bdcd9f5eec736e493ead3ad3a6ea517e4ec3a6525819f6e3761af02828089d5f

Analysis

max time kernel
236s
max time network
190s
platform
windows10-1703_x64
resource
win10-20240214-uk
resource tags

arch:x64arch:x86image:win10-20240214-uklocale:uk-uaos:windows10-1703-x64systemwindows
submitted
19/02/2024, 15:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

KLSetup.exe
Size

8.2MB
MD5

7a6436629a7b09b2213589bc671d3432
SHA1

c27069f89a57acea72a1346949406eb7f94cfa52
SHA256

bdcd9f5eec736e493ead3ad3a6ea517e4ec3a6525819f6e3761af02828089d5f
SHA512

71d60f2d4dcf1d92cf5be5eefdab7584ea4bdd9c4bea545bf47749a5b6ad7a4145e3306587447e2a243cfac24f3242a09a20309155a99a7440ec130154457f12
SSDEEP

98304:pEo5z/yF0ULxVuZ6xfqGeUVSO6HVyW2iI30Ge2JW9GU5M0xZE:pt5zqF0KqlXV/luWUU666

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 9 IoCs

pid	Process
340	KLauncher.exe
4484	javaw.exe
4720	javaw.exe
2920	KLauncher.exe
3564	javaw.exe
1112	javaw.exe
3892	KLauncher.exe
4696	javaw.exe
912	javaw.exe

Loads dropped DLL 64 IoCs

pid	Process
4484	javaw.exe
4484	javaw.exe
4484	javaw.exe
4484	javaw.exe
4484	javaw.exe
4484	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
3564	javaw.exe
3564	javaw.exe
3564	javaw.exe
3564	javaw.exe
3564	javaw.exe
3564	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe
4720	javaw.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 340	4928	KLSetup.exe	74
PID 4928 wrote to memory of 340	4928	KLSetup.exe	74
PID 4928 wrote to memory of 340	4928	KLSetup.exe	74
PID 340 wrote to memory of 4484	340	KLauncher.exe	75
PID 340 wrote to memory of 4484	340	KLauncher.exe	75
PID 340 wrote to memory of 4720	340	KLauncher.exe	76
PID 340 wrote to memory of 4720	340	KLauncher.exe	76
PID 2920 wrote to memory of 3564	2920	KLauncher.exe	79
PID 2920 wrote to memory of 3564	2920	KLauncher.exe	79
PID 2920 wrote to memory of 1112	2920	KLauncher.exe	80
PID 2920 wrote to memory of 1112	2920	KLauncher.exe	80
PID 3892 wrote to memory of 4696	3892	KLauncher.exe	82
PID 3892 wrote to memory of 4696	3892	KLauncher.exe	82
PID 3892 wrote to memory of 912	3892	KLauncher.exe	83
PID 3892 wrote to memory of 912	3892	KLauncher.exe	83

C:\Users\Admin\AppData\Local\Temp\KLSetup.exe
"C:\Users\Admin\AppData\Local\Temp\KLSetup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:340
- - C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -version
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4484
- - C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -XX:+UseG1GC -Dfile.encoding=UTF-8 -jar "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4720

C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe
"C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2920
- C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -version
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3564
- C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -XX:+UseG1GC -Dfile.encoding=UTF-8 -jar "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
  2⤵
  - Executes dropped EXE
  PID:1112

C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe
"C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3892
- C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -version
  2⤵
  - Executes dropped EXE
  PID:4696
- C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe" -XX:+UseG1GC -Dfile.encoding=UTF-8 -jar "C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
  2⤵
  - Executes dropped EXE
  PID:912

C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe
"C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe"
1⤵
PID:808

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe

Filesize
2.1MB

MD5
1b727816d4ec358e9f00c50db69dbbce

SHA1
8ce1f4ba637913789befcdf21e11b6e0f9d60ed1

SHA256
053f0f0d662ea5be135e43905c317fd75eb5b23c0b439ae1e59277a548acaa18

SHA512
87a70cc651d20d70986c98d867c7f14bb84ffdd663e1f1a028894f4e2d5bf0809b635e40563b035510338e12886f0b6cda9e71763e91c352a04d4b96dd5b036c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe

Filesize
1.8MB

MD5
d143e0af30d35ac991e6f4ceef3f3b3a

SHA1
1a624ad9a537aa95e0094c7386863abf843db2b7

SHA256
df2697533f46d07416eafe3481b62559210e117715d54e4a9d71cdea59af1bf1

SHA512
7066a7f22adbbc73d33ebcbad7fb7c6a92c04d955472bc92a52c83f6b91bca3228a8495852ee311c75be9afa9f3142dafe4632dfbe01e2d44853fecc35ac1e7a

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\KLauncher.exe

Filesize
128KB

MD5
777da08bb1ce344ff5d7d6632be10642

SHA1
33ae1e99c7efe6560d0064572c2f3fa2cedf289f

SHA256
d718b8ac029c4c4cfd71de29dc2a8d306f1d18b7033b568449e9cf0300ef175e

SHA512
a3f4d6171cd96824613e68e6055af5d11d4bf5c3ba12b6c75ad6dc91c2617d9d6b08a20e9d0f6cf670120dd39369eb87291e60efaaabe1984215ede90ea72a8d

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\java.dll

Filesize
159KB

MD5
534291e0c9e545e5a8366ce722edf218

SHA1
a86677d8dfdc830a1584a42e4fa1a2b0f2b54829

SHA256
f4cb9778927c11672832dc1d0f17aa8cc43ac4366a4633cb41f49795369cf943

SHA512
b0c099018ab0c1451bce5dff03ffb764af8b00e746ed99ba6d5fe851295e671888def9389b5d8abd0c3d1d194c2eed785bb0558f7c1ec493cac9a90890d42ff6

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\javaw.exe

Filesize
266KB

MD5
ae3d5cbfd177ce9478f6b332711aa4f5

SHA1
dd01deaef2cf0777df364a848400791b3aad5eaf

SHA256
54eac482e71440e7665a255f8fb9a7dd87b102a21df69e140041c70c86094122

SHA512
77e4781bc77892646c74ebca547070235c131b59c8356d7afef2e83b05bd20ccba4c653e755e78c9d3c40b5100ba90374ee93568c74c579883afb3f51614b5f0

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\server\jvm.dll

Filesize
1024KB

MD5
2eaf9a21583adc1c1bd98b38c71ca7ff

SHA1
459599b2cf4d4499ede0eb64d435f105bdad0df8

SHA256
f42606181df7878ea754f2d381ff0d32aa46282136d9be599ad84e071983a802

SHA512
c34927aa8159798423fd5df3c149167dd1a7e48e9e9a5391365e84a1056cb25aa66fe9731bcf7557825680f0e2d9b8253a24c401117f302be150c8cf1ec5bc3f

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\zip.dll

Filesize
81KB

MD5
e983a8420fa2050f58a3a552a234fcdf

SHA1
11a4b3c0da976408b5676c71751fae06bf309538

SHA256
0cdfc0521e1a1f6a428a818a0b208be2dbfa9001b3a83887876f27367fede8d2

SHA512
a5c4bc6a9acf74608feefad4d8a20fb4fa247a0eeb1318b3df35a45a13ffd9c542b4819844169703dc23b5058dcdcefa825e611ddbe8192fe64c09469583538b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\amd64\jvm.cfg

Filesize
1KB

MD5
c60e77ff5f3887c743971e73e6f0e0b1

SHA1
9b0cfd38ec5b7bd5bd1c364dee2e1b452a063c02

SHA256
23f728cc2bf14e62d454190ea0139f159031b5bd9c3f141ca9237c4c5c96ec1d

SHA512
07aca3de1a03a3b64b691fd41e35e6596760baf24c4f24e86fca87d2acf3a4814b17cd9751adc2dcd0689848f3d582fb3ee01d413e3a61d1d98397d72fe545e9

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\charsets.jar

Filesize
1024KB

MD5
396c98ec3d7e088a706e8997dba58bba

SHA1
e4bc97f5ab28591fe6814a4097523a09157bce4a

SHA256
80616625138a8d77932e4b3b8b2dc61141297ec4cca48be8e9482a1c0f4b46c5

SHA512
78a8090913110825786528b5817ad76ba433445b1ffc687a1bdee7dc3d64148ce3670597cf9528f6c13ac13904a5934c83c7a560796b29adcc4a28b1524c8a40

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\ext\jfxrt.jar

Filesize
128KB

MD5
ea2684ae6fddca6a6f8434337eb72afd

SHA1
13c6930d9759dc432086645b33a4b6e6cc893e1a

SHA256
7478b65c88ecefbfe36593f968df38166ec6fa83b916b44c3172206bb7b7f559

SHA512
3e88e1ac72ac7f6fdf1de715d91c36f91db449ef8fe6f1cfdaae52cb609d72957c29270e2db01217f0fb25074f0b192e8f1059f3433cd78034a773eefec3d745

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\ext\meta-index

Filesize
1KB

MD5
071ae8c0fced64e14493dcc7e2c2aa13

SHA1
87809e4bbf0a671573f4887704452fe78fc7a51c

SHA256
10f12969e5200b2a91612d5d6c83391793c4b8bb8391697cf6d5e912e226970c

SHA512
29d28417b9a69878884c38d78b8dff0af8c1eb3f7948facf54f8f77ef6836e9e03c51214b65532527d10b8a5eab5b1a10bfc025b99a8455c9af9b6fd03739f4b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\images\cursors\win32_CopyNoDrop32x32.gif

Filesize
153B

MD5
1e9d8f133a442da6b0c74d49bc84a341

SHA1
259edc45b4569427e8319895a444f4295d54348f

SHA256
1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

SHA512
63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\jce.jar

Filesize
95KB

MD5
9023c2dbafa3e48dbf7d116fc22a94cf

SHA1
cf33e79b53494a23e843577406b38b9fd04267e2

SHA256
346b463104e01f763f07e7dcbc3d8533b482ac9d04b8240493bad73fd491a220

SHA512
5aef96b7821a9830c27be3644fac81b2fd5ab6a168a4edf2d95b384d15c7724229fa181ae7ff5fe0a06c6de9f9a1ff50da6fc31925a30a3a49b97a8614515971

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\jfr.jar

Filesize
869KB

MD5
af53ae36e004d62db185686aecef9d53

SHA1
f65856f3937c7332587eb818c7ef85c72d8c7675

SHA256
1ee8e1044f79a221bdb22930cefe76eae9e35d4823114ee7b2a11269a3fdc7a2

SHA512
09d57b4934089853ca6c970a0c6800a8db5a809a7c9d02c2dcce6c4bc1fdf48378329fb7d6b7b6167422c9685641e3145373b817711b64785ca2bd9dcf195fc8

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\jsse.jar

Filesize
832KB

MD5
5d17deb1b5d79e455fbe93ec7935bde9

SHA1
8d3017731a9abb1a2b16cbe3ef91057cbecb3f88

SHA256
c052954b25526357d4d4c5d0292b3fd1dc5874350492858d5475ffd24a53fb63

SHA512
72203a9a5a40465bbf1524d1358711f4e3a78920271af0940f55c070c890423e89c48c45ea834b7ca4234c4ffd2a12103efda205dd6a7e3e293f3c280f6c4299

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\meta-index

Filesize
2KB

MD5
d8b5af464dff2656d7d9383201dea865

SHA1
c133fc85000b3a9494c3c203fcc2b3d4ee96a580

SHA256
3bde6c2508fa3e957441afd375cc2153385cb77aab753ce5f5670850a874a6f5

SHA512
60d1d8e2f1120f37c43990ee9cc2e63d71554e30ca7f87afa9f53de9199f24a20f123fa07f4c7dccb4b149c140c445e51d7b46578f200fbe1e6e37c4bb7d866b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\resources.jar

Filesize
1.5MB

MD5
f6523e89b092a916f0205d8bd47bbfba

SHA1
1b18e86a68e66e1417c66f0ec7031b46b3b49c83

SHA256
b3a9085e23a6d45ac19409ceb711023ebb6300a175677226b33e89b007e83061

SHA512
aa78f9d97aa30b4c6e9bf2ced0127cbdf5767b5d8200f15292d66290788a82b144913620635530a52fc7cc652f5f6e30486830f205b28ec6377ac283e525f6bf

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\rt.jar

Filesize
1.1MB

MD5
3ee7df07aebc44452970ceac1ba9df6f

SHA1
654f0d3f8d328863ca62f4aea92356641d8381f6

SHA256
efe5a49bc2074f1fefb107af9e9e3a04050ee00a5852594217faa0f0b5dbb670

SHA512
846a03fe07e52a9ad9e30421d36ab5853db8030d539f8a45b9d2c73a2d40aa93d778171d8535ce6a1881fd0e03c355f8ba93b19bee550c71ab5bca5c0dbfe87a

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\lib\security\policy\unlimited\US_export_policy.jar

Filesize
622B

MD5
5aa573a5e3d4c8bb18ee8b4abad69b7a

SHA1
f1cb2c17cd03d5a810c2f9f76387ced631516f98

SHA256
2c7f85a3f9ba39edd5badd3e300c99abbb0ac0592d4b04c5312038032acbea60

SHA512
459b94d1f7c2d8385df837b5b196b2b209dbf25949b033b407e72cd3ea984b0918f11e6d4bb70b979165b4508ad8e5e3ae55dbef740f04ee0b00e5247c838e9a

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-console-l1-1-0.dll

Filesize
20KB

MD5
2c146bc8d73b8944f35506241b9953a9

SHA1
ac64abd745418cea35c0506b9cb0331b171b51ea

SHA256
89384f8f64a9b7f67c8deccaa721e2d76b8a17026d8083630859ed0cd1a9b58b

SHA512
02713948a156baccb2e7c38646193e82fef65400c086644866b698bc3e0a8c155a8eab829463e3868ce2b8a06608c5ea6de1e390bff976c5f92e2e42dd6c04f1

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-console-l1-2-0.dll

Filesize
20KB

MD5
7a55e51d07e1f15221eb11479adbc53f

SHA1
8d8e2beff4dfa78372201b26a67b9dc4b116290f

SHA256
f901b0bc8c00b3afc80e151e6f54b18f7672f932602c304fbfeedd5aa3ad63c8

SHA512
e89c0e45014abdaf7548de0352949c4ad496d97cad2f9e2f6c83a90f853b7b71354b9abbb957eff89076df79bdc9cc1c431b6f35875550bfb4198c3a68124197

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-datetime-l1-1-0.dll

Filesize
20KB

MD5
f0c9c56f56ffa3adc548173569dbd793

SHA1
220a56b84cdb8cd403483d3f6b4bb526fe198fd9

SHA256
12d801992bbb09d43bb90330bb96e77bf12e669c325dda4b5235942221c301c8

SHA512
28e24a2ccedfaf01aef615c1df7f8c76ff0eb06d992eb1b422f902d6d96357ba6a353e31ca9b1fd305e7de7a437ee6a7f2f01bfdf27c4a88c805693ae2b6352c

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-debug-l1-1-0.dll

Filesize
20KB

MD5
02d669afdabfe420598041b848b71158

SHA1
25c0fdbc04ffcd570db041d02842d7530afeeb6e

SHA256
64a9ac181fd91b79270bf01759749394f57be171436ed46f43d165325bb82067

SHA512
5321290ec277fca8840e6c9cb7e77d39e820b1d98ef9c29040efaf2a7628c023209c936e08abfb6962a795130874544db25e1bac0d16256a1ebbca0fdcdaa81a

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
20KB

MD5
944a33d971704ff815a6c90733d0a72e

SHA1
7d8b9f68a3983a1b86bf4bae085cd5ca6f464921

SHA256
44822ae123a3d6c3a8bdf9a4d65a4dc89eb31004c72fcfcefa1dc3a53ff3eab0

SHA512
4d93dece856a24e50f12a53155e07f1aab501b17e7bbfcce205e1b37d2799caf3681b1770c522ba986ac3badba59d5d95a7526fe19f86a7b0d3d933ea73754e2

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-file-l1-1-0.dll

Filesize
23KB

MD5
fec01082bccddadad0814f30b43ab078

SHA1
a6f6d9b61bb743651d3f65824d06427ca492c120

SHA256
c15dacec228f40ce4c5b9d69bba5e6627bc484c6e9d6550a76db6f332e9f7734

SHA512
c6039c366cb47ca31c7501423384afc0678a07abeb0ca1d97ecb5aa3c3e3acf84c9551dea1e56d1dbd4472dab70eed1c79d1c0612ba2730327ce6d0dc151c441

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-file-l1-2-0.dll

Filesize
20KB

MD5
b5060343583e6be3b3de33ccd40398e0

SHA1
5b33b8db5d6cfb0e8a5bb7f209df2c6191b02edb

SHA256
27878021c6d48fb669f1822821b5934f5a2904740bebb340b6849e7635490cb7

SHA512
86610edc05aa1b756c87160f9eefe9365e3f712c5bed18c8feca3cae12aef07ccc44c45c4be19dc8f9d337a6f6709b260c89019a5efcfe9fa0847d85ab64d282

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\api-ms-win-core-file-l2-1-0.dll

Filesize
20KB

MD5
2e8995e2320e313545c3ddb5c71dc232

SHA1
45d079a704bec060a15f8eba3eab22ac5cf756c6

SHA256
c55eb043454ac2d460f86ea26f934ecb16bdb1d05294c168193a05090bf1c56c

SHA512
19adcc5dd98f30b4eebefe344e1939c93c284c802043ea3ac22654cf2e23692f868a00a482c9be1b1e88089a5031fa81a3f1165175224309828bd28ee12f2d49

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\msvcp140.dll

Filesize
613KB

MD5
c1b066f9e3e2f3a6785161a8c7e0346a

SHA1
8b3b943e79c40bc81fdac1e038a276d034bbe812

SHA256
99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd

SHA512
36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\msvcp140.dll

Filesize
320KB

MD5
5c24b3cd6d03137508adacad66ccf251

SHA1
0c113594bdf97d5bc22451c29e799d58209d9b5f

SHA256
681ec2eee1cd45385020975bd55e918c5a0d9d1f5944fffee1f3a3177622e597

SHA512
12e3b18f49ca72409eccfbd8be2462f1de0b72d677a1434d4416a256fc078b93d303c20b302ecb2632daff328057722face4ce88ea860ebc9b33931b866836a7

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\msvcp140.dll

Filesize
393KB

MD5
6cacecf54c14b1f65f2f52cdb89b1250

SHA1
260607e95edde99881a781f633d66b34b33c64de

SHA256
8f8814ca5f748175bfdf4fd496cf677aba8383fdd150dd09e2b87b4a2b67e8f0

SHA512
6af01d23305da59e57e456dab7aeb24d9f44fc4a4751ec0b1bdb802eaac38d7a76a479182a79e4e0b850e339ed9ff93b5cc4503f162a7c5198abd5fa89a7ad0e

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\server\jvm.dll

Filesize
1.8MB

MD5
67d3147dac9407ef0f2271f777c0aa48

SHA1
f0e87076f9a80057dc0f3afb3d819981782e7bc4

SHA256
42688ba954b43c507aba02c0d983e8eb90893587b797da0dcfe17b6096bd0f8b

SHA512
e2e33ef9bfd38fdc46bdca6f7a612c8101dd749a86420c03e486c035784fc08cccc92314ee01a9c76d1004cd6564dda7e17eb27ae485a8b13573b2a0a562cc33

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\server\jvm.dll

Filesize
320KB

MD5
94ce0373926490dc48a0a1610f58eb1e

SHA1
ce1f447db0a411b409fb199084b4eb8cc6bb21bb

SHA256
4d6d8f01b649897281d709cc432d83100f57b9490ed272b89c11703820d12d92

SHA512
f1b4198d848eb3d188653ec7544f42a661225a6bab27221183b097a5b16719e8bf40fb66152577460f9b4a2d9e4399406f3345019b23372a32530f533d270e25

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\server\jvm.dll

Filesize
529KB

MD5
1f43157cad7fdd47a8117f9652103d27

SHA1
c803f080ed0851f89be692262e4f602d5b4f6dcb

SHA256
acdb2ec928bd2f4b2fdc229d64ff8c084a67474daad96ed86fc6b7d5023772a1

SHA512
4a16f12d0e0b0e025bb81ec02c5f396847e46df29376a15e1e29c1434b0b21f40599c7bd3544e79ea6bca8958ced8272b09586d04f39a85af8d09ec06bd8324d

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\vcruntime140.dll

Filesize
83KB

MD5
1453290db80241683288f33e6dd5e80e

SHA1
29fb9af50458df43ef40bfc8f0f516d0c0a106fd

SHA256
2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

SHA512
4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

Download Submit
\Users\Admin\AppData\Roaming\.minecraft\java\jre1.8.0_251\bin\verify.dll

Filesize
50KB

MD5
33d1d00ce402b2476b07d052e9e3f3f2

SHA1
ee0e2463f6a6f3bf81b2672b477bb7d3075e55ac

SHA256
ffecbddc143e26eaa4fd1443c398d0d701386eaa9b44914382cb37a436a37c8b

SHA512
12ff925b740013504b587929b96b06afbb6b4b8e521c52d2a744faef265e298dc6286c654c974569ded3a80f75c86650141a8d3c1a0bbf6e0d22d788b12523b2

Download Submit
memory/340-819-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/912-974-0x000002462BD60000-0x000002462CD60000-memory.dmp

Filesize
16.0MB

Download
memory/912-981-0x000002462A460000-0x000002462A461000-memory.dmp

Filesize
4KB

Download
memory/1112-925-0x000002506C680000-0x000002506C681000-memory.dmp

Filesize
4KB

Download
memory/1112-908-0x000002506DF60000-0x000002506EF60000-memory.dmp

Filesize
16.0MB

Download
memory/1112-918-0x000002506C680000-0x000002506C681000-memory.dmp

Filesize
4KB

Download
memory/2920-852-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2920-889-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/3564-998-0x000002A1348C0000-0x000002A1358C0000-memory.dmp

Filesize
16.0MB

Download
memory/3564-887-0x000002A1348C0000-0x000002A1358C0000-memory.dmp

Filesize
16.0MB

Download
memory/3564-886-0x000002A133040000-0x000002A133041000-memory.dmp

Filesize
4KB

Download
memory/3892-954-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/3892-929-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/4484-817-0x000001B968130000-0x000001B968131000-memory.dmp

Filesize
4KB

Download
memory/4484-964-0x000001B968150000-0x000001B969150000-memory.dmp

Filesize
16.0MB

Download
memory/4484-806-0x000001B968150000-0x000001B969150000-memory.dmp

Filesize
16.0MB

Download
memory/4696-934-0x000002854AE90000-0x000002854BE90000-memory.dmp

Filesize
16.0MB

Download
memory/4696-950-0x000002854AE70000-0x000002854AE71000-memory.dmp

Filesize
4KB

Download
memory/4720-892-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-855-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-829-0x0000020324070000-0x0000020325070000-memory.dmp

Filesize
16.0MB

Download
memory/4720-987-0x0000020324070000-0x0000020325070000-memory.dmp

Filesize
16.0MB

Download
memory/4720-938-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-940-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-946-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-848-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-955-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4720-912-0x0000020324050000-0x0000020324051000-memory.dmp

Filesize
4KB

Download
memory/4928-807-0x0000000000EF0000-0x0000000001735000-memory.dmp

Filesize
8.3MB

Download
memory/4928-292-0x00000000004E0000-0x00000000004E1000-memory.dmp

Filesize
4KB

Download
memory/4928-0-0x00000000004E0000-0x00000000004E1000-memory.dmp

Filesize
4KB

Download
memory/4928-6-0x0000000000EF0000-0x0000000001735000-memory.dmp

Filesize
8.3MB

Download
memory/4928-1-0x0000000000EF0000-0x0000000001735000-memory.dmp

Filesize
8.3MB

Download