60c59edec70f5cd7d1cf880e7a1475de6f73932dc23ae913f9c7dfeaf52489e1

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
30/01/2023, 21:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

minecraft.exe
Size

3.2MB
MD5

e8c86a94df2f0a4c5edfa59cfc420329
SHA1

4212cb446a2dce87225ca20ba45e10befb084062
SHA256

60c59edec70f5cd7d1cf880e7a1475de6f73932dc23ae913f9c7dfeaf52489e1
SHA512

273298886ff9466a28caae48e59d701fc1519ba39196ff5abac8c52b0d00e21be00e852ff453ed659fcf2c7cc980c138bf162a4dc8453d84fc542df451880e2e
SSDEEP

49152:6K15MHftob8+qaKSQ61eka2F5vYbCxTIQiqF3x4T6pf8C/wYE7XejTpNDTCbdczg:6KDItob8+Z86VSEiqF3iTJYEaUd1

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4246620582-653642754-1174164128-1000\Control Panel\International\Geo\Nation	minecraft.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4246620582-653642754-1174164128-1000\Control Panel\International\Geo\Nation	minecraft.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4246620582-653642754-1174164128-1000\Control Panel\International\Geo\Nation	minecraft.exe

Loads dropped DLL 18 IoCs

pid	Process
4600	minecraft.exe
4600	minecraft.exe
4600	minecraft.exe
1684	minecraft.exe
1684	minecraft.exe
1684	minecraft.exe
1684	minecraft.exe
1684	minecraft.exe
1788	minecraft.exe
1788	minecraft.exe
1788	minecraft.exe
4728	minecraft.exe
4728	minecraft.exe
4728	minecraft.exe
4704	minecraft.exe
4704	minecraft.exe
4704	minecraft.exe
648	minecraft.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4246620582-653642754-1174164128-1000\{02E7D91B-10AB-4B23-8901-DD35B7FABCA7}	minecraft.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1684	minecraft.exe
1684	minecraft.exe
1788	minecraft.exe
1788	minecraft.exe
4728	minecraft.exe
4728	minecraft.exe
4704	minecraft.exe
4704	minecraft.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 4600 wrote to memory of 1684	4600	minecraft.exe	88
PID 4600 wrote to memory of 1684	4600	minecraft.exe	88
PID 4600 wrote to memory of 1684	4600	minecraft.exe	88
PID 4600 wrote to memory of 1788	4600	minecraft.exe	90
PID 4600 wrote to memory of 1788	4600	minecraft.exe	90
PID 4600 wrote to memory of 1788	4600	minecraft.exe	90
PID 4600 wrote to memory of 4704	4600	minecraft.exe	92
PID 4600 wrote to memory of 4704	4600	minecraft.exe	92
PID 4600 wrote to memory of 4704	4600	minecraft.exe	92
PID 4600 wrote to memory of 4728	4600	minecraft.exe	91
PID 4600 wrote to memory of 4728	4600	minecraft.exe	91
PID 4600 wrote to memory of 4728	4600	minecraft.exe	91
PID 4600 wrote to memory of 648	4600	minecraft.exe	94
PID 4600 wrote to memory of 648	4600	minecraft.exe	94
PID 4600 wrote to memory of 648	4600	minecraft.exe	94

C:\Users\Admin\AppData\Local\Temp\minecraft.exe
"C:\Users\Admin\AppData\Local\Temp\minecraft.exe"
1⤵
- Checks computer location settings
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4600
- C:\Users\Admin\AppData\Local\Temp\minecraft.exe
  "C:\Users\Admin\AppData\Local\Temp\minecraft.exe" --type=gpu-process --field-trial-handle=2092,16504983630612716273,12015934420187732526,131072 --enable-features=CastMediaRouteProvider --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --log-severity=info --lang=en-US --launcherui --workdir="C:\Users\Admin\AppData\Roaming\.minecraft" --gpu-preferences=MAAAAAAAAADgACAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  - Loads dropped DLL
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\minecraft.exe
  "C:\Users\Admin\AppData\Local\Temp\minecraft.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,16504983630612716273,12015934420187732526,131072 --enable-features=CastMediaRouteProvider --lang=en-US --service-sandbox-type=network --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --log-severity=info --lang=en-US --launcherui --workdir="C:\Users\Admin\AppData\Roaming\.minecraft" --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1788
- C:\Users\Admin\AppData\Local\Temp\minecraft.exe
  "C:\Users\Admin\AppData\Local\Temp\minecraft.exe" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --field-trial-handle=2092,16504983630612716273,12015934420187732526,131072 --enable-features=CastMediaRouteProvider --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --log-severity=info --launcherui --workdir="C:\Users\Admin\AppData\Roaming\.minecraft" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2672 /prefetch:1
  2⤵
  - Checks computer location settings
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\minecraft.exe
  "C:\Users\Admin\AppData\Local\Temp\minecraft.exe" --type=renderer --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --field-trial-handle=2092,16504983630612716273,12015934420187732526,131072 --enable-features=CastMediaRouteProvider --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --log-severity=info --launcherui --workdir="C:\Users\Admin\AppData\Roaming\.minecraft" --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2664 /prefetch:1
  2⤵
  - Checks computer location settings
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4704
- C:\Users\Admin\AppData\Local\Temp\minecraft.exe
  "C:\Users\Admin\AppData\Local\Temp\minecraft.exe" --type=gpu-process --field-trial-handle=2092,16504983630612716273,12015934420187732526,131072 --enable-features=CastMediaRouteProvider --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --log-severity=info --lang=en-US --launcherui --workdir="C:\Users\Admin\AppData\Roaming\.minecraft" --gpu-preferences=MAAAAAAAAADoACAwAAAAAAAAAAAAAAAAAABgAAAIAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --log-file="C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt" --mojo-platform-channel-handle=1136 /prefetch:2
  2⤵
  - Loads dropped DLL
  PID:648

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{45BA127D-10A8-46EA-8AB7-56EA9078943C}
1⤵
PID:4716

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\game\cef.pak

Filesize
1.9MB

MD5
fa6c54291dcc13acc9dbec30923fe503

SHA1
8f157cc1ab1c18bf47305543b149604797cd6587

SHA256
455dd904ba68305f45682ae9c776a87cb2cb67bbe2d20e13cf97a812b68cf5f4

SHA512
135773297e6481f66d53a6a6bb887e0e0ba17ded9f76e2cef2db48a095a4c301eda84feb46f2a44425f4d34accd72765ee324d30a0692aa0c6d2c513166d51de

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\cef_100_percent.pak

Filesize
261KB

MD5
4cec40309dc9e4bf0f0cc915aeb6c9ac

SHA1
2da1b18943265f473f6b87b63132dbb2398ff487

SHA256
6267cb52b0ca5593cf402139e736eb4f1d6bc3f2eab4c6deb99934711050ef4f

SHA512
e684d4d735762e87c8556c164379f97f59b8b4077e2f4c49ae43610ca2a3994ad45839cf6edef4e741a4f1fb345413e4246fb5901dd52bd98c9a2f60866817c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\cef_200_percent.pak

Filesize
412KB

MD5
50a6d9ab74ebfaeda5baa28997149977

SHA1
1ad557cecf3d54a5fbe471ceab189d344fef347c

SHA256
c8f7697bdb4aa19722b975dd2126baf8c2edb5c0a58e2d64a6fefa4cbb8335ec

SHA512
31647191b432f82ff24a41a16abb77512bed2f3105791079d795304452e2bff89f618202023fd133cdc79f80d02647093edebca9e43c19cbd4d2bed4c8d35180

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\cef_extensions.pak

Filesize
1.2MB

MD5
c294094045246da46492204f2920d74f

SHA1
229367ac0be0a2da9d6338cba6f45c07f790140c

SHA256
8e8882c3d420231e1ddd1329e259cd8dc38fe392727aa74cfa4df57125d4cfb3

SHA512
03543e3c436a8b42b3f5bb942de468b4898172720ddef5597535b81347581ae0c89bf91e6bef3b91c796ca5bd393a865b2fa53ba70b2fda6578c640b14ab92cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\chrome_elf.dll

Filesize
810KB

MD5
4c8f4689e087a9843a79d6ec923f00df

SHA1
e6e37e19a04a55944bdfba6f9359bbe0ea8402fc

SHA256
8753acc450280e1c5ef5a09dac46d1fd873f1e66d771affc4b4afbfa3d59e3c4

SHA512
30b205bb4b391b23a7bb15248daa42af3ec34225d169a0d70325ea7e1422d298ea3376962e689311074346dd7aec3579789748e3aaa17b04ab72de6c0a0fc5e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\icudtl.dat

Filesize
10.0MB

MD5
9732e28c054db1e042cd306a7bc9227a

SHA1
6bab2e77925515888808c1ef729c5bb1323100dd

SHA256
27993e2079711d5f0f04a72f48fee88b269604c8e3fbdf50a7f7bb3f5bfc8d8e

SHA512
3eb67ab896a56dab4a2d6eea98f251affd6864c5f5b24f22b61b6acc1df4460d86f0a448f1983aac019e79ff930286c3510891be9d48ef07a93ff975a0e55335

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\launcher.dll

Filesize
59.3MB

MD5
03e38e3ad8d0c8ad8652c524c8a747d8

SHA1
0ed6423e26978b7e4241c2bc6e1477994f1312d9

SHA256
371f989bfd012b243941bfa13cf30661c6014aaa3bf5b9bce59ceef950a7021d

SHA512
265f0d2887f8c56883a8345a983777a1b9955e1713feb4f7374eb4db8182578265517edc859aec792a02d9aeea7162527df139da474f3d21485154bb6a441bf0

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\libcef.dll

Filesize
107.7MB

MD5
ccb97167048a6c3928e0d93c2ee6efb1

SHA1
a3d60c190e97fc3e45d2de6ef0abf31c13393ed1

SHA256
1d0794f5029198084a19e690823ba72255baf52f05f2fa5eb734ec48adacd9a2

SHA512
9b5dbffb00b01f2a50c2fa094b3c67043c81e5b238df98df2b219e39d183a72822e72d7e51486dbd6156846350355bd5402890b6da46ca01e405211367ebeeb6

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\locales\en-US.pak

Filesize
225KB

MD5
16a6914c9637812257e28b2cc4e6d809

SHA1
82212a642c90b51b8f67e517ee8782da841b658f

SHA256
8fe734f556d97e7c07d02e839a16565f7db88ca7091ca3903a9b153a68aaaf72

SHA512
6efbab68c8b036fd73951295a5f65718003deea46db838f6f263133452e09be45ce006246850facbb1922766f42c2ce1796722cecfcc8495921a7bcd9402a446

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\swiftshader\libEGL.dll

Filesize
334KB

MD5
9f68bdd2b3a78eeddaceb6f6c5cae5de

SHA1
1231c5b199ba2bc48cbafdbef813cdbd5dc3c42d

SHA256
ba6c8b38def6141447032c9a2b46b67a515276c88b30580703db24cf18d3f0d6

SHA512
4804c84b4183f9096d4f83cfc73df673467b45f4bd2613fbccc46739a2e8c2a887b36ca7d6785ab64ca17cb74f6c1fea74ca5587e24d2009030dc0604ce51443

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\swiftshader\libGLESv2.dll

Filesize
2.3MB

MD5
cdfe6b31acf7e3f398725bc57158a00b

SHA1
cbf51552d14ae32f4651d1770ece1dc9ba3e1d8e

SHA256
8b73aa808f2373c3ada15349e676f20a9dc644a8a7c21d5699288bee907fee14

SHA512
1ec2a3139bc5e38a3a15ef33d73791dce721fb864626a8767f834e11ff1a74ea70eb7aeb8107fe80b2bb7309df3cb620df7453d26524a0503929219b751249c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\swiftshader\libegl.dll

Filesize
334KB

MD5
9f68bdd2b3a78eeddaceb6f6c5cae5de

SHA1
1231c5b199ba2bc48cbafdbef813cdbd5dc3c42d

SHA256
ba6c8b38def6141447032c9a2b46b67a515276c88b30580703db24cf18d3f0d6

SHA512
4804c84b4183f9096d4f83cfc73df673467b45f4bd2613fbccc46739a2e8c2a887b36ca7d6785ab64ca17cb74f6c1fea74ca5587e24d2009030dc0604ce51443

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\swiftshader\libglesv2.dll

Filesize
2.3MB

MD5
cdfe6b31acf7e3f398725bc57158a00b

SHA1
cbf51552d14ae32f4651d1770ece1dc9ba3e1d8e

SHA256
8b73aa808f2373c3ada15349e676f20a9dc644a8a7c21d5699288bee907fee14

SHA512
1ec2a3139bc5e38a3a15ef33d73791dce721fb864626a8767f834e11ff1a74ea70eb7aeb8107fe80b2bb7309df3cb620df7453d26524a0503929219b751249c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\game\v8_context_snapshot.bin

Filesize
167KB

MD5
cdeec3342ce88d4de5426032a6bf6a53

SHA1
b36ec3c3b20a7a06ff282d696f12b51904b073a4

SHA256
ca88a3c7034da1de52d35823fba0fe80ba5376ab70cdc1841e6aaf25c1f5dd6e

SHA512
54874cd76589124b750fdae90be75e1acf374566d56352c15dbbee98c095aad0e56db142952a808b08e4817bf5f8e176ffdc4ff79110d8661ee4f7ede16b2ea9

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\launcher_cef_log.txt

Filesize
173B

MD5
43346375b0d4e286877ee6a1ac13d9a4

SHA1
8e4a63fe824946e8f9f2155f3c3ef581e6d61f9b

SHA256
8e8efb18a86ea076272e3226e00bb8129dff3d376ad0396f633134387c7a2ee3

SHA512
7689b3a22bdf4a4045193aa2c4b09074c393211c17c365059ee3dac806e6fba07cc5c8b15c44221fdddd5ebd590bc858705cb51076abf93cfc49634b7f4923f1

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\launcher_settings.json

Filesize
221B

MD5
275da51eada1d5e9bcc6183346341c6b

SHA1
006c2d700c311a19fdb98803a6fb2f879d4b9206

SHA256
6bd7abca90cefb1886f1e93d14a0f3cd6bc1d2b03caca066e708d188771d99e8

SHA512
ff29fb4ecc857ce63fe0a4d70c31c043489f8dd60378043de8b5222cc48992ec8d3eaa969285a6cbe9887c0ccd7fb23047f4947b87360e4e32c83098e5ad0fb7

Download Submit