 2d 2e 38 56 31 38 48 31 2e 34 7a 6d 31 32 2e 31 20 30 56 36 68 33 2e 38 76 39 68 35 2e 33 76 33 68 2d 39 2e 31 7a 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6d 6f 64 6c 6f 61 64 65 72 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 6d 6f 64 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 5c 22 6e 65 77 20 30 20 30 20 32 34 20 32 34 5c 22 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 31 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 78 6d 6c 3a 73 70 61 63 65 3d 5c 22 70 72 65 73 Data Ascii: 5h1.5V6h3.8v12H9.7v-5.3H9v1.5H6v-1.5h-.8V18H1.4zm12.1 0V6h3.8v9h5.3v3h-9.1z\"/></svg>","name":"modloader","supported_project_types":["mod","project"]},{"icon":"<svg enable-background=\"new 0 0 24 24\" version=\"1.1\" viewBox=\"0 0 24 24\" xml:space=\"pres
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 32 2e 35 20 30 20 30 20 30 2d 32 2e 35 20 32 2e 35 76 35 2e 35 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 32 2e 35 20 32 2e 35 68 31 2e 33 32 39 63 31 2e 33 37 39 20 30 20 32 2e 35 2d 31 2e 31 32 20 32 2e 35 2d 32 2e 35 76 2d 35 2e 35 39 5a 4d 31 34 2e 37 39 33 20 31 37 2e 32 39 35 76 2d 39 2e 33 34 61 31 2e 32 35 32 20 31 2e 32 35 32 20 30 20 30 20 31 20 31 2e 32 35 2d 31 2e 32 35 68 33 2e 33 30 31 4d 31 38 2e 30 30 37 20 31 30 2e 39 39 37 68 2d 33 2e 32 31 34 5c 22 20 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6f 70 74 69 66 69 6e 65 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 73 68 61 64 65 72 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 78 6d 6c 3a 73 Data Ascii: 2.5 0 0 0-2.5 2.5v5.59a2.5 2.5 0 0 0 2.5 2.5h1.329c1.379 0 2.5-1.12 2.5-2.5v-5.59ZM14.793 17.295v-9.34a1.252 1.252 0 0 1 1.25-1.25h3.301M18.007 10.997h-3.214\" /></svg>","name":"optifine","supported_project_types":["shader","project"]},{"icon":"<svg xml:s
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 31 2e 37 37 5c 22 20 64 3d 5c 22 6d 32 37 32 20 33 38 2e 33 37 2d 38 20 34 2e 34 32 2d 38 2d 34 2e 34 32 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2e 31 32 35 20 30 20 30 20 31 2e 31 33 37 32 20 2d 32 38 35 20 2d 33 31 2e 36 39 29 5c 22 3e 3c 2f 70 61 74 68 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 31 2e 37 37 5c 22 20 64 3d 5c 22 6d 32 36 30 20 33 31 2e 39 35 20 38 20 34 2e 32 31 56 34 35 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2e 31 32 35 20 30 20 30 20 31 2e 31 33 37 32 20 2d 32 38 35 20 2d 33 31 Data Ascii: \" stroke-width=\"1.77\" d=\"m272 38.37-8 4.42-8-4.42\" transform=\"matrix(1.125 0 0 1.1372 -285 -31.69)\"></path>\n <path fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.77\" d=\"m260 31.95 8 4.21V45\" transform=\"matrix(1.125 0 0 1.1372 -285 -31
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 5c 22 23 71 75 69 6c 74 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 36 35 2e 36 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 2e 30 33 30 35 33 20 30 20 30 20 2e 30 33 30 34 36 20 2d 33 2e 32 20 37 29 5c 22 3e 3c 2f 75 73 65 3e 5c 6e 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 5c 22 23 71 75 69 6c 74 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 36 35 2e 36 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 2e 30 33 30 35 33 20 30 20 30 20 2e 30 33 30 34 36 20 36 2e 39 20 2d 33 2e 32 29 5c 22 3e 3c 2f 75 73 65 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 Data Ascii: xlink:href=\"#quilt\" stroke-width=\"65.6\" transform=\"matrix(.03053 0 0 .03046 -3.2 7)\"></use>\n <use xlink:href=\"#quilt\" stroke-width=\"65.6\" transform=\"matrix(.03053 0 0 .03046 6.9 -3.2)\"></use>\n <path fill=\"none\" stroke=\"currentColor\" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	140	OUT	GET /fabric/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:25 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Content-Length: 40358 Connection: close ETag: "541fc5d3f7d62b4fa855a065ad80f6bc" Last-Modified: Thu, 11 Jul 2024 20:12:19 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 8501 Expires: Sat, 27 Jul 2024 00:26:25 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8022bdb7d1a-EWR
2024-07-26 19:26:25 UTC	839	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 24 7b 6d 6f 64 72 69 6e 74 68 2e 67 61 6d 65 56 65 72 73 69 6f 6e 7d 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 30 2e 31 36 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 36 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 31 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 31 31 2e 6a 73 6f 6e 22 2c 22 73 74 Data Ascii: {"gameVersions":[{"id":"${modrinth.gameVersion}","stable":true,"loaders":[{"id":"0.16.0","url":"https://meta.modrinth.com/fabric/v0/versions/0.16.0.json","stable":false},{"id":"0.15.11","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.11.json","st
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 Data Ascii: },{"id":"0.15.4","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.4.json","stable":false},{"id":"0.15.3","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.3.json","stable":true},{"id":"0.15.2","url":"https://meta.modrinth.com/fabric/v0/vers
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2e 31 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e Data Ascii: .16","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.16.json","stable":false},{"id":"0.14.15","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.15.json","stable":false},{"id":"0.14.14","url":"https://meta.modrinth.com/fabric/v0/versions/0.
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 Data Ascii: https://meta.modrinth.com/fabric/v0/versions/0.14.2.json","stable":false},{"id":"0.14.1","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.1.json","stable":false},{"id":"0.14.0","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.0.json","stab
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 32 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 32 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 Data Ascii: th.com/fabric/v0/versions/0.12.5.json","stable":false},{"id":"0.12.4","url":"https://meta.modrinth.com/fabric/v0/versions/0.12.4.json","stable":false},{"id":"0.12.3","url":"https://meta.modrinth.com/fabric/v0/versions/0.12.3.json","stable":false},{"id":"0
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2f 30 2e 31 30 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 30 2e 36 2b 62 75 69 6c 64 2e 32 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 30 2e 36 2b 62 75 69 6c 64 2e 32 31 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 30 2e 35 2b 62 75 69 6c 64 2e 32 31 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 30 2e 35 2b 62 75 69 6c 64 2e 32 31 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a Data Ascii: /0.10.7.json","stable":false},{"id":"0.10.6+build.214","url":"https://meta.modrinth.com/fabric/v0/versions/0.10.6+build.214.json","stable":false},{"id":"0.10.5+build.213","url":"https://meta.modrinth.com/fabric/v0/versions/0.10.5+build.213.json","stable":
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 69 6f 6e 73 2f 30 2e 38 2e 39 2b 62 75 69 6c 64 2e 32 30 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 38 2e 38 2b 62 75 69 6c 64 2e 32 30 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 38 2e 38 2b 62 75 69 6c 64 2e 32 30 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 38 2e 37 2b 62 75 69 6c 64 2e 32 30 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 38 2e 37 2b 62 75 69 6c 64 2e 32 30 31 2e 6a 73 6f 6e 22 2c Data Ascii: ions/0.8.9+build.203.json","stable":false},{"id":"0.8.8+build.202","url":"https://meta.modrinth.com/fabric/v0/versions/0.8.8+build.202.json","stable":false},{"id":"0.8.7+build.201","url":"https://meta.modrinth.com/fabric/v0/versions/0.8.7+build.201.json",
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 37 2e 6a 73 6f 6e 22 Data Ascii: sions/0.7.8+build.189.json","stable":false},{"id":"0.7.8+build.188","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.8+build.188.json","stable":false},{"id":"0.7.8+build.187","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.8+build.187.json"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 69 6f 6e 73 2f 30 2e 37 2e 34 2b 62 75 69 6c 64 2e 31 37 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 33 2b 62 75 69 6c 64 2e 31 37 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 33 2b 62 75 69 6c 64 2e 31 37 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 32 2b 62 75 69 6c 64 2e 31 37 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 32 2b 62 75 69 6c 64 2e 31 37 35 2e 6a 73 6f 6e 22 2c Data Ascii: ions/0.7.4+build.177.json","stable":false},{"id":"0.7.3+build.176","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.3+build.176.json","stable":false},{"id":"0.7.2+build.175","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.2+build.175.json",
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6f 6e 73 2f 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 36 2e 30 2b 62 75 69 6c 64 2e 31 36 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 36 2e 30 2b 62 75 69 6c 64 2e 31 36 33 2e 6a 73 6f 6e 22 2c 22 Data Ascii: ons/0.6.1+build.165.json","stable":false},{"id":"0.6.1+build.164","url":"https://meta.modrinth.com/fabric/v0/versions/0.6.1+build.164.json","stable":false},{"id":"0.6.0+build.163","url":"https://meta.modrinth.com/fabric/v0/versions/0.6.0+build.163.json","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	137	OUT	GET /neo/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:25 UTC	531	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Content-Length: 72865 Connection: close ETag: "876d84ecb400bb2676123fdc2d29e761" Last-Modified: Fri, 26 Jul 2024 10:14:26 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13548 Expires: Sat, 27 Jul 2024 00:26:25 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8025ac90f49-EWR
2024-07-26 19:26:25 UTC	838	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 31 2e 30 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 Data Ascii: {"gameVersions":[{"id":"1.21.0","stable":true,"loaders":[{"id":"21.0.139-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.139-beta.json","stable":false},{"id":"21.0.138-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 31 33 33 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 32 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 32 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 31 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 Data Ascii: 133-beta.json","stable":false},{"id":"21.0.132-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.132-beta.json","stable":false},{"id":"21.0.131-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.131-beta.json","stable"
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 32 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 32 30 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 32 30 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 31 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e Data Ascii: versions/neoforge-21.0.121-beta.json","stable":false},{"id":"21.0.120-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.120-beta.json","stable":false},{"id":"21.0.119-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 30 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 30 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 30 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 30 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f Data Ascii: ta.modrinth.com/neo/v0/versions/neoforge-21.0.107-beta.json","stable":false},{"id":"21.0.109-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.109-beta.json","stable":false},{"id":"21.0.108-beta","url":"https://meta.modrinth.com/neo/v0/
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 39 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 39 36 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 39 36 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 39 35 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e Data Ascii: ,"url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.97-beta.json","stable":false},{"id":"21.0.96-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.96-beta.json","stable":false},{"id":"21.0.95-beta","url":"https://meta.modrin
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 38 35 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 38 34 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 38 34 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 38 33 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 Data Ascii: "url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.85-beta.json","stable":false},{"id":"21.0.84-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.84-beta.json","stable":false},{"id":"21.0.83-beta","url":"https://meta.modrint
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 37 34 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 37 32 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 37 32 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 37 31 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 Data Ascii: url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.74-beta.json","stable":false},{"id":"21.0.72-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.72-beta.json","stable":false},{"id":"21.0.71-beta","url":"https://meta.modrinth
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 36 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 36 30 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 36 30 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 35 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e Data Ascii: rl":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.61-beta.json","stable":false},{"id":"21.0.60-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.60-beta.json","stable":false},{"id":"21.0.59-beta","url":"https://meta.modrinth.
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 34 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 34 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 34 38 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 34 37 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 Data Ascii: l":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.49-beta.json","stable":false},{"id":"21.0.48-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.48-beta.json","stable":false},{"id":"21.0.47-beta","url":"https://meta.modrinth.c
2024-07-26 19:26:25 UTC	1369	IN	Data Raw: 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 33 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 33 36 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 33 36 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 33 35 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f Data Ascii: ":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.37-beta.json","stable":false},{"id":"21.0.36-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.36-beta.json","stable":false},{"id":"21.0.35-beta","url":"https://meta.modrinth.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	138	OUT	GET /v2/tag/donation_platform HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:25 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 297 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8023cb9439c-EWR
2024-07-26 19:26:25 UTC	231	IN	Data Raw: 65 31 0d 0a 5b 7b 22 73 68 6f 72 74 22 3a 22 70 61 74 72 65 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 50 61 74 72 65 6f 6e 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 62 6d 61 63 22 2c 22 6e 61 6d 65 22 3a 22 42 75 79 20 4d 65 20 41 20 43 6f 66 66 65 65 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 70 61 79 70 61 6c 22 2c 22 6e 61 6d 65 22 3a 22 50 61 79 50 61 6c 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 67 69 74 68 75 62 22 2c 22 6e 61 6d 65 22 3a 22 47 69 74 48 75 62 20 53 70 6f 6e 73 6f 72 73 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 6b 6f 2d 66 69 22 2c 22 6e 61 6d 65 22 3a 22 4b 6f 2d 66 69 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 6f 74 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 4f 74 68 65 72 22 7d 5d 0d 0a Data Ascii: e1[{"short":"patreon","name":"Patreon"},{"short":"bmac","name":"Buy Me A Coffee"},{"short":"paypal","name":"PayPal"},{"short":"github","name":"GitHub Sponsors"},{"short":"ko-fi","name":"Ko-fi"},{"short":"other","name":"Other"}]
2024-07-26 19:26:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:25 UTC	132	OUT	GET /v2/tag/report_type HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:25 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 295 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8025a377ca2-EWR
2024-07-26 19:26:25 UTC	117	IN	Data Raw: 36 66 0d 0a 5b 22 73 70 61 6d 22 2c 22 63 6f 70 79 72 69 67 68 74 22 2c 22 69 6e 61 70 70 72 6f 70 72 69 61 74 65 22 2c 22 6d 61 6c 69 63 69 6f 75 73 22 2c 22 6e 61 6d 65 2d 73 71 75 61 74 74 69 6e 67 22 2c 22 70 6f 6f 72 20 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 69 6e 76 61 6c 69 64 20 6d 65 74 61 64 61 74 61 22 2c 22 6f 74 68 65 72 22 5d 0d 0a Data Ascii: 6f["spam","copyright","inappropriate","malicious","name-squatting","poor description","invalid metadata","other"]
2024-07-26 19:26:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49760	172.64.41.3	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:26 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-07-26 19:26:26 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-07-26 19:26:27 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 26 Jul 2024 19:26:27 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8a96c80ac8cf8c99-EWR alt-svc: h3=":443"; ma=86400
2024-07-26 19:26:27 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 15 00 04 8e fb 23 a3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom#)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	172.64.41.3	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:27 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-07-26 19:26:27 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-07-26 19:26:27 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 26 Jul 2024 19:26:27 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8a96c80b7dd27290-EWR alt-svc: h3=":443"; ma=86400
2024-07-26 19:26:27 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 e7 00 04 8e fb 28 e3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:27 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:27 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:27 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6490 Expires: Mon, 26 Aug 2024 19:26:27 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c80e0b4f43df-EWR
2024-07-26 19:26:27 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:27 UTC	651	OUT	GET /fonts/inter/Inter-Regular.woff2?v=3.19 HTTP/1.1 Host: cdn-raw.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://tauri.localhost sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:27 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:27 GMT Content-Type: font/woff2 Content-Length: 98868 Connection: close ETag: "dc131113894217b5031000575d9de002" Last-Modified: Sun, 23 Oct 2022 06:11:16 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4721 Expires: Mon, 26 Aug 2024 19:26:27 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Allow: * Server: cloudflare CF-RAY: 8a96c80f5a7f7287-EWR
2024-07-26 19:26:27 UTC	737	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 82 34 00 0d 00 00 00 04 9e c8 00 01 81 d6 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 0c 1b 84 a6 46 1c 81 aa 4a 06 60 00 81 cb 0a 0a 88 a0 1c 86 eb 39 0b cf 54 00 01 36 02 24 03 cf 4e 04 20 05 8c 72 07 81 c9 2d 5b a5 1b b4 d6 4a 6c db dd 92 5c 5a 20 38 99 9e 0a 42 fc 4a 11 04 05 f1 d3 39 a4 12 6d b1 00 6e 4e b7 fb ef 67 11 95 8c b9 3f 5e 08 41 44 21 d0 ea 18 a2 03 13 09 4a a7 75 fe 59 57 a8 73 7f 84 29 95 ce 5b d4 4a 84 3c d2 ec ff ff ff ff ff ff ff ff ff ff ff ff ff 6f 24 f9 cf a3 9b 7f ee 7d c9 79 23 2f 21 61 05 09 01 8a 82 28 08 32 b4 56 ed 58 fa 47 0b 6a 24 ac a3 f0 21 64 31 2f 3a c8 50 96 55 97 f0 28 d1 43 1f 0e 31 a0 33 18 f6 b3 2c ab 47 b0 17 59 01 27 a2 1b 5c f4 c7 88 f0 cd 24 73 1e Data Ascii: wOF24FJ`9T6$N r-[Jl\Z 8BJ9mnNg?^AD!JuYWs)[J<o$}y#/!a(2VXGj$!d1/:PU(C13,GY'\$s
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 9b ba 3f cb 87 78 f7 76 91 c8 13 76 ca b2 80 d5 bd fe 2e 7a 27 6b 36 c0 3f 9f d3 79 7e 98 63 25 be 9f 96 e8 3e 0b ff 5b 25 53 18 f1 e1 28 8f e9 6b f9 7b 8e 17 fc db 2b fa bd 0e 0e c8 d4 9c 29 73 e2 3d fe f7 bf 7f 10 21 f1 2b 1a db ea b4 93 37 43 07 a7 ec 2f 86 1e 47 2f 1f ba 96 cc 88 d0 21 58 3a 94 9c 14 36 2b 2d 85 8d 2c 3c bd c8 1d 26 fa 1f 34 bd 18 c4 df 14 5e e3 53 2e a6 7f 45 3e 7c 47 69 30 d1 7f 99 df 9b 3f a9 3f 5e af 9a 72 f4 4d c4 f4 45 b5 c3 f8 33 46 54 08 26 3b 8d e9 39 a5 bf ca f3 3c 97 1f 53 77 2d 3a ca c6 66 f6 7a 39 13 7d 3d 4b 6e 9b dc e9 f5 d8 f4 8f 22 26 17 13 dc 38 ff a6 8c 5e 73 f9 6d 66 fc 42 95 c9 39 bd d2 bf a6 6f 68 de 4f 9f 17 8d 32 d6 df 0d 6c 6a 7c 12 23 1a 55 18 48 27 9d 15 16 7b f5 60 d4 8a 82 58 bf 1f bd 07 d9 65 20 1c 41 5a Data Ascii: ?xvv.z'k6?y~c%>[%S(k{+)s=!+7C/G/!X:6+-,<&4^S.E>\|Gi0??^rME3FT&;9<Sw-:fz9}=Kn"&8^smfB9ohO2lj\|#UH'{`Xe AZ
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 54 cb 2b e4 b6 2c 47 9e 9c a4 96 26 be 40 f1 80 ea ab 02 11 b2 31 7c 3e 68 42 3c 3f ee fb b7 f7 e1 ce 59 58 69 1d 41 34 46 32 c1 a1 6f 92 92 10 f7 3b ca 4d 44 26 22 fa fa 23 88 c1 79 a1 b6 f9 22 07 7f f3 33 45 42 fa 6e 5b df 99 69 d1 10 ce 5c 69 a1 81 13 f5 bf 99 52 68 21 33 f7 c3 b1 d6 da f4 64 6a ff c4 4e 23 a4 06 0a c3 09 da 38 f6 f7 09 ba db 10 7b dd 57 e9 b6 2e bc d3 bb f0 df ff a5 f7 6c 40 03 60 0b 1e b1 88 c4 b0 5a e9 f3 e6 cf ce 4f ba f5 c1 79 25 b6 0b 33 0e 87 76 c6 80 33 5a 7d c0 00 07 fc 6a 0c 52 17 42 e3 33 0b 28 6f c9 d8 10 b5 55 5f 9e a7 2e b6 2b d0 4c 10 84 e1 49 7e 90 25 07 b8 d0 f8 e2 e1 02 86 87 11 06 18 e1 82 f4 5f a1 00 15 15 58 80 52 30 36 41 f7 bd 0b 93 a1 24 e1 7d 5c 3d bf 73 3b 9d 36 69 61 d7 5f 09 14 28 8b 70 0e 23 31 f2 ad 8d d5 Data Ascii: T+,G&@1\|>hB<?YXiA4F2o;MD&"#y"3EBn[i\iRh!3djN#8{W.l@`ZOy%3v3Z}jRB3(oU_.+LI~%_XR06A$}\=s;6ia_(p#1
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: e6 f0 64 cf 6c 12 42 08 21 44 53 14 4d d3 08 59 4b 89 b7 8c 4e f2 94 52 64 1b 66 f6 85 3c 8d 40 21 10 0d f2 d3 20 ea 3a c8 b6 ba 01 e3 f5 0f ae b0 a9 8d 15 a9 a0 60 14 25 2a 17 db 70 36 93 77 c1 02 a4 04 28 75 ba 6e 7f ff 23 73 6f 67 3f d8 f6 c6 fa dd d6 af 2c 19 82 0c 13 48 42 c6 7a 8c 3b ac 2e b4 5f 32 d0 c3 6a 4d 51 98 53 0f f5 22 ac d5 4a b3 ba c7 21 7f c7 89 2a 53 08 63 84 10 37 b7 cb 2a e5 c7 db 77 0f 02 18 3d 18 ab ff 04 84 24 84 4f f7 2c 6f 6f e3 0f ba b2 44 7a 36 c9 4b 9c b0 35 f0 ff c6 d1 54 22 60 5a 1d 56 1d 64 59 62 75 d0 64 0e 84 f9 98 8a b0 1d d2 ec 84 36 a7 0d 76 9d 83 3c a7 9a 02 d5 93 e1 5f b9 06 90 19 8d 6a 07 ba 5d ba 5c 30 e4 86 51 b7 8c b9 63 c2 03 9b be 6a ab 94 8f 11 40 12 82 22 54 ba d0 99 85 95 3b 03 01 4c 04 03 0b f7 97 ea d0 6a Data Ascii: dlB!DSMYKNRdf<@! :`%p6w(un#sog?,HBz;._2jMQS"J!Sc7*w=$O,ooDz6K5T"`ZVdYbud6v<_j]\0Qcj@"T;Lj
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 1f 6e 5f b8 07 ce b5 8f 75 67 72 a9 a3 8e 65 57 80 63 5c 29 50 3a d5 cd 0a 54 b2 19 3d da cf 62 df 9d 35 e5 88 cb 3f d4 9d 5c e2 fe c3 25 de 07 b3 e2 ee ad 02 3e fa 2f aa 54 83 6c 82 1c 2b f9 09 73 69 28 d7 f3 a5 cd c6 67 12 08 22 51 16 0f b3 3a 5b 53 97 5b c4 c3 53 d3 ad 19 67 c7 9f d1 06 a7 16 b9 ba 35 82 3a 83 0a 79 78 c3 41 ed a5 4d 83 6b 8e 52 f2 48 61 f4 df 9f 50 39 33 69 0f fc c8 9c d1 d4 22 87 cd 7c 56 5c 33 ae c9 3a 60 72 fe d3 74 dd d2 c4 1d fe aa 8b 98 88 90 24 1d 5b 37 a9 db 61 8c e9 85 60 e0 0c 96 21 84 43 c3 e1 ec db 77 51 46 ac 91 cc 75 18 59 c6 4e e3 90 51 e8 44 ef 29 fb 55 54 6a 56 ce 49 7c c7 98 f7 61 51 a0 aa fc 7b 0e 91 3e 8b 3c a7 58 75 5b cc dd dc 36 93 22 33 df 76 97 46 d2 f6 bf a3 0a e3 7f a9 88 02 84 13 e1 a2 65 66 8c ca bf 27 15 Data Ascii: n_ugreWc\)P:T=b5?\%>/Tl+si(g"Q:[S[Sg5:yxAMkRHaP93i"\|V\3:`rt$[7a`!CwQFuYNQD)UTjVI\|aQ{><Xu[6"3vFef'
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 06 ae 34 08 5a 19 fa bd 18 7c b1 57 4e 5f b5 0a 64 e8 4e 13 51 2a 43 90 09 d9 2d 04 8a 41 15 00 85 80 03 bc 2a 5b a9 72 dc 2e fe 0c 36 c3 05 44 68 06 0e e1 7a 5d 2f d3 ba d8 5e d5 89 f5 d6 65 a0 e1 8e 53 cd 05 19 2a 53 90 ad 10 52 98 52 05 82 c2 00 d7 b8 72 ab bd a8 44 44 34 ab 85 a1 0c e0 1b cc 90 0c 1b 31 4a b0 17 66 c2 a4 29 42 d3 e6 cc 97 85 e3 ca ad 33 cf 25 d8 bb 37 d6 fb b6 21 ee af ce bc a4 fc ba 21 98 37 32 57 cf fa bd 77 0e 73 35 33 33 33 33 7f cd 5d 22 98 99 b9 fa e3 9c f9 73 9d df 1d f3 71 2e 2f 76 fa 0e 2d a7 78 13 9c 94 2a 53 81 88 84 82 7a 44 3b 92 9a b1 ab 4b 31 04 35 c0 22 6c 76 6f b1 4e a4 06 5c 9e 9e 94 08 a2 e9 7c a5 9a c3 b9 23 03 75 b4 b4 f9 23 73 10 7c 56 c8 ea 80 2b 03 e7 ca aa e8 a1 62 e8 2a b1 e2 40 c4 4b 90 28 49 b2 14 a9 a0 be Data Ascii: 4Z\|WN_dNQC-A[r.6Dhz]/^eSSRRrDD41Jf)B3%7!!72Wws53333]"sq./v-xSzD;K15"lvoN\\|#u#s\|V+b*@K(I
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 98 a3 1b d3 2f d6 21 0c 62 8c 06 2f 76 87 2e e8 63 ee 3d a1 aa 63 d8 23 4b b5 a9 82 81 21 77 03 99 bb 44 c2 23 d2 28 2d 28 a3 32 f6 27 97 5b 5b f5 dd ba ef 11 e6 e5 9f 85 11 72 4f 69 be 79 38 ed 8e a8 92 ca 9c 56 bb bf 0a 10 da 37 10 07 c5 79 27 67 be 03 34 13 1a 66 22 23 6f 48 8e f1 4e a7 ac 76 43 49 45 bb 8b 06 cd 5d 02 04 3c f7 27 b9 93 03 f6 f8 f4 23 51 2c 3f 7e fd 01 20 04 23 28 86 13 24 45 33 2c c7 0b a2 24 2b aa a6 1b a6 65 3b ae 87 9c 20 29 9a 61 01 44 98 e3 05 51 92 15 55 d3 0d d3 b2 1d d7 1b 9f 0c 77 ff 02 d8 ec 0e 27 08 71 bc 20 4a b2 a2 6a ba 61 5a 08 16 15 40 84 09 65 9a 6e 70 53 58 b6 23 5d 0f 19 00 42 30 4a a5 d1 19 4c 16 c7 64 b6 58 6d 76 87 d3 e5 f6 78 7d 7e 84 2d 36 87 cb e3 0b 84 22 b1 44 2a 93 2b 94 2a b5 2d b6 da 66 bb 1d 3f aa ea ee Data Ascii: /!b/v.c=c#K!wD#(-(2'[[rOiy8V7y'g4f"#oHNvCIE]<'#Q,?~ #($E3,$+e; )aDQUw'q JjaZ@enpSX#]B0JLdXmvx}~-6"D+-f?
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: ad 1c a6 02 51 33 0e 05 e1 4e 7b 10 85 ad 94 29 43 ac ac 22 0f a5 15 5b 66 8f 5a 7f 98 f6 aa 0e e9 8e 63 0f 52 32 55 5e 98 1a 28 b8 03 90 20 b1 d8 04 90 aa 32 ba ca 64 38 0b 6d 2d 23 16 52 05 82 42 c0 49 cf 12 74 a6 63 cb 84 80 08 cd c0 21 dc 71 12 2a 60 53 32 e1 c3 32 04 66 a8 f4 1b 6b 3a 14 68 3d ee dd 5b 32 26 ce a0 a2 b2 98 7a 07 e2 d1 e5 70 42 1e 51 e9 ff ad 6d c5 d9 6a 0a e2 b5 14 b2 57 f6 a5 41 5a 7e c4 7d 79 a8 5e 85 d8 6b c1 42 84 7a e3 ad 77 de fb d7 07 ff 09 f3 51 b8 4f d7 88 cd 9f f4 15 9b aa bf 2b c2 9d 3f 34 07 ea f4 f2 85 37 d5 c7 7c 9d f2 b7 7f f8 39 cd df 19 01 ce 3a e7 7c 5f d0 97 9f 65 63 8b f7 83 35 f1 36 8d 1a 9d 17 68 f9 30 0a 60 15 2a 52 0c 07 8f a0 44 a9 32 e5 2a 10 91 90 55 a2 84 7a 97 ca 5a bd 61 47 9c c3 36 ee 84 97 d4 25 4c b8 Data Ascii: Q3N{)C"[fZcR2U^( 2d8m-#RBItc!q`S22fk:h=[2&zpBQmjWAZ~}y^kBzwQO+?47\|9:\|_ec56h0`RD2*UzZaG6%L
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: 9c 3e ae 13 cc 1c d6 79 2c 8f fc 0d 47 cf 3d 5a a5 40 0a 2b 72 80 3c 28 90 43 8b 0e f8 b9 bb 72 8a 4f b5 b1 07 e7 de a8 32 64 46 04 08 87 a6 0a 5d 35 86 1a 4c b5 ea d4 63 69 c0 d6 a8 49 33 0e 2e 9e 0e 2a 2d d4 c5 ed 3f 5c 4c f2 0a 17 be 2a 5a 60 31 dc 42 b3 2e c3 b0 77 7d ae 5e 17 04 07 ef a4 2a 8b 22 10 11 42 46 0d 2c ca d6 a6 bc 53 e6 05 69 31 ae 11 ff 29 88 70 94 84 02 d2 32 5d 87 8d 52 27 74 5d 01 2b a8 44 bc 2b 0b 80 ab a2 f8 29 a9 c6 09 13 bd 2d bd 8d b7 e1 8e df 43 a8 af e9 42 90 ac 41 60 eb 85 6c 64 fc a8 81 db 25 9d 85 86 6b ae 49 aa e4 71 e9 09 fb de ab 1e fd 17 07 4c 62 1d 94 03 20 a4 5f 77 45 e0 6c 6f f1 91 0c 2d 0d cf 05 e5 fa b5 dd 52 c7 6f 1d 6d d1 4c b6 74 9c 02 8c f3 2b 63 23 03 7a 9e e0 62 3c 46 0a a2 24 2b 2c 84 60 04 c5 70 82 a4 68 86 Data Ascii: >y,G=Z@+r<(CrO2dF]5LciI3.-?\LZ`1B.w}^*"BF,Si1)p2]R't]+D+)-CBA`ld%kIqLb _wElo-RomLt+c#zb<F$+,`ph
2024-07-26 19:26:27 UTC	1369	IN	Data Raw: fa 42 11 3e 0f a8 6e 36 dd 26 87 ed c4 43 27 f3 b7 00 36 bb c3 09 42 30 82 62 38 41 52 34 c3 72 bc 20 4a b2 a2 6a ba 61 5a 1e 55 45 05 10 61 42 99 a6 1b dc 14 96 ed 48 d7 3b be 9d 29 00 00 00 00 d7 3a 27 b0 81 ff 6a 81 40 a2 d0 18 ec 50 4a cf 12 df a0 21 c3 46 8c 12 18 33 6e c2 a4 29 42 d3 e6 cc 5b 18 bf d0 67 b6 3a ba 7a fa 06 86 46 c6 2d ab 4c ee 61 13 a5 2d 72 d4 c7 0b 2c 47 c3 c9 c6 16 1a 92 cf 4e 58 c4 6a d5 ab d8 56 4c 59 2f 5a 31 ec d7 2b 73 73 55 48 5c f5 c9 5a 0d 02 57 6b ee 20 c6 ad 4e 45 d7 d1 db c5 60 fd e3 76 5a 5b 47 2c f7 bf e4 bd 4b 4f ef c2 f3 56 5e 78 36 7f a0 86 8b 15 1e 1b 8e af 42 72 63 82 67 77 9d 72 3a 07 7b 33 95 3c 09 6d b7 5f fd 16 66 69 d2 7b 46 a6 52 76 c9 26 39 3d 70 82 20 a8 4a 1e d0 c9 27 98 39 05 51 98 22 14 c3 c1 1f 90 74 Data Ascii: B>n6&C'6B0b8AR4r JjaZUEaBH;):'j@PJ!F3n)B[g:zF-La-r,GNXjVLY/Z1+ssUH\ZWk NE`vZ[G,KOV^x6Brcgwr:{3<m_fi{FRv&9=p J'9Q"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:28 UTC	132	OUT	GET /v2/tag/report_type HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:28 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 300 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8141af24269-EWR
2024-07-26 19:26:28 UTC	117	IN	Data Raw: 36 66 0d 0a 5b 22 73 70 61 6d 22 2c 22 63 6f 70 79 72 69 67 68 74 22 2c 22 69 6e 61 70 70 72 6f 70 72 69 61 74 65 22 2c 22 6d 61 6c 69 63 69 6f 75 73 22 2c 22 6e 61 6d 65 2d 73 71 75 61 74 74 69 6e 67 22 2c 22 70 6f 6f 72 20 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 69 6e 76 61 6c 69 64 20 6d 65 74 61 64 61 74 61 22 2c 22 6f 74 68 65 72 22 5d 0d 0a Data Ascii: 6f["spam","copyright","inappropriate","malicious","name-squatting","poor description","invalid metadata","other"]
2024-07-26 19:26:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:28 UTC	133	OUT	GET /v2/tag/game_version HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:29 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 300 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8174f138c8f-EWR
2024-07-26 19:26:29 UTC	877	IN	Data Raw: 37 64 39 32 0d 0a 5b 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 30 54 31 32 3a 32 34 3a 30 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 31 2d 70 72 65 34 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 Data Ascii: 7d92[{"version":"1.21","version_type":"release","date":"2024-06-13T08:24:03Z","major":true},{"version":"1.21-rc1","version_type":"snapshot","date":"2024-06-10T12:24:08Z","major":false},{"version":"1.21-pre4","version_type":"snapshot","date":"2024-06-07T
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 34 3a 33 32 3a 34 32 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 39 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 32 3a 31 35 3a 33 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 38 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 31 32 3a 30 38 3a 32 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 36 22 2c 22 76 65 Data Ascii: hot","date":"2024-05-10T14:32:42Z","major":false},{"version":"24w19a","version_type":"snapshot","date":"2024-05-10T12:15:31Z","major":false},{"version":"24w18a","version_type":"snapshot","date":"2024-05-03T12:08:27Z","major":false},{"version":"1.20.6","ve
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6f 6e 22 3a 22 32 34 77 31 33 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 31 34 3a 33 30 3a 32 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 32 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 30 54 31 34 3a 33 38 3a 33 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 34 77 31 31 61 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 31 34 54 31 34 3a 32 31 3a 33 33 5a 22 2c 22 6d 61 6a Data Ascii: on":"24w13a","version_type":"snapshot","date":"2024-03-27T14:30:20Z","major":false},{"version":"24w12a","version_type":"snapshot","date":"2024-03-20T14:38:37Z","major":false},{"version":"24w11a","version_type":"snapshot","date":"2024-03-14T14:21:33Z","maj
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2e 32 30 2e 34 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 30 36 54 31 34 3a 33 38 3a 30 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 30 34 54 31 32 3a 31 30 3a 33 32 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 33 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 33 30 54 31 33 3a 34 31 3a 34 35 5a 22 2c 22 6d 61 Data Ascii: .20.4-rc1","version_type":"snapshot","date":"2023-12-06T14:38:01Z","major":false},{"version":"1.20.3","version_type":"release","date":"2023-12-04T12:10:32Z","major":false},{"version":"1.20.3-rc1","version_type":"snapshot","date":"2023-11-30T13:41:45Z","ma
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 39 2d 32 30 54 30 39 3a 30 32 3a 35 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 39 2d 31 38 54 31 32 3a 33 34 3a 35 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2e 32 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 Data Ascii: r":false},{"version":"1.20.2","version_type":"release","date":"2023-09-20T09:02:57Z","major":true},{"version":"1.20.2-rc2","version_type":"snapshot","date":"2023-09-18T12:34:57Z","major":false},{"version":"1.20.2-rc1","version_type":"snapshot","date":"202
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2d 30 35 2d 33 31 54 31 32 3a 33 33 3a 33 33 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 37 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 35 2d 32 39 54 31 33 3a 34 34 3a 33 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 36 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 35 2d 32 35 54 31 32 3a 32 32 3a 30 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 2d 70 72 65 35 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 Data Ascii: -05-31T12:33:33Z","major":false},{"version":"1.20-pre7","version_type":"snapshot","date":"2023-05-29T13:44:34Z","major":false},{"version":"1.20-pre6","version_type":"snapshot","date":"2023-05-25T12:22:00Z","major":false},{"version":"1.20-pre5","version_ty
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 65 6c 65 61 73 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 34 54 31 32 3a 35 36 3a 31 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 74 72 75 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 34 2d 72 63 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 33 54 31 30 3a 30 33 3a 31 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 34 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 30 33 2d 31 30 54 31 32 3a 34 32 3a 35 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 Data Ascii: release","date":"2023-03-14T12:56:18Z","major":true},{"version":"1.19.4-rc3","version_type":"snapshot","date":"2023-03-13T10:03:11Z","major":false},{"version":"1.19.4-rc2","version_type":"snapshot","date":"2023-03-10T12:42:54Z","major":false},{"version":"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6e 22 3a 22 31 2e 31 39 2e 33 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 32 2d 30 35 54 31 33 3a 32 31 3a 33 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 33 2d 72 63 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 32 2d 30 31 54 31 33 3a 34 35 3a 31 38 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 33 2d 70 72 65 33 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 31 31 2d 32 39 54 31 34 3a Data Ascii: n":"1.19.3-rc2","version_type":"snapshot","date":"2022-12-05T13:21:34Z","major":false},{"version":"1.19.3-rc1","version_type":"snapshot","date":"2022-12-01T13:45:18Z","major":false},{"version":"1.19.3-pre3","version_type":"snapshot","date":"2022-11-29T14:
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 33 35 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 72 63 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 31 54 31 36 3a 32 35 3a 35 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 70 72 65 36 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 37 2d 32 30 54 31 35 3a 34 39 3a 33 31 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 2d 70 72 65 35 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 Data Ascii: 35Z","major":false},{"version":"1.19.1-rc2","version_type":"snapshot","date":"2022-07-21T16:25:50Z","major":false},{"version":"1.19.1-pre6","version_type":"snapshot","date":"2022-07-20T15:49:31Z","major":false},{"version":"1.19.1-pre5","version_type":"sna
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 32 35 54 30 39 3a 35 36 3a 34 37 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2d 70 72 65 32 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 32 33 54 31 34 3a 35 34 3a 30 30 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2d 70 72 65 31 22 2c 22 76 65 72 73 69 6f 6e 5f 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 35 2d 31 38 54 31 33 3a 35 31 3a 35 34 5a 22 2c 22 6d 61 6a 6f 72 22 3a 66 61 6c 73 65 7d 2c 7b 22 76 65 Data Ascii: _type":"snapshot","date":"2022-05-25T09:56:47Z","major":false},{"version":"1.19-pre2","version_type":"snapshot","date":"2022-05-23T14:54:00Z","major":false},{"version":"1.19-pre1","version_type":"snapshot","date":"2022-05-18T13:51:54Z","major":false},{"ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49773	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	139	OUT	GET /quilt/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:29 UTC	531	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Content-Length: 40036 Connection: close ETag: "7d315153e27df1622755617c8a4e379f" Last-Modified: Sun, 14 Jul 2024 18:14:36 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 11317 Expires: Sat, 27 Jul 2024 00:26:29 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817dc9d4213-EWR
2024-07-26 19:26:29 UTC	838	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 24 7b 6d 6f 64 72 69 6e 74 68 2e 67 61 6d 65 56 65 72 73 69 6f 6e 7d 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 30 2e 32 36 2e 34 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 34 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 33 Data Ascii: {"gameVersions":[{"id":"${modrinth.gameVersion}","stable":true,"loaders":[{"id":"0.26.4-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.4-beta.1.json","stable":false},{"id":"0.26.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.3
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 36 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 36 2e 30 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 Data Ascii: ilt/v0/versions/0.26.0-beta.4.json","stable":false},{"id":"0.26.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.0-beta.3.json","stable":false},{"id":"0.26.0-beta.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.26.0-beta.2.json","
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 34 2e 30 2d 62 65 74 61 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 34 2e 30 2d 62 65 74 61 2e 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 34 2e 30 2d 62 65 74 61 2e 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 34 2e 30 2d 62 65 74 61 2e 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 Data Ascii: meta.modrinth.com/quilt/v0/versions/0.24.0-beta.7.json","stable":false},{"id":"0.24.0-beta.6","url":"https://meta.modrinth.com/quilt/v0/versions/0.24.0-beta.6.json","stable":false},{"id":"0.24.0-beta.5","url":"https://meta.modrinth.com/quilt/v0/versions/0
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 32 2e 31 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 32 2e 31 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 32 2e 31 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 32 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f Data Ascii: a.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.22.1-beta.2.json","stable":false},{"id":"0.22.1-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.22.1-beta.1.json","stable":false},{"id":"0.22.0","url":"https://meta.modrinth.com/quilt/
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 31 2e 30 2d 62 65 74 61 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 31 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 31 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 31 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 Data Ascii: l":"https://meta.modrinth.com/quilt/v0/versions/0.21.0-beta.4.json","stable":false},{"id":"0.21.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.21.0-beta.3.json","stable":false},{"id":"0.21.0-beta.2","url":"https://meta.modrinth.com/quilt/v
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 33 2e 6a 73 6f Data Ascii: modrinth.com/quilt/v0/versions/0.20.0-beta.14.json","stable":false},{"id":"0.20.0-beta.13","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.13.json","stable":false},{"id":"0.19.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.3.jso
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 32 30 2e 30 2d 62 65 74 61 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 32 30 2e 30 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: ,{"id":"0.20.0-beta.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.3.json","stable":false},{"id":"0.20.0-beta.2","url":"https://meta.modrinth.com/quilt/v0/versions/0.20.0-beta.2.json","stable":false},{"id":"0.20.0-beta.1","url":"https:/
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 31 2d 62 65 74 61 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 31 2d 62 65 74 61 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 31 39 22 2c 22 75 72 6c 22 3a 22 Data Ascii: son","stable":false},{"id":"0.19.1-beta.1","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.1-beta.1.json","stable":false},{"id":"0.19.0","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0.json","stable":false},{"id":"0.19.0-beta.19","url":"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 39 2e 30 2d 62 65 74 61 2e 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 39 2e 30 2d 62 65 74 61 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 Data Ascii: versions/0.19.0-beta.9.json","stable":false},{"id":"0.19.0-beta.8","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0-beta.8.json","stable":false},{"id":"0.19.0-beta.7","url":"https://meta.modrinth.com/quilt/v0/versions/0.19.0-beta.7.json","stable"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 2d 70 72 65 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 71 75 69 6c 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 38 2e 34 2d 70 72 65 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 38 2e 34 2d 70 72 Data Ascii: ersions/0.18.5.json","stable":false},{"id":"0.18.4","url":"https://meta.modrinth.com/quilt/v0/versions/0.18.4.json","stable":false},{"id":"0.18.4-pre.3","url":"https://meta.modrinth.com/quilt/v0/versions/0.18.4-pre.3.json","stable":false},{"id":"0.18.4-pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	140	OUT	GET /fabric/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:29 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Content-Length: 40358 Connection: close ETag: "541fc5d3f7d62b4fa855a065ad80f6bc" Last-Modified: Thu, 11 Jul 2024 20:12:19 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 8505 Expires: Sat, 27 Jul 2024 00:26:29 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817dfc64295-EWR
2024-07-26 19:26:29 UTC	839	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 24 7b 6d 6f 64 72 69 6e 74 68 2e 67 61 6d 65 56 65 72 73 69 6f 6e 7d 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 30 2e 31 36 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 36 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 31 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 31 31 2e 6a 73 6f 6e 22 2c 22 73 74 Data Ascii: {"gameVersions":[{"id":"${modrinth.gameVersion}","stable":true,"loaders":[{"id":"0.16.0","url":"https://meta.modrinth.com/fabric/v0/versions/0.16.0.json","stable":false},{"id":"0.15.11","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.11.json","st
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 35 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 35 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 Data Ascii: },{"id":"0.15.4","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.4.json","stable":false},{"id":"0.15.3","url":"https://meta.modrinth.com/fabric/v0/versions/0.15.3.json","stable":true},{"id":"0.15.2","url":"https://meta.modrinth.com/fabric/v0/vers
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2e 31 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e Data Ascii: .16","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.16.json","stable":false},{"id":"0.14.15","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.15.json","stable":false},{"id":"0.14.14","url":"https://meta.modrinth.com/fabric/v0/versions/0.
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 34 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 34 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 Data Ascii: https://meta.modrinth.com/fabric/v0/versions/0.14.2.json","stable":false},{"id":"0.14.1","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.1.json","stable":false},{"id":"0.14.0","url":"https://meta.modrinth.com/fabric/v0/versions/0.14.0.json","stab
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 32 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 32 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 32 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 Data Ascii: th.com/fabric/v0/versions/0.12.5.json","stable":false},{"id":"0.12.4","url":"https://meta.modrinth.com/fabric/v0/versions/0.12.4.json","stable":false},{"id":"0.12.3","url":"https://meta.modrinth.com/fabric/v0/versions/0.12.3.json","stable":false},{"id":"0
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2f 30 2e 31 30 2e 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 30 2e 36 2b 62 75 69 6c 64 2e 32 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 30 2e 36 2b 62 75 69 6c 64 2e 32 31 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 31 30 2e 35 2b 62 75 69 6c 64 2e 32 31 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 31 30 2e 35 2b 62 75 69 6c 64 2e 32 31 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a Data Ascii: /0.10.7.json","stable":false},{"id":"0.10.6+build.214","url":"https://meta.modrinth.com/fabric/v0/versions/0.10.6+build.214.json","stable":false},{"id":"0.10.5+build.213","url":"https://meta.modrinth.com/fabric/v0/versions/0.10.5+build.213.json","stable":
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 69 6f 6e 73 2f 30 2e 38 2e 39 2b 62 75 69 6c 64 2e 32 30 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 38 2e 38 2b 62 75 69 6c 64 2e 32 30 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 38 2e 38 2b 62 75 69 6c 64 2e 32 30 32 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 38 2e 37 2b 62 75 69 6c 64 2e 32 30 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 38 2e 37 2b 62 75 69 6c 64 2e 32 30 31 2e 6a 73 6f 6e 22 2c Data Ascii: ions/0.8.9+build.203.json","stable":false},{"id":"0.8.8+build.202","url":"https://meta.modrinth.com/fabric/v0/versions/0.8.8+build.202.json","stable":false},{"id":"0.8.7+build.201","url":"https://meta.modrinth.com/fabric/v0/versions/0.8.7+build.201.json",
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 38 2b 62 75 69 6c 64 2e 31 38 37 2e 6a 73 6f 6e 22 Data Ascii: sions/0.7.8+build.189.json","stable":false},{"id":"0.7.8+build.188","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.8+build.188.json","stable":false},{"id":"0.7.8+build.187","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.8+build.187.json"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 69 6f 6e 73 2f 30 2e 37 2e 34 2b 62 75 69 6c 64 2e 31 37 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 33 2b 62 75 69 6c 64 2e 31 37 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 33 2b 62 75 69 6c 64 2e 31 37 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 37 2e 32 2b 62 75 69 6c 64 2e 31 37 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 37 2e 32 2b 62 75 69 6c 64 2e 31 37 35 2e 6a 73 6f 6e 22 2c Data Ascii: ions/0.7.4+build.177.json","stable":false},{"id":"0.7.3+build.176","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.3+build.176.json","stable":false},{"id":"0.7.2+build.175","url":"https://meta.modrinth.com/fabric/v0/versions/0.7.2+build.175.json",
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6f 6e 73 2f 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 36 2e 31 2b 62 75 69 6c 64 2e 31 36 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 2e 36 2e 30 2b 62 75 69 6c 64 2e 31 36 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 61 62 72 69 63 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 30 2e 36 2e 30 2b 62 75 69 6c 64 2e 31 36 33 2e 6a 73 6f 6e 22 2c 22 Data Ascii: ons/0.6.1+build.165.json","stable":false},{"id":"0.6.1+build.164","url":"https://meta.modrinth.com/fabric/v0/versions/0.6.1+build.164.json","stable":false},{"id":"0.6.0+build.163","url":"https://meta.modrinth.com/fabric/v0/versions/0.6.0+build.163.json","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	137	OUT	GET /neo/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:29 UTC	531	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Content-Length: 72865 Connection: close ETag: "876d84ecb400bb2676123fdc2d29e761" Last-Modified: Fri, 26 Jul 2024 10:14:26 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13552 Expires: Sat, 27 Jul 2024 00:26:29 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817dbb7440b-EWR
2024-07-26 19:26:29 UTC	838	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 31 2e 30 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 Data Ascii: {"gameVersions":[{"id":"1.21.0","stable":true,"loaders":[{"id":"21.0.139-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.139-beta.json","stable":false},{"id":"21.0.138-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 31 33 33 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 32 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 32 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 33 31 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 33 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 Data Ascii: 133-beta.json","stable":false},{"id":"21.0.132-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.132-beta.json","stable":false},{"id":"21.0.131-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.131-beta.json","stable"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 32 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 32 30 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 32 30 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 31 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e Data Ascii: versions/neoforge-21.0.121-beta.json","stable":false},{"id":"21.0.120-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.120-beta.json","stable":false},{"id":"21.0.119-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 30 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 30 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 31 30 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 31 30 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f Data Ascii: ta.modrinth.com/neo/v0/versions/neoforge-21.0.107-beta.json","stable":false},{"id":"21.0.109-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.109-beta.json","stable":false},{"id":"21.0.108-beta","url":"https://meta.modrinth.com/neo/v0/
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 39 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 39 36 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 39 36 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 39 35 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e Data Ascii: ,"url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.97-beta.json","stable":false},{"id":"21.0.96-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.96-beta.json","stable":false},{"id":"21.0.95-beta","url":"https://meta.modrin
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 38 35 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 38 34 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 38 34 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 38 33 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 Data Ascii: "url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.85-beta.json","stable":false},{"id":"21.0.84-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.84-beta.json","stable":false},{"id":"21.0.83-beta","url":"https://meta.modrint
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 37 34 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 37 32 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 37 32 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 37 31 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 Data Ascii: url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.74-beta.json","stable":false},{"id":"21.0.72-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.72-beta.json","stable":false},{"id":"21.0.71-beta","url":"https://meta.modrinth
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 36 31 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 36 30 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 36 30 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 35 39 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e Data Ascii: rl":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.61-beta.json","stable":false},{"id":"21.0.60-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.60-beta.json","stable":false},{"id":"21.0.59-beta","url":"https://meta.modrinth.
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 34 39 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 34 38 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 34 38 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 34 37 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 Data Ascii: l":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.49-beta.json","stable":false},{"id":"21.0.48-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.48-beta.json","stable":false},{"id":"21.0.47-beta","url":"https://meta.modrinth.c
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 33 37 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 33 36 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6e 65 6f 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 6e 65 6f 66 6f 72 67 65 2d 32 31 2e 30 2e 33 36 2d 62 65 74 61 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 31 2e 30 2e 33 35 2d 62 65 74 61 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f Data Ascii: ":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.37-beta.json","stable":false},{"id":"21.0.36-beta","url":"https://meta.modrinth.com/neo/v0/versions/neoforge-21.0.36-beta.json","stable":false},{"id":"21.0.35-beta","url":"https://meta.modrinth.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	143	OUT	GET /minecraft/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:29 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Content-Length: 287070 Connection: close ETag: "492d16f4ce67f02b74852799b385b656" Last-Modified: Sat, 15 Jun 2024 11:48:09 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13552 Expires: Sat, 27 Jul 2024 00:26:29 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817dfa27c9f-EWR
2024-07-26 19:26:29 UTC	837	IN	Data Raw: 7b 22 6c 61 74 65 73 74 22 3a 7b 22 72 65 6c 65 61 73 65 22 3a 22 31 2e 32 30 2e 32 22 2c 22 73 6e 61 70 73 68 6f 74 22 3a 22 32 33 77 34 34 61 22 7d 2c 22 76 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 31 22 2c 22 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 31 33 54 30 38 3a 32 34 3a 30 33 5a 22 2c 22 73 68 61 31 22 3a 22 39 34 38 39 32 35 38 33 37 31 33 61 65 38 36 64 39 36 38 32 33 Data Ascii: {"latest":{"release":"1.20.2","snapshot":"23w44a"},"versions":[{"id":"1.21","type":"release","url":"https://meta.modrinth.com/minecraft/v0/versions/1.21.json","time":"2024-06-13T08:24:03Z","releaseTime":"2024-06-13T08:24:03Z","sha1":"94892583713ae86d96823
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 31 2d 70 72 65 34 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 31 32 3a 30 30 3a 31 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 36 2d 30 37 54 31 32 3a 30 30 3a 31 35 5a 22 2c 22 73 68 61 31 22 3a 22 36 33 61 35 61 66 32 34 62 30 62 36 35 38 66 35 34 35 65 62 31 32 31 31 36 31 37 39 32 66 39 65 30 36 38 36 62 34 39 63 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 61 32 39 64 61 65 34 33 64 66 66 65 32 35 66 66 39 64 30 38 62 34 38 37 36 65 37 62 31 61 38 64 66 63 62 34 64 66 35 32 22 2c 22 61 73 73 65 74 Data Ascii: .modrinth.com/minecraft/v0/versions/1.21-pre4.json","time":"2024-06-07T12:00:15Z","releaseTime":"2024-06-07T12:00:15Z","sha1":"63a5af24b0b658f545eb121161792f9e0686b49c","complianceLevel":1,"assetsIndexUrl":"a29dae43dffe25ff9d08b4876e7b1a8dfcb4df52","asset
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 35 33 35 64 31 66 64 63 31 32 36 31 36 37 35 66 36 32 61 38 32 32 66 30 30 62 34 32 61 39 35 65 66 31 61 36 31 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 32 31 62 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 32 31 62 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 32 54 31 36 3a 32 35 3a 34 31 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 32 54 31 36 3a 32 35 3a 34 31 5a 22 2c 22 73 68 61 31 22 3a 22 36 62 39 32 35 36 33 64 65 61 62 64 39 61 36 30 30 63 61 32 36 38 37 38 35 66 35 64 39 61 63 32 62 64 63 63 39 61 39 Data Ascii: 535d1fdc1261675f62a822f00b42a95ef1a61"},{"id":"24w21b","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w21b.json","time":"2024-05-22T16:25:41Z","releaseTime":"2024-05-22T16:25:41Z","sha1":"6b92563deabd9a600ca268785f5d9ac2bdcc9a9
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 78 55 72 6c 22 3a 22 62 32 34 35 30 30 61 37 66 34 39 37 35 32 39 33 65 34 61 30 63 34 30 31 62 32 35 62 30 63 66 32 34 31 61 66 61 38 35 62 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 62 32 34 35 30 30 61 37 66 34 39 37 35 32 39 33 65 34 61 30 63 34 30 31 62 32 35 62 30 63 66 32 34 31 61 66 61 38 35 62 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 31 39 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 31 39 61 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 32 3a 31 35 3a 33 31 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 Data Ascii: xUrl":"b24500a7f4975293e4a0c401b25b0cf241afa85b","assetsIndexSha1":"b24500a7f4975293e4a0c401b25b0cf241afa85b"},{"id":"24w19a","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w19a.json","time":"2024-05-10T12:15:31Z","releaseTime"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 61 31 22 3a 22 35 65 39 65 37 32 39 36 66 39 61 33 33 31 36 33 64 61 64 66 63 31 35 38 32 63 62 33 35 61 61 63 34 63 64 38 32 35 34 65 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 38 30 31 34 61 37 31 39 61 66 66 31 65 35 63 35 36 35 31 65 31 61 30 34 66 35 37 39 39 33 34 36 30 64 37 36 34 30 34 61 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 38 30 31 34 61 37 31 39 61 66 66 31 65 35 63 35 36 35 31 65 31 61 30 34 66 35 37 39 39 33 34 36 30 64 37 36 34 30 34 61 22 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 35 22 2c 22 74 79 70 65 22 3a 22 72 65 6c 65 61 73 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d Data Ascii: a1":"5e9e7296f9a33163dadfc1582cb35aac4cd8254e","complianceLevel":1,"assetsIndexUrl":"8014a719aff1e5c5651e1a04f57993460d76404a","assetsIndexSha1":"8014a719aff1e5c5651e1a04f57993460d76404a"},{"id":"1.20.5","type":"release","url":"https://meta.modrinth.com/m
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 35 2d 72 63 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 31 3a 34 35 3a 34 30 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 38 54 31 31 3a 34 35 3a 34 30 5a 22 2c 22 73 68 61 31 22 3a 22 65 39 38 61 65 37 63 36 65 38 30 30 31 30 30 62 36 30 62 38 66 65 64 66 64 63 33 34 62 66 62 33 35 65 61 37 61 62 64 38 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 30 30 30 38 63 37 64 65 64 35 63 63 37 61 30 34 36 36 39 38 64 62 62 37 33 30 31 31 32 38 35 36 62 32 35 37 35 63 65 65 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 30 30 30 38 63 37 64 65 64 35 63 63 37 61 30 Data Ascii: rsions/1.20.5-rc1.json","time":"2024-04-18T11:45:40Z","releaseTime":"2024-04-18T11:45:40Z","sha1":"e98ae7c6e800100b60b8fedfdc34bfb35ea7abd8","complianceLevel":1,"assetsIndexUrl":"0008c7ded5cc7a046698dbb730112856b2575cee","assetsIndexSha1":"0008c7ded5cc7a0
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 34 63 34 61 62 36 66 64 65 37 65 38 33 31 30 37 37 64 39 64 34 22 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 35 2d 70 72 65 31 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 35 2d 70 72 65 31 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 30 54 31 32 3a 34 34 3a 32 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 30 54 31 32 3a 34 34 3a 32 35 5a 22 2c 22 73 68 61 31 22 3a 22 65 35 32 32 63 62 65 61 63 35 35 63 30 61 38 63 35 33 31 34 39 37 35 34 39 39 66 32 34 61 33 34 61 65 32 38 30 63 64 64 22 2c 22 63 6f Data Ascii: 4c4ab6fde7e831077d9d4"},{"id":"1.20.5-pre1","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/1.20.5-pre1.json","time":"2024-04-10T12:44:25Z","releaseTime":"2024-04-10T12:44:25Z","sha1":"e522cbeac55c0a8c5314975499f24a34ae280cdd","co
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 49 6e 64 65 78 55 72 6c 22 3a 22 30 62 37 37 39 62 66 61 38 61 63 33 37 39 37 61 35 38 66 32 66 30 66 34 39 36 31 32 64 34 31 30 38 61 32 33 31 36 64 63 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 30 62 37 37 39 62 66 61 38 61 63 33 37 39 37 61 35 38 66 32 66 30 66 34 39 36 31 32 64 34 31 30 38 61 32 33 31 36 64 63 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 31 32 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e 65 63 72 61 66 74 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 32 34 77 31 32 61 2e 6a 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 33 2d 32 30 54 31 34 3a 33 38 3a 33 37 5a 22 2c 22 72 65 6c 65 61 73 65 54 Data Ascii: IndexUrl":"0b779bfa8ac3797a58f2f0f49612d4108a2316dc","assetsIndexSha1":"0b779bfa8ac3797a58f2f0f49612d4108a2316dc"},{"id":"24w12a","type":"snapshot","url":"https://meta.modrinth.com/minecraft/v0/versions/24w12a.json","time":"2024-03-20T14:38:37Z","releaseT
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 3a 22 39 34 38 36 66 65 37 63 64 36 35 62 33 30 35 33 62 38 66 37 39 34 30 64 36 37 66 34 36 35 34 64 35 66 65 31 36 37 38 38 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 32 66 38 35 62 66 65 33 31 36 64 64 63 64 33 36 66 36 33 39 33 34 33 38 65 63 66 66 65 36 32 35 34 39 32 34 34 35 36 63 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 32 66 38 35 62 66 65 33 31 36 64 64 63 64 33 36 66 36 33 39 33 34 33 38 65 63 66 66 65 36 32 35 34 39 32 34 34 35 36 63 22 7d 2c 7b 22 69 64 22 3a 22 32 34 77 30 37 61 22 2c 22 74 79 70 65 22 3a 22 73 6e 61 70 73 68 6f 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 6d 69 6e Data Ascii: :"9486fe7cd65b3053b8f7940d67f4654d5fe16788","complianceLevel":1,"assetsIndexUrl":"2f85bfe316ddcd36f6393438ecffe6254924456c","assetsIndexSha1":"2f85bfe316ddcd36f6393438ecffe6254924456c"},{"id":"24w07a","type":"snapshot","url":"https://meta.modrinth.com/min
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 32 34 54 31 33 3a 34 32 3a 34 35 5a 22 2c 22 72 65 6c 65 61 73 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 32 34 54 31 33 3a 34 32 3a 34 35 5a 22 2c 22 73 68 61 31 22 3a 22 66 33 61 34 62 35 30 63 65 33 37 63 36 65 30 64 32 34 33 63 39 64 37 38 34 66 62 35 39 39 64 32 37 35 32 62 33 36 31 64 22 2c 22 63 6f 6d 70 6c 69 61 6e 63 65 4c 65 76 65 6c 22 3a 31 2c 22 61 73 73 65 74 73 49 6e 64 65 78 55 72 6c 22 3a 22 63 35 39 33 38 61 31 65 64 65 31 65 65 34 63 62 35 64 39 31 30 35 35 30 30 65 33 64 65 63 66 30 36 65 35 65 63 35 35 66 22 2c 22 61 73 73 65 74 73 49 6e 64 65 78 53 68 61 31 22 3a 22 63 35 39 33 38 61 31 65 64 65 31 65 65 34 63 62 35 64 39 31 30 35 35 30 30 65 33 64 65 63 66 30 36 65 35 65 63 35 35 66 22 Data Ascii: ime":"2024-01-24T13:42:45Z","releaseTime":"2024-01-24T13:42:45Z","sha1":"f3a4b50ce37c6e0d243c9d784fb599d2752b361d","complianceLevel":1,"assetsIndexUrl":"c5938a1ede1ee4cb5d9105500e3decf06e5ec55f","assetsIndexSha1":"c5938a1ede1ee4cb5d9105500e3decf06e5ec55f"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	129	OUT	GET /v2/tag/category HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:29 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 298 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817dc424334-EWR
2024-07-26 19:26:29 UTC	877	IN	Data Raw: 37 64 38 37 0d 0a 5b 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 31 32 38 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 31 36 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 32 35 36 78 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 22 2c 22 Data Ascii: 7d87[{"icon":"","name":"128x","project_type":"resourcepack","header":"resolutions"},{"icon":"","name":"16x","project_type":"resourcepack","header":"resolutions"},{"icon":"","name":"256x","project_type":"resourcepack","header":"resolutions"},{"icon":"","
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 38 20 31 36 2e 32 34 20 37 2e 37 36 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 61 64 76 65 6e 74 75 72 65 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 5c 22 31 32 5c 22 20 63 79 3d 5c 22 31 Data Ascii: 8 16.24 7.76\"/></svg>","name":"adventure","project_type":"mod","header":"categories"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"1
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 31 20 31 36 56 38 61 32 20 32 20 30 20 30 20 30 2d 31 2d 31 2e 37 33 6c 2d 37 2d 34 61 32 20 32 20 30 20 30 20 30 2d 32 20 30 6c 2d 37 20 34 41 32 20 32 20 30 20 30 20 30 20 33 20 38 76 38 61 32 20 32 20 30 20 30 20 30 20 31 20 31 2e 37 33 6c 37 20 34 61 32 20 32 20 30 20 30 20 30 20 32 20 30 6c 37 2d 34 41 32 20 32 20 30 20 30 20 30 20 32 31 20 31 36 7a 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 2e 32 37 20 36 2e 39 36 20 31 32 20 31 32 2e 30 31 20 32 30 2e 37 33 20 36 2e 39 36 5c 22 2f 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 32 5c Data Ascii: \" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z\"/><polyline points=\"3.27 6.96 12 12.01 20.73 6.96\"/><line x1=\"12\
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 20 32 20 30 20 30 30 32 2d 32 7a 6d 30 20 30 56 39 61 32 20 32 20 30 20 30 31 32 2d 32 68 32 61 32 20 32 20 30 20 30 31 32 20 32 76 31 30 6d 2d 36 20 30 61 32 20 32 20 30 20 30 30 32 20 32 68 32 61 32 20 32 20 30 20 30 30 32 2d 32 6d 30 20 30 56 35 61 32 20 32 20 30 20 30 31 32 2d 32 68 32 61 32 20 32 20 30 20 30 31 32 20 32 76 31 34 61 32 20 32 20 30 20 30 31 2d 32 20 32 68 2d 32 61 32 20 32 20 30 20 30 31 2d 32 2d 32 7a 5c 22 20 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 63 68 61 6c 6c 65 6e 67 69 6e 67 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 Data Ascii: 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z\" /></svg>","name":"challenging","project_type":"modpack","header":"categories"},{"icon":"<svg viewBox=\"0 0 24
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 37 2e 35 37 33 20 32 30 2e 30 33 38 4c 33 2e 38 34 39 20 37 2e 39 31 33 20 32 2e 37 35 33 20 32 2e 37 35 35 20 37 2e 38 33 38 20 34 2e 30 36 20 31 39 2e 34 37 20 31 38 2e 32 30 36 6c 2d 31 2e 38 39 38 20 31 2e 38 33 32 7a 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 2e 34 35 20 31 34 2e 34 35 35 6c 2d 33 2e 30 34 33 20 33 2e 36 36 31 20 31 2e 38 38 37 20 31 2e 38 34 33 20 33 2e 37 31 37 2d 33 2e 32 35 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 36 2e 37 35 20 31 30 2e 38 32 6c 33 2e 33 33 33 2d 32 2e 39 31 33 20 31 2e 31 32 33 2d 35 2e 31 35 32 2d 35 2e 30 39 31 20 31 2e Data Ascii: oke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M17.573 20.038L3.849 7.913 2.753 2.755 7.838 4.06 19.47 18.206l-1.898 1.832z\"/><path d=\"M7.45 14.455l-3.043 3.661 1.887 1.843 3.717-3.25\"/><path d=\"M16.75 10.82l3.333-2.913 1.123-5.152-5.091 1.
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 5c 22 20 72 78 3d 5c 22 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 20 31 32 2e 35 20 34 20 31 34 2e 35 20 37 20 31 34 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 32 20 31 32 2e 35 20 32 30 20 31 34 2e 35 20 31 37 20 31 34 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 20 32 31 2e 35 20 35 20 31 38 2e 35 20 37 20 31 37 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 31 20 32 31 2e 35 20 31 39 20 31 38 2e 35 20 31 37 20 31 37 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 33 20 38 2e 35 20 35 20 31 30 2e 35 20 37 20 31 31 2e 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 31 20 Data Ascii: \" rx=\"5\"/><polyline points=\"2 12.5 4 14.5 7 14.5\"/><polyline points=\"22 12.5 20 14.5 17 14.5\"/><polyline points=\"3 21.5 5 18.5 7 17.5\"/><polyline points=\"21 21.5 19 18.5 17 17.5\"/><polyline points=\"3 8.5 5 10.5 7 11.5\"/><polyline points=\"21
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 72 65 63 74 20 78 3d 5c 22 37 5c 22 20 79 3d 5c 22 37 2e 35 5c 22 20 77 69 64 74 68 3d 5c 22 31 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 34 5c 22 20 72 78 3d 5c 22 35 5c 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 70 6f 69 6e 74 73 3d 5c 22 32 20 31 32 2e 35 20 34 20 31 34 2e 35 20 37 20 31 34 2e 35 5c 22 2f 3e Data Ascii: ries"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><rect x=\"7\" y=\"7.5\" width=\"10\" height=\"14\" rx=\"5\"/><polyline points=\"2 12.5 4 14.5 7 14.5\"/>
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2c 22 6e 61 6d 65 22 3a 22 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 68 65 61 64 65 72 22 3a 22 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 5c 22 72 6f 75 6e 64 5c 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 5c 22 72 6f 75 6e 64 5c 22 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 32 5c 22 20 79 31 3d 5c 22 31 5c 22 20 78 32 3d 5c 22 31 32 5c 22 20 79 32 3d 5c 22 32 33 5c 22 2f 3e Data Ascii: ,"name":"decoration","project_type":"mod","header":"categories"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><line x1=\"12\" y1=\"1\" x2=\"12\" y2=\"23\"/>
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 32 32 5c 22 20 79 31 3d 5c 22 31 39 2e 37 38 5c 22 20 78 32 3d 5c 22 35 2e 36 34 5c 22 20 79 32 3d 5c 22 31 38 2e 33 36 5c 22 2f 3e 3c 6c 69 6e 65 20 78 31 3d 5c 22 31 38 2e 33 36 5c 22 20 79 31 3d 5c 22 35 2e 36 34 5c 22 20 78 32 3d 5c 22 31 39 2e 37 38 5c 22 20 79 32 3d 5c 22 34 2e 32 32 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 72 65 73 6f 75 72 63 65 70 61 63 6b 22 2c 22 68 65 61 64 65 72 22 3a 22 66 65 61 74 75 72 65 73 22 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 Data Ascii: 22\" y1=\"19.78\" x2=\"5.64\" y2=\"18.36\"/><line x1=\"18.36\" y1=\"5.64\" x2=\"19.78\" y2=\"4.22\"/></svg>","name":"environment","project_type":"resourcepack","header":"features"},{"icon":"<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\"
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2e 32 38 20 31 2e 32 38 61 31 2e 32 20 31 2e 32 20 30 20 30 20 30 20 31 2e 37 32 20 30 4c 32 31 2e 36 34 20 35 2e 33 36 61 31 2e 32 20 31 2e 32 20 30 20 30 20 30 20 30 2d 31 2e 37 32 5a 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 6d 31 34 20 37 20 33 20 33 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 35 20 36 76 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 39 20 31 34 76 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 30 20 32 76 32 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 20 38 48 33 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 31 20 31 36 68 2d 34 5c 22 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 31 20 33 48 39 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 66 61 6e 74 61 73 79 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 Data Ascii: .28 1.28a1.2 1.2 0 0 0 1.72 0L21.64 5.36a1.2 1.2 0 0 0 0-1.72Z\"/><path d=\"m14 7 3 3\"/><path d=\"M5 6v4\"/><path d=\"M19 14v4\"/><path d=\"M10 2v2\"/><path d=\"M7 8H3\"/><path d=\"M21 16h-4\"/><path d=\"M11 3H9\"/></svg>","name":"fantasy","project_type"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	139	OUT	GET /forge/v0/manifest.json HTTP/1.1 accept: / user-agent: modrinth/daedalus/0.1.27 (support@modrinth.com) host: meta.modrinth.com
2024-07-26 19:26:29 UTC	532	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Content-Length: 465811 Connection: close ETag: "d3da00811820c3c12b519da657fff679" Last-Modified: Fri, 08 Dec 2023 17:27:14 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 13552 Expires: Sat, 27 Jul 2024 00:26:29 GMT Cache-Control: public, max-age=18000 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817ee10436c-EWR
2024-07-26 19:26:29 UTC	837	IN	Data Raw: 7b 22 67 61 6d 65 56 65 72 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 34 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 34 2d 34 39 2e 30 2e 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 34 2d 66 6f 72 67 65 34 39 2e 30 2e 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 33 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 33 2d 34 39 2e 30 2e 32 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e Data Ascii: {"gameVersions":[{"id":"1.20.4","stable":true,"loaders":[{"id":"1.20.4-49.0.3","url":"https://meta.modrinth.com/forge/v0/versions/1.20.4-forge49.0.3.json","stable":false}]},{"id":"1.20.3","stable":true,"loaders":[{"id":"1.20.3-49.0.2","url":"https://meta.
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 34 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 34 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 34 34 22 2c 22 75 72 Data Ascii: :"1.20.2-48.0.47","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.47.json","stable":false},{"id":"1.20.2-48.0.45","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.45.json","stable":false},{"id":"1.20.2-48.0.44","ur
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 34 38 2e 30 2e 33 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 33 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 33 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 33 33 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 33 33 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 Data Ascii: 48.0.35.json","stable":false},{"id":"1.20.2-48.0.34","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.34.json","stable":false},{"id":"1.20.2-48.0.33","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.33.json","stable
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 31 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 31 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 31 38 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 32 2d 34 38 2e 30 2e 31 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 Data Ascii: com/forge/v0/versions/1.20.2-forge-48.0.19.json","stable":false},{"id":"1.20.2-48.0.18","url":"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.18.json","stable":false},{"id":"1.20.2-48.0.17","url":"https://meta.modrinth.com/forge/v0/versions
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 32 2d 66 6f 72 67 65 2d 34 38 2e 30 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 22 2c 22 73 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 6c 6f 61 64 65 72 73 22 3a 5b 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 32 2e 31 37 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 32 2e 31 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 Data Ascii: :"https://meta.modrinth.com/forge/v0/versions/1.20.2-forge-48.0.0.json","stable":false}]},{"id":"1.20.1","stable":true,"loaders":[{"id":"1.20.1-47.2.17","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.2.17.json","stable":false},{"id":"1
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 72 67 65 2d 34 37 2e 31 2e 34 37 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 34 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 34 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 34 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 34 34 2e 6a 73 6f 6e 22 2c 22 73 74 Data Ascii: rge-47.1.47.json","stable":false},{"id":"1.20.1-47.1.46","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.46.json","stable":false},{"id":"1.20.1-47.1.44","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.44.json","st
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 33 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 32 39 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 32 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 32 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 Data Ascii: nth.com/forge/v0/versions/1.20.1-forge-47.1.30.json","stable":false},{"id":"1.20.1-47.1.29","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.29.json","stable":false},{"id":"1.20.1-47.1.28","url":"https://meta.modrinth.com/forge/v0/vers
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2d 34 37 2e 31 2e 31 36 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 36 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 35 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 35 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: -47.1.16","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.16.json","stable":false},{"id":"1.20.1-47.1.15","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.15.json","stable":false},{"id":"1.20.1-47.1.14","url":"http
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 31 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 31 2e 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 31 2e 30 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 Data Ascii: e":false},{"id":"1.20.1-47.1.1","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.1.json","stable":false},{"id":"1.20.1-47.1.0","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.1.0.json","stable":false},{"id":"1.20.1-4
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 33 34 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 30 2e 31 39 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 31 39 2e 6a 73 6f 6e 22 2c 22 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 2e 32 30 2e 31 2d 34 37 2e 30 2e 31 38 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 74 61 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 66 6f 72 67 65 2f 76 30 2f 76 65 72 73 69 6f 6e 73 2f 31 2e 32 30 2e 31 2d 66 6f 72 67 65 2d 34 37 2e 30 2e 31 38 2e 6a 73 Data Ascii: 20.1-forge-47.0.34.json","stable":false},{"id":"1.20.1-47.0.19","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.0.19.json","stable":false},{"id":"1.20.1-47.0.18","url":"https://meta.modrinth.com/forge/v0/versions/1.20.1-forge-47.0.18.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	138	OUT	GET /v2/tag/donation_platform HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:29 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 299 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817d9170f7c-EWR
2024-07-26 19:26:29 UTC	231	IN	Data Raw: 65 31 0d 0a 5b 7b 22 73 68 6f 72 74 22 3a 22 70 61 74 72 65 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 50 61 74 72 65 6f 6e 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 62 6d 61 63 22 2c 22 6e 61 6d 65 22 3a 22 42 75 79 20 4d 65 20 41 20 43 6f 66 66 65 65 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 70 61 79 70 61 6c 22 2c 22 6e 61 6d 65 22 3a 22 50 61 79 50 61 6c 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 67 69 74 68 75 62 22 2c 22 6e 61 6d 65 22 3a 22 47 69 74 48 75 62 20 53 70 6f 6e 73 6f 72 73 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 6b 6f 2d 66 69 22 2c 22 6e 61 6d 65 22 3a 22 4b 6f 2d 66 69 22 7d 2c 7b 22 73 68 6f 72 74 22 3a 22 6f 74 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 4f 74 68 65 72 22 7d 5d 0d 0a Data Ascii: e1[{"short":"patreon","name":"Patreon"},{"short":"bmac","name":"Buy Me A Coffee"},{"short":"paypal","name":"PayPal"},{"short":"github","name":"GitHub Sponsors"},{"short":"ko-fi","name":"Ko-fi"},{"short":"other","name":"Other"}]
2024-07-26 19:26:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	104.18.23.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:29 UTC	127	OUT	GET /v2/tag/loader HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: api.modrinth.com
2024-07-26 19:26:29 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 297 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c817ed150c80-EWR
2024-07-26 19:26:29 UTC	877	IN	Data Raw: 33 66 63 62 0d 0a 5b 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 39 32 20 33 31 39 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 30 2c 2d 35 29 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 32 2c 31 30 39 2e 35 4c 31 32 2c 31 35 35 4c 33 34 2e 35 2c 32 32 34 4c 35 37 2e 35 2c 32 32 34 4c 35 37 2e 35 2c 32 37 31 4c 38 31 2c 32 Data Ascii: 3fcb[{"icon":"<svg viewBox=\"0 0 292 319\" style=\"fill-rule:evenodd;clip-rule:evenodd;stroke-linecap:round;stroke-linejoin:round;\" stroke=\"currentColor\"><g transform=\"matrix(1,0,0,1,0,-5)\"><path d=\"M12,109.5L12,155L34.5,224L57.5,224L57.5,271L81,2
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 3b 5c 22 3e 5c 6e 20 20 20 20 3c 72 65 63 74 20 69 64 3d 5c 22 42 75 6e 67 65 65 63 6f 72 64 5c 22 20 78 3d 5c 22 2d 30 5c 22 20 79 3d 5c 22 30 5c 22 20 77 69 64 74 68 3d 5c 22 32 34 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 34 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 3a 6e 6f 6e 65 3b 5c 22 2f 3e 5c 6e 20 20 20 20 3c 70 61 74 68 20 64 3d 5c 22 4d 33 2e 37 37 38 2c 31 39 2e 37 37 38 43 33 2e 37 37 38 2c 32 31 2e 30 30 34 20 34 2e 37 37 34 2c 32 32 20 36 2c 32 32 43 37 2e 32 32 36 2c 32 32 20 38 2e 32 32 32 2c 32 31 2e 30 30 34 20 38 2e 32 32 32 2c 31 39 2e 37 37 38 4c 38 2e 32 32 32 2c 31 36 2e 34 34 34 43 38 2e 32 32 32 2c 31 35 2e 32 31 38 20 37 2e 32 32 36 2c 31 34 2e 32 32 32 20 36 2c 31 34 2e 32 32 32 4c 36 2c 37 2e 35 35 36 43 36 2c 35 2e 37 32 37 Data Ascii: ;\">\n <rect id=\"Bungeecord\" x=\"-0\" y=\"0\" width=\"24\" height=\"24\" style=\"fill:none;\"/>\n <path d=\"M3.778,19.778C3.778,21.004 4.774,22 6,22C7.226,22 8.222,21.004 8.222,19.778L8.222,16.444C8.222,15.218 7.226,14.222 6,14.222L6,7.556C6,5.727
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 73 68 61 64 65 72 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 30 20 32 30 5c 22 20 66 69 6c 6c 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 64 3d 5c 22 4d 39 2e 35 30 34 20 31 2e 31 33 32 61 31 20 31 20 30 20 30 31 2e 39 39 32 20 30 6c 31 2e 37 35 20 31 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 20 31 2e 37 33 36 4c 31 30 20 33 2e 31 35 32 6c 2d 31 2e 32 35 34 2e 37 31 36 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 2d 31 2e 37 33 36 6c 31 2e 37 35 2d 31 7a 4d 35 2e 36 31 38 20 34 2e 35 30 34 61 31 20 31 Data Ascii: supported_project_types":["shader","project"]},{"icon":"<svg viewBox=\"0 0 20 20\" fill=\"currentColor\"><path fill-rule=\"evenodd\" d=\"M9.504 1.132a1 1 0 01.992 0l1.75 1a1 1 0 11-.992 1.736L10 3.152l-1.254.716a1 1 0 11-.992-1.736l1.75-1zM5.618 4.504a1 1
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 33 5c 22 20 64 3d 5c 22 6d 38 32 30 20 37 36 31 2d 38 35 2e 36 2d 38 37 2e 36 63 2d 34 2e 36 2d 34 2e 37 2d 31 30 2e 34 2d 39 2e 36 2d 32 35 2e 39 20 31 2d 31 39 2e 39 20 31 33 2e 36 2d 38 2e 34 20 32 31 2e 39 2d 35 2e 32 20 32 35 2e 34 20 38 2e 32 20 39 20 38 34 2e 31 20 38 39 20 39 37 2e 32 20 31 30 34 20 32 2e 35 20 32 2e 38 2d 32 30 2e 33 2d 32 32 2e 35 2d 36 2e 35 2d 33 39 2e 37 20 35 2e 34 2d 37 20 31 38 2d 31 32 20 32 36 2d 33 20 36 2e 35 20 37 2e 33 20 31 30 2e 37 20 31 38 2d 33 2e 34 20 32 39 2e 37 2d 32 34 2e 37 20 32 30 2e 34 2d 31 30 32 20 38 32 2e 34 2d 31 32 37 20 31 30 33 2d 31 32 2e 35 20 31 30 2e 33 2d 32 38 2e 35 20 32 2e 33 2d 33 35 2e 38 2d Data Ascii: "currentColor\" stroke-width=\"23\" d=\"m820 761-85.6-87.6c-4.6-4.7-10.4-9.6-25.9 1-19.9 13.6-8.4 21.9-5.2 25.4 8.2 9 84.1 89 97.2 104 2.5 2.8-20.3-22.5-6.5-39.7 5.4-7 18-12 26-3 6.5 7.3 10.7 18-3.4 29.7-24.7 20.4-102 82.4-127 103-12.5 10.3-28.5 2.3-35.8-
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 32 34 20 32 34 5c 22 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 32 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 6d 32 32 2e 35 39 20 31 32 2e 30 31 33 2d 33 2e 30 31 20 33 2e 31 32 36 76 34 2e 34 30 35 6c 2e 30 30 35 2e 30 31 39 2d 34 2e 32 35 31 2d 2e 30 30 35 2d 32 2e 39 39 34 20 33 2e 31 31 35 68 2d 2e 30 30 33 6c 2d 33 2e 30 30 33 2d 33 2e 31 33 32 48 35 2e 31 6c 2d 2e 30 31 38 2e 30 30 35 2e 30 30 35 2d 34 2e 34 32 34 2d 32 2e 39 39 34 2d 33 2e 31 31 36 2d 2e 30 30 33 2d 2e 30 32 33 4c 35 2e 31 20 38 2e 38 35 38 56 34 2e 34 35 32 6c 2d 2e 30 30 35 2d 2e 30 31 39 20 34 2e 32 35 32 2e 30 30 35 20 32 2e 39 39 33 2d 33 2e 31 31 35 68 2e 30 30 Data Ascii: 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><path d=\"m22.59 12.013-3.01 3.126v4.405l.005.019-4.251-.005-2.994 3.115h-.003l-3.003-3.132H5.1l-.018.005.005-4.424-2.994-3.116-.003-.023L5.1 8.858V4.452l-.005-.019 4.252.005 2.993-3.115h.00
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6c 69 74 65 6c 6f 61 64 65 72 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 6d 6f 64 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 30 20 32 30 5c 22 20 66 69 6c 6c 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 64 3d 5c 22 4d 39 2e 35 30 34 20 31 2e 31 33 32 61 31 20 31 20 30 20 30 31 2e 39 39 32 20 30 6c 31 2e 37 35 20 31 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 20 31 2e 37 33 36 4c 31 30 20 33 2e 31 35 32 6c 2d 31 2e 32 35 34 2e 37 31 36 61 31 20 31 20 30 20 31 31 2d 2e 39 39 32 2d 31 2e 37 33 Data Ascii: /svg>","name":"liteloader","supported_project_types":["mod","project"]},{"icon":"<svg viewBox=\"0 0 20 20\" fill=\"currentColor\"><path fill-rule=\"evenodd\" d=\"M9.504 1.132a1 1 0 01.992 0l1.75 1a1 1 0 11-.992 1.736L10 3.152l-1.254.716a1 1 0 11-.992-1.73
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 35 68 31 2e 35 56 36 68 33 2e 38 76 31 32 48 39 2e 37 76 2d 35 2e 33 48 39 76 31 2e 35 48 36 76 2d 31 2e 35 68 2d 2e 38 56 31 38 48 31 2e 34 7a 6d 31 32 2e 31 20 30 56 36 68 33 2e 38 76 39 68 35 2e 33 76 33 68 2d 39 2e 31 7a 5c 22 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6d 6f 64 6c 6f 61 64 65 72 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 6d 6f 64 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 5c 22 6e 65 77 20 30 20 30 20 32 34 20 32 34 5c 22 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 31 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 78 6d 6c 3a 73 70 61 63 65 3d 5c 22 70 72 65 73 Data Ascii: 5h1.5V6h3.8v12H9.7v-5.3H9v1.5H6v-1.5h-.8V18H1.4zm12.1 0V6h3.8v9h5.3v3h-9.1z\"/></svg>","name":"modloader","supported_project_types":["mod","project"]},{"icon":"<svg enable-background=\"new 0 0 24 24\" version=\"1.1\" viewBox=\"0 0 24 24\" xml:space=\"pres
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 32 2e 35 20 30 20 30 20 30 2d 32 2e 35 20 32 2e 35 76 35 2e 35 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 32 2e 35 20 32 2e 35 68 31 2e 33 32 39 63 31 2e 33 37 39 20 30 20 32 2e 35 2d 31 2e 31 32 20 32 2e 35 2d 32 2e 35 76 2d 35 2e 35 39 5a 4d 31 34 2e 37 39 33 20 31 37 2e 32 39 35 76 2d 39 2e 33 34 61 31 2e 32 35 32 20 31 2e 32 35 32 20 30 20 30 20 31 20 31 2e 32 35 2d 31 2e 32 35 68 33 2e 33 30 31 4d 31 38 2e 30 30 37 20 31 30 2e 39 39 37 68 2d 33 2e 32 31 34 5c 22 20 2f 3e 3c 2f 73 76 67 3e 22 2c 22 6e 61 6d 65 22 3a 22 6f 70 74 69 66 69 6e 65 22 2c 22 73 75 70 70 6f 72 74 65 64 5f 70 72 6f 6a 65 63 74 5f 74 79 70 65 73 22 3a 5b 22 73 68 61 64 65 72 22 2c 22 70 72 6f 6a 65 63 74 22 5d 7d 2c 7b 22 69 63 6f 6e 22 3a 22 3c 73 76 67 20 78 6d 6c 3a 73 Data Ascii: 2.5 0 0 0-2.5 2.5v5.59a2.5 2.5 0 0 0 2.5 2.5h1.329c1.379 0 2.5-1.12 2.5-2.5v-5.59ZM14.793 17.295v-9.34a1.252 1.252 0 0 1 1.25-1.25h3.301M18.007 10.997h-3.214\" /></svg>","name":"optifine","supported_project_types":["shader","project"]},{"icon":"<svg xml:s
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 31 2e 37 37 5c 22 20 64 3d 5c 22 6d 32 37 32 20 33 38 2e 33 37 2d 38 20 34 2e 34 32 2d 38 2d 34 2e 34 32 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2e 31 32 35 20 30 20 30 20 31 2e 31 33 37 32 20 2d 32 38 35 20 2d 33 31 2e 36 39 29 5c 22 3e 3c 2f 70 61 74 68 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 31 2e 37 37 5c 22 20 64 3d 5c 22 6d 32 36 30 20 33 31 2e 39 35 20 38 20 34 2e 32 31 56 34 35 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 31 2e 31 32 35 20 30 20 30 20 31 2e 31 33 37 32 20 2d 32 38 35 20 2d 33 31 Data Ascii: \" stroke-width=\"1.77\" d=\"m272 38.37-8 4.42-8-4.42\" transform=\"matrix(1.125 0 0 1.1372 -285 -31.69)\"></path>\n <path fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.77\" d=\"m260 31.95 8 4.21V45\" transform=\"matrix(1.125 0 0 1.1372 -285 -31
2024-07-26 19:26:29 UTC	1369	IN	Data Raw: 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 5c 22 23 71 75 69 6c 74 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 36 35 2e 36 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 2e 30 33 30 35 33 20 30 20 30 20 2e 30 33 30 34 36 20 2d 33 2e 32 20 37 29 5c 22 3e 3c 2f 75 73 65 3e 5c 6e 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 5c 22 23 71 75 69 6c 74 5c 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 5c 22 36 35 2e 36 5c 22 20 74 72 61 6e 73 66 6f 72 6d 3d 5c 22 6d 61 74 72 69 78 28 2e 30 33 30 35 33 20 30 20 30 20 2e 30 33 30 34 36 20 36 2e 39 20 2d 33 2e 32 29 5c 22 3e 3c 2f 75 73 65 3e 5c 6e 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 5c 22 6e 6f 6e 65 5c 22 20 73 74 72 6f 6b 65 3d 5c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 5c 22 20 73 Data Ascii: xlink:href=\"#quilt\" stroke-width=\"65.6\" transform=\"matrix(.03053 0 0 .03046 -3.2 7)\"></use>\n <use xlink:href=\"#quilt\" stroke-width=\"65.6\" transform=\"matrix(.03053 0 0 .03046 6.9 -3.2)\"></use>\n <path fill=\"none\" stroke=\"currentColor\" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49780	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	648	OUT	GET /fonts/inter/Inter-Bold.woff2?v=3.19 HTTP/1.1 Host: cdn-raw.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://tauri.localhost sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:30 GMT Content-Type: font/woff2 Content-Length: 106140 Connection: close ETag: "444a7284663a3bc886683eb81450b294" Last-Modified: Sun, 23 Oct 2022 06:11:27 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4724 Expires: Mon, 26 Aug 2024 19:26:30 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Allow: * Server: cloudflare CF-RAY: 8a96c8238dc80f41-EWR
2024-07-26 19:26:31 UTC	736	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 9e 9c 00 0d 00 00 00 04 be 20 00 01 9e 3e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 0c 1b 84 dc 28 1c 81 aa 4a 06 60 00 81 cb 0a 0a 88 a9 2c 86 e4 51 0b cf 54 00 01 36 02 24 03 cf 4e 04 20 05 8c 5a 07 81 c9 2d 5b 07 33 b4 d2 ff 1f fb 79 2f bc 25 fa f0 0c 06 78 b6 69 59 6b 66 3f cb 7d 74 0e a9 c4 d1 5a 00 9d d3 fb ed cb 64 11 99 c4 b6 17 f2 4d 7d 41 8b 8e ea 18 c3 0b 1b 0e 25 6f 56 bf 6e 28 6e 98 4e d1 0b d7 6d 08 64 b6 c8 da bc 3e 8b ec ff ff ff ff ff ff ff ff ff ff ff ff 6f 6b 59 44 3a 9d dd ff f7 5e fb 52 a5 57 e9 48 a8 81 44 93 00 63 19 6c e3 4a 08 89 63 c7 4e 20 4a 33 86 68 ab e0 42 ff 23 e1 63 36 41 8a 30 51 59 9c 4a 2a 44 49 5e 70 b1 62 4b 61 2a 28 c5 34 88 c0 35 11 12 4d 6b 12 b3 b5 Data Ascii: wOF2 >(J`,QT6$N Z-[3y/%xiYkf?}tZdM}A%oVn(nNmd>okYD:^RWHDclJcN J3hB#c6A0QYJDI^pbKa(45Mk
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: b7 a9 20 42 f6 d3 1a fd ed 9f 78 b9 61 42 22 8c 10 e1 04 c2 09 2d f8 a3 f7 dc e7 e5 cb 25 59 ff d5 fc 56 55 c4 fa 60 59 f1 71 f6 e1 32 a5 ef 3a e9 72 92 ae 47 31 9f 48 60 aa 95 c1 81 a6 2f 59 96 65 52 ce 60 ed 9b ec 19 16 6b a2 89 c2 d7 2b 68 0c 43 3b 8f b5 25 27 36 42 41 87 9a ef 17 8c 6d 05 f7 35 66 54 31 77 4c 17 9d 0d 63 5e 1c 3d f2 62 f8 53 3f d3 ba ac e8 df fc a9 f7 07 df a6 73 31 df 47 eb 5e 34 cb 73 95 4d 48 cc 6e c4 ff 36 3b df af a1 64 00 61 ff 19 0b 3a 37 f3 f0 ca b9 5b 39 b9 3e 58 18 bb fd 91 3b 77 08 d3 cc c1 a5 6d f7 4c 53 17 36 9d d2 48 f5 8a 37 b8 e9 b7 a8 f2 b0 0a de d1 f3 cf 7f 93 26 b1 81 3c 5e d2 1f 24 f5 e9 bb ff 9a ff 85 e7 df 09 3d f8 ff cb fb 7f ec 8f f1 f6 7d 1e 6d 49 18 38 15 b2 f7 ff 47 51 e4 ee ce 10 d1 47 2a 78 03 45 15 15 2a Data Ascii: BxaB"-%YVU`Yq2:rG1H`/YeR`k+hC;%'6BAm5fT1wLc^=bS?s1G^4sMHn6;da:7[9>X;wmLS6H7&<^$=}mI8GQGxE
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 7f cd 29 67 4e 8d 79 d0 1b 55 01 3f 36 e6 8d 79 63 41 83 ae 49 30 7f b5 f3 3f 32 6f 65 30 79 b2 e6 ed 00 80 24 1f 99 8a a8 b3 07 dc c5 39 9d 2c 84 8a b4 0b e9 1e 07 3c cf 73 b8 6f bd ba 8d 69 d8 f1 78 db 14 9b 18 58 24 01 cd 3f 54 b6 45 6b e5 f0 ee 3c 61 88 51 3d 51 05 75 b9 dc bb 0e a2 26 54 48 1a 5c 0b 15 82 be 77 c1 9c 4d fe 6c 72 0e 1c 52 22 0c de a2 55 4d 8d e9 ab ba fd 5f dd bf da ff 65 7a b0 25 29 d2 d9 83 63 09 c6 da 52 99 c7 90 4b 73 ba 32 4d 01 a6 f7 2f 48 56 40 b2 28 c0 53 a3 a0 3f 3a 40 c0 36 78 38 88 7b bf 6f 6d 1f 2b 19 8f b4 44 88 17 12 a1 7a 48 54 4d b4 00 49 ec 64 66 77 76 60 31 a9 3c 7e 7f 3f 7e 58 b2 b7 a9 9d fb c4 f4 ab 24 46 fb 44 d6 a9 8c 4a a6 8a 67 a2 97 a0 11 9a 49 03 65 ba 9e 64 57 56 42 77 7c bc 40 0f b8 e9 d7 7d 3f d4 be 73 6d Data Ascii: )gNyU?6ycAI0?2oe0y$9,<soixX$?TEk<aQ=Qu&TH\wMlrR"UM_ez%)cRKs2M/HV@(S?:@6x8{om+DzHTMIdfwv`1<~?~X$FDJgIedWVBw\|@}?sm
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 26 94 1b 7c 4d 25 5e bf 59 90 9b 33 7c 31 98 e5 d8 08 21 84 b8 ea 97 21 45 e0 bf f9 fa ef 67 cd 4e 6b c6 08 73 19 8c 10 42 08 21 74 9b 39 38 c6 31 f9 7c ad 12 39 85 f2 66 d5 26 d5 f3 b8 10 26 08 23 ae a9 02 e1 7c bf be 3f 25 ef ee 7d e6 73 f0 47 23 1a 63 84 11 46 18 13 42 30 21 34 61 68 bf f3 fb fe bf 93 be 8f af cd d0 46 9f 57 db da 68 a3 45 44 44 89 12 a5 2c 25 22 e7 f1 77 e8 69 bf 18 f3 36 c4 cd 06 d3 05 83 18 3f 72 88 b7 b1 fa 6f dc c7 f8 2f ff 1d d1 1e 4f 44 42 64 91 90 88 90 88 08 19 96 21 e6 1f 7b 7e df bf 74 98 fd 99 3d e7 7d c7 1a 63 55 45 45 44 45 44 45 d5 7e dd c7 1b e2 f7 93 b9 f7 61 9f 2e 5d 16 2c 41 8e 0b 22 e6 63 8b 6c 7e bf a4 36 e3 36 08 bc c0 75 a5 1a fa 45 e5 ff bd cb af 44 6b 3e 62 10 b8 04 d1 c4 27 f5 f7 b9 67 27 99 6a 75 82 93 76 df Data Ascii: &\|M%^Y3\|1!!EgNksB!t981\|9f&&#\|?%}sG#cFB0!4ahFWhEDD,%"wi6?ro/ODBd!{~t=}cUEEDEDE~a.],A"cl~66uEDk>b'g'juv
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 00 8b a5 3d 7a fa 7d 51 94 31 8f b4 6d 85 af 65 e7 e4 62 95 73 ca f9 dc 6d 6b 5c 10 d3 0a 0e 46 90 6c 5b d7 a4 88 34 e1 32 59 78 03 6f 60 82 52 10 58 bd 08 6b 2e 70 77 60 6c 9c b6 8a 04 0c bf f9 d7 1b d1 fb f8 9b dd 18 bd 71 72 53 dc ca 16 0b 1c 0a 4f 4a 05 d2 1d 80 71 92 7a 43 66 f5 7e 43 37 30 3a 70 79 df d8 bd fe 92 1a c8 ea 73 f8 21 32 2e 2e 3d 51 5e 68 ab f5 1a 9f ce 52 0f 41 a0 03 b0 ec c2 94 97 f0 24 83 04 cb 9b 56 1c 9d 2e 53 ad a7 d5 65 aa b8 14 ca 60 9a ea 65 57 78 ab 4d f3 fb 3f c0 dd 5b 6f ae 80 ba 09 cb 37 a8 1f 70 c3 24 16 f1 95 68 ec 27 67 47 2f 2c 8d cc 15 f0 1b 96 1c 86 9e 0a 74 26 2d 6b 00 8c c7 0c a4 0f 24 54 64 87 c1 9e 80 b0 85 a8 3b fa bf b8 50 0d 0c e1 77 69 a7 08 1c 9b 22 86 7f e1 eb 7b ed 52 38 5a b6 14 43 be 42 dd 6d 79 2a e9 f9 Data Ascii: =z}Q1mebsmk\Fl[42Yxo`RXk.pw`lqrSOJqzCf~C70:pys!2..=Q^hRA$V.Se`eWxM?[o7p$h'gG/,t&-k$Td;Pwi"{R8ZCBmy*
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 7f bb 9b 4a a9 ff 2d 45 29 51 83 16 da e9 a0 93 ae 95 7e 93 75 ac e5 9e 2b 8d ce 8e 24 98 fd 3e 16 00 00 00 00 c0 63 c1 9d e0 0b f5 8c 6e 63 98 c9 62 73 b8 3c 95 5a a3 d5 e9 0d 46 93 d9 62 b5 21 80 60 04 c5 70 82 04 14 cd b0 1c 2f 88 92 ac 68 75 f5 f4 0d 50 63 30 59 6c 0e 97 27 10 4b a4 32 39 00 42 30 82 62 38 41 52 b4 42 a9 52 6b b4 3a bd c1 68 32 5b ac 36 bb c3 e9 72 ef d9 8b 57 5f be fd f8 47 9c 30 25 c7 b9 d4 0c cb f1 06 41 94 64 c5 a8 9a cc 9a c5 aa db ec 0e a7 cb ed 05 cd 9a 61 01 44 98 70 bc 20 4a 8a aa e9 86 69 d9 8e 8b 0d 30 8e 42 2a 63 91 03 80 20 30 04 0a 83 23 90 a8 90 d2 c3 1e f5 98 c7 3d e1 49 13 53 02 91 44 a6 30 98 2c 36 87 cb e3 0b cc b1 93 42 63 b0 00 0e 4f 20 91 29 54 1a 83 c9 62 73 b8 3c 10 e2 0b 84 22 89 54 26 57 28 55 70 d4 b9 9f 7b Data Ascii: J-E)Q~u+$>cncbs<ZFb!`p/huPc0Yl'K29B0b8ARBRk:h2[6rW_G0%AdaDp Ji0B*c 0#=ISD0,6BcO )Tbs<"T&W(Up{
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 8a bc 83 73 42 07 67 07 6e 9c 1d 40 07 1d 00 00 00 08 f4 68 32 2c c8 5b 9c 82 87 0b 05 8d de 92 ec 62 28 b1 ce 9b 64 f0 da 08 c0 6a 60 24 92 6c a1 fc 89 96 23 0d 15 3a c0 80 25 1d 1c 19 e0 c9 24 8b 6c cb f1 61 81 13 1e bb e0 7a cb 9f 62 4a ac f3 3f 71 4a b4 d1 00 c0 bf 41 bc 3c b1 26 f3 af 99 97 67 c5 02 86 4c 87 44 ee 46 04 af 89 87 c0 77 15 37 28 ba f2 11 33 b9 ff ef 9e cb 03 77 c7 fe 1f aa a7 95 52 b2 5f 14 a8 b4 d0 4e 07 9d 74 d9 71 bc 58 2d 6c aa 69 18 35 aa ea 92 5a 9f aa 17 c4 26 2b 95 94 a6 d0 22 e2 31 4d 17 86 46 0b 21 3c 33 01 84 b0 73 03 c2 33 33 34 59 b6 c3 bd b6 b1 4e a4 f6 6d 51 fe 05 98 66 a5 96 46 bc 3e 46 04 51 9c 0a 94 d1 0f 05 76 bf 06 42 78 a7 88 e4 04 0e 2d d0 81 0e c7 7e aa 50 99 86 76 e8 80 be d0 1f ad 8d ee 8a 88 97 2b 55 79 94 1c Data Ascii: sBgn@h2,[b(dj`$l#:%$lazbJ?qJA<&gLDFw7(3wR_NtqX-li5Z&+"1MF!<3s334YNmQfF>FQvBx-~Pv+Uy
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 28 55 16 e8 0c 25 3a 8c 21 b0 f4 c9 ca 86 da 18 bd 00 54 10 99 22 9e 28 86 03 82 84 14 cd b0 1c 6f 10 44 49 56 8c aa c9 ac 59 ac ba cd ee 70 ba dc 02 a2 68 86 05 10 61 c2 f1 82 28 c9 8a aa e9 86 69 d9 8e 1b ef 27 a7 22 2c 5a a3 d2 66 a1 81 81 95 0e 27 03 5e a6 2c d9 72 aa 8d ab 76 1d f5 07 d7 86 bf 36 fd b3 65 db 7f 3b 76 11 b6 e7 77 d7 3a dd a8 42 40 bf 58 6c 4e 25 09 3b 8f b4 da d4 ba a7 3c 9c bd 19 28 6f 33 ef 79 a1 8f f9 f6 f5 16 f6 14 53 62 9d 7d 37 9e bb 49 60 0c fb c6 79 37 eb e3 43 85 4f 31 55 a3 b1 67 a9 bd b4 b7 e5 3f 12 83 79 11 43 a3 63 34 89 8c 83 92 09 53 66 cc 59 b0 74 83 95 9b ac d9 b0 2d 3b 90 68 3b fa c4 e5 f6 78 7d fe 16 28 30 8e 42 2a 6d fe 7b 4b 67 ac 00 3e 01 9c 02 c4 89 79 07 a2 e8 6d c0 6c 0b 36 87 cb e3 0b 84 22 b1 44 2a 93 2b 94 Data Ascii: (U%:!T"(oDIVYpha(i'",Zf'^,rv6e;vw:B@XlN%;<(o3ySb}7I`y7CO1Ug?yCc4SfYt-;h;x}(0Bm{Kg>yml6"D+
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 69 74 16 9b c3 e5 f1 05 42 91 58 22 95 c9 15 4a d1 74 38 5d 6e 8f d7 e7 27 14 18 47 21 95 36 0a 0a c1 e0 54 1a 83 c9 62 73 b8 3c be 40 28 12 4b a4 32 b9 42 a9 52 6b b4 3a fd 39 d7 81 35 66 24 cf 49 94 29 4c 9f ab 38 eb 73 ff 24 36 ff 87 6c b4 51 2e 25 b9 8d 97 c7 73 f9 c6 4b fe d6 b8 80 47 0a 12 fa aa 48 01 d6 07 7a 4e 7b be 41 5a 62 23 34 34 10 e8 27 26 dd 76 a4 44 ef 1a f3 8b 84 31 3b ec 72 d7 f6 ec 3b 70 e8 c8 b1 13 a7 71 96 0d 00 01 83 80 82 81 43 40 62 c0 88 09 33 16 ac d8 b0 e3 c0 89 0b 37 1e bc f8 f0 13 20 48 84 a8 73 64 5d 26 e7 8a ab e4 5d a3 e0 3a df 14 7b 0e 02 7b 37 b2 ef 12 e4 ae 15 2f 78 59 85 cf ca cc 53 79 b2 7c f7 04 d6 b8 43 94 37 2b 11 21 dd bb 6b e5 77 a3 09 17 0b 54 bb 75 2f 15 7e 33 fc 4c ce e7 70 8f c3 93 f6 eb 8e 66 14 22 8e 10 c2 Data Ascii: itBX"Jt8]n'G!6Tbs<@(K2BRk:95f$I)L8s$6lQ.%sKGHzN{AZb#44'&vD1;r;pqC@b37 Hsd]&]:{{7/xYSy\|C7+!kwTu/~3Lpf"
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 36 2a 1a 3a 06 26 16 36 04 e7 ec d2 3b 90 ec 3e ac d7 6f 83 01 1b 0d da 64 28 86 3f 57 8c 78 84 a4 75 18 4c 16 9b c3 e5 f1 05 42 91 58 22 95 c9 15 4a 95 5a a3 d5 e9 0d 46 93 d9 62 b5 69 8d 08 46 50 0c 27 48 40 d1 0c cb f1 82 28 c9 8a 16 b9 bb 5f 95 34 aa 00 d8 08 18 41 31 9c 20 29 5a a1 54 a9 35 5a 9d de 60 34 99 2d 56 9b dd e1 3c 2e a9 08 45 7c 3e 94 5c fc 09 e0 6f 0f 9d b8 c5 5e c4 da bc 02 b7 d8 0b e8 a0 93 2e 2d 92 36 25 f9 0f fe b3 c3 2e 7b ec 73 c0 21 47 3a 3e d5 49 ea 14 3b ab 0b 08 6a 20 60 10 50 30 70 43 bc 48 22 53 a8 34 26 9b c3 15 8a c4 12 a9 4c ae 50 aa d4 1a ad 4e 6f 30 9a cc 16 ab cd db 67 24 34 00 00 00 00 00 2c 47 f4 d3 ea bf fe a6 c6 f9 f5 0d 40 5c a1 5c 27 66 85 01 b7 ec cc 90 b9 3c 43 5f 4b 6c 40 30 e7 86 c4 60 b6 55 da da c9 d1 68 75 Data Ascii: 6*:&6;>od(?WxuLBX"JZFbiFP'H@(_4A1 )ZT5Z`4-V<.E\|>\o^.-6%.{s!G:>I;j `P0pCH"S4&LPNo0g$4,G@\\'f<C_Kl@0`Uhu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49781	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	650	OUT	GET /fonts/inter/Inter-Medium.woff2?v=3.19 HTTP/1.1 Host: cdn-raw.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://tauri.localhost sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	633	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:30 GMT Content-Type: font/woff2 Content-Length: 105924 Connection: close ETag: "75db5319e7e87c587019a5df08d7272c" Last-Modified: Sun, 23 Oct 2022 06:11:27 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 4724 Expires: Mon, 26 Aug 2024 19:26:30 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Allow: * Server: cloudflare CF-RAY: 8a96c82388e38c83-EWR
2024-07-26 19:26:31 UTC	736	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 9d c4 00 0d 00 00 00 04 bb a4 00 01 9d 65 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 0c 1b 84 da 72 1c 81 aa 4a 06 60 00 81 cb 0a 0a 88 a5 30 86 e8 1f 0b cf 54 00 01 36 02 24 03 cf 4e 04 20 05 8d 10 07 81 c9 2d 5b 55 34 b4 18 2a c5 dc ce 39 2d c6 49 cf d8 4a 88 2a 68 12 aa 0f ca a7 4f 20 b0 6b 44 33 3d 2c 28 5d dd bd 65 1a 51 c9 98 7b f8 f8 49 70 b0 d8 d2 51 c7 e1 ab 2d 45 7e 78 d6 19 86 5e e1 8c 03 bd 59 cf c5 11 cc d3 67 ff ff ff ff ff ff ff ff ff ff ff ff ff ff 37 b2 fc 08 db fc 37 b3 c9 9f d9 dd 1c 24 90 10 84 3b 80 1c 0a 82 27 48 ab c5 1e 56 7f 85 30 aa 6a 9d 17 a8 46 31 92 b4 41 9c cb 48 de 84 73 4c 0b aa 96 2b d4 e6 25 d3 6a a3 22 49 db a1 d3 d1 8b 6e c3 f9 0b 0b db eb 63 30 f4 a3 31 Data Ascii: wOF2erJ`0T6$N -[U49-IJhO kD3=,(]eQ{IpQ-E~x^Yg77$;'HV0jF1AHsL+%j"Inc01
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 22 99 51 fe 18 ee 0f 83 c1 23 73 e2 bb 06 0d ae f8 2f fa 20 9f 99 d1 31 88 ff 43 f2 ef ee 9e 2e a5 5d 50 2b 32 50 76 21 64 2f e4 2c 0f c2 38 e1 34 56 4e 77 ad 9f d7 71 9c e6 98 3c 41 9d 14 b8 8a 6d ac 59 d9 8b 90 bc 42 c9 9b 1c 22 c9 3e 50 7b c4 4c aa 5f 96 b1 16 ca ec cd 36 48 c8 39 bd 19 96 34 0e fe 6c 7c ca d9 0a ca 95 da ed 5a ce 85 ce 65 ae db a4 ff f8 2f 5e 42 94 9e 7d 45 bf f8 6f fc 3b ff 19 d8 c7 1e 15 62 6b 37 bd 72 a8 12 43 0b 76 9c f0 35 eb 33 fe 92 57 76 8f bf 54 99 0e 23 58 2b 51 b2 b6 ce 30 e2 47 01 64 ec f1 6a 5f 8d e2 e7 3c 09 eb 05 a9 a6 73 f4 46 e4 2d f0 e5 d8 3c e5 ef 71 71 9b e4 64 1d c2 0d 16 09 99 7d 92 d5 69 85 ae 41 c9 f7 cc 3b e6 bf 59 2b bd 5d 55 55 29 22 93 0e 27 e1 39 85 bf 4e d3 34 4d c9 57 08 eb 3f a5 30 c9 aa 43 8b 1d bf 64 Data Ascii: "Q#s/ 1C.]P+2Pv!d/,84VNwq<AmYB">P{L_6H94l\|Ze/^B}Eo;bk7rCv53WvT#X+Q0Gdj_<sF-<qqd}iA;Y+]UU)"'9N4MW?0Cd
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 08 af 38 df 5a d6 d8 a6 04 38 75 02 de 34 17 e1 33 86 c1 80 9d 16 70 5c db c7 34 9f ec f0 7f 75 e9 61 88 e7 0c 53 d6 e2 d4 6e 9d c2 ac d3 d9 d2 49 d1 dd 37 24 71 03 63 1d 05 1c 00 7a 7b 3b 25 3c 97 69 63 36 a2 4e 51 61 4e 7a 3d a3 e7 d9 f9 fe 65 09 47 29 0d 26 3a 1c 2c e3 fe 82 46 98 00 2d 0e 22 20 03 04 0e e6 b9 f7 7f 20 5f 3b 09 14 f1 d6 c4 0a e4 ce b1 de 6e d0 d2 09 db d8 9b 0f a1 ba 49 e1 b2 f8 fd fc bd 71 99 f0 85 81 47 c4 ea 4a d7 b4 14 67 d6 e0 a5 1a 60 4f bf e5 96 75 e2 8c 03 c6 ca ba cf 00 dc d4 76 13 dc d4 a0 06 a9 d1 4d c4 c1 04 27 f2 01 ff e5 c0 00 bc 69 a6 7d f9 19 0e 87 23 1d c8 c4 ee 16 73 95 92 e7 67 67 0e 00 cb 07 0c 95 e4 d9 c9 02 41 62 fd bf fd 96 93 c1 c2 2e 97 a0 a8 c0 1a 0e b0 a4 ea d4 36 43 6f 68 49 f0 98 fa 16 1a 47 82 42 42 ad 43 Data Ascii: 8Z8u43p\4uaSnI7$qcz{;%<ic6NQaNz=eG)&:,F-" _;nIqGJg`OuvM'i}#sggAb.6CohIGBBC
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: a5 4a f2 28 69 9c 04 14 63 a8 31 de f8 7e 6b 7f ef cd aa ef d1 82 7a 97 ee 59 b6 cc 16 9a 10 42 10 11 11 11 09 a1 28 e6 3c 7f d9 c9 aa 26 99 25 ee de 5d ef 17 71 bf 52 8a 48 91 22 22 45 ba 9f 94 12 24 48 ee 01 69 2e a4 57 68 f1 2f f4 8c 18 21 f8 17 23 8c e7 5b 7b 7e 9c 3b a1 7c 58 0c 32 41 86 65 d9 60 10 e3 43 0c 46 8f d8 b9 8b 93 9a 1f aa 6f 90 7f 58 c6 d4 d9 d9 9d 73 91 1f 9e a0 d5 80 56 bb 0d 36 57 35 98 d9 ed 0f b7 3b 8e 20 20 06 08 48 09 24 21 a5 52 ee 79 f0 df f6 7e c5 29 f7 f1 ca 67 7f 85 22 48 23 22 72 11 11 09 d2 84 26 33 b3 14 3b 55 dc c3 46 d5 d8 82 b0 9f 8c c9 d2 64 38 53 4b 13 43 5e 4a fd 32 8d 40 04 ad 22 e8 b8 b2 ac 2d fd 4a 7b bc 63 a7 80 00 c6 b5 81 b0 69 6f 55 84 ea b6 5e 61 7b 69 27 a4 1c a8 a4 14 b9 16 8c c2 4c 7a 95 4f 7e 67 2e fc a9 Data Ascii: J(ic1~kzYB(<&%]qRH""E$Hi.Wh/!#[{~;\|X2Ae`CFoXsV6W5; H$!Ry~)g"H#"r&3;UFd8SKC^J2@"-J{cioU^a{i'LzO~g.
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: c9 7c e6 aa da 11 dc 00 dc 6f 42 b3 ba 85 a1 0d a4 c7 9b 58 3b d3 7a ce 79 4d d3 42 f7 49 9b a2 cd ee a4 92 7c a9 2d 76 fb 1f f5 cd 2b 5d 0c 9e 90 4a eb ae f9 9e 09 ec 3e f7 0d e2 f0 9e d3 e5 c4 7d 44 69 df 37 d0 1c 02 36 05 b8 c5 e7 d8 6c 0d b2 67 29 9c f8 db e5 4e 7b b0 ea fe 13 0d b5 13 69 b2 d0 c6 6a 79 91 02 af 65 35 6c 45 55 08 46 41 53 2a 30 b3 ea ae 74 49 11 e8 c7 2d 12 bc e8 5c c2 f6 83 84 f7 c5 85 cb 77 b3 d5 c6 f4 3b ac 6d 14 9f ac f1 ad 29 dc 42 a6 e8 8c 41 b7 7e 57 d3 0d 9c aa b4 89 b6 49 59 e4 3f b6 ed 6b f5 f6 b9 85 b2 f7 a6 5d 85 5d 8b bd ee 27 fb 27 03 d2 45 65 35 f6 8a 19 f8 5d c4 ae 14 0a 17 09 be 69 60 c9 21 c0 11 5a b2 47 43 e3 03 f7 74 87 e4 85 67 67 44 a9 50 ba 90 c9 28 dc a2 b1 9f 7d ec 8f 1c d0 0e 6f 32 5b 1c d2 b6 77 54 3f 81 7b Data Ascii: \|oBX;zyMBI\|-v+]J>}Di76lg)N{ijye5lEUFAS*0tI-\w;m)BA~WIY?k]]''Ee5]i`!ZGCtggDP(}o2[wT?{
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 0b a2 24 5b ac 36 bb c3 e9 72 7b 30 00 12 e3 52 19 1a a0 58 71 20 e2 25 48 94 23 97 91 89 59 9e 7c 85 8a 14 2b 51 aa 4c b9 0a 95 aa 54 ab 51 9b ad 35 2f 11 4c 12 38 04 a4 36 9b b5 db 62 ab 6d b6 eb b6 43 8f 9d 7a f5 e9 37 60 d0 49 63 c6 21 a6 d0 00 08 c1 58 1c 9e 40 24 53 a8 34 3a 83 c9 62 73 b8 3c be 50 24 96 48 65 72 45 ca ea 67 2f 14 2a 93 3f 84 9f d9 af 94 26 43 96 3c 25 ea 34 69 d1 a1 4b df 21 47 1c 8d 71 59 81 32 15 b7 c3 a8 aa c0 c3 37 6f 81 20 bb 35 53 15 c3 e8 d5 87 a5 3f 03 b5 fc 23 52 91 12 08 68 65 26 b4 72 b7 39 77 00 47 57 50 3e 03 1f 00 05 67 73 ae 33 2b 22 9b cc 7c 3e 9c 24 e7 b1 15 65 98 52 1f c0 55 bc 6f ad 79 b1 60 82 da de 0b bd 70 be 39 c9 46 92 6a ed 08 82 79 59 3b 4c 39 c0 c0 97 dd c9 2c e5 c9 a8 0b de d9 b6 0f f8 96 51 8a 14 5c 14 Data Ascii: $[6r{0RXq %H#Y\|+QLTQ5/L86bmCz7`Ic!X@$S4:bs<P$HerEg/*?&C<%4iK!GqY27o 5S?#Rhe&r9wGWP>gs3+"\|>$eRUoy`p9FjyY;L9,Q\
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 69 d0 e9 81 05 1b 0e 5c db 2b 37 0e bb b1 6a 9c 8f b1 5c c3 a2 5a df 61 5c a6 64 59 fd 9a 7a 20 1e 92 70 07 d6 05 03 d3 82 20 d8 8b 00 08 82 c9 56 10 ec c5 c0 b2 2d 7c d1 3e 01 66 ae f6 7d a1 f5 0e c0 9a 9e d1 2b e3 5e b8 5a 30 53 9d 04 ee 34 fb a9 80 a3 19 d0 87 04 5b 18 2e 70 a7 15 5a 11 5a 95 d1 00 95 07 2c d8 0c 95 95 1a ce d6 ce 2e ad c5 4b ba b9 8c a2 44 8e 63 9b fa cf b5 65 9d 90 c9 0f 01 9f d4 1e 16 6a 50 36 e1 29 a2 a2 33 5d fd 24 ba 24 32 9e 88 a0 12 ca 11 2a 96 bd 5b 16 41 36 24 69 ce c8 79 98 f3 b7 1e 6a b7 42 b6 1c 0e 6a 92 1a 00 59 0a 19 aa 61 28 c4 c0 81 a8 a7 d0 ae 84 c1 2a 24 d9 29 57 5c ee 83 c3 4a 08 05 ac 80 48 43 85 ad 41 9d 40 5b ec 56 00 5c 24 38 e4 b9 17 7e d5 39 22 5c 68 5f 2b 16 00 ed 78 e6 2f 62 10 72 58 d6 21 e8 56 3a 4b 48 3a Data Ascii: i\+7j\Za\dYz p V-\|>f}+^Z0S4[.pZZ,.KDcejP6)3]$$2[A6$iyjBjYa($)W\JHCA@[V\$8~9"\h_+x/brX!V:KH:
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 13 f6 cd 0f ee 26 b1 bb 0a c1 fa 25 10 72 86 86 66 e7 65 c1 5e b5 03 52 a1 91 86 47 25 22 8d 4e 76 a8 85 75 d4 79 87 d9 00 de 38 1d 4b 9e b8 c0 41 1a ea a9 73 33 ea e3 65 41 57 18 aa d1 18 7c 46 bf 5b db e2 97 a4 4b 72 2a 98 9c 6e 11 76 77 22 79 b8 ea 9a eb 6e f0 74 d3 2d b7 dd e1 c5 bb 7d 50 06 cd 60 84 08 15 26 5c 84 67 f3 39 5e 78 e9 95 d7 de 88 14 25 5a 8c d8 ff c7 d1 8c 17 32 61 85 19 c5 93 14 93 13 3a 15 4f 34 ca 26 06 e5 2a 54 aa 52 ad 46 2d ac 3a 38 f5 1a e0 11 10 91 90 35 6a 42 d1 cc 8c 2d d4 aa 11 82 19 a4 2b 0e 4d 87 8f 10 77 7a fb 18 df 34 3c 1f 49 c4 dd 88 43 39 e0 9d be 56 c6 3b 65 26 59 d3 51 54 c9 e1 79 9e e7 79 9e e7 b9 7d de 02 00 00 00 00 70 fb 08 40 52 40 a4 c9 90 25 07 4c 9e 02 45 4a 94 07 00 00 00 00 00 00 00 00 00 00 00 00 b0 cf 45 Data Ascii: &%rfe^RG%"Nvuy8KAs3eAW\|F[Krnvw"ynt-}P`&\g9^x%Z2a:O4&TRF-:85jB-+Mwz4<IC9V;e&YQTyy}p@R@%LEJE
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: fe d4 06 26 59 85 55 25 f3 4c ad 63 1a 57 5a db 5a d3 d7 6e 86 06 8a be 45 66 e2 c6 cd 59 12 a2 85 7d 4c 7b ee 86 3d 6d 23 22 11 45 ef 24 e8 56 e9 22 33 68 cc d1 f9 eb e8 2f 7d a6 bf 46 da 7d b3 63 d7 77 3f ec f9 69 3f 07 55 00 40 52 40 a4 c9 90 25 07 4c 9e 02 45 4a 94 a9 50 a5 46 9d 06 4d 5a b4 e9 d0 a5 47 9f 81 23 8e 3a e6 0c 33 67 99 3b c7 c2 79 17 5c 44 98 65 db 94 83 43 07 dc 71 1b 88 cb 2d 02 09 1a 42 a3 32 f3 54 8d ac d6 6d 20 35 6c 13 ef 84 07 49 13 ab 43 d6 53 b3 70 d1 10 5c 27 00 7f 1c 3c 92 b3 86 7d 5b 32 a0 af cf 34 cb 4d 44 18 9e 60 71 12 65 a0 ef 11 48 14 1a 38 e7 3b 30 47 10 49 64 0a 95 46 67 30 59 6c 0e 57 24 4e b6 50 f8 59 98 00 84 60 14 c3 09 92 e2 05 51 92 15 4a 95 5a a3 d5 e9 0d 46 93 d9 c2 eb 71 0c 3d 9f 95 62 76 ec 35 a7 42 96 64 7c Data Ascii: &YU%LcWZZnEfY}L{=m#"E$V"3h/}F}cw?i?U@R@%LEJPFMZG#:3g;y\DeCq-B2Tm 5lICSp\'<}[24MD`qeH8;0GIdFg0YlW$NPY`QJZFq=bv5Bd\|
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 2a 22 0c 27 48 8a 66 58 8e 17 44 49 56 54 4d 37 dc bf 28 6a 20 3a 72 0c 4c 08 04 23 28 86 13 24 45 33 2c c7 0b a2 24 2b 94 2a b5 46 ab d3 1b ce 47 a9 88 50 e3 ef 0c b9 30 f4 d2 06 ff f8 ad 13 77 d4 0a f7 e3 0a dc a1 28 80 0d 07 ae 84 44 09 3a 1f e0 33 5f f8 ca 37 76 d8 e5 3b 3f b4 b7 ab 9f a9 7d ec 20 e1 5b 03 0c 48 0a 88 34 19 b2 10 24 52 99 5c a1 d4 e8 00 50 6f 30 9a 50 cc 6c b1 da ec 0e 9c 20 29 9a 61 39 5e f0 e0 50 42 13 84 10 42 08 21 84 10 42 08 21 84 10 42 08 95 6e d0 98 77 45 fd 4d fa 4a e6 a2 04 90 f5 01 4b 24 15 11 a4 d0 a3 b2 bc 85 18 0a 31 0d 50 c7 24 36 50 29 a4 73 ad 79 be c3 2c 4b 53 2a 21 87 4a a3 33 98 2c 36 87 cb e3 0b 84 22 b1 44 2a 93 2b 94 2a 8f 3d f1 94 6a 27 83 49 93 2e 43 a6 2c d9 72 e4 ca 93 af 00 5c a1 22 c5 4a 20 5e a3 a2 6c c1 Data Ascii: "'HfXDIVTM7(j :rL#($E3,$+FGP0w(D:3_7v;?} [H4$R\Po0Pl )a9^PBB!B!BnwEMJK$1P$6P)sy,KS!J3,6"D+*=j'I.C,r\"J ^l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	689	OUT	GET /v2/search?facets=[[%22project_type:modpack%22]]&limit=10&index=follows&filters= HTTP/1.1 Host: api.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tauri.localhost Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	524	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-origin: * vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 300 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c823a87e4332-EWR
2024-07-26 19:26:31 UTC	845	IN	Data Raw: 34 38 32 31 0d 0a 7b 22 68 69 74 73 22 3a 5b 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 31 4b 56 6f 35 7a 7a 61 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 73 6c 75 67 22 3a 22 66 61 62 75 6c 6f 75 73 6c 79 2d 6f 70 74 69 6d 69 7a 65 64 22 2c 22 61 75 74 68 6f 72 22 3a 22 72 6f 62 6f 74 6b 6f 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 46 61 62 75 6c 6f 75 73 6c 79 20 4f 70 74 69 6d 69 7a 65 64 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6d 70 72 6f 76 65 20 79 6f 75 72 20 67 72 61 70 68 69 63 73 20 61 6e 64 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 77 69 74 68 20 74 68 69 73 20 73 69 6d 70 6c 65 20 6d 6f 64 70 61 63 6b 2e 20 31 2e 32 31 20 62 65 74 61 21 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 Data Ascii: 4821{"hits":[{"project_id":"1KVo5zza","project_type":"modpack","slug":"fabulously-optimized","author":"robotkoer","title":"Fabulously Optimized","description":"Improve your graphics and performance with this simple modpack. 1.21 beta!","categories":["fa
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 3a 22 75 6e 73 75 70 70 6f 72 74 65 64 22 2c 22 67 61 6c 6c 65 72 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 31 4b 56 6f 35 7a 7a 61 2f 69 6d 61 67 65 73 2f 30 36 35 39 63 36 34 66 37 62 39 30 30 38 37 62 38 33 61 63 34 37 63 62 35 38 30 36 62 34 36 33 35 30 61 39 34 63 37 65 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 31 4b 56 6f 35 7a 7a 61 2f 69 6d 61 67 65 73 2f 30 34 34 61 35 62 39 63 62 38 35 33 39 34 62 65 39 35 36 35 36 61 31 65 62 63 66 65 31 33 35 34 36 36 34 32 30 64 61 39 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 31 4b 56 6f 35 7a 7a 61 2f 69 6d 61 Data Ascii: :"unsupported","gallery":["https://cdn.modrinth.com/data/1KVo5zza/images/0659c64f7b90087b83ac47cb5806b46350a94c7e.png","https://cdn.modrinth.com/data/1KVo5zza/images/044a5b9cb85394be95656a1ebcfe135466420da9.png","https://cdn.modrinth.com/data/1KVo5zza/ima
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 5f 63 72 65 61 74 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 35 54 30 37 3a 30 38 3a 31 35 2e 37 38 37 39 31 32 5a 22 2c 22 64 61 74 65 5f 6d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 31 30 54 31 31 3a 30 39 3a 33 30 2e 39 31 31 33 31 36 5a 22 2c 22 6c 61 74 65 73 74 5f 76 65 72 73 69 6f 6e 22 3a 22 4f 42 39 77 49 55 58 74 22 2c 22 6c 69 63 65 6e 73 65 22 3a 22 4c 69 63 65 6e 73 65 52 65 66 2d 41 6c 6c 2d 52 69 67 68 74 73 2d 52 65 73 65 72 76 65 64 22 2c 22 63 6c 69 65 6e 74 5f 73 69 64 65 22 3a 22 6f 70 74 69 6f 6e 61 6c 22 2c 22 73 65 72 76 65 72 5f 73 69 64 65 22 3a 22 6f 70 74 69 6f 6e 61 6c 22 2c 22 67 61 6c 6c 65 72 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 56 55 6d 64 32 33 Data Ascii: _created":"2024-04-05T07:08:15.787912Z","date_modified":"2024-05-10T11:09:30.911316Z","latest_version":"OB9wIUXt","license":"LicenseRef-All-Rights-Reserved","client_side":"optional","server_side":"optional","gallery":["https://cdn.modrinth.com/data/VUmd23
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 39 33 38 31 33 61 34 62 66 36 33 64 63 32 30 31 33 35 66 61 33 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 35 46 46 67 77 4e 4e 50 2f 69 6d 61 67 65 73 2f 35 64 33 62 34 30 31 37 66 39 36 31 38 34 39 63 66 36 35 34 63 35 35 64 33 37 62 31 37 31 62 61 36 31 31 33 37 64 33 31 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 35 46 46 67 77 4e 4e 50 2f 69 6d 61 67 65 73 2f 33 62 62 35 66 38 65 37 62 37 65 38 32 65 63 32 32 37 63 39 61 36 38 30 31 32 62 61 34 64 37 31 32 38 62 65 38 37 62 38 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 35 46 46 67 77 4e 4e 50 2f 69 6d Data Ascii: 93813a4bf63dc20135fa3.png","https://cdn.modrinth.com/data/5FFgwNNP/images/5d3b4017f961849cf654c55d37b171ba61137d31.png","https://cdn.modrinth.com/data/5FFgwNNP/images/3bb5f8e7b7e82ec227c9a68012ba4d7128be87b8.png","https://cdn.modrinth.com/data/5FFgwNNP/im
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 69 6d 61 67 65 73 2f 39 64 61 36 31 37 63 37 61 66 33 65 34 64 62 38 36 32 64 62 38 36 66 39 32 32 34 63 62 37 65 64 30 61 38 39 64 30 36 31 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 35 46 46 67 77 4e 4e 50 2f 69 6d 61 67 65 73 2f 36 65 65 64 66 30 66 65 64 32 32 38 63 38 34 30 37 37 38 31 39 32 66 35 32 33 36 37 31 37 61 34 36 39 38 38 38 39 39 38 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 35 46 46 67 77 4e 4e 50 2f 69 6d 61 67 65 73 2f 61 34 34 64 34 37 64 35 63 65 66 36 34 38 36 35 66 38 32 65 37 33 66 36 37 65 39 32 62 66 31 32 37 64 31 64 30 61 36 37 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 Data Ascii: images/9da617c7af3e4db862db86f9224cb7ed0a89d061.png","https://cdn.modrinth.com/data/5FFgwNNP/images/6eedf0fed228c840778192f5236717a469888998.png","https://cdn.modrinth.com/data/5FFgwNNP/images/a44d47d5cef64865f82e73f67e92bf127d1d0a67.png","https://cdn.mod
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 34 2e 70 6e 67 22 2c 22 63 6f 6c 6f 72 22 3a 33 34 31 35 35 39 31 7d 2c 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 42 59 66 56 6e 48 61 37 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 73 6c 75 67 22 3a 22 73 6f 70 22 2c 22 61 75 74 68 6f 72 22 3a 22 48 79 70 65 72 53 6f 6f 70 22 2c 22 74 69 74 6c 65 22 3a 22 53 69 6d 70 6c 79 20 4f 70 74 69 6d 69 7a 65 64 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 6c 65 61 64 69 6e 67 2c 20 77 65 6c 6c 2d 72 65 73 65 61 72 63 68 65 64 20 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 20 6d 6f 64 70 61 63 6b 20 77 69 74 68 20 61 20 66 6f 63 75 73 20 6f 6e 20 70 75 72 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 62 72 69 Data Ascii: 4.png","color":3415591},{"project_id":"BYfVnHa7","project_type":"modpack","slug":"sop","author":"HyperSoop","title":"Simply Optimized","description":"The leading, well-researched optimization modpack with a focus on pure performance.","categories":["fabri
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 70 6e 67 22 5d 2c 22 66 65 61 74 75 72 65 64 5f 67 61 6c 6c 65 72 79 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 42 59 66 56 6e 48 61 37 2f 69 6d 61 67 65 73 2f 37 63 33 63 32 36 31 37 39 66 38 34 31 65 31 66 63 65 61 36 32 66 64 37 62 32 39 30 62 33 36 65 30 64 61 61 38 66 63 32 2e 77 65 62 70 22 2c 22 63 6f 6c 6f 72 22 3a 34 36 32 31 30 38 7d 2c 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 69 34 58 48 43 64 37 51 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 73 6c 75 67 22 3a 22 61 67 65 64 22 2c 22 61 75 74 68 6f 72 22 3a 22 78 52 34 59 4d 30 4e 44 22 2c 22 74 69 74 6c 65 22 3a 22 41 67 65 64 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 72 65 61 6c 69 73 Data Ascii: png"],"featured_gallery":"https://cdn.modrinth.com/data/BYfVnHa7/images/7c3c26179f841e1fcea62fd7b290b36e0daa8fc2.webp","color":462108},{"project_id":"i4XHCd7Q","project_type":"modpack","slug":"aged","author":"xR4YM0ND","title":"Aged","description":"realis
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 32 33 62 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 69 34 58 48 43 64 37 51 2f 69 6d 61 67 65 73 2f 61 32 33 61 61 65 66 35 66 37 35 34 33 65 61 37 31 36 64 36 31 36 32 37 66 63 63 30 61 61 39 62 30 65 66 39 63 61 38 61 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 69 34 58 48 43 64 37 51 2f 69 6d 61 67 65 73 2f 63 64 66 65 66 32 34 39 33 35 30 61 39 36 39 64 33 66 64 62 65 34 63 32 39 64 38 30 64 39 38 36 35 30 64 33 36 62 66 35 2e 70 6e 67 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 69 34 58 48 43 64 37 51 2f 69 6d 61 67 65 73 2f 65 63 30 33 61 65 62 34 30 39 31 64 63 Data Ascii: 23b.png","https://cdn.modrinth.com/data/i4XHCd7Q/images/a23aaef5f7543ea716d61627fcc0aa9b0ef9ca8a.png","https://cdn.modrinth.com/data/i4XHCd7Q/images/cdfef249350a969d3fdbe4c29d80d98650d36bf5.png","https://cdn.modrinth.com/data/i4XHCd7Q/images/ec03aeb4091dc
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 51 2f 69 6d 61 67 65 73 2f 31 66 66 63 31 33 39 35 65 61 32 36 66 64 38 66 38 39 64 39 62 62 66 32 63 38 39 35 62 38 62 39 36 35 33 31 66 32 63 31 2e 70 6e 67 22 2c 22 63 6f 6c 6f 72 22 3a 31 37 30 38 35 36 32 7d 2c 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 38 78 4f 53 6b 76 56 55 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 70 61 63 6b 22 2c 22 73 6c 75 67 22 3a 22 6c 6f 77 2d 72 65 73 2d 74 72 61 69 6c 65 72 2d 72 65 63 72 65 61 74 69 6f 6e 22 2c 22 61 75 74 68 6f 72 22 3a 22 6c 6f 77 72 65 73 62 6f 6e 65 73 22 2c 22 74 69 74 6c 65 22 3a 22 4c 6f 77 20 52 65 73 20 54 72 61 69 6c 65 72 20 52 65 63 72 65 61 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 70 61 63 6b 20 61 69 6d 73 20 74 6f 20 72 65 63 72 Data Ascii: Q/images/1ffc1395ea26fd8f89d9bbf2c895b8b96531f2c1.png","color":1708562},{"project_id":"8xOSkvVU","project_type":"modpack","slug":"low-res-trailer-recreation","author":"lowresbones","title":"Low Res Trailer Recreation","description":"This pack aims to recr
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 65 6c 6c 2d 72 65 73 65 61 72 63 68 65 64 20 43 6f 6e 73 6f 6c 65 20 65 64 69 74 69 6f 6e 20 6d 6f 64 70 61 63 6b 20 77 69 74 68 20 61 20 66 6f 63 75 73 20 6f 6e 20 70 72 65 73 65 72 76 69 6e 67 20 74 68 65 20 70 61 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 69 7a 69 6e 67 20 69 74 20 69 6e 74 6f 20 74 68 65 20 66 75 74 75 72 65 2e 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 62 72 69 63 22 2c 22 6c 69 67 68 74 77 65 69 67 68 74 22 2c 22 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 5d 2c 22 64 69 73 70 6c 61 79 5f 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 6c 69 67 68 74 77 65 69 67 68 74 22 2c 22 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 5d 2c 22 76 65 72 73 69 6f 6e 73 22 3a 5b 22 31 2e 32 30 2e 31 22 2c 22 31 2e 32 30 2e 34 22 2c 22 31 2e 32 30 2e 36 22 Data Ascii: ell-researched Console edition modpack with a focus on preserving the past and modernizing it into the future.","categories":["fabric","lightweight","optimization"],"display_categories":["lightweight","optimization"],"versions":["1.20.1","1.20.4","1.20.6"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49782	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	676	OUT	GET /v2/search?facets=[[%22project_type:mod%22]]&limit=10&index=follows HTTP/1.1 Host: api.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tauri.localhost Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	524	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-origin: * vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers vary: accept-encoding x-ratelimit-limit: 300 x-ratelimit-remaining: 299 x-ratelimit-reset: 60 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c823adea8c6f-EWR
2024-07-26 19:26:31 UTC	845	IN	Data Raw: 33 36 32 39 0d 0a 7b 22 68 69 74 73 22 3a 5b 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 41 41 4e 6f 62 62 4d 49 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 73 6c 75 67 22 3a 22 73 6f 64 69 75 6d 22 2c 22 61 75 74 68 6f 72 22 3a 22 6a 65 6c 6c 79 73 71 75 69 64 33 22 2c 22 74 69 74 6c 65 22 3a 22 53 6f 64 69 75 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 66 61 73 74 65 73 74 20 61 6e 64 20 6d 6f 73 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 6e 64 65 72 69 6e 67 20 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 20 6d 6f 64 20 66 6f 72 20 4d 69 6e 65 63 72 61 66 74 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 62 72 69 63 22 2c 22 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 2c 22 71 75 69 6c 74 22 5d 2c 22 64 Data Ascii: 3629{"hits":[{"project_id":"AANobbMI","project_type":"mod","slug":"sodium","author":"jellysquid3","title":"Sodium","description":"The fastest and most compatible rendering optimization mod for Minecraft","categories":["fabric","optimization","quilt"],"d
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 64 61 74 61 2f 41 41 4e 6f 62 62 4d 49 2f 69 6d 61 67 65 73 2f 64 38 34 33 31 33 65 36 66 35 37 64 63 39 65 37 38 39 36 39 36 31 64 62 64 32 64 66 63 32 36 38 39 64 34 38 32 37 35 38 2e 77 65 62 70 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 41 41 4e 6f 62 62 4d 49 2f 69 6d 61 67 65 73 2f 36 62 30 65 35 38 37 30 35 31 35 36 62 61 36 37 61 36 64 39 37 61 37 34 62 39 66 39 61 63 30 35 64 61 36 39 66 35 30 32 2e 77 65 62 70 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 41 41 4e 6f 62 62 4d 49 2f 69 6d 61 67 65 73 2f 62 36 38 31 61 39 65 38 37 64 61 61 35 33 61 30 65 38 35 33 33 36 61 38 39 34 64 62 37 30 34 32 37 30 30 37 31 34 39 62 2e 77 65 62 70 22 Data Ascii: data/AANobbMI/images/d84313e6f57dc9e7896961dbd2dfc2689d482758.webp","https://cdn.modrinth.com/data/AANobbMI/images/6b0e58705156ba67a6d97a74b9f9ac05da69f502.webp","https://cdn.modrinth.com/data/AANobbMI/images/b681a9e87daa53a0e85336a894db70427007149b.webp"
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 32 22 2c 22 31 2e 31 35 2d 70 72 65 33 22 2c 22 31 2e 31 35 2d 70 72 65 34 22 2c 22 31 2e 31 35 2d 70 72 65 35 22 2c 22 31 2e 31 35 2d 70 72 65 36 22 2c 22 31 2e 31 35 2d 70 72 65 37 22 2c 22 31 2e 31 35 22 2c 22 31 2e 31 35 2e 31 22 2c 22 31 2e 31 35 2e 32 2d 70 72 65 31 22 2c 22 31 2e 31 35 2e 32 2d 70 72 65 32 22 2c 22 31 2e 31 35 2e 32 22 2c 22 32 30 77 30 36 61 22 2c 22 32 30 77 30 37 61 22 2c 22 32 30 77 30 38 61 22 2c 22 32 30 77 30 39 61 22 2c 22 32 30 77 31 30 61 22 2c 22 32 30 77 31 31 61 22 2c 22 32 30 77 31 32 61 22 2c 22 32 30 77 31 33 61 22 2c 22 32 30 77 31 33 62 22 2c 22 32 30 77 31 34 69 6e 66 69 6e 69 74 65 22 2c 22 32 30 77 31 34 61 22 2c 22 32 30 77 31 35 61 22 2c 22 32 30 77 31 36 61 22 2c 22 32 30 77 31 37 61 22 2c 22 32 30 77 31 38 Data Ascii: 2","1.15-pre3","1.15-pre4","1.15-pre5","1.15-pre6","1.15-pre7","1.15","1.15.1","1.15.2-pre1","1.15.2-pre2","1.15.2","20w06a","20w07a","20w08a","20w09a","20w10a","20w11a","20w12a","20w13a","20w13b","20w14infinite","20w14a","20w15a","20w16a","20w17a","20w18
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 61 22 2c 22 32 32 77 34 35 61 22 2c 22 32 32 77 34 36 61 22 2c 22 31 2e 31 39 2e 33 2d 70 72 65 31 22 2c 22 31 2e 31 39 2e 33 2d 70 72 65 32 22 2c 22 31 2e 31 39 2e 33 2d 70 72 65 33 22 2c 22 31 2e 31 39 2e 33 22 2c 22 32 33 77 30 33 61 22 2c 22 32 33 77 30 34 61 22 2c 22 32 33 77 30 35 61 22 2c 22 32 33 77 30 36 61 22 2c 22 32 33 77 30 37 61 22 2c 22 31 2e 31 39 2e 34 2d 70 72 65 31 22 2c 22 31 2e 31 39 2e 34 2d 70 72 65 32 22 2c 22 31 2e 31 39 2e 34 2d 70 72 65 33 22 2c 22 31 2e 31 39 2e 34 22 2c 22 32 33 77 31 32 61 22 2c 22 32 33 77 31 33 61 22 2c 22 32 33 77 31 33 61 5f 6f 72 5f 62 22 2c 22 32 33 77 31 34 61 22 2c 22 32 33 77 31 36 61 22 2c 22 32 33 77 31 37 61 22 2c 22 32 33 77 31 38 61 22 2c 22 31 2e 32 30 2d 70 72 65 31 22 2c 22 31 2e 32 30 2d 70 Data Ascii: a","22w45a","22w46a","1.19.3-pre1","1.19.3-pre2","1.19.3-pre3","1.19.3","23w03a","23w04a","23w05a","23w06a","23w07a","1.19.4-pre1","1.19.4-pre2","1.19.4-pre3","1.19.4","23w12a","23w13a","23w13a_or_b","23w14a","23w16a","23w17a","23w18a","1.20-pre1","1.20-p
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 69 74 68 20 65 78 69 73 74 69 6e 67 20 4f 70 74 69 46 69 6e 65 20 73 68 61 64 65 72 20 70 61 63 6b 73 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 66 61 62 72 69 63 22 2c 22 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 2c 22 71 75 69 6c 74 22 5d 2c 22 64 69 73 70 6c 61 79 5f 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 66 61 62 72 69 63 22 2c 22 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 2c 22 71 75 69 6c 74 22 5d 2c 22 76 65 72 73 69 6f 6e 73 22 3a 5b 22 31 2e 31 36 2e 35 22 2c 22 31 2e 31 37 22 2c 22 31 2e 31 37 2e 31 22 2c 22 31 2e 31 38 22 2c 22 31 2e 31 38 2e 31 22 2c 22 31 2e 31 38 2e 32 22 2c 22 31 2e 31 39 22 2c 22 31 2e 31 39 2e 31 22 2c 22 31 2e 31 39 2e 32 22 2c 22 31 2e 31 Data Ascii: ith existing OptiFine shader packs","categories":["decoration","fabric","optimization","quilt"],"display_categories":["decoration","fabric","optimization","quilt"],"versions":["1.16.5","1.17","1.17.1","1.18","1.18.1","1.18.2","1.19","1.19.1","1.19.2","1.1
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 31 22 2c 22 32 31 77 33 37 61 22 2c 22 32 31 77 33 38 61 22 2c 22 31 2e 31 38 22 2c 22 31 2e 31 38 2e 31 2d 70 72 65 31 22 2c 22 31 2e 31 38 2e 31 2d 72 63 31 22 2c 22 31 2e 31 38 2e 31 2d 72 63 32 22 2c 22 31 2e 31 38 2e 31 2d 72 63 33 22 2c 22 31 2e 31 38 2e 31 22 2c 22 32 32 77 30 33 61 22 2c 22 32 32 77 30 35 61 22 2c 22 32 32 77 30 36 61 22 2c 22 32 32 77 30 37 61 22 2c 22 31 2e 31 38 2e 32 2d 70 72 65 31 22 2c 22 31 2e 31 38 2e 32 2d 70 72 65 32 22 2c 22 31 2e 31 38 2e 32 2d 70 72 65 33 22 2c 22 31 2e 31 38 2e 32 2d 72 63 31 22 2c 22 31 2e 31 38 2e 32 22 2c 22 32 32 77 31 35 61 22 2c 22 32 32 77 31 36 62 22 2c 22 32 32 77 31 37 61 22 2c 22 32 32 77 31 38 61 22 2c 22 32 32 77 31 39 61 22 2c 22 31 2e 31 39 2d 70 72 65 31 22 2c 22 31 2e 31 39 2d 70 72 Data Ascii: 1","21w37a","21w38a","1.18","1.18.1-pre1","1.18.1-rc1","1.18.1-rc2","1.18.1-rc3","1.18.1","22w03a","22w05a","22w06a","22w07a","1.18.2-pre1","1.18.2-pre2","1.18.2-pre3","1.18.2-rc1","1.18.2","22w15a","22w16b","22w17a","22w18a","22w19a","1.19-pre1","1.19-pr
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 72 65 61 74 65 64 22 3a 22 32 30 32 30 2d 31 31 2d 30 36 54 30 35 3a 31 31 3a 30 34 2e 37 32 35 30 35 38 5a 22 2c 22 64 61 74 65 5f 6d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 36 2d 32 31 54 31 34 3a 34 34 3a 34 32 2e 39 32 38 31 37 37 5a 22 2c 22 6c 61 74 65 73 74 5f 76 65 72 73 69 6f 6e 22 3a 22 6d 74 54 7a 52 4d 56 32 22 2c 22 6c 69 63 65 6e 73 65 22 3a 22 4d 49 54 22 2c 22 63 6c 69 65 6e 74 5f 73 69 64 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 73 65 72 76 65 72 5f 73 69 64 65 22 3a 22 75 6e 73 75 70 70 6f 72 74 65 64 22 2c 22 67 61 6c 6c 65 72 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 6d 4f 67 55 74 34 47 4d 2f 69 6d 61 67 65 73 2f 31 35 35 64 64 32 62 30 30 36 38 38 33 62 31 36 Data Ascii: reated":"2020-11-06T05:11:04.725058Z","date_modified":"2024-06-21T14:44:42.928177Z","latest_version":"mtTzRMV2","license":"MIT","client_side":"required","server_side":"unsupported","gallery":["https://cdn.modrinth.com/data/mOgUt4GM/images/155dd2b006883b16
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 6d 6f 64 22 2c 22 73 6c 75 67 22 3a 22 69 6e 64 69 75 6d 22 2c 22 61 75 74 68 6f 72 22 3a 22 63 6f 6d 70 35 30 30 22 2c 22 74 69 74 6c 65 22 3a 22 49 6e 64 69 75 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 6f 64 69 75 6d 20 61 64 64 6f 6e 20 70 72 6f 76 69 64 69 6e 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 65 20 46 61 62 72 69 63 20 52 65 6e 64 65 72 69 6e 67 20 41 50 49 2c 20 62 61 73 65 64 20 6f 6e 20 49 6e 64 69 67 6f 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 62 72 69 63 22 2c 22 71 75 69 6c 74 22 2c 22 75 74 69 6c 69 74 79 22 5d 2c 22 64 69 73 70 6c 61 79 5f 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 66 61 62 72 69 63 22 2c 22 71 75 69 6c 74 22 2c 22 75 74 69 6c 69 74 79 22 5d 2c 22 76 65 72 73 69 6f 6e 73 22 3a 5b 22 Data Ascii: mod","slug":"indium","author":"comp500","title":"Indium","description":"Sodium addon providing support for the Fabric Rendering API, based on Indigo","categories":["fabric","quilt","utility"],"display_categories":["fabric","quilt","utility"],"versions":["
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 34 22 2c 22 32 34 77 30 39 61 22 2c 22 32 34 77 31 34 70 6f 74 61 74 6f 22 2c 22 32 34 77 31 34 61 22 2c 22 31 2e 32 30 2e 35 22 2c 22 31 2e 32 30 2e 36 22 2c 22 31 2e 32 31 22 5d 2c 22 64 6f 77 6e 6c 6f 61 64 73 22 3a 31 31 34 39 39 34 33 37 2c 22 66 6f 6c 6c 6f 77 73 22 3a 36 30 39 38 2c 22 69 63 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6d 6f 64 72 69 6e 74 68 2e 63 6f 6d 2f 64 61 74 61 2f 39 73 36 6f 73 6d 35 67 2f 69 63 6f 6e 2e 70 6e 67 22 2c 22 64 61 74 65 5f 63 72 65 61 74 65 64 22 3a 22 32 30 32 32 2d 30 34 2d 32 31 54 31 30 3a 32 39 3a 34 31 2e 35 35 35 31 37 33 5a 22 2c 22 64 61 74 65 5f 6d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 37 2d 32 32 54 30 39 3a 31 34 3a 32 36 2e 30 33 38 36 35 35 5a 22 2c 22 6c 61 74 65 73 Data Ascii: 4","24w09a","24w14potato","24w14a","1.20.5","1.20.6","1.21"],"downloads":11499437,"follows":6098,"icon_url":"https://cdn.modrinth.com/data/9s6osm5g/icon.png","date_created":"2022-04-21T10:29:41.555173Z","date_modified":"2024-07-22T09:14:26.038655Z","lates
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 5f 76 65 72 73 69 6f 6e 22 3a 22 37 43 78 38 70 30 35 62 22 2c 22 6c 69 63 65 6e 73 65 22 3a 22 4d 49 54 22 2c 22 63 6c 69 65 6e 74 5f 73 69 64 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 73 65 72 76 65 72 5f 73 69 64 65 22 3a 22 75 6e 73 75 70 70 6f 72 74 65 64 22 2c 22 67 61 6c 6c 65 72 79 22 3a 5b 5d 2c 22 66 65 61 74 75 72 65 64 5f 67 61 6c 6c 65 72 79 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 22 3a 38 31 35 38 33 33 32 7d 2c 7b 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 75 58 58 69 7a 46 49 73 22 2c 22 70 72 6f 6a 65 63 74 5f 74 79 70 65 22 3a 22 6d 6f 64 22 2c 22 73 6c 75 67 22 3a 22 66 65 72 72 69 74 65 2d 63 6f 72 65 22 2c 22 61 75 74 68 6f 72 22 3a 22 6d 61 6c 74 65 30 38 31 31 22 2c 22 74 69 74 6c 65 22 3a 22 46 65 72 72 69 74 65 43 6f 72 65 22 2c Data Ascii: _version":"7Cx8p05b","license":"MIT","client_side":"required","server_side":"unsupported","gallery":[],"featured_gallery":null,"color":8158332},{"project_id":"uXXizFIs","project_type":"mod","slug":"ferrite-core","author":"malte0811","title":"FerriteCore",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49784	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	660	OUT	GET /onboarding/home.png HTTP/1.1 Host: launcher-files.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:31 GMT Content-Type: image/webp Content-Length: 362614 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=1023747 Content-Disposition: inline; filename="home.webp" ETag: "5b83c03015d7abae7750b58d0b547d92" Last-Modified: Sun, 14 Apr 2024 19:17:12 GMT Vary: Accept CF-Cache-Status: HIT Age: 3564 Expires: Mon, 26 Aug 2024 19:26:31 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c823ddfc5e79-EWR
2024-07-26 19:26:31 UTC	733	IN	Data Raw: 52 49 46 46 6e 88 05 00 57 45 42 50 56 50 38 4c 62 88 05 00 2f 77 49 98 11 cd 40 8c 24 39 6e 53 bb 00 fd 60 99 7f c0 c0 dd e2 21 02 88 e8 3f 03 b7 91 9c 64 a4 15 4b 0d 1d be 00 fc b6 4b f2 3c 0f 9e 76 4f 9e 3e 2c d8 08 5f e5 af d3 5a 23 40 87 04 1e 42 24 a5 de 69 88 b3 cf 10 81 47 a7 60 98 a6 88 32 f2 62 23 f8 20 52 82 7a c5 e8 4e 0e 5e bc 3c 8b 29 4f 27 07 d6 a1 7c c1 13 a1 c2 12 1c f9 96 ea 4e 8e e8 d5 eb cc 62 4b c9 20 af 46 59 09 6f c1 4d 25 d7 8c 6a 6c 04 85 0e 72 07 5a d0 96 92 c7 35 59 ad 48 52 c4 64 4b c9 31 b9 f2 19 b7 03 81 d1 93 45 08 2e 5b 4a 16 9a 26 f8 74 0a 13 61 03 e1 f8 69 59 49 e2 a4 54 c9 52 a2 58 a2 e4 4b d4 29 71 ae b4 dc b8 0b 23 9f 8d 2c b1 a5 34 69 fc 8c 72 4c ac 97 94 96 d0 04 12 84 3b 86 80 a2 c5 8e d2 5e b3 da 2f 2b 6d 02 99 07 Data Ascii: RIFFnWEBPVP8Lb/wI@$9nS`!?dKK<vO>,_Z#@B$iG`2b# RzN^<)O'\|NbK FYoM%jlrZ5YHRdK1E.[J&taiYITRXK)q#,4irL;^/+m
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: ff a8 7e a9 d6 4d fa d7 05 8a 37 08 09 09 61 e7 90 24 9f 9c 84 93 6b c6 a2 f7 20 3d de c8 a2 20 29 49 12 5a 4a 6e 5f 28 50 ec 23 a5 2d 95 64 c5 4a b3 10 b2 fd 52 00 01 86 82 02 1e 85 8c 76 b9 37 76 b3 21 67 a8 88 19 33 d8 05 46 63 51 3c 9a 8d 39 32 04 1e 93 0a 36 a4 31 32 04 1a a1 67 7a a1 27 de 67 d5 3b 42 fa 90 10 b5 9f 02 63 36 a4 de e7 7e 22 1f 72 f6 63 98 42 08 09 71 78 34 05 f5 28 1b 52 86 dc 8f ae db 7e da f6 63 f6 63 28 b2 8f 94 0d 1b 52 a3 c3 55 79 e1 92 57 ae 3a 5c 15 a4 4a 61 ce b3 d3 fd 27 c7 db 0c 18 ee 56 f1 2a 6f 99 3d 4b db 98 fb 89 da 41 61 c1 94 27 c7 db 1c 1f f2 bb e2 55 de 7e c9 fd 62 f6 24 e5 51 6e 2a e9 74 9f 0d 29 37 8f 48 ad de 10 eb 00 90 90 90 43 15 00 dc 90 c2 70 41 5e 6f c5 87 bf 73 ff 7d ed 5f 72 ff 92 fb 22 77 66 81 62 bb 61 Data Ascii: ~M7a$k = )IZJn_(P#-dJRv7v!g3FcQ<92612gz'g;Bc6~"rcBqx4(R~cc(RUyW:\Ja'Vo=KAa'U~b$Qnt)7HCpA^os}_r"wfba
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: d7 ee 73 3a b0 98 80 48 44 8c 11 75 0c 77 9f ce 41 95 4b d4 49 bc c6 18 c3 1d c4 0a 00 48 84 c4 f4 9d 75 c1 62 8a 94 a0 73 4e 9f 63 ef e4 8f d4 99 9d e4 a6 4f b2 d6 3a 41 7d 17 fc e4 1d aa 3a 3b c9 1f 1c 80 81 2b 27 1f 5a 5b 64 8f 00 80 99 99 f9 1b 00 a7 88 d0 6f 57 fc 92 78 af eb be ee cc 74 77 8c 91 89 0f ef 75 ee 3a cf 24 aa 2f 9e 6b 99 99 4e d3 5d a4 80 aa 2a e4 79 9e 97 e6 da f9 fb 02 66 0c a2 1c ef 18 99 d9 1d 3c 80 d2 54 01 01 40 a0 f9 33 00 b3 d6 94 0a 54 a1 0a 64 c2 2b 0a 68 b3 76 f0 f3 8f c7 b1 f3 4f 3b cc ac 6d e0 6b 33 83 36 fa ff cf 4b b6 9c 5d e8 ae e6 e9 73 ba fb f4 b9 f6 1d 9d 73 6d 1b 63 db f6 5c 8c cd 6b 2d db 6b 72 6d db c6 39 73 7d ce 1c 5b dd 7d ba bb 5a 55 d5 d5 7b ad da 7f ff 7f fb bf bf bf df 6f ef ea 4f 6c 3b 9d 65 fb 74 6c 9b a3 Data Ascii: s:HDuwAKIHubsNcO:A}:;+'Z[doWxtwu:$/kN]*yf<T@3Td+hvO;mk36K]ssmc\k-krm9s}[}ZU{oOl;etl
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: ad 80 b4 2d 07 68 06 29 81 e6 18 1c 8b e3 61 27 68 c1 9b c4 88 72 2c cd 5e 7f 90 81 36 ca a1 89 69 27 ea 2c da 66 25 65 a8 85 a8 67 f5 26 2a 69 6f 52 24 47 34 40 cb e5 85 1a 93 8e 64 88 0a a6 85 0d 02 bd 93 98 96 e1 c6 4c 73 c0 28 9e ad 0d d7 2c 6d ac c4 80 64 d6 d9 97 d6 1f 32 d8 b4 8a 88 5b b0 64 98 0c 29 84 2d 78 95 60 ce a6 90 8e 5a 06 a9 81 22 98 06 c4 a0 7f 82 2d c1 0b a5 19 59 f1 ca 09 c9 ec 9b 4a 03 d9 a0 97 66 68 12 a0 31 9c 85 00 39 fb 90 c8 7c 46 44 3b 1b 05 88 84 7b 32 94 12 4e d2 34 22 0d 43 c1 a5 98 ca 2e c3 a6 02 4a 1e ce 4e 32 ab 38 11 05 90 0d 29 0a f5 07 35 10 2d 82 da 2c 2a 10 b5 61 4c a3 45 af ea c4 c5 c4 12 64 69 dc b3 10 2e ef 6e 4e 48 ef ee 86 4c 43 94 bc 8a 18 32 a0 1d ab 2d 43 8e 34 2b c5 91 6b 20 76 66 bc 70 60 72 00 2a 5a 10 d0 Data Ascii: -h)a'hr,^6i',f%eg&ioR$G4@dLs(,md2[d)-x`Z"-YJfh19\|FD;{2N4"C.JN28)5-,aLEdi.nNHLC2-C4+k vfp`r*Z
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 15 1a 83 7a 58 e7 66 31 50 b7 e4 20 8c 68 24 1f 76 da ac 63 a0 59 1a d1 16 61 31 92 0b d1 2c 83 c6 ce 22 e5 04 6c 44 b1 3f 2c 8e f0 4d 64 04 87 1d 6f 93 6d ab b6 ed d8 52 ad ad f5 41 13 16 6e 3a 2c 08 51 30 e3 63 4c 66 ce fc 98 96 3f 8a 99 99 39 2f df 1b 2c 45 08 8e e2 48 07 f7 de 67 e3 a2 b9 26 8d 31 7a 6b d5 bb b6 6d cb f6 36 12 74 9c e7 75 3f 2f 7c df 27 c9 96 d9 0e 57 52 4c cd 98 6a a8 49 0f fc e3 99 45 98 6d 7e cf aa d0 1a 34 33 73 17 34 77 41 0a c2 e0 38 89 1d cb c2 4f 1f bd ef fb dc d7 19 1e 20 49 b2 dd 48 b6 ad 40 7f a6 4a 3e ed 99 4b 11 c9 f5 01 c0 42 55 f7 88 70 be ff 6f b5 24 7b ca 3e 27 3c 32 23 b3 aa bb ff ff ff ae 71 b8 95 19 19 1e e7 ec b5 e2 3c 7b 9f 13 91 71 d7 ca 5a ab e5 8d 93 38 35 4d bc 7d 88 53 17 87 f6 2e 9c 8d 3f ab d0 df c1 5d 1e Data Ascii: zXf1P h$vcYa1,"lD?,MdomRAn:,Q0cLf?9/,EHg&1zkm6tu?/\|'WRLjIEm~43s4wA8O IH@J>KBUpo${>'<2#q<{qZ85M}S.?]
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 2a 25 57 15 de 15 ce 63 76 05 26 ae 09 67 07 0c 3f c9 57 d8 16 b3 dd 61 a6 1d 3a 52 85 8d 23 ed 1d f1 ba 19 e9 91 7c d5 66 c6 27 8c 13 66 98 8e cc 6c 6f 29 cc e9 d0 91 76 49 e7 aa 02 23 75 38 73 82 c7 6c f7 c5 01 87 cc 0e c3 5c 56 38 dd 32 b3 bd a4 23 8d b4 2b cc 47 a9 70 cc 9e 09 b3 99 82 3b 0c 97 2b 9c 1d 7e c2 39 15 4e 87 43 51 00 db ba 6d 04 80 92 ec a4 db ee ff ff f2 b6 36 89 1f 12 40 41 80 db b8 91 54 00 e4 74 ef f5 ff 77 de db dd 11 89 b0 04 49 92 a0 d6 d2 1c c6 0c ec 49 44 46 0d c5 1f a8 01 84 b4 7b e0 73 ff df 6b 49 b2 94 b3 f7 39 27 32 ab 07 f1 fe 5f 27 dc ae cc 88 73 f6 59 9c fd 7f 76 9c ba af e0 db de 4d 0b 7f 72 ad 41 eb 51 68 ba 5d 34 a4 7b d0 7b 8d 77 37 5a 8b c7 19 95 e8 b6 d0 5d 2e 62 44 5b b3 56 35 ba d1 54 78 13 69 3e e6 ac 8d be 63 06 Data Ascii: *%Wcv&g?Wa:R#\|f'flo)vI#u8sl\V82#+Gp;+~9NCQm6@ATtwIIDF{skI9'2_'sYvMrAQh]4{{w7Z].bD[V5Txi>c
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: ac bc c4 ef 7b cd 07 b8 30 f9 47 18 6b e5 28 7a 34 42 82 e2 74 10 d2 57 e5 02 33 81 1e e8 1b 2a 74 57 5b 13 74 97 41 47 39 b9 bf 27 e0 0a 1e 2e 18 05 5d ea 3d f9 d5 2b 3d b6 52 84 2d 51 70 47 5e 09 1e ab 7e 54 6f e2 d2 20 1e 8e f8 ca ed e6 72 73 7f e3 5f d6 f7 10 5c 1e f6 42 60 77 88 0a 97 0a 57 5b 0e d9 9a b9 4f 71 99 fc ca 65 1c 44 d4 49 a1 00 4b 10 79 b4 80 48 40 f7 5c 6d ab 52 d4 1a ec 6e 50 2f dc 06 be db e0 ca 4e 36 67 bc e7 4d 2f 4a f0 6f 5b ad 48 09 8f 86 9c a2 62 4d e3 a0 5e d9 97 17 57 e4 e6 12 aa 34 63 8a e8 c1 34 97 0b 21 c7 67 f7 77 21 5c db d1 f7 c0 7b de f7 22 f2 cb 1e 4d 26 5c 1e 37 59 69 86 84 29 42 b6 25 ab a4 57 34 1d a5 5c 4c b0 22 80 b1 c5 38 8a 33 18 e4 3b 14 2e 6d dc b3 f7 bc e9 45 13 f7 2f 3a 86 7a 70 84 58 a9 95 62 43 cb 76 08 41 Data Ascii: {0Gk(z4BtW3*tW[tAG9'.]=+=R-QpG^~To rs_\B`wW[OqeDIKyH@\mRnP/N6gM/Jo[HbM^W4c4!gw!\{"M&\7Yi)B%W4\L"83;.mE/:zpXbCvA
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 5d b2 97 c9 24 53 b8 c6 ea a4 70 4d e6 58 70 c7 d5 2e f5 e0 c2 f5 35 78 e5 ea 6e cd 33 01 c5 c3 45 e4 a5 4b b8 ce f5 a6 ef 5a 7a 09 c7 5c ec 17 f6 d7 2b 6e 5b 3e e2 5a f7 b5 e6 76 0a d7 91 57 91 28 ca 80 f0 0f 8d 6b 69 06 3b 5e f1 4b 93 38 c2 d8 53 3e 20 a2 c5 e5 73 c3 b5 88 3a b9 e1 62 62 69 4e ae 43 50 e5 15 af 5c 33 73 ed 7e e1 22 4f 2e 01 68 06 6a 4a 37 51 01 e8 37 77 d7 e4 35 27 bc 64 c1 dd 4b ae ca bd f2 96 03 2e 03 07 dc 83 8b 55 5f 5e 7b 55 ac 90 e2 5d c2 3f ad 92 09 d8 a2 a8 4f 00 47 d0 a1 7c 34 a0 c2 05 66 5b 80 9c c1 1d e9 c2 e5 92 33 c2 72 b5 cd 4b 23 27 97 12 bc 70 35 0b 93 69 35 18 1f 75 9d dc 57 b9 df de 5d d9 9b 84 c7 54 6f 51 38 c9 95 25 b7 85 96 5c cb be d6 de 93 64 d5 77 0f ee e0 08 8e d7 8b e2 fc a8 32 c0 57 f5 bd 49 a9 3d 93 d3 14 2e Data Ascii: ]$SpMXp.5xn3EKZz\+n[>ZvW(ki;^K8S> s:bbiNCP\3s~"O.hjJ7Q7w5'dK.U_^{U]?OG\|4f[3rK#'p5i5uW]ToQ8%\dw2WI=.
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 2f 50 5a 43 59 af 97 fb ce 5b 72 16 39 45 ea d6 fe da 4c a9 19 12 c5 34 9d cc 7a dd c1 5a 3c ea 7d a9 29 de 72 e5 2c 01 2b d9 19 6f 9f 68 90 69 b9 c4 27 93 93 eb 85 7b 52 b5 bb 72 5d bb dc dd 57 ae c3 fd e8 c1 e0 3d de d5 7e 26 ef 59 71 6d 76 36 5e 71 15 ee 8e 0b 17 fd a2 f2 57 d6 92 8b c2 5d 36 d7 ad b8 47 3f bd 1f 8f be 16 5c 93 57 15 ee 22 87 42 13 97 d9 f7 fd 76 85 12 54 19 2b 8c 68 9a a4 d5 28 61 5a 2c ae 71 4d ef e4 a4 e3 34 f7 5c a7 94 03 4b b2 d7 47 54 2e 3e 29 57 fb e0 72 0f e4 2b 97 9e 73 ae ee 22 af 5c 98 e6 9e ca f1 d2 35 e2 85 fb 79 2f 77 75 5b 29 5e 73 c4 b5 f0 9e 89 7b c5 d5 9b c2 e5 c2 a5 c1 bd e2 4a b6 be e3 d1 15 77 e9 6b e1 35 27 bc aa 72 67 f6 2e 06 17 83 cb ba ed 9f 58 c8 4e 64 40 2d 3a 42 e0 89 26 6e 38 b2 1d 9c 2c c6 ac 0f 6c 83 55 Data Ascii: /PZCY[r9EL4zZ<})r,+ohi'{Rr]W=~&Yqmv6^qW]6G?\W"BvT+h(aZ,qM4\KGT.>)Wr+s"\5y/wu[)^s{Jwk5'rg.XNd@-:B&n8,lU
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 71 80 cb 86 b8 d0 28 b9 8c cf 55 fa 5c a5 4e 94 11 ae 52 6b a5 a2 d7 4d 02 72 a1 53 17 34 ea 2a 56 d6 a5 28 05 c5 8a ba e0 a9 bb d0 53 57 21 0a 95 0f 78 2f cc 55 3c 60 ec c3 91 a3 3d 04 7b b4 58 f1 e2 84 74 7c 70 2c 86 24 66 2f fc 5b dd 95 63 2f bb 4f bd c1 77 a6 e0 af e0 8b 53 8f 93 ac 34 9e c5 05 0a 58 81 d8 de f3 f1 7c 90 4f 2f d2 21 3d 30 be c3 63 4b cd c6 e9 b2 e6 62 2d 2a 4b 4e c9 31 06 34 60 95 16 6e e1 a2 87 db 58 9f 0b 7e 17 87 b8 b8 51 72 c1 00 62 30 c1 28 51 77 93 94 74 5c 10 9d 8a 5e 37 e9 c7 85 82 17 d4 75 75 57 d5 55 a8 a8 3b 57 51 57 77 4f dd a3 a7 d5 d5 c9 53 11 8a 3d d5 e5 16 77 17 76 95 69 76 1f e4 f1 62 ee 4e db 31 c4 14 65 35 45 57 cd d2 55 57 dd f5 d9 fb f2 f5 16 df 99 12 a4 30 99 a6 67 00 ba cd 73 71 a5 d5 37 5c ea ed 29 0a 31 87 3c Data Ascii: q(U\NRkMrS4V(SW!x/U<`={Xt\|p,$f/[c/OwS4X\|O/!=0cKb-KN14`nX~Qrb0(Qwt\^7uuWU;WQWwOS=wvivbN1e5EWUW0gsq7\)1<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49785	104.18.22.35	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:30 UTC	660	OUT	GET /landing-new/landing-lower.webp HTTP/1.1 Host: cdn.modrinth.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:31 UTC	670	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:31 GMT Content-Type: image/webp Content-Length: 14498 Connection: close CF-Ray: 8a96c823eb3e8cda-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 887877 Allow: GET, HEAD, OPTIONS Cache-Control: public, max-age=2678400 ETag: "ddeb2f3b1bb25ebc35c3f9551586ddb6" Expires: Mon, 26 Aug 2024 19:26:31 GMT Last-Modified: Mon, 27 Mar 2023 00:45:53 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD, OPTIONS X-Content-Type-Options: nosniff Server: cloudflare
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 52 49 46 46 9a 38 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 9f 05 00 a9 09 00 41 4c 50 48 a6 00 00 00 01 07 50 b3 88 08 08 48 92 fe ff 27 23 fa 9f f1 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 ff f2 03 56 50 38 20 ce 37 00 00 70 19 04 9d 01 2a a0 05 aa 09 3e ed 6e b2 56 29 b1 2f a9 20 b0 18 f2 20 1d 89 69 6e fc 7f 8f e9 88 5f 0a ff 9b ff f7 cc 4e 27 c1 Data Ascii: RIFF8WEBPVP8XALPHPH'#?????????????VP8 7p*>nV)/ in_N'
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: b1 e8 39 d3 0d 45 b6 94 2f 78 75 10 33 ce a1 c7 ab a2 e8 2e e5 5e d0 99 55 ef 68 1a 80 20 f2 98 31 56 9c 80 40 7a e8 f4 6d dc a4 67 ac 0d 52 49 71 3a 80 23 5e 40 1e 66 94 99 20 71 6e 71 e4 8b b5 c7 93 c0 4d 88 34 ee aa 48 04 d1 bf bb fe 17 6e 52 38 39 05 16 32 84 1e 03 a4 29 5a df d3 ad cc 82 de e1 86 8a 9b a3 d1 6c 91 72 b8 9a 67 69 50 9c 45 9a 01 fa 82 8b d1 dd 3c c0 9b 27 69 00 94 40 91 64 00 db 4c 25 31 9b 56 04 6d 47 3f 83 2c 82 89 ca 0d b6 5a 60 08 79 ad 13 a2 2c 2e 6e 19 29 a0 f5 81 5c 41 fe 5c 1b 0b a9 42 32 dd 59 05 c4 a4 c8 b3 00 81 86 9f cd ac bc 96 12 45 72 c1 1d be 65 52 be 4a c7 c6 81 07 22 d2 0a 4c a3 d7 09 c3 5e c0 60 ed 34 6d f4 ac 34 87 05 40 84 fd cd 22 b6 2b 76 2d ed dd ee d4 ae 50 03 af f6 08 04 65 43 97 07 57 23 cf 3f f0 38 e4 cd 74 Data Ascii: 9E/xu3.^Uh 1V@zmgRIq:#^@f qnqM4HnR892)ZlrgiPE<'i@dL%1VmG?,Z`y,.n)\A\B2YEreRJ"L^`4m4@"+v-PeCW#?8t
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: cf c9 67 ab eb 7d 42 02 50 f2 45 a4 1b 5c e4 36 29 94 c0 02 d9 23 67 7c 7c cf 9e d4 98 2b 70 49 9a 91 3c 5b 22 ef e1 4d 39 c2 15 0e 67 70 b1 d8 04 e8 3f 08 25 e6 63 d6 6d 2f 6a 5e c1 ae 1f c7 a6 4c 17 fd 66 80 05 7c 02 8c 8f d7 ba 29 15 74 81 02 73 ae fb 30 72 2e 5a b3 f4 e7 3c 8f 58 14 21 ba ee a1 f8 12 84 12 66 83 03 a9 35 00 44 ef 50 27 e8 ca a5 e5 48 ad 34 1e d1 73 85 14 fa 89 23 9c 17 75 cc 54 02 9d 16 32 84 51 98 06 db 12 a4 79 22 ff 68 a5 30 76 9a 0d 18 f3 c2 4d 22 b5 a0 22 54 42 71 80 db 3c 74 3f 2b 1a 04 d2 ab 4a b3 05 00 41 eb 02 de 0e 0a cb 01 35 4e cd 89 0b 73 0e 81 33 03 c2 44 b3 6c 91 7f f0 a5 09 41 db fb 10 21 fc 42 ff 61 3c ab cf 75 46 94 e9 22 e5 90 53 4c 18 a1 5d 80 01 29 03 3e d3 a2 72 98 2f fa ce 9c 94 bb 31 92 77 0a 1d 60 c1 62 a1 02 Data Ascii: g}BPE\6)#g\|\|+pI<["M9gp?%cm/j^Lf\|)ts0r.Z<X!f5DP'H4s#uT2Qy"h0vM""TBq<t?+JA5Ns3DlA!Ba<uF"SL])>r/1w`b
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: ee 00 0a 44 d8 de 0d b8 af 9b 29 22 4f 19 e9 13 e7 06 a5 30 1e 76 07 3f f6 c9 17 37 0c 79 9f ca 60 a1 39 bb 16 a4 6b e3 72 e6 05 7f a4 87 e0 57 3b 64 ac 28 a2 ed d7 4b fc c3 68 da 9c b2 a9 9b 83 3a c1 42 10 dd 72 e3 8b ec 13 c4 4c 18 88 b0 bd 74 1e a8 c1 cd 56 d8 c7 59 05 1b 2b cf 1a 72 0f 29 83 98 78 10 10 f0 23 d7 11 2c 00 18 93 09 21 0a 40 eb 64 b1 ac 55 3b 42 18 b3 a8 ee b9 03 1a 7e 36 69 8f 9e 8b 64 8b 4b 50 db 12 d0 9d 9b 1b 37 28 21 f1 5c ef 57 c7 a6 ee ad 3f ac d1 d0 0e 2f fb 40 9e 6b c1 bd 43 9c 8a 18 72 ec db 23 21 13 d3 88 c1 5a 02 b1 47 cf 6b 94 a1 18 00 18 57 40 f4 45 62 15 67 32 da 8f 98 3c e8 0e 0d 88 71 44 cc a2 23 60 43 3a c1 82 c6 80 b6 c9 17 37 13 f4 27 45 fa d1 9f ca 75 90 51 45 b2 95 fe c8 e3 93 4c 56 84 8f 08 f2 2e c1 86 52 9e 90 2b Data Ascii: D)"O0v?7y`9krW;d(Kh:BrLtVY+r)x#,!@dU;B~6idKP7(!\W?/@kCr#!ZGkW@Ebg2<qD#`C:7'EuQELV.R+
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 0a c1 86 2c 2e 59 02 60 9c 89 f4 c4 98 c7 59 05 14 78 b9 89 79 16 d9 22 e5 76 ab 6a 3e ea 2d 4b 83 50 77 c9 d4 4e 11 7f d6 6d 92 2d 57 06 4a 55 36 c9 17 2c 71 8e 52 3d 32 c1 40 10 7a c0 ae 9a cc 3f 8f 59 b6 48 b4 a9 20 36 e0 d8 81 f0 b1 ca 2e 2f 2c 6c 05 84 e7 6f cb 83 50 04 1e b0 2c 82 8a 7d 0d 40 10 7a c0 b2 0a 28 02 0f 58 16 67 45 b2 43 f0 25 b4 bf 0a b9 be 07 a6 9d 5a 28 74 08 35 25 c3 06 64 ff 01 07 ac 0b 20 a2 9f 43 50 04 1e b0 2c 86 3d 90 51 40 0f 99 98 c7 b2 0a 28 01 f5 e3 50 ac 19 ad 61 d7 be e1 40 76 9a c7 97 a0 92 28 06 65 11 89 3e 38 83 94 5e ad 92 22 d5 e8 28 c6 ef ac 08 6d e6 c2 e5 e8 7b 24 42 4c dd 1e 8f 26 02 c7 26 37 81 50 87 2d 58 57 41 eb 07 80 f2 2a a2 73 dd 5a 84 4d 05 6a c0 8c 8d 86 4c 2a 00 89 e3 72 b5 6a a6 eb 97 06 7f 31 66 3d 0c Data Ascii: ,.Y`Yxy"vj>-KPwNm-WJU6,qR=2@z?YH 6./,loP,}@z(XgEC%Z(t5%d CP,=Q@(Pa@v(e>8^"(m{$BL&&7P-XWAsZMjLrj1f=
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 2c a8 03 c5 71 3f 17 48 8c f1 05 6e e5 74 79 33 07 ae a7 0a 5f 98 15 60 60 8b 39 18 6a 00 a9 1c b1 7f 69 73 b7 e7 5c 17 a0 f5 85 c4 ae c9 33 a2 8b 96 ec aa 5d 0f 80 83 d6 88 08 ac 66 bf eb 83 ad 55 24 5c dc 2f d6 d4 b8 36 21 20 6e 32 88 b0 b9 7a 22 8a a6 26 1f 50 78 c2 39 78 a6 d7 07 5c b2 0a 4a b1 9c 88 b6 48 b9 65 82 a5 f6 c9 17 2c 86 3d 92 d0 7e a6 d6 61 6a 4a 53 ae 57 86 12 7a d9 6f 33 a1 c0 8c 96 a5 c1 a9 f4 35 00 41 eb 04 89 9f 97 6c b5 e1 45 00 54 6e 2c 3c 19 64 14 a0 25 98 19 e7 97 06 a0 09 44 01 07 ac 12 28 b9 64 0a 8b 57 d6 05 9a 59 58 b0 b9 64 14 56 72 0d 7c c1 ec 82 8a 0a 95 98 2d 76 6d 92 73 6f 35 00 41 eb a2 dc 1c 03 83 50 04 1f 85 6d 00 14 9d 22 3e c2 7b 1c 5f f5 9b 64 8b 96 41 45 08 83 f1 48 1b df 07 ac 0b f7 08 68 8a 48 75 43 d6 05 90 51 Data Ascii: ,q?Hnty3_``9jis\3]fU$\/6! n2z"&Px9x\JHe,=~ajJSWzo35AlETn,<d%D(dWYXdVr\|-vmso5APm">{_dAEHhHuCQ
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: b0 2c 9d 88 02 27 b1 c8 28 a0 08 45 14 fa 1a 92 8c 1e 96 e0 d4 01 1a f8 bf fc ec 82 8d ad 75 60 59 05 14 01 07 ac 0d e1 a7 17 fd 66 d9 22 e5 90 51 40 10 7a c0 b2 0a 28 02 0f 5d 16 e0 d4 01 07 ac 0b 20 a2 80 20 f5 81 64 15 30 bf eb 36 c9 17 37 0c 7a c1 a8 02 0f 58 1e d3 10 04 24 cc b2 0a 28 02 0f 96 f2 e0 d4 01 07 ac 0b 20 a2 80 20 f5 81 64 14 50 04 1e b0 2c 82 8a 00 83 d6 05 90 51 40 10 7a c0 b2 0a 28 02 0f 58 16 41 45 00 41 eb 02 c8 28 a0 08 3d 60 59 05 14 01 07 ac 0b 20 a2 80 20 f5 81 64 14 50 04 1e b0 2c 82 8a 00 83 d6 05 90 51 40 10 7a c0 b2 0a 28 02 0f 58 16 41 45 00 41 eb 02 c8 28 a0 08 3d 60 59 05 14 01 07 ac 0b 20 a2 80 20 f3 70 87 43 7d f3 0e d9 28 05 0c a8 2b ab be 66 97 2a 0c dd fa 69 a6 9a 69 a5 f5 d6 d1 f3 09 5e 21 cb 2f 3c 2c 30 c3 0c 34 b1 Data Ascii: ,'(Eu`Yf"Q@z(] d067zX$( dP,Q@z(XAEA(=`Y dP,Q@z(XAEA(=`Y pC}(+f*ii^!/<,04
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 7b ab 5f 4a 67 7c 00 4d a6 ce 2e 9d 44 6d 82 b5 99 b0 d6 16 97 83 fb db 92 f2 46 c2 7f c3 b0 43 7a fc f6 ab 7f 4a b0 32 29 6a d6 d7 d9 98 2c ad 9f 22 12 9d 7b ac cb 23 a6 20 fc f3 8f 01 da 64 bb 2c 60 46 60 c9 97 ad 9a bc a8 13 08 8c 0c 80 c3 f3 a2 77 e3 d4 bb bf 08 40 38 7c c3 88 c9 80 82 81 d2 0b 66 17 72 95 8b a2 a0 2e 71 0f 9c 73 9b 94 fb 25 f0 58 a6 b7 86 bd a2 23 ef ce 35 2b bb 10 eb c7 00 c6 25 63 ea f4 86 6b 66 da 8c f9 3d 9a 6f 9b af 23 08 72 b6 40 73 82 4e 1b f5 5f b1 b2 b0 21 df 1b a1 a9 87 de f0 aa 61 49 13 f6 83 91 42 2d e6 d2 47 1b 30 0f 67 8b 74 f9 df 54 53 56 b1 5d b2 d2 ab 5f 78 d7 de 41 c3 70 24 54 c2 69 0d b5 ad 5a 83 02 8c c0 c9 66 94 04 c0 49 ba 33 e2 9b 72 03 a9 0c 1f fe ec 9a 02 e4 d0 3c a8 83 ea 10 26 8c 60 73 f3 ba e1 69 19 59 48 Data Ascii: {_Jg\|M.DmFCzJ2)j,"{# d,`F`w@8\|fr.qs%X#5+%ckf=o#r@sN_!aIB-G0gtTSV]_xAp$TiZfI3r<&`siYH
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 92 e7 54 c8 e0 5e 62 f1 ef 5f e3 7b 20 94 2c 6f c2 05 a7 2c f2 45 ef ed 18 da 3f 8d df c3 89 0b b1 05 4d 08 49 dc 46 e3 72 3c 28 88 f2 d9 2e b5 93 3d 01 4d bd de 44 7d 50 86 fe ab 8b 48 b9 cd 6d 1e 02 0e bb c5 0b 1a 28 65 ea 15 11 d9 14 ec 4f 67 78 dc 19 44 8d 06 da 16 65 7b 06 cb 9b b5 c4 f3 22 68 d7 ac 0e 08 ce d1 30 84 e5 1e 4d ef 56 88 37 4f 29 09 e2 d2 33 10 9a 48 30 29 a3 fd 00 34 2d 23 18 da ef bd bd eb 1b 70 cc 1b a0 25 ab d4 b0 47 b5 7d d1 16 f9 11 b7 4d 04 8e 89 6b 01 67 cc 63 68 21 60 56 bf 54 0e 61 94 48 99 35 7e 16 4e 6f 13 a7 80 51 17 83 76 16 5e f2 2a 8c e9 2a 97 b3 44 07 e9 84 ba f4 b0 a7 0a de df a4 58 d9 d8 20 48 30 63 3e 93 4c b5 73 ff 09 a3 5e 44 04 1e 3b 34 ed bf ab 79 87 70 ab c1 a3 d9 90 33 11 73 02 4e ba d8 3b 88 50 65 24 df 0c f4 Data Ascii: T^b_{ ,o,E?MIFr<(.=MD}PHm(eOgxDe{"h0MV7O)3H0)4-#p%G}Mkgch!`VTaH5~NoQv^**DX H0c>Ls^D;4yp3sN;Pe$
2024-07-26 19:26:31 UTC	1369	IN	Data Raw: 80 ff 15 3a da a0 cd 32 74 6a 68 d2 e9 3a c6 c7 32 57 47 57 69 18 e1 bd 10 f0 39 ca 4a 34 b5 53 17 f5 d5 89 31 60 3b 1f 75 40 b6 d3 0b 11 13 aa da 31 63 76 09 9a 8b b5 a0 07 da f2 19 5d 53 cc 19 3b 46 30 b1 af 8a 1a b4 6f f8 87 07 47 56 ab 9e 9a 62 71 94 83 ad fd 6e 60 6f ae f9 f6 7c 11 9d db 21 5e ec b6 af d8 00 6f 73 38 24 f5 7a 02 77 9c 60 78 ba ea 43 8e a8 b3 8d 3d 73 5b a0 cb f5 c5 5c 60 0c 67 39 66 4c 6b d1 12 55 b3 18 01 e2 45 71 7c 3e f6 f9 d6 cc 84 fb 4a 34 90 41 bc 56 d4 be 30 97 e9 fe 61 45 f3 15 b5 1e 80 0e 49 3e e3 ba 06 32 84 3c da 73 19 30 e9 e1 b1 7c a0 39 8e e4 b8 bf 21 32 48 06 08 47 32 60 45 82 ed 19 5c 19 52 a7 2a 76 11 fc 8f d6 33 d8 b3 14 02 b6 90 3c 81 0f 7a 44 e6 5c 81 c8 e9 2c 64 14 cf 0a e4 05 b4 97 6b 5c dc 96 04 7e ae 72 80 14 Data Ascii: :2tjh:2WGWi9J4S1`;u@1cv]S;F0oGVbqn`o\|!^os8$zw`xC=s[\`g9fLkUEq\|>J4AV0aEI>2<s0\|9!2HG2`E\R*v3<zD\,dk\~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49786	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:33 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:34 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:34 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6497 Expires: Mon, 26 Aug 2024 19:26:34 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8368807727b-EWR
2024-07-26 19:26:34 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49787	130.211.34.183	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:34 UTC	722	OUT	POST /track/?verbose=1&ip=1&_=1722021993037 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1004 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://tauri.localhost Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tauri.localhost/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-07-26 19:26:34 UTC	1004	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 4c 61 75 6e 63 68 65 64 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 4d 69 63 72 6f 73 6f 66 74 25 32 30 45 64 67 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 61 75 72 69 2e 6c 6f 63 61 6c 68 6f 73 74 25 32 46 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 25 32 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Launched%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Microsoft%20Edge%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Ftauri.localhost%2F%22%2C%22%24browser_version%2
2024-07-26 19:26:35 UTC	594	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With, Content-Type access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://tauri.localhost access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Fri, 26 Jul 2024 19:26:35 GMT Content-Length: 25 x-envoy-upstream-service-time: 34 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-07-26 19:26:35 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49788	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:39 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:39 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:39 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6502 Expires: Mon, 26 Aug 2024 19:26:39 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8599eea4400-EWR
2024-07-26 19:26:39 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49789	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:46 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:46 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:46 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6509 Expires: Mon, 26 Aug 2024 19:26:46 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8832a90c32c-EWR
2024-07-26 19:26:46 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49790	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:51 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:52 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:51 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6514 Expires: Mon, 26 Aug 2024 19:26:51 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8a6bbd8434b-EWR
2024-07-26 19:26:52 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49791	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:26:57 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:26:57 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:26:57 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6520 Expires: Mon, 26 Aug 2024 19:26:57 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8ca2da5c337-EWR
2024-07-26 19:26:57 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49793	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:03 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:03 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:03 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6526 Expires: Mon, 26 Aug 2024 19:27:03 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c8edce178c42-EWR
2024-07-26 19:27:03 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49794	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:08 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:09 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:08 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6531 Expires: Mon, 26 Aug 2024 19:27:08 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c9111b41427f-EWR
2024-07-26 19:27:09 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49795	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:14 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:14 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:14 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6537 Expires: Mon, 26 Aug 2024 19:27:14 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c93539a58c93-EWR
2024-07-26 19:27:14 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49796	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:20 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:20 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:20 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6543 Expires: Mon, 26 Aug 2024 19:27:20 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c958af7d432b-EWR
2024-07-26 19:27:20 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49799	204.79.197.239	443	8032	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:21 UTC	1284	OUT	POST /componentupdater/api/v1/update?cup2key=6:Psc5SVEDIRT4qALgec2ZDeObQHhqoVqrWR6tfN-x7AA&cup2hreq=af8fb5df36948fbef26e13e0800af283dd2850efd2b852d86fffd6f77f987455 HTTP/1.1 Host: edge.microsoft.com Connection: keep-alive Content-Length: 4921 X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,kpfehajjjbbcifeehjgfgnabifknmdad,fppmbhmldokgmleojlplaaodlkibgikh,ndikpojcjlepofdkaaldkinkjbeeebkl,fgbafbciocncjfbbonhocjaohoknlaco,jbfaflocpnkhbgcijpkiafdpbjkedane,alpjnmnfbgfkmmpcfpejmmoebdndedno,ahmaebgpfccdhgidjaidaoojjcijckba,ojblfafjmiikbkepnnolpgbbhejhlcim,eeobbhfgfagbclfofmgbdfoicabjdbkn,ohckeflnhegojcjlcpbfpciadgikcohk X-Microsoft-Update-Interactivity: bg X-Microsoft-Update-Service-Cohort: 5839 X-Microsoft-Update-Updater: msedge-117.0.2045.47 Content-Type: application/json Sec-Mesh-Client-Edge-Version: 117.0.2045.47 Sec-Mesh-Client-Edge-Channel: stable Sec-Mesh-Client-OS: Windows Sec-Mesh-Client-OS-Version: 10.0.19045 Sec-Mesh-Client-Arch: x86_64 Sec-Mesh-Client-WebView: 1 X-Client-Data: CPnzygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-07-26 19:27:21 UTC	4921	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 40 6f 73 22 3a 22 77 69 6e 22 2c 22 40 75 70 64 61 74 65 72 22 3a 22 6d 73 65 64 67 65 22 2c 22 61 63 63 65 70 74 66 6f 72 6d 61 74 22 3a 22 63 72 78 33 2c 70 75 66 66 22 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6f 61 6e 6b 6b 70 69 62 70 61 6f 6b 67 65 63 66 63 6b 6b 64 6b 67 61 6f 61 66 6c 6c 69 70 61 67 22 2c 22 62 72 61 6e 64 22 3a 22 47 47 4c 53 22 2c 22 63 6f 68 6f 72 74 22 3a 22 72 72 66 40 30 2e 33 39 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6e 73 74 61 6c 6c 64 61 74 65 22 3a 2d 31 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 47 42 22 2c 22 70 69 6e 67 22 3a 7b 22 72 22 3a 2d 32 7d 2c 22 74 61 72 67 65 74 69 6e 67 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 41 70 70 43 6f 68 6f 72 74 22 3a Data Ascii: {"request":{"@os":"win","@updater":"msedge","acceptformat":"crx3,puff","app":[{"appid":"oankkpibpaokgecfckkdkgaoafllipag","brand":"GGLS","cohort":"rrf@0.39","enabled":true,"installdate":-1,"lang":"en-GB","ping":{"r":-2},"targetingattributes":{"AppCohort":
2024-07-26 19:27:21 UTC	949	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Pragma: no-cache Content-Length: 10728 Content-Type: application/json Content-Encoding: identity Expires: Mon, 01 Jan 1990 00:00:00 GMT ETag: 3045022079316C23E4EF49AB3A489E06C0F79DCC0FE8443C61C7CA7B6E5DF8E0E06D64AD022100A3C0245D6DCD2A6741E83D0A80C5CC9CD37437DD0F12776340A03CCBBF803AE7:af8fb5df36948fbef26e13e0800af283dd2850efd2b852d86fffd6f77f987455 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block x-cup-server-proof: 3045022079316C23E4EF49AB3A489E06C0F79DCC0FE8443C61C7CA7B6E5DF8E0E06D64AD022100A3C0245D6DCD2A6741E83D0A80C5CC9CD37437DD0F12776340A03CCBBF803AE7:af8fb5df36948fbef26e13e0800af283dd2850efd2b852d86fffd6f77f987455 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C7BE3D532CD04CB582E0A5D9A910F6DC Ref B: EWR311000104031 Ref C: 2024-07-26T19:27:21Z Date: Fri, 26 Jul 2024 19:27:20 GMT Connection: close
2024-07-26 19:27:21 UTC	3262	IN	Data Raw: 29 5d 7d 27 0a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 65 72 76 65 72 22 3a 22 70 72 6f 64 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 33 2e 31 22 2c 22 64 61 79 73 74 61 72 74 22 3a 7b 22 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 22 3a 32 31 2c 22 65 6c 61 70 73 65 64 5f 64 61 79 73 22 3a 36 34 31 36 2e 38 31 30 36 36 37 32 34 30 31 32 37 7d 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6f 61 6e 6b 6b 70 69 62 70 61 6f 6b 67 65 63 66 63 6b 6b 64 6b 67 61 6f 61 66 6c 6c 69 70 61 67 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b Data Ascii: )]}'{"response":{"server":"prod","protocol":"3.1","daystart":{"elapsed_seconds":21,"elapsed_days":6416.810667240127},"app":[{"appid":"oankkpibpaokgecfckkdkgaoafllipag","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[
2024-07-26 19:27:21 UTC	4096	IN	Data Raw: 75 6d 65 6e 74 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6e 64 69 6b 70 6f 6a 63 6a 6c 65 70 6f 66 64 6b 61 61 6c 64 6b 69 6e 6b 6a 62 65 65 65 62 6b 6c 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 6d 73 65 64 67 65 2e 62 2e 74 6c 75 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 61 61 64 30 39 61 37 32 2d 38 30 64 62 2d 34 66 66 65 2d 38 31 63 Data Ascii: uments":""}}},{"appid":"ndikpojcjlepofdkaaldkinkjbeeebkl","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[{"codebase":"http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/aad09a72-80db-4ffe-81c
2024-07-26 19:27:21 UTC	3370	IN	Data Raw: 64 33 2f 70 69 65 63 65 73 68 61 73 68 22 2c 22 48 61 73 68 4f 66 48 61 73 68 65 73 22 3a 22 6c 4b 53 62 7a 7a 51 58 6e 57 4a 52 38 34 41 6d 72 43 6a 56 61 32 4f 73 4f 4a 6a 67 72 72 4b 32 32 48 6e 4d 56 69 51 54 35 50 67 3d 22 7d 7d 7d 7d 5d 7d 2c 22 61 72 67 75 6d 65 6e 74 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 61 68 6d 61 65 62 67 70 66 63 63 64 68 67 69 64 6a 61 69 64 61 6f 6f 6a 6a 63 69 6a 63 6b 62 61 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 75 70 64 61 74 65 22 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6f 6a 62 6c 66 61 66 6a 6d 69 69 6b 62 6b 65 70 6e 6e 6f 6c 70 Data Ascii: d3/pieceshash","HashOfHashes":"lKSbzzQXnWJR84AmrCjVa2OsOJjgrrK22HnMViQT5Pg="}}}}]},"arguments":""}}},{"appid":"ahmaebgpfccdhgidjaidaoojjcijckba","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"noupdate"}},{"appid":"ojblfafjmiikbkepnnolp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49800	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:26 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:26 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:26 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6549 Expires: Mon, 26 Aug 2024 19:27:26 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c97c3e754277-EWR
2024-07-26 19:27:26 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49801	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:31 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:32 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:31 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6554 Expires: Mon, 26 Aug 2024 19:27:31 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c99fab0f429e-EWR
2024-07-26 19:27:32 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49802	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:37 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:37 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:37 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6560 Expires: Mon, 26 Aug 2024 19:27:37 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c9c5bbb715a3-EWR
2024-07-26 19:27:37 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49803	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:43 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:43 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:43 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6566 Expires: Mon, 26 Aug 2024 19:27:43 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96c9e93cef1906-EWR
2024-07-26 19:27:43 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49804	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:49 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:49 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:49 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6572 Expires: Mon, 26 Aug 2024 19:27:49 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ca0cae6f19bf-EWR
2024-07-26 19:27:49 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49805	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:27:54 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:27:54 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:27:54 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6577 Expires: Mon, 26 Aug 2024 19:27:54 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ca30386e726b-EWR
2024-07-26 19:27:54 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49806	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:00 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:00 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:00 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6583 Expires: Mon, 26 Aug 2024 19:28:00 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ca5379c27d16-EWR
2024-07-26 19:28:00 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49807	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:06 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:06 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:06 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6589 Expires: Mon, 26 Aug 2024 19:28:06 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ca77f83a0ca4-EWR
2024-07-26 19:28:06 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49808	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:11 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:12 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:12 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6595 Expires: Mon, 26 Aug 2024 19:28:12 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ca9b6a83425b-EWR
2024-07-26 19:28:12 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49809	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:17 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:18 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:18 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6601 Expires: Mon, 26 Aug 2024 19:28:18 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cac0da14421b-EWR
2024-07-26 19:28:18 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49810	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:23 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:24 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:23 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6606 Expires: Mon, 26 Aug 2024 19:28:23 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cae5aece7285-EWR
2024-07-26 19:28:24 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49811	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:29 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:29 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:29 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6612 Expires: Mon, 26 Aug 2024 19:28:29 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cb08edcd1977-EWR
2024-07-26 19:28:29 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49812	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:35 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:35 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:35 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6618 Expires: Mon, 26 Aug 2024 19:28:35 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cb2ceb8942ee-EWR
2024-07-26 19:28:35 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49813	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:40 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:41 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:41 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6624 Expires: Mon, 26 Aug 2024 19:28:41 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cb505cf332d3-EWR
2024-07-26 19:28:41 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49814	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:46 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:46 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:46 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6629 Expires: Mon, 26 Aug 2024 19:28:46 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cb73b99c41ba-EWR
2024-07-26 19:28:46 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49816	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:52 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:52 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:52 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6635 Expires: Mon, 26 Aug 2024 19:28:52 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cb974bd94385-EWR
2024-07-26 19:28:52 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49817	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:28:57 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:28:58 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:28:58 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6641 Expires: Mon, 26 Aug 2024 19:28:58 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cbbaed7e41d9-EWR
2024-07-26 19:28:58 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49818	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:04 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:04 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:04 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6647 Expires: Mon, 26 Aug 2024 19:29:04 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cbe09e760f65-EWR
2024-07-26 19:29:04 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49819	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:09 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:09 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:09 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6652 Expires: Mon, 26 Aug 2024 19:29:09 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cc03c821427c-EWR
2024-07-26 19:29:09 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49820	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:15 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:15 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:15 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6658 Expires: Mon, 26 Aug 2024 19:29:15 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cc26f9d642a5-EWR
2024-07-26 19:29:15 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:20 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:21 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:20 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6663 Expires: Mon, 26 Aug 2024 19:29:20 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cc4a1bc71921-EWR
2024-07-26 19:29:21 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49822	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:26 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:26 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:26 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6669 Expires: Mon, 26 Aug 2024 19:29:26 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cc6d5b891a07-EWR
2024-07-26 19:29:26 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49823	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:32 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:32 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:32 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6675 Expires: Mon, 26 Aug 2024 19:29:32 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cc911ddd432c-EWR
2024-07-26 19:29:32 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49824	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:37 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:38 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:38 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6680 Expires: Mon, 26 Aug 2024 19:29:37 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ccb4790d4216-EWR
2024-07-26 19:29:38 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49825	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:43 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:43 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:43 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6686 Expires: Mon, 26 Aug 2024 19:29:43 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ccd79d2e42fb-EWR
2024-07-26 19:29:43 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49826	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:49 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:49 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:49 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6692 Expires: Mon, 26 Aug 2024 19:29:49 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96ccfafc2fc431-EWR
2024-07-26 19:29:49 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49827	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:29:54 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:29:54 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:29:54 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6697 Expires: Mon, 26 Aug 2024 19:29:54 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cd1e1a0232dc-EWR
2024-07-26 19:29:54 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49828	104.18.22.35	443	7628	C:\Program Files\Modrinth App\Modrinth App.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 19:30:00 UTC	135	OUT	GET /detect.txt HTTP/1.1 accept: / user-agent: modrinth/theseus/0.7.1 (support@modrinth.com) host: launcher-files.modrinth.com
2024-07-26 19:30:00 UTC	522	IN	HTTP/1.1 200 OK Date: Fri, 26 Jul 2024 19:30:00 GMT Content-Type: text/plain Content-Length: 2 Connection: close ETag: "d784fa8b6d98d27699781bd9a7cf19f0" Last-Modified: Sat, 05 Aug 2023 16:15:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6703 Expires: Mon, 26 Aug 2024 19:30:00 GMT Cache-Control: public, max-age=2678400 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a96cd43bf9b0fa7-EWR
2024-07-26 19:30:00 UTC	2	IN	Data Raw: 20 0a Data Ascii:

Target ID:	0
Start time:	15:25:56
Start date:	26/07/2024
Path:	C:\Users\user\Desktop\Modrinth_Installer.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Modrinth_Installer.exe"
Imagebase:	0x400000
File size:	5'896'192 bytes
MD5 hash:	578B2C56CABFA2D2A29BC7C0184A8E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000003.1650987170.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000000.1645920546.000000000044B000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000003.1650987170.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	15:25:57
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Local\Temp\Modrinth.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\Modrinth.exe"
Imagebase:	0x5d0000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000001.00000002.4144099614.0000000012AD1000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000001.00000002.4131530813.0000000002AC1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000001.00000000.1650537993.00000000005D2000.00000002.00000001.01000000.00000005.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Local\Temp\Modrinth.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:25:57
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\Modrinth App_0.7.1_x64_en-US.msi"
Imagebase:	0xf90000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:25:57
Start date:	26/07/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff61ca10000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	15:26:03
Start date:	26/07/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "notepad" /tr "C:\Users\user\AppData\Roaming\notepad.exe"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	15:26:03
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	15:26:03
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\notepad.exe
Imagebase:	0x280000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\notepad.exe, Author: ditekSHen
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	15:26:04
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 825BAD695F088FC1F1B993AE41384B51 C
Imagebase:	0xf90000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	15:26:12
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\notepad.exe"
Imagebase:	0xe20000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	15:26:17
Start date:	26/07/2024
Path:	C:\Program Files\Modrinth App\Modrinth App.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Modrinth App\Modrinth App.exe"
Imagebase:	0x7ff7888a0000
File size:	10'292'856 bytes
MD5 hash:	9C91D4E56002B6395D6CDAD016AB65FB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	15:26:18
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-GB --mojo-named-platform-channel-pipe=7628.7672.3230350393833385459
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	15:26:18
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffdf53b8e88,0x7ffdf53b8e98,0x7ffdf53b8ea8
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	15:26:19
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	15:26:19
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2964 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	15:26:19
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3200 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	15:26:19
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1722015013436244 --launch-time-ticks=6966503381 --mojo-platform-channel-handle=3224 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	15:26:20
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\notepad.exe"
Imagebase:	0x6d0000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	15:27:01
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\notepad.exe
Imagebase:	0x3e0000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	15:28:00
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\notepad.exe
Imagebase:	0xc0000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	15:28:19
Start date:	26/07/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.modrinth.theseus\EBWebView" --webview-exe-name="Modrinth App.exe" --webview-exe-version=0.7.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4536 --field-trial-handle=1736,i,7591513521622056798,11814314458307727179,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Imagebase:	0x7ff7157d0000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	15:29:00
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\notepad.exe
Imagebase:	0x700000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	15:30:00
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Roaming\notepad.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\notepad.exe
Imagebase:	0xe40000
File size:	324'096 bytes
MD5 hash:	6F56F305614CBAD9E5737ACBEE0F8894
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	19.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	50%
Total number of Nodes:	6
Total number of Limit Nodes:	0

Executed Functions

Function 00007FFD9BAB1852 Relevance: 1.8, Strings: 1, Instructions: 528
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

SAN_^, xrefs: 00007FFD9BAB1908

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID: SAN_^
API String ID: 0-3629432999
Opcode ID: ac22ec66d453eca93a43ff2ae7aa966fca9f0c38d94329e6b8caf305ee9d3a41
Instruction ID: 44c5cc02ca8020076c11c32b2b051e007d01953741c40545652e62f879a98e79
Opcode Fuzzy Hash: ac22ec66d453eca93a43ff2ae7aa966fca9f0c38d94329e6b8caf305ee9d3a41
Instruction Fuzzy Hash: C0F1F730B29A194FE7A8EB7C84657B9B3D2FFA8304F04057DE05EC32D6CE68A8418741

Function 00007FFD9BAB79B1 Relevance: 1.6, APIs: 1, Instructions: 125
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CheckRemoteDebuggerPresent.KERNEL32 ref: 00007FFD9BAB7A60

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID: CheckDebuggerPresentRemote
String ID:
API String ID: 3662101638-0
Opcode ID: 038dd4c1ecc3b827370aca2edd76d64a7598bc4acfc4e28878d9f776fad1023c
Instruction ID: 1ada38d4d1c447ec9a314370a8f4ffc0582c53621704fede2f3973ea26916111
Opcode Fuzzy Hash: 038dd4c1ecc3b827370aca2edd76d64a7598bc4acfc4e28878d9f776fad1023c
Instruction Fuzzy Hash: 0931443190875C8FCB58DF58C8867E97BE0FF69321F05426BD489D7292DB34A802CB91

Function 00007FFD9BAB5FF6 Relevance: .5, Instructions: 472
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aff13d6def97cd295a42d8abeeaaa67104238dac670585c3ec463e0387b9d531
Instruction ID: 01def401e90432a1f5bb3698a510c1b2c37be842b3993c2ee1c0d1aabc9d60e0
Opcode Fuzzy Hash: aff13d6def97cd295a42d8abeeaaa67104238dac670585c3ec463e0387b9d531
Instruction Fuzzy Hash: 43F1B531A09A8D8FEBA8DF28C8557E977E1FF54310F04426EE85DC7295CB74E9448B81

Function 00007FFD9BAB6DA2 Relevance: .5, Instructions: 459
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcf216107984ca3fe4b0e983dc53f63306ade5dd2a408cc52847fd50cfa649be
Instruction ID: 556b576675002fffb598afaa67eb356ff2168c5b38c3bb24c4ab89893b06ad0e
Opcode Fuzzy Hash: fcf216107984ca3fe4b0e983dc53f63306ade5dd2a408cc52847fd50cfa649be
Instruction Fuzzy Hash: 47E1C630A09A4E8FEBA8DF28C8557E977E1FF54310F04426EE85DC72A5CF7499458B81

Function 00007FFD9BAB22C1 Relevance: .4, Instructions: 386
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 538e74b97d2b8326159c7ec9b6f08207dde8774b3c925f15801ab1364a637a2a
Instruction ID: b1f05efff82d4f98b45acfb54de45f1f2c8fca46f6d773b406fc975b4903db8e
Opcode Fuzzy Hash: 538e74b97d2b8326159c7ec9b6f08207dde8774b3c925f15801ab1364a637a2a
Instruction Fuzzy Hash: 67C1E630B1DA194FEB98E7AC94756B97AD1FF98304F05017EE05EC32E6DE68A9024741

Function 00007FFD9BAB2021 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59f3057a41c2129a150fffb947ec000da027d02e1eacc8a2d22694275ab305b5
Instruction ID: 918629fe119ddb6a6375ca75ea51e621a41acd93fa61056df5e77bbc5db82fc4
Opcode Fuzzy Hash: 59f3057a41c2129a150fffb947ec000da027d02e1eacc8a2d22694275ab305b5
Instruction Fuzzy Hash: A9510011B5E6C90FDBA6ABB868746A57FE5DF87225B0800FBE09DC71E7DD481806C342

Function 00007FFD9BAB8EFD Relevance: 1.6, APIs: 1, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlSetProcessIsCritical.NTDLL ref: 00007FFD9BAB8FD2

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID: CriticalProcess
String ID:
API String ID: 2695349919-0
Opcode ID: 2dd45b983013ee867257f28766306366fc85442df4ca6d20bdc8a61176560526
Instruction ID: 0ed2945bbbd39929641b64d29cc89dae8771bfd9f99bbcbc02f6a26187ab2914
Opcode Fuzzy Hash: 2dd45b983013ee867257f28766306366fc85442df4ca6d20bdc8a61176560526
Instruction Fuzzy Hash: 6941E33180C6588FD728DFA8D855AE9BBF0EF56311F04416EE09AC3692CB746846CB91

Non-executed Functions

Function 00007FFD9BAB9BF8 Relevance: 2.3, Strings: 1, Instructions: 1077COMMON

Download Yara Rule

Strings

, xrefs: 00007FFD9BABCD8F

Memory Dump Source

Source File: 00000001.00000002.4161321300.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_Modrinth.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 9a49be660a0599c0fd2bff4fd17430920fd89d12f369059580ca9bf79f9799df
Instruction ID: 4b87eda2b0d711b42afea5e9b0b2dc6d6e0a66ae0f670aa26139d5841bd73f96
Opcode Fuzzy Hash: 9a49be660a0599c0fd2bff4fd17430920fd89d12f369059580ca9bf79f9799df
Instruction Fuzzy Hash: 84729130B1D51E4BEBA8E7788465AB973D2EF98300F514579D02EC72D6EE2DED428B40

Analysis Process: notepad.exePID: 3300, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BAC2021 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 965a0bb7d41623457e174ff3869e5538eba1fd7f5b141ea317ddfd1cfe0cab8a
Instruction ID: 04aac07eb6eabfa955a82a588af9a8a7f4c9d0e4bf3ef17e2ab22c7d3b61d2d8
Opcode Fuzzy Hash: 965a0bb7d41623457e174ff3869e5538eba1fd7f5b141ea317ddfd1cfe0cab8a
Instruction Fuzzy Hash: BE51EF11A5E6C90FD7A6ABB858746B57FE5DF87215B0800FBE09DC71E7DD481806C342

Function 00007FFD9BAC11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2M_^, xrefs: 00007FFD9BAC1201

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID: 2M_^
API String ID: 0-3000290509
Opcode ID: 59581b7a9b96803c2a48afe74f0285b63b22f87e4996f40ce3f441a854d2f058
Instruction ID: aad6a5d988e8d188ac8f2de591101154d5abcb41e0b3156dd8575dffd5f1ed18
Opcode Fuzzy Hash: 59581b7a9b96803c2a48afe74f0285b63b22f87e4996f40ce3f441a854d2f058
Instruction Fuzzy Hash: 6B312822F1969A4FE755F7A898B14F87BB1EF69215B4402B7D089CB1E3DC182906C740

Function 00007FFD9BAC16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f49e55b33d7911a804b8ab0d9ac6358da8e6afdb360c44a69892059a1be7c9d
Instruction ID: 4d58294b65d94d1f1c35902a523c94efa297c587177a4ddeec5be958c8cde49e
Opcode Fuzzy Hash: 5f49e55b33d7911a804b8ab0d9ac6358da8e6afdb360c44a69892059a1be7c9d
Instruction Fuzzy Hash: 4D516361B59A0D4FDBA8BB7498B95F93BA1EF89318B811979E00EC33D7DD785900CB40

Function 00007FFD9BAC0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbf5fe6c4e06b64d32d813a718531ec126eb782b1bab59dfb0d1b3da630b18d3
Instruction ID: ab29362b1bb87b1b99a08a9af241049338373ad9cf417a12e1166e83e8547871
Opcode Fuzzy Hash: cbf5fe6c4e06b64d32d813a718531ec126eb782b1bab59dfb0d1b3da630b18d3
Instruction Fuzzy Hash: 7041B735B0991D8FDB54FBA898A1AFD77A1FF98316F40027AE009C7297CE24A5418B80

Function 00007FFD9BAC0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c121b16ba301b6dd30b89d4d9ff096aac51b1bad3e1faf76cf43b2f670802b51
Instruction ID: b63c468897adb1a14ffd89dc7f251605d833e86fad95ee7e489cf95c1175fbbd
Opcode Fuzzy Hash: c121b16ba301b6dd30b89d4d9ff096aac51b1bad3e1faf76cf43b2f670802b51
Instruction Fuzzy Hash: E2415A31F1D54A4FE769BB3C98616B833D1EF85215B4901BAD44DC72DBED186C828781

Function 00007FFD9BAC0608 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae86aff22adcd2fdd32e3e7f907382d4ac07e077b667f28e6612dd36cf665f7f
Instruction ID: ed69db3fe10fea7196a212766d59771b26409a9d175e6e4b8d88e4a5bc41c683
Opcode Fuzzy Hash: ae86aff22adcd2fdd32e3e7f907382d4ac07e077b667f28e6612dd36cf665f7f
Instruction Fuzzy Hash: FF31C321B199490FEB98FB6C586AAB9B7C2EF99315F0501BEF01EC32D7DD649C428341

Function 00007FFD9BAC0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction ID: 0957dea99b18cf366293353549c6eb2cdf6ad8e89a44d144dbc310374f7b3cbd
Opcode Fuzzy Hash: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction Fuzzy Hash: 40310621B0990A4FE794BBBC58697BD77D1EF98616F0502BAF01DC31D7DE2869018381

Function 00007FFD9BAC21F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1750698687.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa582435288474e1711f381a004fcaec1930ea04b41caee378b88d07e92e5cfe
Instruction ID: 7225ce5e9d722535bc2622ccb1f5fb2f0d0fc89403fde37d7b8e3170f55e1164
Opcode Fuzzy Hash: fa582435288474e1711f381a004fcaec1930ea04b41caee378b88d07e92e5cfe
Instruction Fuzzy Hash: 31012651A0EBC50FE766BB785C765717FE08F95314B0906AAF899C71F7EC486A408342

Analysis Process: notepad.exePID: 7292, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9BAB2021 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26f29d715209521c78ba983844884362f8f4a48fcfa3a3f9d8a68ad62a4ffc8a
Instruction ID: 5dfa52ebfb95fbec0ab2cf8374909dd6a1cc62a51616cf76da1dbe7985eaa28c
Opcode Fuzzy Hash: 26f29d715209521c78ba983844884362f8f4a48fcfa3a3f9d8a68ad62a4ffc8a
Instruction Fuzzy Hash: 76510F11B5E6C90FDBA6ABB868746A57FE5DF87225B0800FBE09DC71E7DD481806C342

Function 00007FFD9BAB11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2N_^, xrefs: 00007FFD9BAB1201

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID: 2N_^
API String ID: 0-2962387604
Opcode ID: 01212da10b354d412a9a737c2ed93067caa20732b9c01d32c29eb88a2da63d8a
Instruction ID: 66b78fee0bd3184083e0c7810ee4c66440be385b5276a61e5c90ee239fdfd27f
Opcode Fuzzy Hash: 01212da10b354d412a9a737c2ed93067caa20732b9c01d32c29eb88a2da63d8a
Instruction Fuzzy Hash: 60315B32E1979A4FE755E7AC98B24F87BB1FF65214F4501B7D19ACA1E3DC182902CB40

Function 00007FFD9BAB16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46d8185bb093fa5664e527158f13dbe122edcc3066cf41f3651ad7f392ade0cc
Instruction ID: e9ac4e3f54cd77e653664fc7a1a356b08985732e2bfb8ad8a973e43929e22abb
Opcode Fuzzy Hash: 46d8185bb093fa5664e527158f13dbe122edcc3066cf41f3651ad7f392ade0cc
Instruction Fuzzy Hash: 16518220B19A1D5FDBA8FB7884BA5B97AE1EF98214B810578F01EC72D6ED395900CB44

Function 00007FFD9BAB0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f78defe9bcfa9750efba45469f1768f144422212dcf545871512088351876e0
Instruction ID: 859ab8782a019a66ac5a41279dbe6c7c857723ba53b108bcf45065533bf7e423
Opcode Fuzzy Hash: 3f78defe9bcfa9750efba45469f1768f144422212dcf545871512088351876e0
Instruction Fuzzy Hash: 9C410A31B09A2D8FDB54FB68D865AED77E1FF98329F50417AE019C7286CE34A441CB80

Function 00007FFD9BAB0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbdbb57c0dd5047f8b85992c1ebb4dc64249aa330a8cd9b513a9ba0431420fff
Instruction ID: fd4413edfcbdac7bcb9dcdd2f90bb189ab0f42a248d92f31354f38d165eec586
Opcode Fuzzy Hash: dbdbb57c0dd5047f8b85992c1ebb4dc64249aa330a8cd9b513a9ba0431420fff
Instruction Fuzzy Hash: 43415831F0D64A0FE3A9AB3C98616B873D2EF85219B0900FAD45DC72DBDD18AC428741

Function 00007FFD9BAB0608 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33f8fdd3a6afbf35170b8c7eb5deacac8d1f5964605dd55ec93b57bda4178c72
Instruction ID: 1b9aae0f2879d94c060384baf7d38074f80cfbc7a0dd0885340742f4f07c0399
Opcode Fuzzy Hash: 33f8fdd3a6afbf35170b8c7eb5deacac8d1f5964605dd55ec93b57bda4178c72
Instruction Fuzzy Hash: D2310821B199490FEB98EB6C5869BB9B7C2EF98315F0501BEF01EC32D7DD545C428341

Function 00007FFD9BAB0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d5094e5baf12de27de32dd0c7c88f917a7af4a50e8a05daecdd3d1c2327086b
Instruction ID: d9859b08ae2c9feecc0a9e2df359e6c11aee490d6fc4b5cc87d910b92ee87f2e
Opcode Fuzzy Hash: 0d5094e5baf12de27de32dd0c7c88f917a7af4a50e8a05daecdd3d1c2327086b
Instruction Fuzzy Hash: 76312621B099194FE794BBBC5C697BC77D1EF98715F0402BAF01DC31E6DE2868018781

Function 00007FFD9BAB21F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1835253971.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57718db1b4f981f08176b305d4714680a8dc39851da0cca72420aad3583294a1
Instruction ID: a87d01a8321bda5e9551a6b808885e64a8d487ed3bf93f13486f910d728a04ad
Opcode Fuzzy Hash: 57718db1b4f981f08176b305d4714680a8dc39851da0cca72420aad3583294a1
Instruction Fuzzy Hash: E2012611A0EBD90FE766A7785C765717FE08FA1210F0901ABF8A9C60F7EC486A418742

Analysis Process: Modrinth App.exePID: 7628, Parent PID: 7052COMMON

Non-executed Functions

Function 00007FF788FB4ED4 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF788FB4F00
GetCurrentThreadId.KERNEL32 ref: 00007FF788FB4F0E
GetCurrentProcessId.KERNEL32 ref: 00007FF788FB4F1A
QueryPerformanceCounter.KERNEL32 ref: 00007FF788FB4F2A

Memory Dump Source

Source File: 0000000B.00000002.4182596816.00007FF7888A1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF7888A0000, based on PE: true

Associated: 0000000B.00000002.4182440360.00007FF7888A0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4186489239.00007FF788FDD000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4186489239.00007FF789202000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4187769729.00007FF789226000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4187924515.00007FF789227000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4188084240.00007FF789228000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4188084240.00007FF789230000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 0000000B.00000002.4188398677.00007FF789231000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_7ff7888a0000_Modrinth App.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 4044dcab957d82a187f8131a2b54bb98aa6b7a37d4113d778bfda43c0472df1c
Instruction ID: deb3e5b7db61e73bd276d7601b51047ffe6ccaabd7fd5db0aa999cf2e72f6057
Opcode Fuzzy Hash: 4044dcab957d82a187f8131a2b54bb98aa6b7a37d4113d778bfda43c0472df1c
Instruction Fuzzy Hash: 7A115E36B15F018AEB40EF60E8542B8B3A4FB19B58F940E35EA2D47BA4DF78D195C350

Analysis Process: msedgewebview2.exePID: 8064, Parent PID: 7716COMMON

Executed Functions

Function 00007FFDC31C65B0 Relevance: 4.5, Strings: 3, Instructions: 721COMMON

Download Yara Rule

Strings

)!Q, xrefs: 00007FFDC31C65C6
q:(, xrefs: 00007FFDC31C6687
q:(, xrefs: 00007FFDC31C6602

Memory Dump Source

Source File: 00000013.00000003.2194918770.00007FFDC31C4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFDC31C4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_3_7ffdc31c4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: )!Q$q:($q:(
API String ID: 0-1525450453
Opcode ID: f7f288e26495a23ac7db9cf5890cf1d6ce4a8532b53a1f421808013229d1eb9c
Instruction ID: cc4697b3c546b05d3303bcf03977b903c8926703baccb83cacd57d961ac3c606
Opcode Fuzzy Hash: f7f288e26495a23ac7db9cf5890cf1d6ce4a8532b53a1f421808013229d1eb9c
Instruction Fuzzy Hash: 4442FD71A18A498FEF55EF5CDCA9BAC7BF1FF18700F140079E548E7292DA38A8518B41

Non-executed Functions

Function 00007FFDC31C87B0 Relevance: 6.7, Strings: 5, Instructions: 427COMMON

Download Yara Rule

Strings

!^+, xrefs: 00007FFDC31C88F7
1^+, xrefs: 00007FFDC31C886A
Qi*, xrefs: 00007FFDC31C897B
Qi*, xrefs: 00007FFDC31C8B86
m6P, xrefs: 00007FFDC31C87C6

Memory Dump Source

Source File: 00000013.00000003.2194918770.00007FFDC31C4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFDC31C4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_3_7ffdc31c4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: !^+$1^+$Qi*$Qi*$m6P
API String ID: 0-2049409629
Opcode ID: 4c670ebdd72244d438eba78fbcc5f86775aaf921a1099a0c86fcacf40de83ec9
Instruction ID: c11f74eeafca731baaca7b3f2822a0b60afbb3743f41e3b8774ff261b2b88b4b
Opcode Fuzzy Hash: 4c670ebdd72244d438eba78fbcc5f86775aaf921a1099a0c86fcacf40de83ec9
Instruction Fuzzy Hash: 8BE15E71A18A499FEB59DF5CD8A5FACBBF0FF18710F0400B9E449E7293DA38A8518741

Function 00007FFDC31C63B0 Relevance: 5.2, Strings: 4, Instructions: 197COMMON

Download Yara Rule

Strings

q:(, xrefs: 00007FFDC31C6537
q:(, xrefs: 00007FFDC31C64E4
q:(, xrefs: 00007FFDC31C6553
MSS, xrefs: 00007FFDC31C63C6

Memory Dump Source

Source File: 00000013.00000003.2194918770.00007FFDC31C4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFDC31C4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_3_7ffdc31c4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: MSS$q:($q:($q:(
API String ID: 0-1701010209
Opcode ID: 5276b1059746c0c0b8d67c2d11d9ac18e5d9b2024401a9894ae4a7e3215ed4e1
Instruction ID: dbae255610870d37127ad1b3a7055e5f6fb13d46fe8b6b6712a091e9472d23fd
Opcode Fuzzy Hash: 5276b1059746c0c0b8d67c2d11d9ac18e5d9b2024401a9894ae4a7e3215ed4e1
Instruction Fuzzy Hash: 95717F71A1CA899FEF59DF5CD8A5BE87BF0FF19B10F0800B9E448D7193DA28A8418741

Function 00007FFDC31C5742 Relevance: 5.2, Strings: 4, Instructions: 196COMMON

Download Yara Rule

Strings

y"(, xrefs: 00007FFDC31C5890
9[R, xrefs: 00007FFDC31C5809
!#(, xrefs: 00007FFDC31C58E6
!#(, xrefs: 00007FFDC31C59CE

Memory Dump Source

Source File: 00000013.00000003.2194918770.00007FFDC31C4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFDC31C4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_3_7ffdc31c4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: !#($!#($9[R$y"(
API String ID: 0-4258883116
Opcode ID: 4aa864c0d3a61e534294ef8e1531075e1892eeef498d668198e50c97f816ce12
Instruction ID: 1bbc277a30595ff84865bfb6f2a720e2ea1d201c47970cd97e0ec51dd76fdbd9
Opcode Fuzzy Hash: 4aa864c0d3a61e534294ef8e1531075e1892eeef498d668198e50c97f816ce12
Instruction Fuzzy Hash: 51716E21B1864D8FEB59EF59D861BA87BB1FF58710F5040B9E44DE3293DE38AC408B42

Analysis Process: notepad.exePID: 8116, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9BAA2021 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17b885c63624da8c212243409b6175454481a50aaa838ac3a1f2431c0651bd79
Instruction ID: ed9fbcd37cde28930a7fc8aec1c5da880b059db70f6b998670a67df59cae4971
Opcode Fuzzy Hash: 17b885c63624da8c212243409b6175454481a50aaa838ac3a1f2431c0651bd79
Instruction Fuzzy Hash: 42510F11B5E6C90FD7A6ABB858746B57FE6DF87225B0800FBE08DC61E7DD481806C352

Function 00007FFD9BAA11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2O_^, xrefs: 00007FFD9BAA1201

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID: 2O_^
API String ID: 0-2974816419
Opcode ID: 82f86f4217f7a69e48fffc615b985ea2675a958abf7240086433ffbea167472f
Instruction ID: a646140a308f0831f0e63db8af7802d2f8afc6c6ee017dc24fab6a5326d22893
Opcode Fuzzy Hash: 82f86f4217f7a69e48fffc615b985ea2675a958abf7240086433ffbea167472f
Instruction Fuzzy Hash: 09312C22E1968A4FE755E7A898B14F87BB1EF69325B4501BBD089CB1E3DD182906C350

Function 00007FFD9BAA16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f459b76e5172df8bfc9a3b9b8cad8d8ba4caef4558863824f6e26d6c01c29f67
Instruction ID: b656ae1d1086358a0fc54a5c3fb4de789225df2e31e5140cdfb46d0821c0c862
Opcode Fuzzy Hash: f459b76e5172df8bfc9a3b9b8cad8d8ba4caef4558863824f6e26d6c01c29f67
Instruction Fuzzy Hash: 6351B861B59A0D0FDBA8FB7C986A5E97BA2EF8C314B414578E04EC32D6ED34A901C750

Function 00007FFD9BAA0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bddeb031cbd268c032c91a4343c73aeacd6bf8d1eb984092572291a714f3a213
Instruction ID: d6670b6d31d1a7a02b390bfb0913caa5cc35f3b60e09b2b7d69d2085b31b14aa
Opcode Fuzzy Hash: bddeb031cbd268c032c91a4343c73aeacd6bf8d1eb984092572291a714f3a213
Instruction Fuzzy Hash: 0D411B35B09A1E8FD754EB6CD861AED73A1FF98316F40017AE009C72D6DE34A846C790

Function 00007FFD9BAA0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 250ef507ea04cad6b0beba14f623456121d107fe524ffd4b762de55226b94bbb
Instruction ID: 7755d9cb627ee628c15b9ede63b12f51ba30e0608928fb5b78f48f1f4a6dad0d
Opcode Fuzzy Hash: 250ef507ea04cad6b0beba14f623456121d107fe524ffd4b762de55226b94bbb
Instruction Fuzzy Hash: 25414931F1D64A0FE76AEB3C98616B873D2EF85315B0900BAD44DC72DBDD19AC428751

Function 00007FFD9BAA0608 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02d0d0ef11f756b1fd4fe5eff59600e0523ce52f4fbde63aae1aae4c61af8595
Instruction ID: bb4922789d95b2c26cd7043b0fe2b8810fb6e66ba398e010ca5f54926b020f60
Opcode Fuzzy Hash: 02d0d0ef11f756b1fd4fe5eff59600e0523ce52f4fbde63aae1aae4c61af8595
Instruction Fuzzy Hash: 4931B621B199490FEB98EB6C5869BB9B7C2EF99315F0501BEF04EC32D7DD545C428341

Function 00007FFD9BAA0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30bd274f174432d659496ea3357c3b031467a194b3542679d4f69c3c6fba32e3
Instruction ID: 9c678d81ab72e7ce66578edf5742af59a718a39f09d54cd794f1ab9eb1af0a27
Opcode Fuzzy Hash: 30bd274f174432d659496ea3357c3b031467a194b3542679d4f69c3c6fba32e3
Instruction Fuzzy Hash: 1B310721B199094FEB94BBBC58697BD77D2EF98715F0402BAF00DC31D7DE2869018391

Function 00007FFD9BAA21F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1917310381.00007FFD9BAA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9baa0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fb5841f11d83d2bad659997dea79e0eccef9df0278210a502f9222582ee4000
Instruction ID: 7889c2b2b918b5c7850fcd7c8b111822bb4d9e400ef7368a6eb7ca315bd721d9
Opcode Fuzzy Hash: 7fb5841f11d83d2bad659997dea79e0eccef9df0278210a502f9222582ee4000
Instruction Fuzzy Hash: E8017B41A0EBC40FE3A6A77C4C360717FE18F95210B0901BAE898C60F7EC485E448352

Analysis Process: notepad.exePID: 4312, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BA92021 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5210e2a3f36571e8cfb2308c8656b2d7f6e5616ca37ba6dea1107ef8418986be
Instruction ID: 84b4d81aadca36959a174b35e416a40bc65ce8bd7dbd6815fe40b1fbf27cbaae
Opcode Fuzzy Hash: 5210e2a3f36571e8cfb2308c8656b2d7f6e5616ca37ba6dea1107ef8418986be
Instruction Fuzzy Hash: ED512110B4E6C90FE7AAABB858746A57FD1DF87225B0800FBE08DC71E7DD481806C342

Function 00007FFD9BA911F2 Relevance: 1.7, Strings: 1, Instructions: 489COMMON

Download Yara Rule

Strings

2P_^, xrefs: 00007FFD9BA91201

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID: 2P_^
API String ID: 0-2787835118
Opcode ID: c8d09bed03c64c971d1fdfaeb894c4bf939b8e8d95e1f1dfe4b851b592d3a33f
Instruction ID: 17009be33710ae1a6bb8f829d6200aa10db7f238c6fe5ac73d10fd7d46fae2bb
Opcode Fuzzy Hash: c8d09bed03c64c971d1fdfaeb894c4bf939b8e8d95e1f1dfe4b851b592d3a33f
Instruction Fuzzy Hash: 7521F522A0D7861FE765E7B858B14E93FB0EF66229B0941B7D499CE1E3DC18190A8351

Function 00007FFD9BA916A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9864c25fe22aea22fdcc2afce45b6c64482af369d22e9dfb27df46244d2d89f2
Instruction ID: 8b3dab10188b51eecfc74de9a2d5535fb98a15348c397a4de634bfb4dcdc85dc
Opcode Fuzzy Hash: 9864c25fe22aea22fdcc2afce45b6c64482af369d22e9dfb27df46244d2d89f2
Instruction Fuzzy Hash: 08518571B5AA0D5FDBBCF77894795AA3BB1EF88254B810979E00EC72D6DD386900C740

Function 00007FFD9BA90B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a427ff1cb801e7cd03d9f978bd1ed55a6c42c5cd111de1d89581c62ca2ad187c
Instruction ID: 20634bdd36242f4c54c109af80b1bb1cf30df4c66f0f9b2b4c4b423d2dffeac5
Opcode Fuzzy Hash: a427ff1cb801e7cd03d9f978bd1ed55a6c42c5cd111de1d89581c62ca2ad187c
Instruction Fuzzy Hash: B1410C35B0991D8FE758EBACD861AFE37A1FF98325F404679E008D7296CE34A541C790

Function 00007FFD9BA90E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 119098f5c4b2609861dc16ad7c99904c7fedf43312194915ebb6828c84901b29
Instruction ID: a3887f5e3c7a75dfa9a86839e419bb15713cfa0635c612d5e7fc6a13a6b85612
Opcode Fuzzy Hash: 119098f5c4b2609861dc16ad7c99904c7fedf43312194915ebb6828c84901b29
Instruction Fuzzy Hash: 5D416D31F1D54A0FE765EB3C98626B833D2EF85315B4900BAD48DC71DBDD196C428741

Function 00007FFD9BA90608 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abfef45c486dacd0a2cc8b449d164c8806af13302dc1ee0a78e1fb44015ccc7f
Instruction ID: d49329c503b9ffa6e4fbac02224de09d9347886953a4dc2bd18d34880447c337
Opcode Fuzzy Hash: abfef45c486dacd0a2cc8b449d164c8806af13302dc1ee0a78e1fb44015ccc7f
Instruction Fuzzy Hash: F031D621B199490FE79CEB6C5869BB977C2EF99215F0501BEF04EC32E7DD545C428341

Function 00007FFD9BA90CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8693ff6c53b58cc1b7ee992e7cf9955f682f6b1a09008cde8c4dc55942c6cf78
Instruction ID: 8a73f35885f5b6c09edadcea9b5ce0f07f21af4f3c406a0d940457ac6b13d17f
Opcode Fuzzy Hash: 8693ff6c53b58cc1b7ee992e7cf9955f682f6b1a09008cde8c4dc55942c6cf78
Instruction Fuzzy Hash: 47310622B099094FEB98BBBC58697BD77D5EF98655F0502BAF00DC32D6DE2869018381

Function 00007FFD9BA921F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.2324848149.00007FFD9BA90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffd9ba90000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01c897911245c3fd530739676dbf55abe03f1d97111a95c5f994681bc09c014c
Instruction ID: 5458c9a95f8517f202a7674105cba6c97a751f583ab95af99b07ceac760584ba
Opcode Fuzzy Hash: 01c897911245c3fd530739676dbf55abe03f1d97111a95c5f994681bc09c014c
Instruction Fuzzy Hash: D4014E51A0E7C50FE769A7785C755727FE0DF95210B0D05ABE895C60F7DC485A408342

Analysis Process: notepad.exePID: 1068, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BAB2021 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d866084b567f2d6e080ba367510f8ff1039f4a08670745d817ef39a5bd873a85
Instruction ID: 256dbe1101135cad43bc6edfad0c450275ce0f1db9db82e42fa8a73c9398743e
Opcode Fuzzy Hash: d866084b567f2d6e080ba367510f8ff1039f4a08670745d817ef39a5bd873a85
Instruction Fuzzy Hash: B6510F11B5E6C90FDBA6ABB868746A57FE5DF87225B0800FBE09DC71E7DD481806C342

Function 00007FFD9BAB11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2N_^, xrefs: 00007FFD9BAB1201

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID: 2N_^
API String ID: 0-2962387604
Opcode ID: ab1da8d2b51705064f100e4f3406994a0cbde82d27accd9be1838ecc28aca541
Instruction ID: be2d5af9f1105633456fe242c2a576d46cde1cde2f106b55f88bfa2d7ce18bda
Opcode Fuzzy Hash: ab1da8d2b51705064f100e4f3406994a0cbde82d27accd9be1838ecc28aca541
Instruction Fuzzy Hash: AC316822E1979A4FE755E7A898B14F87BB1FF65214F4901B7D09ACA1E3DC182902CB41

Function 00007FFD9BAB16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae7f88cac7d549f0a0771179521ae337dda70c9918f0b0c243e4f676a4c950d7
Instruction ID: dcbcc63fdd9dbe9e8a38aea0540371c2cbf6086e7eb3d1eefd587aa98b89ecb9
Opcode Fuzzy Hash: ae7f88cac7d549f0a0771179521ae337dda70c9918f0b0c243e4f676a4c950d7
Instruction Fuzzy Hash: 8951B661B59A1D0FDBA8FB7894B96A93BA5FF88314B41097CE01EC32D6ED785D00CB41

Function 00007FFD9BAB0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cae379350dbb181abddf186717bae0f10f31dc2ee3ecd4d426ef92e1aaa399e3
Instruction ID: e1ecf400de4587fc1b6abbfc6bf65184e79d4c5e01b1034aa9ddac7274e9a389
Opcode Fuzzy Hash: cae379350dbb181abddf186717bae0f10f31dc2ee3ecd4d426ef92e1aaa399e3
Instruction Fuzzy Hash: 8241F975B09A2D8FDB54EB6CD8A1AED77A1FF98325F40057AD019C72C6CE34A841CB80

Function 00007FFD9BAB0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 979e99df4c4cd6121f409415f4ff6952787bd7f8bbbfd5ad0e716acaa18f52c3
Instruction ID: e5f05ddd92cf2af4913ab4e62c609558e464e7dd1c6a0bf7aef9d73e3b6f87ad
Opcode Fuzzy Hash: 979e99df4c4cd6121f409415f4ff6952787bd7f8bbbfd5ad0e716acaa18f52c3
Instruction Fuzzy Hash: 26414931F1D64A0FE769EB3C98616B873D2EF85219B0900BAD45DC72DBDD19AC428742

Function 00007FFD9BAB0608 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 535545f48426dc56f50c02aaa44eebb5d48f88b12d7b00cbe3469b1258f22096
Instruction ID: 4fa7660f404ad0d0e21f528694ddca3bad5afa0319229b0a82d0c846c22e546a
Opcode Fuzzy Hash: 535545f48426dc56f50c02aaa44eebb5d48f88b12d7b00cbe3469b1258f22096
Instruction Fuzzy Hash: AC31F621B199490FEB98EB6C6869BB9B7C2EF98311F0501BEF01EC32D7DD545C428341

Function 00007FFD9BAB0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d5094e5baf12de27de32dd0c7c88f917a7af4a50e8a05daecdd3d1c2327086b
Instruction ID: d9859b08ae2c9feecc0a9e2df359e6c11aee490d6fc4b5cc87d910b92ee87f2e
Opcode Fuzzy Hash: 0d5094e5baf12de27de32dd0c7c88f917a7af4a50e8a05daecdd3d1c2327086b
Instruction Fuzzy Hash: 76312621B099194FE794BBBC5C697BC77D1EF98715F0402BAF01DC31E6DE2868018781

Function 00007FFD9BAB21F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2916737750.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ffd9bab0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07829b3b4b4b5bf28adc20d4aeb57edcc0ec406889f3626692535b8ebabd5628
Instruction ID: fa3f1430d17bf5cb2aecf4feb4e9b97915a84f2495c70e470e21dd5824b667c7
Opcode Fuzzy Hash: 07829b3b4b4b5bf28adc20d4aeb57edcc0ec406889f3626692535b8ebabd5628
Instruction Fuzzy Hash: 38012652A0EBD50FE765A7B86C765717FE08F91210F0A05ABE8A9C60F7EC486A418742

Analysis Process: notepad.exePID: 2364, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BAC2021 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04716deeee5fce2f8a588cb418e1b1821e3c93bdb40f6c21370ccd11633dc248
Instruction ID: 7be16251ea57331ab167b99bc5c7ba3349ab1dd0f4e960d94c3ecd864ec4a814
Opcode Fuzzy Hash: 04716deeee5fce2f8a588cb418e1b1821e3c93bdb40f6c21370ccd11633dc248
Instruction Fuzzy Hash: B751ED21A5E6C90FD7A6ABB858746B57FE5DF87225B0800FBE09DC71E7DD881806C342

Function 00007FFD9BAC11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2M_^, xrefs: 00007FFD9BAC1201

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID: 2M_^
API String ID: 0-3000290509
Opcode ID: 651559e99c4d2bd2aef701cbb658e0ef625c67f2ef7a5e3d319d3b3f0a1a1f97
Instruction ID: 94b924ea89c21de9e229be45ffd68f506c928a1896ebabf45cebc3270decad30
Opcode Fuzzy Hash: 651559e99c4d2bd2aef701cbb658e0ef625c67f2ef7a5e3d319d3b3f0a1a1f97
Instruction Fuzzy Hash: 14312822F1969A4FE755F7AC98B14F87BB1EF69214B4442B7D089CB1E3DC182906C740

Function 00007FFD9BAC16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa51e9044ed9f7bd9e0ca8f8f1dc078bd928653e2cf7c9ffe13aa73945ddd4e6
Instruction ID: 101ba7de22bb18da07b57ef4838411f35f422cf8ced6b1279108d4cddb0ec742
Opcode Fuzzy Hash: fa51e9044ed9f7bd9e0ca8f8f1dc078bd928653e2cf7c9ffe13aa73945ddd4e6
Instruction Fuzzy Hash: 81519671B59A0E4FDBA8FB7898795B93BE1EF88214B41097DE00EC72D6DD385900CB40

Function 00007FFD9BAC0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3145403e714c1746a1209e97a5268bbf82d020d40d3ace572851a54952d69b6d
Instruction ID: 3f1625380a849409d3bda9d10ef15d8eb37db8a0624879232afa562e35a32f7c
Opcode Fuzzy Hash: 3145403e714c1746a1209e97a5268bbf82d020d40d3ace572851a54952d69b6d
Instruction Fuzzy Hash: 5241B535B0A91E8FDB54FBAC9861AFD77E1FF98325F40027EE009C7296CE24A5418780

Function 00007FFD9BAC0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22bcab755419dc2a1a93281d22f2ca24bf53dc7b68e0bcbf183cd6d56e68d5d8
Instruction ID: d15e9cd206559b87df20e72904f0df330bd171803fdf791380702664b2f28ac8
Opcode Fuzzy Hash: 22bcab755419dc2a1a93281d22f2ca24bf53dc7b68e0bcbf183cd6d56e68d5d8
Instruction Fuzzy Hash: C9416B31F1D54A4FE769FB3C98626B833D2EF85215B4901BAD44DC71DBED186C828741

Function 00007FFD9BAC0608 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d19a78ee46ffeb14f7d2534c2a6fe76488bdc6363d362cd23ad2d8759d8013a
Instruction ID: 842df67a8e0341c8e1941b7a024013c30c387016c22c3134e56596b8c20d48c7
Opcode Fuzzy Hash: 6d19a78ee46ffeb14f7d2534c2a6fe76488bdc6363d362cd23ad2d8759d8013a
Instruction Fuzzy Hash: 1131C321B199490FEB98FB6C586AAB9B7C2EF99315F0501BEF01EC32D7DD649C428341

Function 00007FFD9BAC0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction ID: 0957dea99b18cf366293353549c6eb2cdf6ad8e89a44d144dbc310374f7b3cbd
Opcode Fuzzy Hash: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction Fuzzy Hash: 40310621B0990A4FE794BBBC58697BD77D1EF98616F0502BAF01DC31D7DE2869018381

Function 00007FFD9BAC21F1 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.3516769625.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bb17ceb1817d6c46711ce92f1983408de5188f2f80e667ac49d2b15a61f31a9
Instruction ID: cacea1b27f1db0184b87d52303ad8282af3cbfcca12d6690d9cf5549ac91e998
Opcode Fuzzy Hash: 2bb17ceb1817d6c46711ce92f1983408de5188f2f80e667ac49d2b15a61f31a9
Instruction Fuzzy Hash: 3B012651A0EBC50FE766BB7C5C665717FE08F91210B0906AEE899CB1F7EC486A408382

Analysis Process: notepad.exePID: 5864, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BAC11F2 Relevance: 1.8, Strings: 1, Instructions: 518COMMON

Download Yara Rule

Strings

2M_^, xrefs: 00007FFD9BAC1201

Memory Dump Source

Source File: 00000020.00000002.4134670603.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID: 2M_^
API String ID: 0-3000290509
Opcode ID: a3457cc78b3c3c320c1d899fef3d64f79f0a041f5a84f365588f409984daf812
Instruction ID: 588ba38c77ec7b7d72fc3c7450b1cd28802dd7fe53a732cf27d4544d97b49560
Opcode Fuzzy Hash: a3457cc78b3c3c320c1d899fef3d64f79f0a041f5a84f365588f409984daf812
Instruction Fuzzy Hash: D3312A22F1969E4FE755F7AC98B14F87BB1EF69224B4502B7D489CB1E3DC182806C744

Function 00007FFD9BAC16A9 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.4134670603.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be541ddeeebbdb76ef677937ac10f4f9e299806e3e4a1f0f18f334cd05b2cfff
Instruction ID: 748c77ebfc1305166e8874fb96d139c0d551a45f6f7a601d730db84c7a06a72b
Opcode Fuzzy Hash: be541ddeeebbdb76ef677937ac10f4f9e299806e3e4a1f0f18f334cd05b2cfff
Instruction Fuzzy Hash: 59517320B1AA4D4FDBA8FB79887A5B937E1FF99218B810579E01EC32D6DD795900CB40

Function 00007FFD9BAC0B2F Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.4134670603.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 621daca94b7c9aca3191f153b266a4885b11a237f6aadb815c7c7f2d1fe04211
Instruction ID: 3b905918844f773159624eb46d10234642beb73c57e2ea44c063d7152791f887
Opcode Fuzzy Hash: 621daca94b7c9aca3191f153b266a4885b11a237f6aadb815c7c7f2d1fe04211
Instruction Fuzzy Hash: 9B419735B0991D8FEB58FB689861AFD73E1FF98315F50427AE019C7296CE25A441C780

Function 00007FFD9BAC0E69 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.4134670603.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a1a22ae95c25c514eff1b035144b7d02f03dc8be6c49473bddf88d70427006d
Instruction ID: 08f17b61e25bdd4851365b8a2ca12a2a2ee9f28bca14129a0fbbcbd6503fde3d
Opcode Fuzzy Hash: 3a1a22ae95c25c514eff1b035144b7d02f03dc8be6c49473bddf88d70427006d
Instruction Fuzzy Hash: 30415A31F1D64A4FE769BB3C98616B833D1EF85219B4901BAD44DC71DBED1C6C828741

Function 00007FFD9BAC0CB9 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.4134670603.00007FFD9BAC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ffd9bac0000_notepad.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction ID: 0957dea99b18cf366293353549c6eb2cdf6ad8e89a44d144dbc310374f7b3cbd
Opcode Fuzzy Hash: e2c1ca901edc6bdd3a8a5868f8b0fb5c98e5c83cac69d65345888550ed8ed120
Instruction Fuzzy Hash: 40310621B0990A4FE794BBBC58697BD77D1EF98616F0502BAF01DC31D7DE2869018381

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Modrinth_Installer.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Operating System Destruction

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\6a222b.rbs

C:\Program Files\Modrinth App\Modrinth App.exe

C:\Program Files\Modrinth App\Uninstall Modrinth App.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\Modrinth App.lnk~RF6a340c.TMP (copy)

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modrinth App\~odrinth App.tmp

Windows Analysis Report
Modrinth_Installer.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre