I have analyzed (in sandboxed environments) older “Hackphoenix MultiMC” builds. Common technical traits: