53eca4e7e09796a9c547e9aaaa9b4718bed3d61675197e377b2adba0c36729d9

Analysis

max time kernel
102s
max time network
108s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
21/02/2024, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jdMinecraftLauncher-5.2-WindowsInstaller.exe
Size 97.2MB
Sample240221-plqtqsfa81
SHA256 53eca4e7e09796a9c547e9aaaa9b4718bed3d61675197e377b2adba0c36729d9
MD5 6a21aceb285fd0e970afa82da8713ee1
SHA1 cdc0372b26b528c61616b37cf646570659349728
SHA512 3c8a8778d29958c3b0a1e3c03d412c0676e74dab39431a9dc85377b92696d754742ef7bef7f4bbdfcf2c9eeecca6f37e72c7e867dbc953110e3e63207304f1f3
SSDEEP 3145728:IHkUT0kh2xnZ+yi/q8GI6T1MwmVR21UqljpoQan:UFT0m2a/qbgwmVLMoQan
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery pyinstaller spyware stealer

Malware Config

Signatures

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1392040655-2056082574-619088944-1000\Control Panel\International\Geo\Nation	QtWebEngineProcess.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1392040655-2056082574-619088944-1000\Control Panel\International\Geo\Nation	jdMinecraftLauncher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1392040655-2056082574-619088944-1000\Control Panel\International\Geo\Nation	QtWebEngineProcess.exe

Executes dropped EXE 3 IoCs

pid	Process
440	jdMinecraftLauncher.exe
3432	QtWebEngineProcess.exe
1380	QtWebEngineProcess.exe

Loads dropped DLL 64 IoCs

pid	Process
4556	jdMinecraftLauncher-5.2-WindowsInstaller.exe
4556	jdMinecraftLauncher-5.2-WindowsInstaller.exe
4556	jdMinecraftLauncher-5.2-WindowsInstaller.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Dialogs\quickimpl\qml\+Material\ColorDialog.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Particles3D\designer\source\particlesystem_modelshape_template.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6QuickWidgets.dll	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Imagine\Dialog.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\cone16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtlocation_bg.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\group16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Basic\Container.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\StackViewSpecifics.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Effects\designer\DistortionRippleSpecifics.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Particles3D\designer\images\point-rotator-16px.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Particles3D\designer\ParticleEmitter3DSpecifics.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Physics\designer\images\[email protected]	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\plugins\imageformats\qwebp.dll	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Fusion\RangeSlider.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Physics\designer\physics.metainfo	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Imagine\Popup.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Pdf\PdfStyle.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6PrintSupport.dll	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtMultimedia\plugins.qmltypes	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtbase_ca.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Fusion\PageIndicator.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Helpers\designer\GridGeometrySpecifics.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\PerspectiveCameraSection.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtbase_es.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\images\[email protected]	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Physics\designer\images\dynamicrigidbody.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Physics\designer\images\physicsmaterial16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Particles3D\designer\ParticleShape3DSpecifics.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\PointLightSection.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Effects\Flip.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Helpers\DebugView.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Helpers\ExtendedSceneEnvironment.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Helpers\designer\InstanceModelSection.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Particles3D\designer\images\sprite-sequence-24px.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\resources\icudtl.dat	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Universal\DialogButtonBox.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\images\roundbutton-icon16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\images\[email protected]	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Imagine\ToolButton.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\tooling\Module.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Fusion\ScrollIndicator.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Scene3D\qtquickscene3dplugin.dll	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Material\ToolButton.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\images\[email protected]	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtWebEngine\ControlsDelegates\PromptDialog.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qt_help_it.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\qtquick2plugin.dll	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtdeclarative_ja.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\[email protected]	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtwebengine_locales\pt-BR.pak	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Basic\Dial.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Universal\TextArea.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Dialogs\quickimpl\qml\+Universal\ColorDialog.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\ParticleEffects\Quick3DParticleEffects.qmltypes	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\Physics\designer\images\physicsworld16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Basic\DelayButton.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\ParticleEffects\designer\source\particleeffect_rainmist.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\View3DSection.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\TextureInputSection.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtTextToSpeech\qmldir	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qt_lv.qm	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Material\TreeViewDelegate.qml	jdMinecraftLauncher-5.2-WindowsInstaller.exe
File created	C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\cylinder16.png	jdMinecraftLauncher-5.2-WindowsInstaller.exe

Detects Pyinstaller 3 IoCs

pyinstaller

resource	yara_rule
behavioral2/files/0x000600000002322a-3246.dat	pyinstaller
behavioral2/files/0x000600000002322a-3247.dat	pyinstaller
behavioral2/files/0x000600000002322a-3248.dat	pyinstaller

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher\shell	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher\shell\open	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher\shell\open\command	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher\shell\open\command\ = "\"C:\\Program Files\\jdMinecraftLauncher\\jdMinecraftLauncher.exe\" \"%1\""	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\jdMinecraftLauncher	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\jdMinecraftLauncher\URL Protocol	jdMinecraftLauncher-5.2-WindowsInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\jdMinecraftLauncher\shell\open\command	jdMinecraftLauncher-5.2-WindowsInstaller.exe

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	jdMinecraftLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	jdMinecraftLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	jdMinecraftLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	jdMinecraftLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	jdMinecraftLauncher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474	jdMinecraftLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 0f0000000100000014000000ce0e658aa3e847e467a147b3049191093d055e6f53000000010000007f000000307d3020060a2b06010401b13e01640130123010060a2b0601040182373c0101030200c0301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c009000000010000003e000000303c06082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030906082b0601050507030106082b060105050703080b0000000100000030000000440069006700690043006500720074002000420061006c00740069006d006f0072006500200052006f006f007400000062000000010000002000000016af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb140000000100000014000000e59d5930824758ccacfa085436867b3ab5044df01d0000000100000010000000918ad43a9475f78bb5243de886d8103c7f000000010000000c000000300a06082b060105050703097e000000010000000800000000c001b39667d601030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae47420000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9	jdMinecraftLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 19000000010000001000000068cb42b035ea773e52ef50ecf50ec529030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae4747e000000010000000800000000c001b39667d6017f000000010000000c000000300a06082b060105050703091d0000000100000010000000918ad43a9475f78bb5243de886d8103c140000000100000014000000e59d5930824758ccacfa085436867b3ab5044df062000000010000002000000016af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb0b0000000100000030000000440069006700690043006500720074002000420061006c00740069006d006f0072006500200052006f006f007400000009000000010000003e000000303c06082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030906082b0601050507030106082b0601050507030853000000010000007f000000307d3020060a2b06010401b13e01640130123010060a2b0601040182373c0101030200c0301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000ce0e658aa3e847e467a147b3049191093d055e6f20000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9	jdMinecraftLauncher.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
440	jdMinecraftLauncher.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
3432	QtWebEngineProcess.exe
1380	QtWebEngineProcess.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
440	jdMinecraftLauncher.exe

Suspicious use of AdjustPrivilegeToken 52 IoCs

description	pid	Process
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe
Token: SeShutdownPrivilege	440	jdMinecraftLauncher.exe
Token: SeCreatePagefilePrivilege	440	jdMinecraftLauncher.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
440	jdMinecraftLauncher.exe

Suspicious use of SetWindowsHookEx 45 IoCs

pid	Process
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe
440	jdMinecraftLauncher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 440	4556	jdMinecraftLauncher-5.2-WindowsInstaller.exe	91
PID 4556 wrote to memory of 440	4556	jdMinecraftLauncher-5.2-WindowsInstaller.exe	91
PID 440 wrote to memory of 856	440	jdMinecraftLauncher.exe	93
PID 440 wrote to memory of 856	440	jdMinecraftLauncher.exe	93
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 3432	440	jdMinecraftLauncher.exe	94
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95
PID 440 wrote to memory of 1380	440	jdMinecraftLauncher.exe	95

C:\Users\Admin\AppData\Local\Temp\jdMinecraftLauncher-5.2-WindowsInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\jdMinecraftLauncher-5.2-WindowsInstaller.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Program Files\jdMinecraftLauncher\jdMinecraftLauncher.exe
  "C:\Program Files\jdMinecraftLauncher\jdMinecraftLauncher.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies system certificate store
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:440
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "ver"
    3⤵
    PID:856
- - C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\QtWebEngineProcess.exe
    "C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --first-renderer-process --disable-speech-api --enable-threaded-compositing --disable-databases --disable-gpu-compositing --disable-blink-features=EyeDropperAPI --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=2948 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,EyeDropper,InstalledApp,PictureInPicture,WebOTP,WebPayments,WebUSB /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:3432
- - C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\QtWebEngineProcess.exe
    "C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --disable-speech-api --enable-threaded-compositing --disable-databases --disable-gpu-compositing --disable-blink-features=EyeDropperAPI --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3292 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,EyeDropper,InstalledApp,PictureInPicture,WebOTP,WebPayments,WebUSB /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:1380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

MSVCP140.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\MSVCP140.dll
Size 576KB
SHA256 88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
MD5 01b946a2edc5cc166de018dbb754b69c
SHA1 dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46
SHA512 65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5
SSDEEP 12288:xI88L4Wu4+oJ+xc39ax5Ms4ETs3rxSvYcRkdQEKZm+jWodEEVh51:xD89rxZfQEKZm+jWodEEP5
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSVCP140_1.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\MSVCP140_1.dll
Size 30KB
SHA256 446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
MD5 0fe6d52eb94c848fe258dc0ec9ff4c11
SHA1 95cc74c64ab80785f3893d61a73b8a958d24da29
SHA512 c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86
SSDEEP 384:rOY/H1SbuIqnX8ndnWc95gW3C8c+pBj0HRN7bULkcyHRN7rxTO6iuQl9xiv:yYIBqnMdxxWd4urv
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSVCP140_2.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\MSVCP140_2.dll
Size 188KB
SHA256 24b47c966b6e4a65b3e4df866d347d3427e9bd709be550c38224427eb5e143d3
MD5 9002e0bee6455b2322e3e717fe25f9be
SHA1 bc8df83cc657f0f46a0bff20565870a435ed1563
SHA512 28ddd087b48d5aa96ec39ccc29a4020cf75ae3c5cb6af9a9571694d73f7aaa4fecb15336c9c7a7d12c93d8bf12efa4fe4d8d612cd93d72c72130cae52317d0d9
SSDEEP 3072:31LVfr9ovEXBrje861RWxYzJ+4/Z5jdqvyNOucijxUL9Ne0hWTvSuG:3prDBfejLWOPTxxYk0hW7i
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Core.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Core.dll
Size 1.7MB
SHA256 4d501c9731751c0a9b6d11d3b6a4ffea6a141b419ffc51ad7c4548a67b14c99a
MD5 7170fefb93cf9aeb0f4f278ece16ec01
SHA1 b5b9156c16c9ec38a1d396de4af7abbb590a6da9
SHA512 9cfb32ae451c7616d6379788f9ff2eb771c5651e2920cf8e6942d4ca8f037e6c252caff23d91206ec913d1571951026002fe4035f0e3bb07eea1dd23e9c51106
SSDEEP 49152:z/z1NhSNK7BtAwWb0vjY+xlbRcWYgEsOT1AymZFc6uqHy1:TmCbIlsI/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Core.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Core.dll
Size 1.3MB
SHA256 97db0aa7f868f641dac4a5ca1622471dd694bceebf0a074a3acc86350420a858
MD5 27d2575ae2fed4820d1d53508bf7b165
SHA1 bda9165a2aa3b09fdbd0cda830b7d071379e4dd1
SHA512 986316bb16d7cdc7f0d6be29819a55b7aeea323e4f288b668c8c4314356e95e08365c063df5f1fdf7150379d943295f92970cd13216ddd007df15a0ef86ed6ee
SSDEEP 24576:z/JN1NihozKq4305uEWvpJRdMvBpPphBtAwWqa0vppoD+xlbRcWYgEsOT1AymZbj:z/z1NhSNK7BtAwWb0vjY+xlbRcWYgEs5
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Gui.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Gui.dll
Size 982KB
SHA256 30fd34f956f3129016509b86231a1b265c7415f95b847d670d6402cf91c19f5d
MD5 67d0b244a839c8cd5c412907e18bbbd9
SHA1 0da5ba8edd0f185406f36ffd41ca5879f49e6069
SHA512 6f164a8e32506c9fd54cb87ac9f846bf5f7b870c5d55eb7783ce4d20efc21306841d895c1635b5eeadc09c695e023a51d0abdb7ec206d40d2d00356bf7543525
SSDEEP 24576:xJ9r94JUqLz7e+RTsNnRtCM8xT+LTkWp96ISS75s5H:xJ9riJUqf7FRTsNRM/CTl96qts5H
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Gui.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Gui.dll
Size 1.2MB
SHA256 6e1e70af23321a5341c110e4365e627fb7b442ab48b43629706b1d6d294a2a6f
MD5 84eb8fae055cbe0cbd69b63ff7e32e8a
SHA1 bffc201549db9d5fe7134b5644e1a2909634901d
SHA512 95ac39af7329fd4eb5df0f1f36915cc2b59ab126cd99d7c74324a68d7df776e28955a51c60d6b80d48883858ad7f97dceba39c9c33bdd5705451f752ecaeb41e
SSDEEP 24576:xJ9r94JUqLz7e+RTsNnRtCM8xT+LTkWp96ISS75s5orDuSXqVr:xJ9riJUqf7FRTsNRM/CTl96qts5orDu9
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6WebEngineCore.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6WebEngineCore.dll
Size 1.7MB
SHA256 fdbb4807c35aaeed8ef06434cd0f8246cd4a31a742b72db718783c5330a27cc1
MD5 c12cff28e66fb22e3c8176aeb2e22fdb
SHA1 2c51fbad1f7ce04121ec9fef4c85c4e0a5075d8f
SHA512 4f2b21fe847044733ec70a1ca21d035b88632380b3470add5b32d45337dc9e079b4191698a075b00b2dd21fe678b703901974986151971b04e5d52b4a45aa8dd
SSDEEP 24576:a58IwZ7FI7jQurkt8gwqscp+WLWQpcQ5wPh:28IcQQggpp+WLePh
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6WebEngineWidgets.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6WebEngineWidgets.dll
Size 170KB
SHA256 8a375ed533a29454b49ffe03c50408468936e9055ec41fd938cf5577875fd08b
MD5 316c0fb45014f979bf516c574891cd32
SHA1 0b0a2f56ab49f59dfdc85163644ae6a6ea4989a4
SHA512 426536f642a8417b14cade27276148768484d6d9a3b2e992f75bd7ff102d226580db855b568a4690258e4b7b44e35c04c98f93c417a363914b6e3eff76601f20
SSDEEP 3072:kW6HCEWByEp05oSMTM8y/9DFNRfa8wDaVFe5Y8RKIyjgCMp2Lg3KUEO:D6CoEKWSMTM8y/9DFNRfa8wDaVFe5VK2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Widgets.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Widgets.dll
Size 2.2MB
SHA256 ff636c0ee089f8a71a30d6833c04bad07ad361109a9ebbc81f6ba02f307d19b3
MD5 4a4a4294cdc15c8db28fb3253bea8315
SHA1 285978daa4ac439ace4ce5eeb22ede0ceb3b80f5
SHA512 a5958f61a732b7b9e54d86e89593df8cb69f9db3815731ede5fb3262c571cbf37cf95d4bb5f1379d419c2f7227e7da8369328c3c1097e8727048b6cb907500ef
SSDEEP 49152:R0UvkCVXGXZ7Yd1tNt1emYr9UE2CCmikoaFrTFEnxcGJ4jAPbWcUj5HObsWO2Iv5:3oA6Tecci0sWA
MD5 SHA1 SHA512 SSDEEP

Submit Download

Qt6Widgets.dll

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\bin\Qt6Widgets.dll
Size 1.3MB
SHA256 c270366796d000324df9403d24d1c6a9d23e3b1370d00203e6c7597410e80fcf
MD5 63d19b1860300105c4eb03fa467bb867
SHA1 c50926c73b57f9f062eccf6ddfb266afe58cddcd
SHA512 283fd1c7d3f074079756630d18b08097e4654f769ac8c6fe2e63a4d9a00ec98409594a510eb7136bc98991154ea5ab0590da8787b5f01db1ad22e6a72998a2d2
SSDEEP 24576:R0udvXSpCVXGXWhq7fwMG31tNtUtOTemYr9UE2C67mikUZVw5jFX7hVFE/OGxc2J:R0UvkCVXGXZ7Yd1tNt1emYr9UE2CCmi3
MD5 SHA1 SHA512 SSDEEP

Submit Download

dummy.png

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\dummy.png
Size 375B
SHA256 fbc370c541a931e22eeba5157b47f30fc60c7e29580b9b4904703b6e17910bf3
MD5 762ab24b219270dc7ee7183da2f1ef79
SHA1 de4b6ccb4d5b6743903e91915d8ff00e52f1336a
SHA512 c11bae321fe32044d8c7f05590bf30f15585283c0a95ea2a2eac63e3e493bd3386354de050df13b554b197cceebe03069b523286fd3297d16cc0a27072cdc031
MD5 SHA1 SHA512

Submit Download

dummy16.png

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\dummy16.png
Size 253B
SHA256 20367abdb3621f0bbbe473dc2c16708318303c600356dd3a53c9465c8a694e22
MD5 bbff95cfc3d26e011d4cd5b6a978625b
SHA1 6e2c4e01dcc78e1210ec39a236ccb4388a71cd5f
SHA512 7378c69a5c23a36226c9f82aa2ef7cb693868425989a1baced24b73830917e354949af640b7b5aef82124902275debfba1d8fd46a2767c71189dfc935bcfc738
MD5 SHA1 SHA512

Submit Download

[email protected]

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick3D\designer\images\[email protected]
Size 499B
SHA256 ac0ced9846290510f32ffb115d29e5329442fec01b6527a863ebf541ca8c8ed5
MD5 73dd25fb185b415c0590f122bf05cf7b
SHA1 0d268a5bfeaacb8744a9b372409caeb6f1039653
SHA512 7c3d69594d8d73414f3ea35443a7417fe75fed45a0ac6d07f29bebccc119375d6c50a7ca78fc0a349304ce21f71847098e7c83ba9a8b624729ca6bc4e986faad
MD5 SHA1 SHA512

Submit Download

ScrollView.qml

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\Material\ScrollView.qml
Size 1KB
SHA256 78b5fc58e6d881d16351e92d32b8cadea6b14fbf8c20c1bc7e56d02946467ae8
MD5 63340c8fcb71734ce4bbac29a86821b5
SHA1 0cfd02b3e95fa482cbd4bd83b0f2d9214acc9709
SHA512 fe035bb77a32d0fe9d4983d90c65d4c2600a019ac20743dbec409f29ffbfbecd8bca2d15abfffb2e71b77e3c105e248627a176942cdf9d7b98ed9113e6f73ba0
MD5 SHA1 SHA512

Submit Download

RadioDelegateSpecifics.qml

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\RadioDelegateSpecifics.qml
Size 559B
SHA256 f8d2bf5bc61e2575380c2be7e6516bc0426200025ba333c744d1f212108ffe4f
MD5 268ca4343417ef1bbec6111772662306
SHA1 5180059a57f944bdcd2d55639289ac14bcfc2ba4
SHA512 c83bbb2807a98255dc3388c4b531c25d4984c77deb71f964f963ad84651fdf52f1ac1213318bf1476da3fc575b86607692657df739ff5218d661b02cab3cc63a
MD5 SHA1 SHA512

Submit Download

SwitchSpecifics.qml

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\Controls\designer\SwitchSpecifics.qml
Size 494B
SHA256 f09e9acf39237df1404d0bdb520ef0df2d35d9586f519e91416b9c02228252ed
MD5 6fd2055c93332727a0f0a80fbd0a6c9a
SHA1 099d4cf01e806280f72afd8e2f2502ae256a82d2
SHA512 c839ae74896cb6c0edcaabfd5319bc9af22db94204ab6a025a1488aeb3b0326152e5fc96c3950dc9cda6a493089a4154b188944ca4b367b27fcaaabadcbc14ee
MD5 SHA1 SHA512

Submit Download

quicktooling.qmltypes

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\qml\QtQuick\tooling\quicktooling.qmltypes
Size 215B
SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
MD5 2006d4b7d0da455aa4c7414653c0018a
SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
MD5 SHA1 SHA512

Submit Download

qtlocation_en.qm

Path C:\Program Files\jdMinecraftLauncher\PyQt6\Qt6\translations\qtlocation_en.qm
Size 16B
SHA256 9959b510b15d18937848ad13007e30459d2e993c67e564badbfc18f935695c85
MD5 bcebcf42735c6849bdecbb77451021dd
SHA1 4884fd9af6890647b7af1aefa57f38cca49ad899
SHA512 f951b511ffb1a6b94b1bcae9df26b41b2ff829560583d7c83e70279d1b5304bde299b3679d863cad6bb79d0beda524fc195b7f054ecf11d2090037526b451b78
MD5 SHA1 SHA512

Submit Download

QtCore.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtCore.pyd
Size 665KB
SHA256 f00bf93d60d66a855cddceab30b760859474c324bcaa9190bff058a8c0afba4c
MD5 e37f917cc68808878eeb2f6c87e86ddb
SHA1 eb1f9a548161522426d6863c41e7446165a7a462
SHA512 5f0aa060a089c0f9feb7829e1117a5747e105f32c65daa84ebf02766cabe8c2afc24d8628add7236819fe3abb528e0467bee055679c251af831433643aed3e7c
SSDEEP 12288:Z9eRymJO5+gbRpBYUWUjmGQRQ1BAasTjVonVafZsBLB6FFcdTfMNkkqhoR6x:Z9eRymDgbRpBYUWUjmGQRQ1BAasTjVo9
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtCore.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtCore.pyd
Size 612KB
SHA256 cc6d3cc40378c49f858ff0935dd842fd7f0b91b653f89fc484c3af58e51b1ac0
MD5 9dfce5fd3459fdfc7db1b1648674ed49
SHA1 d18d5051a6ec2471d95fa41c579c65ca6017ded4
SHA512 40bb98f6b7066f7c7d80751ed7ca8f0469e02849375ad4e35c12c4a9ee36569aefe650407b6e7b305cb5001e6e7a53c0879c206d13d2c0e84478199de6b96512
SSDEEP 12288:Z9eRymJO5+gbRpBYUWUjmGQRQ1BAasTjVonVafZsBLB6FFcdTfMNkkqhof:Z9eRymDgbRpBYUWUjmGQRQ1BAasTjVoK
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtGui.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtGui.pyd
Size 637KB
SHA256 45183700984f1a5ea43ebe1a1bbcb5fbf3f4f9863cd2ae5319bb77d6102f202c
MD5 c807ef5e233c0428133baf9fae117ea6
SHA1 8e1dac1de9909327fa48346fd824f5063a1a62ad
SHA512 ff13777f5e8bbf2109680c8acf0b718f01cc327654a137030406c8f664725a2f246e9a4f5a96498192df31c44046865eb2b336a511a6e9efd098aaf67d2849d3
SSDEEP 6144:VO05Y/u8mQYn7io9oqq1kjKB1k5MorGKt5WW6bkD3lV0jfyquEVU6OVD:k05Y/u81wN9o80+4KokzluLyqLVU6OVD
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtGui.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtGui.pyd
Size 708KB
SHA256 0f3890db7a460946f730d9b379f0a5f3e5f8cc72d5b6df23dceac7728f64d2c4
MD5 59f9d364a11882f7f91eb89b719e7b30
SHA1 8b5bf4c133d121abc3c529d082dcbe153e5cbb4e
SHA512 c840ccc72fe1e167f6a8d0e0dd824ed2a3b554331cf9b5480ef2c77eaf9fdaec6fe664f90be5338273edd635f3bc902c9f966406fcb92b530fa981e180ab1329
SSDEEP 12288:k05Y/u81wN9o80+4KokzluLyqLVU6OVKOl9Uj:Bwu8mo8/4eluLyqLVfjOlM
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtWebEngineWidgets.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtWebEngineWidgets.pyd
Size 73KB
SHA256 beeca278a3cce44fa09e2045318422b57a2f487079e3219759f2b2c918e186af
MD5 7c3da146668ef65999679b89bbf6194c
SHA1 154d4f24647099527c8d5429437620e4a2c82edc
SHA512 46340da10f55dcd513e9560742157febb5cbd67b512a9cca2b778d3aab676ecf3459a885185dd48c72de8c6816324cb26916224a65a8085e53aa58eb96391f86
SSDEEP 768:s5fvzHXIRqmWs0/dBRATgEQynBpWvD+rJMLxc0dk21AQ33Fj63mcx2MG21A0QoaN:s5brEXpWvjNc0djR3omUfQZdQ37V4JZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtWidgets.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtWidgets.pyd
Size 1.6MB
SHA256 0b94d288d3c590aadf133417f3e03cd1d49dbf75dc4d02760e118cf86d54e2bb
MD5 cb7ca718003e5aaf0a5f895ca06d9f89
SHA1 c96db683f111e5a34bf671a9e4f2b6a264bf2e6c
SHA512 91fc6f99345ea242976097f00a5185fbe8b093fc7d6d72b10cc1339036e1bde1b442beb427530674d9ec24e2bf9ccfd9123a4b55ef2678bab06e7dcffb2691cd
SSDEEP 49152:pYeBjh9j0I0xiqcLQ9MJyGFHM1iJDp65V6zXMft9:3il5V6M
MD5 SHA1 SHA512 SSDEEP

Submit Download

QtWidgets.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\QtWidgets.pyd
Size 1.5MB
SHA256 85ea731f9dc1f047ba0cd53e0c8d4efd043217e12d2fa4c03d489700e53badb6
MD5 2c17ef34448f9e82ad01c3870525caaf
SHA1 0464c6f7d32e761583ad86274a22271745c65961
SHA512 f05b4c53bcb524397f0e356c8239985d063a2981f7442219a86e60eadfc8db8ffc7703afb421b2439fa7241d7143e2cee3ea2e8ffcf255b47e8230cb140b7f8b
SSDEEP 24576:pYeBjh9j0oT0yAiqcLQ9MJyGAoHM1iJDp65V6z/tpsDLLrss5:pYeBjh9j0I0xiqcLQ9MJyGFHM1iJDp6b
MD5 SHA1 SHA512 SSDEEP

Submit Download

sip.cp311-win_amd64.pyd

Path C:\Program Files\jdMinecraftLauncher\PyQt6\sip.cp311-win_amd64.pyd
Size 107KB
SHA256 8c0a0c86295fecb46b514ef73a6b71485c9f400a2d15dc8a8878b73be56eb32e
MD5 8bb895f19c8cd0264a25eb12f29ea8e2
SHA1 b59f55ba38581176122100ab8ffc4301fcb59e38
SHA512 9c072420a7f1bb7f185708d501235368fb6394b36ba88d1f230f119d85f51087d6b79c0cbe3f176b5595dee237ac1874491870253da2022a536dcad289f243fb
SSDEEP 3072:YgYkC2Vb+h49jkeTqPn5Nc8yBY1kQt9SnpUJau:jYkC2V6h49yQRn+Ja
MD5 SHA1 SHA512 SSDEEP

Submit Download

VCRUNTIME140.dll

Path C:\Program Files\jdMinecraftLauncher\VCRUNTIME140.dll
Size 106KB
SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
MD5 870fea4e961e2fbd00110d3783e529be
SHA1 a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA512 0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
SSDEEP 1536:DcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/Auecbq8qZU34zW/K0zD:DV3iC0h9q4v6XjKAuecbq8qGISb/
MD5 SHA1 SHA512 SSDEEP

Submit Download

VCRUNTIME140_1.dll

Path C:\Program Files\jdMinecraftLauncher\VCRUNTIME140_1.dll
Size 48KB
SHA256 e0b66601cc28ecb171c3d4b7ac690c667f47da6b6183bff80604c84c00d265ab
MD5 bba9680bc310d8d25e97b12463196c92
SHA1 9a480c0cf9d377a4caedd4ea60e90fa79001f03a
SHA512 1575c786ac3324b17057255488da5f0bc13ad943ac9383656baf98db64d4ec6e453230de4cd26b535ce7e8b7d41a9f2d3f569a0eff5a84aeb1c2f9d6e3429739
SSDEEP 768:8EgYXUcHJcUJSDW/tfxL1qBS3hO6nb/TEHEXi9zufUKQXi9zug:8vGS8fZ1eUpreA+zuTc+zug
MD5 SHA1 SHA512 SSDEEP

Submit Download

_bz2.pyd

Path C:\Program Files\jdMinecraftLauncher\_bz2.pyd
Size 82KB
SHA256 50e21ce62f8d9bab92f6a7e9b39a86406c32d2df18408bb52ffb3d245c644c7b
MD5 a8a37ba5e81d967433809bf14d34e81d
SHA1 e4d9265449950b5c5a665e8163f7dda2badd5c41
SHA512 b50f4334acb54a6fba776fc77ca07de4940810da4378468b3ca6f35d69c45121ff17e1f9c236752686d2e269bd0b7bce31d16506d3896b9328671049857ed979
SSDEEP 1536:0RdQz7pZ3catNZTRGE51LOBK5bkb8BsfYqJIJCVM7SyTjPxL:0/Qz9Z5VOwkIBsAqJIJCVM9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

_hashlib.pyd

Path C:\Program Files\jdMinecraftLauncher\_hashlib.pyd
Size 63KB
SHA256 19dd3b5ebb840885543974a4cb6c8ea4539d76e3672be0f390a3a82443391778
MD5 1c88b53c50b5f2bb687b554a2fc7685d
SHA1 bfe6fdb8377498bbefcaad1e6b8805473a4ccbf3
SHA512 a312b11c85aaa325ab801c728397d5c7049b55fa00f24d30f32bf5cc0ad160678b40f354d9d5ec34384634950b5d6eda601e21934c929b4bc7f6ef50f16e3f59
SSDEEP 1536:H8njpnxGkYNEUsZE/0Cw6cG1BIJOILis7SydPxPK:cnjpnxbZyw6t1BIJOILNTxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

_lzma.pyd

Path C:\Program Files\jdMinecraftLauncher\_lzma.pyd
Size 155KB
SHA256 ab822f7e846d4388b6f435d788a028942096ba1344297e0b7005c9d50814981b
MD5 bc07d7ac5fdc92db1e23395fde3420f2
SHA1 e89479381beeba40992d8eb306850977d3b95806
SHA512 b6105333bb15e65afea3cf976b3c2a8a4c0ebb09ce9a7898a94c41669e666ccfa7dc14106992502abf62f1deb057e926e1fd3368f2a2817bbf6845eada80803d
SSDEEP 3072:jlirS97HrdVmEkGCm5hRznf49mNo2wOvJ02JIJZ1G0qf1xPD:jlirG0EkTuAYO2wQ35j
MD5 SHA1 SHA512 SSDEEP

Submit Download

_queue.pyd

Path C:\Program Files\jdMinecraftLauncher\_queue.pyd
Size 31KB
SHA256 9517689d7d97816dee9e6c01ffd35844a3af6cde3ff98f3a709d52157b1abe03
MD5 e0cc8c12f0b289ea87c436403bc357c1
SHA1 e342a4a600ef9358b3072041e66f66096fae4da4
SHA512 4d93f23db10e8640cd33e860241e7ea6a533daf64c36c4184844e6cca7b9f4bd41db007164a549e30f5aa9f983345318ff02d72815d51271f38c2e8750df4d77
SSDEEP 768:z+yF66rXlmk599IJQU55YiSyvpKHPxWEx7M:z+wnXlP599IJQUn7SyhKHPxDM
MD5 SHA1 SHA512 SSDEEP

Submit Download

_socket.pyd

Path C:\Program Files\jdMinecraftLauncher\_socket.pyd
Size 77KB
SHA256 e05c5342d55cb452e88e041061faba492d6dd9268a7f67614a8143540aca2bfe
MD5 290dbf92268aebde8b9507b157bef602
SHA1 bea7221d7abbbc48840b46a19049217b27d3d13a
SHA512 9ae02b75e722a736b2d76cec9c456d20f341327f55245fa6c5f78200be47cc5885cb73dc3e42e302c6f251922ba7b997c6d032b12a4a988f39bc03719f21d1a5
SSDEEP 1536:vJleMWdP0uj19/s+S+p7GQyivViap59IJLw17SygPxYd:v7eMgsuj19/sT+p7GkvVpp59IJLw1Gxw
MD5 SHA1 SHA512 SSDEEP

Submit Download

_ssl.pyd

Path C:\Program Files\jdMinecraftLauncher\_ssl.pyd
Size 157KB
SHA256 3bac94d8713a143095ef8e2f5d2b4a3765ebc530c8ca051080d415198cecf380
MD5 0a7eb5d67b14b983a38f82909472f380
SHA1 596f94c4659a055d8c629bc21a719ce441d8b924
SHA512 3b78fd4c03ee1b670e46822a7646e668fbaf1ef0f2d4cd53ccfcc4abc2399fcc74822f94e60af13b3cdcb522783c008096b0b265dc9588000b7a46c0ed5973e1
SSDEEP 3072:g/bIQQOiv334t8g419Qkd83X2u70rExnlSQOXLkd1ItS+Q8YuAO8JIJC7BIxZ:W0OuYtv41aQ82u7JnN+8G
MD5 SHA1 SHA512 SSDEEP

Submit Download

base_library.zip

Path C:\Program Files\jdMinecraftLauncher\base_library.zip
Size 1.7MB
SHA256 65ebc074b147d65841a467a49f30a5f2f54659a0cc5dc31411467263a37c02df
MD5 948430bbba768d83a37fc725d7d31fbb
SHA1 e00d912fe85156f61fd8cd109d840d2d69b9629b
SHA512 aad73403964228ed690ce3c5383e672b76690f776d4ff38792544c67e6d7b54eb56dd6653f4a89f7954752dae78ca35f738e000ffff07fdfb8ef2af708643186
SSDEEP 24576:mQR5pATt7xm4lUKdcubgAnyfbls0iwhpM2dYf9P3sLGTWLdma0uHHo:mQR5pQxmhG+jLgaA
MD5 SHA1 SHA512 SSDEEP

Submit Download

md.cp311-win_amd64.pyd

Path C:\Program Files\jdMinecraftLauncher\charset_normalizer\md.cp311-win_amd64.pyd
Size 10KB
SHA256 f1e26ef5d12c58d652b0b5437c355a14cd66606b2fbc00339497dd00243081e0
MD5 28af0ffb49cc20fe5af9fe8efa49d6f1
SHA1 2c17057c33382ddffea3ca589018cba04c4e49d7
SHA512 9aa99e17f20a5dd485ae43ac85842bd5270ebab83a49e896975a8fa9f98ffc5f7585bef84ed46ba55f40a25e224f2640e85cebe5acb9087cf46d178ecc8029f0
SSDEEP 96:KJdp72HzA5iJewkY0hQMsQJCUCLsZEA4elh3XQMtCF4ioUjQcX6g8cim1qeSju1:KJ72HzzjBbRYoe2oRcqgvimoe
MD5 SHA1 SHA512 SSDEEP

Submit Download

md__mypyc.cp311-win_amd64.pyd

Path C:\Program Files\jdMinecraftLauncher\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
Size 110KB
SHA256 a4a758eabd1b2b45f3c4699bdfebc98f196dc691c0a3d5407e17fffffafc5df7
MD5 6cdca2fde9df198da58955397033af98
SHA1 e457c97721504d25f43b549d57e4538a62623168
SHA512 7b3c384ba9993d3192ed852191ff77bdcd3421cbc69ff636c6deb8fe7248e066573b68d80a8f280ae0c1cb015f79967d46d910455d932eaeac072c76d0757e92
SSDEEP 1536:Oa+euGiytUbL3818SfqZpr0w2a5i5hBi0GmV4Ms7oTGKMl8g1d:OtezmbL38+SCZqw2aA8QV67oTGKw
MD5 SHA1 SHA512 SSDEEP

Submit Download

jdMinecraftLauncher.exe

Path C:\Program Files\jdMinecraftLauncher\jdMinecraftLauncher.exe
Size 1.9MB
SHA256 0a82556cbf5245d52a7d81c1dacb4d3bdfa6047a30feacbf90a77c94c092f4e3
MD5 8b6af499249258113cc01da5fb8c58c2
SHA1 a894606cf3c73d87691cb7e45f1b471f2d8f4284
SHA512 1338366aaa5672c5e1ebdd2ec5c76627313a3dea1cbac512b0a38f59389c352acc7b508ef3bb7efa9097bbab9394fd9f29fde847917bf20fde07056118d2a026
SSDEEP 49152:nfGfj7z9FJRSvwpcJ1YrPdpq17NXRfcl9DCLrNwrKeW:+fRZSopcJ1YPy1hRcBCvSmR
MD5 SHA1 SHA512 SSDEEP

Submit Download

jdMinecraftLauncher.exe

Path C:\Program Files\jdMinecraftLauncher\jdMinecraftLauncher.exe
Size 1.9MB
SHA256 308659625d4afc44355d64b563ba0c840b5743e12f673ffcd042156a815a0924
MD5 50683d5ef90e6fd10b94824de7e1c1a7
SHA1 bf18bb5e640354340ed546bfb7dedd5f161c6502
SHA512 445cf19454761ac1a32aeab512a311aa495dd815e3a8c9c90257313a0fff68a6a46bff456f6f37dd6b92faa57e5cc7d41a0865230909a61928df1fbad4f4a9ab
SSDEEP 49152:nfGfj7z9FJRSvwpcJ1YrPdpq17NXRfcl9DCLrNwrKeG:+fRZSopcJ1YPy1hRcBCvSmh
MD5 SHA1 SHA512 SSDEEP

Submit Download

jdMinecraftLauncher.exe

Path C:\Program Files\jdMinecraftLauncher\jdMinecraftLauncher.exe
Size 2.3MB
SHA256 135bad4ca1e8c46ae6920c74569e09248824e9a4ba9e3aacadbb9055013e126e
MD5 43dd6ee3ce32f058cffdbba13fc99aee
SHA1 c2582cd447fcfca628b77deb202f3d52c256f97f
SHA512 d84cc0ce027353d7b01686de221d1870753518f2dac6df4c0965d02e04c6a36b5133a9f3374f5a764931312be9147ca1e6f791e16745d668557c42983698c282
SSDEEP 49152:nfGfj7z9FJRSvwpcJ1YrPdpq17NXRfcl9DCLrNwrKeOM05Ug:+fRZSopcJ1YPy1hRcBCvSmUTg
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-1_1.dll

Path C:\Program Files\jdMinecraftLauncher\libcrypto-1_1.dll
Size 2.8MB
SHA256 868d6f3c0361eb2070ac903b3cb3c63d255dac33a60982d022d03e32a3dce686
MD5 7ef0fc840c0f86db9420565559180b66
SHA1 64b52f66aa9dc63bacc7299436541dc1bac49805
SHA512 364edd376c4ac8eb2a133c79171f9b6ecfe80322a0d78568d62313b2bfeb512da03c6d4ec9407b0a33d64ef7308b423a1e1fa7a0df09c358b952d2767c580e9f
SSDEEP 49152:M3TKuk2CQIU6iV9OjPW9tmR+NtkYlhIo4QKLb0y+HnuJ1kQSYrLs1fEY7NPiNEsl:nv+QYRKZSnfEYwNEsl
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-1_1.dll

Path C:\Program Files\jdMinecraftLauncher\libcrypto-1_1.dll
Size 1.9MB
SHA256 383e8421441c87468e9ae83bcd11700944a995e9c47a091af2005923eb265019
MD5 933c3fe815160422289c2baaed3e6a9c
SHA1 7e381da9415c94ac4586bb307e044bc8f59e7657
SHA512 eb5b8ebd7170da55874a6dc91a0fc4aec98799b01b943a12bb81b7ab9e9fba0ed7fb301af7854c199cdee74210ab6eb3a6bb7c139ae5aaee491f30ee6256de4f
SSDEEP 49152:M3TKuk2CQIU6iV9OjPW9tmR+NtkYlhIo4QKLb0y+HnuJ1kQk:nv+QYRKZk
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-1_1.dll

Path C:\Program Files\jdMinecraftLauncher\libcrypto-1_1.dll
Size 1.8MB
SHA256 d1b426f48209b3e661c0baa4a8c8e115fff1d605ff1f04747f628f418e3d6055
MD5 e397562a692e5a2a83a8b4af7acc668c
SHA1 cae1fb8c6f2d34da54195ce8b66058c31159eab2
SHA512 3b9d6d503a91ba10f1e9958612e31840c44f883d6e77b5863108433a4d95f53b189f70b84a05bfc2f31af5a3cc0cfc9cbed338db742c729984243beb202ca176
SSDEEP 49152:M3TKuk2CQIU6iV9OjPW9tmR+NtkYlhIo4QKLb0y+HnuJ1kF:nv+QYRKa
MD5 SHA1 SHA512 SSDEEP

Submit Download

libssl-1_1.dll

Path C:\Program Files\jdMinecraftLauncher\libssl-1_1.dll
Size 686KB
SHA256 d98dd943517963fd0e790fde00965822aa4e4a48e8a479afad74abf14a300771
MD5 86f2d9cc8cc54bbb005b15cabf715e5d
SHA1 396833cba6802cb83367f6313c6e3c67521c51ad
SHA512 0013d487173b42e669a13752dc8a85b838c93524f976864d16ec0d9d7070d981d129577eda497d4fcf66fc6087366bd320cff92ead92ab79cfcaa946489ac6cb
SSDEEP 12288:OI5WfesuqsFp0cPOtTBV3UxqM5v9nhg/RYXFopg0KOKUU2lvz:OIMcPOtlqXCpg0KUU2lvz
MD5 SHA1 SHA512 SSDEEP

Submit Download

python3.dll

Path C:\Program Files\jdMinecraftLauncher\python3.dll
Size 65KB
SHA256 852b901e17022c437f8fc3039a5af2ee80c5d509c9ef5f512041af17c48fcd61
MD5 2ad3039bd03669f99e948f449d9f778b
SHA1 dae8f661990c57adb171667b9206c8d84c50ecad
SHA512 8ffeaa6cd491d7068f9176fd628002c84256802bd47a17742909f561ca1da6a2e7c600e17cd983063e8a93c2bbe9b981bd43e55443d28e32dfb504d7f1e120c0
SSDEEP 768:lqw/EsYpkVgBaz57kcDA7QKFmpz7cnzH/ks/KF61xubwmB1Cf//yhC74JFmpktJa:7/5k8cnzeJl9IJL0H7Sy4Pxt
MD5 SHA1 SHA512 SSDEEP

Submit Download

python311.dll

Path C:\Program Files\jdMinecraftLauncher\python311.dll
Size 2.1MB
SHA256 1548e399aab43c8e1378dc8e5e4df2356bdfb19ddf543f0a488e9845715d3ab7
MD5 e957bd042d5a2490231c00147c1b78aa
SHA1 317cdf3131002e1b2526435392798127efb11b4f
SHA512 4eccaab54cf05245c26e928f4a60363fa3afc5b218efa781f2bec15251476c4116e3602a6a5e6f21e446b8b17963f3c4cc84e0a7914491673d497b7789dd8010
SSDEEP 49152:kIjCxzbjwAmPY/rKBsa4LqJQtd4+CtzWfja/V8dZUlkM3n:ZjCxzAISyt+EaudO13
MD5 SHA1 SHA512 SSDEEP

Submit Download

python311.dll

Path C:\Program Files\jdMinecraftLauncher\python311.dll
Size 1.9MB
SHA256 eeabfdcf34d12dc7a1bbf22df736e33193634870a01dd4130f10c29a97aa9bb7
MD5 74a75ff2d87fe8ca68924de3aea8e0e2
SHA1 b2d6d01e440aa10296d8f58b6935bdedf354989a
SHA512 019fe236d3341a31f9b1d4be5f91a393f656754c2c02348cb807b0592a18b895e7b1ac645ac72344e6915e60251e448acabc58f5be63cfb7a066603a8efabb57
SSDEEP 49152:kIjCxzbjwAmPY/rKBsa4LqJQtd4+CtzWfja/V8dZUi:ZjCxzAISyt+EaudOi
MD5 SHA1 SHA512 SSDEEP

Submit Download

select.pyd

Path C:\Program Files\jdMinecraftLauncher\select.pyd
Size 29KB
SHA256 b5d4d5b6da675376bd3b2824d9cda957b55fe3d8596d5675381922ef0e64a0f5
MD5 4ac28414a1d101e94198ae0ac3bd1eb8
SHA1 718fbf58ab92a2be2efdb84d26e4d37eb50ef825
SHA512 2ac15e6a178c69115065be9d52c60f8ad63c2a8749af0b43634fc56c20220afb9d2e71ebed76305d7b0dcf86895ed5cdfb7d744c3be49122286b63b5ebce20c2
SSDEEP 384:N1ecReJKCHqeUI7A700EZ9IJQGzHQIYiSy1pCQ82Pxh8E9VF0Nyqnn:3eUeJPHqgbD9IJQGD5YiSyvxPxWEUn
MD5 SHA1 SHA512 SSDEEP

Submit Download

unicodedata.pyd

Path C:\Program Files\jdMinecraftLauncher\unicodedata.pyd
Size 1.1MB
SHA256 a5db7900ecd5ea5ab1c06a8f94b2885f00dd2e1adf34bcb50c8a71691a97804f
MD5 2ab7e66dff1893fea6f124971221a2a9
SHA1 3be5864bc4176c552282f9da5fbd70cc1593eb02
SHA512 985480fffcc7e1a25c0070f44492744c3820334a35b9a72b9147898395ab60c7a73ea8bbc761de5cc3b6f8799d07a96c2880a7b56953249230b05dd59a1390ad
SSDEEP 12288:r3kYbfjwR6nbnonRiPDjRrO5184EPYPx++ZiLKGZ5KXyVH4eD1y:rUYbM60IDJcjEwPgPOG6Xyd461y
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa46B0.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa46B0.tmp\UserInfo.dll
Size 4KB
SHA256 e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0
MD5 2f69afa9d17a5245ec9b5bb03d56f63c
SHA1 e0a133222136b3d4783e965513a690c23826aec9
SHA512 bfd4af50e41ebc56e30355c722c2a55540a5bbddb68f1522ef7aabfe4f5f2a20e87fa9677ee3cdb3c0bf5bd3988b89d1224d32c9f23342a16e46c542d8dc0926
MD5 SHA1 SHA512

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsa46B0.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa46B0.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/440-3283-0x00007FFBA2770000-0x00007FFBA2D31000-memory.dmp

Download

memory/440-3321-0x00007FFBA1400000-0x00007FFBA18F3000-memory.dmp

Download

memory/440-3322-0x00007FFB8AAB0000-0x00007FFB8BAB0000-memory.dmp

Download

memory/440-3282-0x00007FFBA2D40000-0x00007FFBA321C000-memory.dmp

Download

memory/440-3291-0x00007FFBA3EA0000-0x00007FFBA40C0000-memory.dmp

Download

memory/440-3288-0x00007FFBA40C0000-0x00007FFBA431B000-memory.dmp

Download

memory/440-3323-0x000001A44B9A0000-0x000001A44B9B0000-memory.dmp

Download

memory/1380-3337-0x000002A090850000-0x000002A090851000-memory.dmp

Download

memory/1380-3338-0x00007FFBA1400000-0x00007FFBA18F3000-memory.dmp

Download

memory/1380-3348-0x000002A090820000-0x000002A09084B000-memory.dmp

Download

memory/3432-3329-0x00007FFBC1910000-0x00007FFBC1911000-memory.dmp

Download

memory/3432-3330-0x0000023CA2F00000-0x0000023CA2F01000-memory.dmp

Download

memory/3432-3331-0x00007FFBA1400000-0x00007FFBA18F3000-memory.dmp

Download

memory/3432-3328-0x00007FFBC12B0000-0x00007FFBC12B1000-memory.dmp

Download

memory/3432-3347-0x0000023CA2ED0000-0x0000023CA2EFB000-memory.dmp

Download