05ae2f0dd61ef10019b94c200e8df192b767bb4cc24a7e7b329ab43cc9c74caf

Analysis

max time kernel
267s
max time network
268s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SKlauncher-3.2.exe
Size 1.6MB
Sample240601-vmnnnaaa55
SHA256 05ae2f0dd61ef10019b94c200e8df192b767bb4cc24a7e7b329ab43cc9c74caf
MD5 b63468dd118dfbca5ef7967ba344e0e3
SHA1 2ba4f0df5f3bd284bf2a89aba320e4440d8b8355
SHA512 007ecb7445dc0c01a802b5a2c91313aae59f9dc96e27455dd85e7a92a4e649d683fbc2ada5f48925d9ab3b4fdaea20aa89eeb442fde079902aecb5ca3454a548
SSDEEP 49152:HIBc3n9dRvwVlzhFAQ/ggUTPQjYEiim7V:oBaO/FAqMQjYEXm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

microsoft discovery phishing

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation	SKlauncher-3.2.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation	MinecraftJava.exe

Executes dropped EXE 2 IoCs

pid	Process
1440	javaw.exe
1300	MinecraftJava.exe

Loads dropped DLL 32 IoCs

pid	Process
3504	SKlauncher-3.2.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1440	javaw.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
216	icacls.exe

Detected potential entity reuse from brand microsoft.
phishing microsoft
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 11 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	MinecraftJava.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	MinecraftJava.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\	MinecraftJava.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	MinecraftJava.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	MinecraftJava.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	MinecraftJava.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	MinecraftJava.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	MinecraftJava.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	MinecraftJava.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3280	msedge.exe
3280	msedge.exe
1608	msedge.exe
1608	msedge.exe
2740	identity_helper.exe
2740	identity_helper.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe
1300	MinecraftJava.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3504	SKlauncher-3.2.exe
3504	SKlauncher-3.2.exe
3504	SKlauncher-3.2.exe
1300	MinecraftJava.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3504 wrote to memory of 4240	3504	SKlauncher-3.2.exe	82
PID 3504 wrote to memory of 4240	3504	SKlauncher-3.2.exe	82
PID 4240 wrote to memory of 216	4240	java.exe	86
PID 4240 wrote to memory of 216	4240	java.exe	86
PID 3504 wrote to memory of 388	3504	SKlauncher-3.2.exe	88
PID 3504 wrote to memory of 388	3504	SKlauncher-3.2.exe	88
PID 3504 wrote to memory of 1760	3504	SKlauncher-3.2.exe	95
PID 3504 wrote to memory of 1760	3504	SKlauncher-3.2.exe	95
PID 3504 wrote to memory of 4860	3504	SKlauncher-3.2.exe	102
PID 3504 wrote to memory of 4860	3504	SKlauncher-3.2.exe	102
PID 4860 wrote to memory of 1608	4860	rundll32.exe	103
PID 4860 wrote to memory of 1608	4860	rundll32.exe	103
PID 1608 wrote to memory of 1260	1608	msedge.exe	104
PID 1608 wrote to memory of 1260	1608	msedge.exe	104
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 2972	1608	msedge.exe	105
PID 1608 wrote to memory of 3280	1608	msedge.exe	106
PID 1608 wrote to memory of 3280	1608	msedge.exe	106
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107
PID 1608 wrote to memory of 1456	1608	msedge.exe	107

C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe
"C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe"
1⤵
- Checks computer location settings
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3504
- \??\c:\PROGRA~1\java\jre-1.8\bin\java.exe
  "c:\PROGRA~1\java\jre-1.8\bin\java.exe" -version
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4240
- - C:\Windows\system32\icacls.exe
    C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
    3⤵
    - Modifies file permissions
    PID:216
- \??\c:\PROGRA~1\java\jdk-1.8\jre\bin\java.exe
  "c:\PROGRA~1\java\jdk-1.8\jre\bin\java.exe" -version
  2⤵
  PID:388
- C:\Windows\SYSTEM32\reg.exe
  reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
  2⤵
  PID:1760
- C:\Windows\SYSTEM32\rundll32.exe
  rundll32.exe url.dll,FileProtocolHandler https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize?scope=XboxLive.signin%20offline_access&response_type=code&redirect_uri=http://localhost:26669/relogin&prompt=select_account&client_id=907a248d-3eb5-4d01-99d2-ff72d79c5eb1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize?scope=XboxLive.signin%20offline_access&response_type=code&redirect_uri=http://localhost:26669/relogin&prompt=select_account&client_id=907a248d-3eb5-4d01-99d2-ff72d79c5eb1
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff27ba46f8,0x7fff27ba4708,0x7fff27ba4718
      4⤵
      PID:1260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
      4⤵
      PID:2972
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3280
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
      4⤵
      PID:1456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
      4⤵
      PID:2388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
      4⤵
      PID:2396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
      4⤵
      PID:1264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5172 /prefetch:8
      4⤵
      PID:1632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,9777512952656386424,4356840990137665311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5172 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2740
- C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\javaw.exe
  C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\javaw.exe -XshowSettings:properties -version
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  PID:1440
- C:\Users\Admin\AppData\Roaming\.minecraft\runtime\minecraft-java-exe\MinecraftJava.exe
  C:\Users\Admin\AppData\Roaming\.minecraft\runtime\minecraft-java-exe\MinecraftJava.exe -Xdiag -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -Djava.net.preferIPv4Stack=true -Xmx4096m -javaagent:C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar -DMcEmu=net.minecraft.client.main.Main -Dlog4j2.formatMsgNoLookups=true -Djava.rmi.server.useCodebaseOnly=true -Dcom.sun.jndi.rmi.object.trustURLCodebase=false -Dcom.sun.jndi.cosnaming.object.trustURLCodebase=false -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240 -Djna.tmpdir=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240 -Dorg.lwjgl.system.SharedLibraryExtractPath=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240 -Dio.netty.native.workdir=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240 -Dminecraft.launcher.brand=java-minecraft-launcher -Dminecraft.launcher.version=1.6.93 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\github\oshi\oshi-core\6.4.10\oshi-core-6.4.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\32.1.2-jre\guava-32.1.2-jre.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j\73.2\icu4j-73.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\6.0.54\authlib-6.0.54.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\brigadier\1.2.9\brigadier-1.2.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\datafixerupper\7.0.14\datafixerupper-7.0.14.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\logging\1.2.7\logging-1.2.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.16.0\commons-codec-1.16.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.15.1\commons-io-2.15.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.2\commons-logging-1.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-buffer\4.1.97.Final\netty-buffer-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-codec\4.1.97.Final\netty-codec-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-common\4.1.97.Final\netty-common-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-handler\4.1.97.Final\netty-handler-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-resolver\4.1.97.Final\netty-resolver-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.97.Final\netty-transport-classes-epoll-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.97.Final\netty-transport-native-unix-common-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-transport\4.1.97.Final\netty-transport-4.1.97.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\it\unimi\dsi\fastutil\8.5.12\fastutil-8.5.12.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna-platform\5.14.0\jna-platform-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\5.14.0\jna-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.26.0\commons-compress-1.26.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.14.0\commons-lang3-3.14.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.4.16\httpcore-4.4.16.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.22.1\log4j-api-2.22.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.22.1\log4j-core-2.22.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.22.1\log4j-slf4j2-impl-2.22.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\jcraft\jorbis\0.0.17\jorbis-0.0.17.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\joml\joml\1.10.5\joml-1.10.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-freetype\3.3.3\lwjgl-freetype-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-freetype\3.3.3\lwjgl-freetype-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-freetype\3.3.3\lwjgl-freetype-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-freetype\3.3.3\lwjgl-freetype-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.3\lwjgl-glfw-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.3\lwjgl-glfw-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.3\lwjgl-glfw-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.3\lwjgl-glfw-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.3\lwjgl-jemalloc-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.3\lwjgl-jemalloc-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.3\lwjgl-jemalloc-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.3\lwjgl-jemalloc-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.3\lwjgl-openal-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.3\lwjgl-openal-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.3\lwjgl-openal-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.3\lwjgl-openal-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.3\lwjgl-opengl-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.3\lwjgl-opengl-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.3\lwjgl-opengl-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.3\lwjgl-opengl-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.3\lwjgl-stb-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.3\lwjgl-stb-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.3\lwjgl-stb-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.3\lwjgl-stb-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.3\lwjgl-tinyfd-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.3\lwjgl-tinyfd-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.3\lwjgl-tinyfd-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.3\lwjgl-tinyfd-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.3.3\lwjgl-3.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.3.3\lwjgl-3.3.3-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.3.3\lwjgl-3.3.3-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.3.3\lwjgl-3.3.3-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lz4\lz4-java\1.8.0\lz4-java-1.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\slf4j\slf4j-api\2.0.9\slf4j-api-2.0.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6.jar net.minecraft.client.main.Main --username antoniolauda --version 1.20.6 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 16 --uuid 31933b564740356e9f77a9eeb647b5ca --accessToken 5662dcb842f04b2ab44733eb85c86f29 --clientId 0 --xuid 0 --userType msa --versionType release
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:1300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4416

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:1016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 7947f285faff4bfeb4c27d28e6da4f05b1baaf41e9750ba5dc423bab2b44ff4c
MD5 3291fb618cc2cbb67a5264ac7322e8a0
SHA1 0ba4539d5365f28a56002bd978852903ce4faba2
SHA512 a1a2e97ab8f526ec8c3dc2fe3b457464c6ab692c31997befaea0d7bde5a5b71647b4a5bf1d675b86d56596829d156948b6e8e2112cafe6464b9286cb8c7a4306
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8
MD5 4dc6fc5e708279a3310fe55d9c44743d
SHA1 a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2
SHA512 5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b
MD5 c9c4c494f8fba32d95ba2125f00586a3
SHA1 8a600205528aef7953144f1cf6f7a5115e3611de
SHA512 9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 b51f9d6ac352a1102a3d54220dde3eb65b4ba892c34d6aacc43804f9db8bacdd
MD5 4f6ad1ac5571618047ef99ed9cb37d07
SHA1 c7d20b015e1ad60a54decc6815e5ba8120ea23e1
SHA512 c2108f3a71b3b88e5a8093a279e42b7bdb1b8183183e6ca149d39e372dc0e400507a37601d4709cb3870feaf9735c8465bb21ee0f3d2e761ab0dd5c1c4a497ee
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 363B
SHA256 67071c62dafe83222a4757032c95b4ecbadf34b870dccda8610bebc2a26319f9
MD5 73025cb0adc7e797436358dfa6bb9425
SHA1 6409567e882bf9d3df734cea9276a6885e0509ba
SHA512 325f12028e9a8aa41d9dcf10747db7e709106ebc46c8dac489d7644c2360a87a327eb0e6276cfa77a3435021f86bfdd4cd58d6ba128ada94128904ea0e81ebd1
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 535c2b868bf835d602766e9153c4e4ca97e43563e87e857611e122b2957061b2
MD5 d0e1a1ff2a30d3e22d7a17b5f843be4e
SHA1 9e90cd55f339f594654b7d3f547101fc0bfed0ef
SHA512 511bb20e6c6b4adb8c2a97a6299bfa550771bf393f994354610431e766a8c6239a43294badec1ba6fbcd944652d19d3ab653181ccee2253d05fc9335ae310f80
SSDEEP 96:nUkMX1KRwpvWMoiVmdeHm0XFUWQyV+VDCziEwb:nUkGoRGWMXhro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bd9b7cce0d57d1bc915c00f322ad70e7d403411733bd56ea57abb407f3e4a8cd
MD5 d61c2e3178575530b5f35b22724c06b9
SHA1 8cf3fc70df042a998a30b278e95ceb7a2a87e359
SHA512 a167c60f592b95c6370249eb6122714fb8b2318d23b06a787eae7b96e28c0e2198ee8f7340f2b55b1741bf7872893b4cf91d185422fe73b88c452fd728ec04bf
SSDEEP 96:nUkKX1KBwpvWMoiWR5mdefu741jmHd0myWQyV+VD7AiEwb:nUkQoBGWMWpuEhalg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 0e37bd54c1edb8beab429344ad1d141dda2c3c083e3763bc18af574666f8daca
MD5 546fbc792051ad4b9852e094a7d7ca78
SHA1 2b38dfa9af74eb97ce17c471b34dd8a71f2d03f1
SHA512 df9d7852782d03f0407413ce564478da068129c71b182d2f325bb588a9f1230f5e44c0c0f00610cc858eec46a5a597455ce259476b5045f849d9438c5736f8dd
SSDEEP 192:/oCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupGWUe2RUKOezy3z2OMDCRHw:n9iIxuERzA83h09RZxYG/JyaOMWRHqln
MD5 SHA1 SHA512 SSDEEP

Submit Download

+JXF215150933585493684.tmp

Path C:\Users\Admin\AppData\Local\Temp\+JXF215150933585493684.tmp
Size 405KB
SHA256 0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1
MD5 8f2869a84ad71f156a17bb66611ebe22
SHA1 0325b9b3992fa2fdc9c715730a33135696c68a39
SHA512 3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834
SSDEEP 12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8
MD5 SHA1 SHA512 SSDEEP

Submit Download

+JXF4508871098331527477.tmp

Path C:\Users\Admin\AppData\Local\Temp\+JXF4508871098331527477.tmp
Size 398KB
SHA256 1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1
MD5 ff5fdc6f42c720a3ebd7b60f6d605888
SHA1 460c18ddf24846e3d8792d440fd9a750503aef1b
SHA512 d3d333b1627d597c83a321a3daca38df63ea0f7cab716006935905b8170379ec2aab26cb7ffc7b539ca272cf7fb7937198aee6db3411077bedf3d2b920d078a3
SSDEEP 6144:oeroPfXwF22mZ8JWPziKSQYfW0LXYveHt+47O3YqF5nxeU2h8jjXVymj3k4yhb18:ovw22mZzPziKYW0jYves4I2n8
MD5 SHA1 SHA512 SSDEEP

Submit Download

+JXF7582580105248003291.tmp

Path C:\Users\Admin\AppData\Local\Temp\+JXF7582580105248003291.tmp
Size 397KB
SHA256 64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123
MD5 fdb50e0d48cdcf775fa1ac0dc3c33bd4
SHA1 5c95e5d66572aeca303512ba41a8dde0cea92c80
SHA512 20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53
SSDEEP 6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08
MD5 SHA1 SHA512 SSDEEP

Submit Download

SKlauncher-3.2.jar

Path C:\Users\Admin\AppData\Local\Temp\e4j4E2F.tmp_dir1717261612\SKlauncher-3.2.jar
Size 1.1MB
SHA256 f7d3e01dcfc001cc80a988c518d4358955842d140054214d1367972c5c543350
MD5 4d653e61ba01a521c56b9a70a9c9814e
SHA1 de855dc3dbc914b497b58da92e0c21fff660796d
SHA512 e6a7db6e2893b5b01dd0c84a230d88abf50da63ceb1af5754a2c4c1fbd307a799a74f3f368430d3beb33590cda2e0a3cf509fef11c4477b76e8d3c4a582b5def
SSDEEP 24576:cABupJWa7eXYJ4FCDzQvrmqBqAXxKhd1ODQZ3z0IH8obxOaHmez6Im:JgxzIvrWphdcDQZ3jH8olVGezFm
MD5 SHA1 SHA512 SSDEEP

Submit Download

flatlaf-windows-x86_64-4598784582500.dll

Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-4598784582500.dll
Size 22KB
SHA256 ae3352b6ad6cffaae55f4387f9f5e79365ea17f8d5fb45ef11d21c3300a49a4c
MD5 dcd68a87b7e6edbcfde48150403b22eb
SHA1 28e4839a29725075772fccc39b44e194eb91e477
SHA512 ac2a6bc0afcd08c56090536a937772edd54f35505c9a5837d9bc8e91c31edb6137cf5191986b3473e9e2f512950b4dbfe4088598bfd1faf47088124c70aeba71
SSDEEP 384:6pPX3l1FuqkXq3NhzDuWik7DPObNpwKNsOfJ8APxh8E9VF0NyXKss:Ydiq4UzQkG2eJ/PxWERc
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher_profiles.json.bak

Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json.bak
Size 559B
SHA256 9e300ecb0fea4e12444073eadb4e41b872172603b945176a7db79eff00ca5a23
MD5 fbe96e45ea5bc3f32d9ab057364ddc76
SHA1 53d2ec353b3b714d2ee2e39252498537e6da5d0a
SHA512 8c5f59c4a56c4db9acfda4667c7488299d9b3a07f080a20bc6722e357cc249edffd47deca36453e7726a25f116064daf13c667c07857f5f161e94932a2c0f1ba
MD5 SHA1 SHA512

Submit Download

oshi-core-6.4.10.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\github\oshi\oshi-core\6.4.10\oshi-core-6.4.10.jar
Size 956KB
SHA256 fef001a7a13515c273f30915915580782afbc45273cc07aa15994e51563ef310
MD5 75676ac6c1a3c4b0938f73e03eef8cad
SHA1 b1d8ab82d11d92fd639b56d639f8f46f739dd5fa
SHA512 c1e60c340ad0d603f37d6ae0b5ed5ac2833b382dbcceaae84cca69cbf8c4dc9baa7ff741002da3e408426e5100f6c6402713083a05b1a4e3bc5e98923d7a15d4
SSDEEP 24576:rQD0LZcvXJfubINAvBMNGUtY1K72038/L:rpZAubQGUQK720iL
MD5 SHA1 SHA512 SSDEEP

Submit Download

gson-2.10.1.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar
Size 276KB
SHA256 4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593
MD5 df6097815738cb31fc56391553210843
SHA1 b3add478d4382b78ea20b1671390a858002feb6c
SHA512 7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727
SSDEEP 3072:p4WGydWjBhxyrhQG8L58iASUZNKszf+KRb2nkqzcKxrKGKXukGjPphbeT9ctyCmA:OWGydCfxAJKsr+yKoKRKNGjPMLA
MD5 SHA1 SHA512 SSDEEP

Submit Download

failureaccess-1.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar
Size 4KB
SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
MD5 091883993ef5bfa91da01dcc8fc52236
SHA1 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA512 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae
SSDEEP 96:6nc3+Tkadi8HKcL9CpLPu6+Lh61QyBcajLHtlqekr7ztyldIag4m85Bx:gc3+WTzpMyBcctlqGgZCBx
MD5 SHA1 SHA512 SSDEEP

Submit Download

guava-32.1.2-jre.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\32.1.2-jre\guava-32.1.2-jre.jar
Size 2.9MB
SHA256 bc65dea7cfd9e4dacf8419d8af0e741655857d27885bb35d943d7187fc3a8fce
MD5 5fe031b3b35ed56182478811a931d617
SHA1 5e64ec7e056456bef3a4bc4c6fdaef71e8ab6318
SHA512 d683751034688863dc82315a75620abbeeca525cc592d5227b136c29902a0d035f306c6bfaf87d00d95bd1bd967953b00a932286ce09cfba1a0fb35efd852cd4
SSDEEP 49152:LqlErBvWO6wOkDtd8everWLLMwgR0ZxUpkq9nII37Xyq0noxlGb7cIFf1IU6LYbN:ZVOXMsEfLwwf3Upkq9nIIDgIwQIX
MD5 SHA1 SHA512 SSDEEP

Submit Download

icu4j-73.2.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j\73.2\icu4j-73.2.jar
Size 13.9MB
SHA256 29280822f4b0796acef1f79b90b1d0c1edd86c10e876a848e04b8a6298a16bf9
MD5 23a23de561dd4f83e13d46e7273a35de
SHA1 61ad4ef7f9131fcf6d25c34b817f90d6da06c9e9
SHA512 cec14b1da327c77c28ac9110af772d771df6297050dc79919c57059486eaf502ca542223c4a0f5bdb1ddf22d645b550f3b40422ee5d5fb0ebdbb07231e28746c
SSDEEP 196608:QQgcwwqFdIxN7BqwAwqhwjf5DJ6/J5zwB41b4uOxrXH/Yat3lSr4sbD:QQBfqFMN7BqwbfP63Bd4uOxrXH/flBaD
MD5 SHA1 SHA512 SSDEEP

Submit Download

authlib-6.0.54.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\6.0.54\authlib-6.0.54.jar
Size 112KB
SHA256 319ea7b53b5e52f62ad3e2b81e9db7f0751240edac548bd74f5f19e35dc21a3b
MD5 8d5cc32d757f204ed369e6b27ff99469
SHA1 de8bc95660e1b2fe8793fd427a7a10dcec5b3ea7
SHA512 4390482f1f8cfb65735670efc5ecc14913d6a637c35c30c4ace35b346751b7fdeb5ab1eb9e183b40b57f251ded8ab57e3d77d195d14e21910acc8e327241359c
SSDEEP 1536:LrLLxO0LMriu1YoAIKwocP+S77FNNNdD5hfVXYIbylYGo4f/1M/fs7Lh0+fpdl2n:LrXxOCdLI+8vvhhYIelYAMHsvhPg
MD5 SHA1 SHA512 SSDEEP

Submit Download

blocklist-1.0.10.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar
Size 964B
SHA256 830bfd639c8db49236bbd8e45d3a2b8c96c56ff654a10118654958a6235d4c44
MD5 fc1420e3182dd32b4df9933f810ebebb
SHA1 5c685c5ffa94c4cd39496c7184c1d122e515ecef
SHA512 10da612530b7c1e1ef3acd02d2d71fd689f3688fcdcd8b0710a9af646816c88fedc6ed2ea8da2d58e61c6ffc9347a61993bd27dfe04cfc3b646a927bcc48da4d
MD5 SHA1 SHA512

Submit Download

brigadier-1.2.9.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\brigadier\1.2.9\brigadier-1.2.9.jar
Size 78KB
SHA256 1f46f6c679ad59ad5d6228e7b91962217a588f25bd259e0691bc9c5a54b68bcd
MD5 61cc6e0f954ff702955aa264c752d389
SHA1 73e324f2ee541493a5179abf367237faa782ed21
SHA512 9f7c86ce72d4906c8a22bd9dd9140da104416184c20d36211fcad779b20b465f484ddb88ad266613cca6dba188a3a3a2081f0a92044521345c2a7c626cc6b94d
SSDEEP 1536:O+KhQOr4YYPB390+Wt1DkWFwcL7o/lMS/N:O+uQbYo3WvDvRg2i
MD5 SHA1 SHA512 SSDEEP

Submit Download

datafixerupper-7.0.14.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\datafixerupper\7.0.14\datafixerupper-7.0.14.jar
Size 706KB
SHA256 d7392613febff2c7146cefad7c1245ec102432393f7aaadbfbc78ff43ef2076b
MD5 0196308d39eeb5bf8e7795a2d658bf95
SHA1 db3485dc1e6b712bd81170d5ce6dca2fb2f8bd86
SHA512 c4ccc6e75e797eec3d24504314da169be708926b9caad594fe46727968809874cd0ef321f3d32c86140263361d1779a73ff37970e201c25b7c6ca55b58cb34ee
SSDEEP 12288:fvELL0i30Ve0ID68+1mHhQkbXB9B9ePElBHqev5KNBVTQz/lZ:3ELLK+7+MhQsx9yoK7NBKzT
MD5 SHA1 SHA512 SSDEEP

Submit Download

logging-1.2.7.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\logging\1.2.7\logging-1.2.7.jar
Size 14KB
SHA256 3dc3190204bac5f4184d8405bfe1f724f73a6a15a0d3f36ec7f69e6872c1a76c
MD5 d01ea99740509a58222a426cc36f5456
SHA1 24cb95ffb0e3433fd6e844c04e68009e504ca1c0
SHA512 4637804df47b9191de9d219a12374c45175e790dc230040946db541022fb06ee5f6c1fd07cd6700465a6add5e66e96bf364e410da32bfacc4044507424a96e1e
SSDEEP 384:AehxQTzNWWhjacYZZ+qUI+bxaX2KBpfhFCnDRcJMvA:AtTzNTxacqMqUbxa5EDHvA
MD5 SHA1 SHA512 SSDEEP

Submit Download

patchy-2.2.10.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar
Size 4KB
SHA256 16d70e7968b45caffc81576268eb000f473fb60bf257182d3447dea8ec919d5a
MD5 ff905bf0aacf501149a13880a2d6742d
SHA1 da05971b07cbb379d002cf7eaec6a2048211fefc
SHA512 5d66d948fc5e4be401ce6800f36ae896b9315abbb63cc0c0d489ac10651392522c9e52d2a42bdeba095b713917f41ff04121d34675c504da716bafa55355e171
SSDEEP 96:bINFoFvv/G/mg5oPPKKJrNLBkL4uLzjXYFLDm6S3e154:ENavHG/6PKgz2zUbs
MD5 SHA1 SHA512 SSDEEP

Submit Download

text2speech-1.17.9.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar
Size 11KB
SHA256 c2a95b499e76fada7dd63e9b0ec797b678d411c2b0ee6f37f4dc674662bfb0af
MD5 f5b05e8db22e2e0668b786e11ac9d3ce
SHA1 3cad216e3a7f0c19b4b394388bc9ffc446f13b14
SHA512 e7a9ca0449f1fcde00f242043e6f2890993aed4d98621e77a46858c7c9f4a1e5134cc77c33dd2d3b83b2e7164e99a616e3aaefbe860bb209be23e74f7b32a29f
SSDEEP 192:xeeNyWjqALq0t8lunvhN5y6UbkVqX99pFAwq0DzOcI+XSWBb8EkOAbtcsI:1sYgyvHU6Zqt9POcIGSAYhbk
MD5 SHA1 SHA512 SSDEEP

Submit Download

commons-codec-1.16.0.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.16.0\commons-codec-1.16.0.jar
Size 352KB
SHA256 56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d
MD5 6e26920fa7228891980890cce06b718c
SHA1 4e3eb3d79888d76b54e28b350915b5dc3919c9de
SHA512 eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9
SSDEEP 6144:29Rdd6YS6fR4s4ZhmSgcHaJ+dqIOxxmmfmZ0IrGN6cic7UzgKy:2/OYtfn4ZXbdCOmfgZUJlF
MD5 SHA1 SHA512 SSDEEP

Submit Download

commons-io-2.15.1.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.15.1\commons-io-2.15.1.jar
Size 489KB
SHA256 a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154
MD5 84351f7991a0e6722f00e96a4ccc376f
SHA1 f11560da189ab563a5c8e351941415430e9304ea
SHA512 e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c
SSDEEP 12288:E58KhBmHZyNxDz8dLK/2DmNH1Z7I8JHDK8S3ti3:E57RcdW/2Dml7I8pDK32
MD5 SHA1 SHA512 SSDEEP

Submit Download

commons-logging-1.2.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.2\commons-logging-1.2.jar
Size 60KB
SHA256 daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
MD5 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA512 ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557
SSDEEP 1536:TWvDr5xeO4G9Q7+VCfSqguGukQYvFABhbHoneHz:6BxeO4CQSoRglukQTrjoeHz
MD5 SHA1 SHA512 SSDEEP

Submit Download

netty-buffer-4.1.97.Final.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-buffer\4.1.97.Final\netty-buffer-4.1.97.Final.jar
Size 299KB
SHA256 a4393f5b395486cc74d0325c9b41311abb9513ba0fd7ef8cf46e9345c3bffbea
MD5 dd92171035f73671187d7b9f4bab466b
SHA1 f8f3d8644afa5e6e1a40a3a6aeb9d9aa970ecb4f
SHA512 3b9115268879b8bb18d0b0999ad2d23c4519f950f3609761b2ccf419c01a94751e521c2f8397d28e379dec91092c19cd2a639ec2231593b309dec72425ec4054
SSDEEP 6144:zMsv0wK7XYRwMbRwod/fh0sWdI7q7sh7gGCAcwl8XClbDnjDob:bULYaod/fh0sH7qt4CXC1jDob
MD5 SHA1 SHA512 SSDEEP

Submit Download

instrument.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\instrument.dll
Size 40KB
SHA256 c1694de697acb4830726fbd9ba88f94c49ea152900cd353c6feffaedf90b23a5
MD5 25877c45f515deeda937a433fc9d8638
SHA1 ad3ecbae138e73104eddbcb38547eaba9e19c29a
SHA512 09a23ad95f979b462a79ccc2f426d81f5a641ad3ba96afa3f0f9d17f2c7c9c624b10719cd5c5771ae8465466c6f73aa5b2a41dbaf2020b9c98ea8479d885d019
SSDEEP 768:+nUNh20FBe63P/39PWApVLpralIDUEYT/dMooBXH3kiy3vJf:Vo63hrUjo0isp
MD5 SHA1 SHA512 SSDEEP

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\java.dll
Size 108KB
SHA256 82335b932f11482c5f36d12786a9301800daab0e828b3b16abf68c12d4fbe5bd
MD5 457499494ca72d3c07f4e85fbb6ca4df
SHA1 68906a6cd331bed1fad68b0e12ae0782b1d1680b
SHA512 3c2a7e67af1e0522a2c6c3d6ebc41ea942c2bae361b8f04d983f9227afbedfb704a93a8838f2b2ce84997cc5a1a72bccbbf0ba2a7bb07370fad725409174499a
SSDEEP 1536:qi9WpezRtKI88zBjLYJoo+s3YHZxZWh4G9vcZ/yNGvDDNRBkrP0:koR4I88zquY3YAJG/yNG3rBkrP0
MD5 SHA1 SHA512 SSDEEP

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\javaw.exe
Size 38KB
SHA256 b279c3aea41953bf7a674084fd866b211df000855504add21fa0da8bf06468a9
MD5 f548570563577d875b23595d678f1524
SHA1 6b306b9b213f0f9a58a48b37358aa8c5922edc99
SHA512 3686cc38e204ca8a4018ad18a8ba5884dad8b0549ac79b471e973de19ce3435b36d030ff92c826d5b8f371c90640a1cbc52b9118e7a4806d3571894829dcccbf
SSDEEP 768:Bdak2IM5R2TyJ5R3s8D/bkt5Ruz3Vb3Fx5:baGM5RdJ5R3sozkt5RA3Fx5
MD5 SHA1 SHA512 SSDEEP

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\jimage.dll
Size 22KB
SHA256 27a502b241ab2071f82dc70580417e99289ec8a9fe29d5363c69d9bae8cc1af9
MD5 730f42f7933defd6f76cf31831c34d4e
SHA1 9d18162dcc2f33d36a6e9bdb5e7c0c582406fd9d
SHA512 94b2db8a2cfda6a00f0ce784e0c37c3beea92ecef944a53f747b919c39c18d8f16fac1943645a437c07a07519fd0f3db2cc5bbd1ccc91a14dd470e3b524cf6fe
SSDEEP 384:+86sKXm15UXujiG/oyec1nGzDMdfM/Gv7bkHMjt7Wk:XfE8xjiIT1nuMNMev7A+
MD5 SHA1 SHA512 SSDEEP

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\jli.dll
Size 77KB
SHA256 e933cf502c14a1af8994f0e64853b98190f0ea2fcf062f7f80cf1712080b4f9c
MD5 b8055efdd184b39d15b663f2aa04550f
SHA1 901c0e89e9de8c6df0055b2fae83a6d653ff9c40
SHA512 b114cc1d6ae7feda2cbe7ca23bb008746be8f72314b097a7d297238c94caebf78f5c103502dfbf9854d94f342962ac776cf215e4d99c40c80388ac5df43d102f
SSDEEP 1536:TP5Z4qB/zHwxgEp4GJnLS1vbzbIOG9r9t0V1:75T7IRpBJLSFbzNG9r9yV1
MD5 SHA1 SHA512 SSDEEP

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\jsvml.dll
Size 839KB
SHA256 e1ddd4d366dbfaf78d342e91665cba387d5fa90dd1172efa5567016c689d7f34
MD5 33c5b025990bedbb0027ebca936134cd
SHA1 a801dcd56f41a086337f136cea81ccedf36ad57f
SHA512 7ebd988b33edd8b24034fd60b107953bd9dd41f9d36facf7b05a530b6c383b96d3582c930244a0f6bfd93bbf8e7b4c93491a61e85119f8486dc682c4f2df4024
SSDEEP 12288:SRybOUKnvJNeCs5wHu5aTz/V71AVNV+Ssc3:SobO7JN3qwHAaTzN7wj+9O
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\msvcp140.dll
Size 553KB
SHA256 9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da
MD5 6da7f4530edb350cf9d967d969ccecf8
SHA1 3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9
SHA512 1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab
SSDEEP 12288:M/Wn7JnU0QUgqtLe1fqSKnqEXG6IOaaal7wC/QaDWxncycIW6zuyLQEKZm+jWodj:yN59IW6zuAQEKZm+jWodEEY1u
MD5 SHA1 SHA512 SSDEEP

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\net.dll
Size 47KB
SHA256 50491e9ca18a77c3012dbcfb9c4a89786949ba966f5abe9977d18cbde4f92faa
MD5 6a223da529e7ca5d493b2c00a82577e8
SHA1 ea8856f004ad8d8502b7df086d15c88ac96cc06a
SHA512 4502ce6b0b960c411b8ba52ecad400ba844034e36d87eb710ae775af2966bc26645cb1556251ea1f9f29b89aee52e00331aaf9d0f779735349dd49e2c2861a23
SSDEEP 768:apWPY+y/WM1dJ/TCEFg+V2tl889cv5kAnTYufVuScMITty9KO0OiX6naa0tNVlEv:dQ3hg+V2tl8sC5k0sSyTtfCmmz
MD5 SHA1 SHA512 SSDEEP

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\nio.dll
Size 68KB
SHA256 819cd3f849aeb6394acc5b28d4c2629bcf04becafc121a8cc5e092f7f42625a2
MD5 74c61a471c1fefd9b23871fc432762c4
SHA1 f1efba66e37d299ab5fce0f0b9cc33d03cfc139d
SHA512 c6e542fb04b32545d9656e193f9dce98009830b1da427e5fbcd5b21915252222e75f1a68af34e65a7faa1569a95ad66346cf5adf33c4c61a6b83d89955b63bb6
SSDEEP 768:2TpFgNnOSp2JojCwCjGBm0HERrvumkzJUpmdCMGRtXH01pOfs1cCop6ZBkKLRH1J:0jSbjCw1CLCYKip0n1cWRHXCEZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\server\jvm.dll
Size 13.2MB
SHA256 b5b8c413b1a51b9c4c6489b99197208ed676c9a8c1b8158967ddb8f58efed649
MD5 e9b6daf0745597cecdac3059143505fd
SHA1 2c6d4109e1f29a90d54480494dab77b47a6d0d95
SHA512 c587d36e6b746b453cbbd2a5920b6e2d32f297e0bdc50b5c3d0323f0a7604adf472783bedcf9e1afb3ed4f7b35087c5bc600677487258f4fad05ded38400ecca
SSDEEP 393216:VzX9BttmnBsPCE+7LN3lIFF6AI/BQyJU/MYBLllaUI7Eo+cLeI3maaILBYaqSIXv:IX
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\vcruntime140.dll
Size 95KB
SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
MD5 f34eb034aa4a9735218686590cba2e8b
SHA1 2bc20acdcb201676b77a66fa7ec6b53fa2644713
SHA512 d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
SSDEEP 1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\vcruntime140_1.dll
Size 36KB
SHA256 34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32
MD5 135359d350f72ad4bf716b764d39e749
SHA1 2e59d9bbcce356f0fece56c9c4917a5cacec63d7
SHA512 cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba
SSDEEP 384:5hnvMCmWEKhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+Xf0+uncS7IO5WrCKWU/tQ0g:YCm5KhUcwrHY/ntTxT6ov07b4SwY1zl
MD5 SHA1 SHA512 SSDEEP

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\bin\zip.dll
Size 77KB
SHA256 d030ef0d7a9113051d14455f929df54bf4f95296016a383bb3763b640497d260
MD5 69e1a1e6e0ca8fb542e11b4be5c0502d
SHA1 c915dd2ce2b7a410c76c6990509eff9fca594d2a
SHA512 5e71383425876e6a6c6e21a0d285ed3229c7ec7e01d0c6a328b2d3fc93f6ea799251e582b4106090e5633ad7acf5c5e2c151710d8012dc30433490e4a0d54f6a
SSDEEP 1536:8PGe1O5rleSAdx6LZA02vjxLKgGtIOQIO6m4Pv:8PGe1O5rlLEzxLHGnG6m4Pv
MD5 SHA1 SHA512 SSDEEP

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\legal\java.instrument\ASSEMBLY_EXCEPTION
Size 43B
SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
MD5 bd468da51b15a9f09778545b00265f34
SHA1 c80e4bab46e34d02826eab226a4441d0970f2aba
SHA512 2c1d43c3e17bb2fca24a77bea3d2b3954a47da92e0cdd0738509bffcdbe2935c11764cd5af50439061638bba8b8d59da29e97ea7404ea605f7575fc13395ca93
MD5 SHA1 SHA512

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\legal\java.scripting\ADDITIONAL_LICENSE_INFO
Size 48B
SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
MD5 512f151af02b6bd258428b784b457531
SHA1 84d2102ad171863db04e7ee22a259d1f6c5de4a5
SHA512 1a305bc333c7c2055a334dc67734db587fd6fda457b46c8df8f17ded0a8982e3830970bee75cc17274aa0a4082f32792b5dbff88410fa43cc61b55c1dce4c129
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\legal\jdk.internal.vm.ci\LICENSE
Size 32B
SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
MD5 663f71c746cc2002aa53b066b06c88ab
SHA1 12976a6c2b227cbac58969c1455444596c894656
SHA512 507b7d09d3bcd9a24f0b4eeda67167595ac6ad37cd19fb31cd8f5ce8466826840c582cb5dc012a4bd51b55e01bb551e207e9da9e0d51948e89f962ba09606aab
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

MinecraftJava.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\minecraft-java-exe\MinecraftJava.exe
Size 67KB
SHA256 6e7dcf3dca0f14a9d2e1a20af11c400bf4164e02708d819768fcc4231b4f4ba2
MD5 575230bd0c50dac003d275dab323d2f9
SHA1 4f97aff9b52b3d2736993a35f9fea303c3e09cda
SHA512 b9d3ff63f982592f6e28f17eeaadf0549cfbb8e5268ef1dabc763f42b6a27f1f1e1bafe3e901215e95431de5f2ac5abf515864898d8aef5c38deb7a7abfeda32
SSDEEP 768:xgdgmBgrF/JEN8Vpm1hMMHYUL5XcJGyNAwNqfMWFTEMNYkZDGdh9:CI0N8VpEMMH8pZNqRRN4
MD5 SHA1 SHA512 SSDEEP

Submit Download

sklauncher-fx.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar
Size 14.1MB
SHA256 1eba0aa015644805f040f278263f440ed70b2ea82b52169625fced16ddc8d2f2
MD5 9e8f31a786c621395f34e2c1d828a8da
SHA1 e26ecc69a5430528ae8f8a651a2e4d1a4b3dfc8e
SHA512 35883f97f0d30b5993cc3e1bf18d0303b14a4fb8f3ff3fb4a6f6f4b13138d71223eeaa9d15ed1f54a7b5947342a407b5839b58206fec52c7204f7140df116d73
SSDEEP 196608:m/tZUsZg9bZqmewAJmau4p4AMjHBrimF3ZD/ghyFyhi+dcGYZLzfklikjKEF:mPi9bZDqVXp0HhFpD/gy+eG8zsHWC
MD5 SHA1 SHA512 SSDEEP

Submit Download

glfw.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240\glfw.dll
Size 484KB
SHA256 affa7e54eb0dedce4a5721c327c1a16035edbbd039cd402e08107d6d2d55eb1a
MD5 8cabdbe3d67546771b02af5d42073cfe
SHA1 2e19147110b9872a52814956bab151a7aa80ce58
SHA512 b7f46feef779e5772fc7711fda601fdda6ee4bf41d4fb87735a0b8fdc5fdbbdab23ba1760989e15d66cf9ba65409933cbce858eda169d04f13f401198245ad1f
SSDEEP 6144:QHi9k9IQYWWS4JJbzxazY4czAHxOoThkaQo3:QHivQYWX0bzxazY4/3
MD5 SHA1 SHA512 SSDEEP

Submit Download

jemalloc.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240\jemalloc.dll
Size 389KB
SHA256 9abf0095066ebab37b78968e11370a8078313e48cb5be8eda01f67623c6a6248
MD5 e58d41175587d4355fe06bf8b8a1ab32
SHA1 6403f8243ea983a225b3bcda6c821a0029ad9ee2
SHA512 fc432ddb67dce8a672ac268d25f01d40c1d614e4ef34cbac6c4a2c01742ebab5d00c7ef5d9f0ef46ce0b3b6a4d5ace581fcf8c247d492c3882f561015d9e2ae4
SSDEEP 6144:hdyZEHDinptJzM3Ux7ZdxwZNvOseWJ2Pn/UReZ4U:3jIprtdxw3vBpH
MD5 SHA1 SHA512 SSDEEP

Submit Download

lwjgl.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240\lwjgl.dll
Size 468KB
SHA256 a39adf52947fafd954c2a86ce031abb8c59825f7ee50337ac8c41e4280abe82d
MD5 d8ea3886d9f59b514bfa5b24ab69c0ab
SHA1 2bf57942dff5360889f0e89c58d5acdc54e5f1ea
SHA512 ba8af0415c7b0454dd8bdccf78ed59da3bb5cc5f631dd060d3cd0eaf74d8f55d7531248b6b8a995ba5b672dc0386d3fa198e8c761f2e1cc0304da0dc029bf29e
SSDEEP 6144:p997Xkbij3eAMVXiDiA36PFpIiThjnC/smb72NI:p997Xkbij37MVy+A3+J4bS+
MD5 SHA1 SHA512 SSDEEP

Submit Download

lwjgl_tinyfd.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.20.6\1.20.6-natives-692590166240\lwjgl_tinyfd.dll
Size 246KB
SHA256 ec7d76e6ef7a99628ef6f8b6e544294b700108c341837779e6e2c01c0bc3da9c
MD5 e7349669dee3093d266849685efecc60
SHA1 e7c3d94ad9d83f0762dfd82780d2a683d5d9b3c0
SHA512 41d772a4a9673db43a4584af78d5c128278b27efc01b7da47a9f8f629fd004aa8e4c63186d93b6cb7b664325272f0a291a1e80d9ae799910989171c1cdec34c8
SSDEEP 6144:njWq98VaFVuwSM5hFuixx8+iBKhTDdG6/ivF:njWq98VaFVu05h0ixx87Mb
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/388-31-0x000001D28F470000-0x000001D28F6E0000-memory.dmp

Download

memory/388-20-0x000001D28F470000-0x000001D28F6E0000-memory.dmp

Download

memory/388-30-0x000001D28DC70000-0x000001D28DC71000-memory.dmp

Download

memory/3504-241-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-170-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-122-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-81-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-49-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-45-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-34-0x00000000024C0000-0x0000000002730000-memory.dmp

Download

memory/3504-136-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-234-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-253-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-781-0x00000000024C0000-0x0000000002730000-memory.dmp

Download

memory/3504-281-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/3504-259-0x00000000021C0000-0x00000000021C1000-memory.dmp

Download

memory/4240-5-0x00000161E5110000-0x00000161E5380000-memory.dmp

Download

memory/4240-15-0x00000161E38B0000-0x00000161E38B1000-memory.dmp

Download

memory/4240-16-0x00000161E5110000-0x00000161E5380000-memory.dmp

Download