9bf679dec8397aef56f1ac6b5d86e7a2334235f07f2b3f902b22d9b7a88cd802

Analysis

max time kernel
88s
max time network
93s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/06/2024, 19:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Minecraft 1.7.7.exe
Size

124.1MB
MD5

807d0ae6ed38b7dcf878c3e191b6810a
SHA1

c7cf2083b43a93a26d7fc638fb9aec0bd68a215d
SHA256

9bf679dec8397aef56f1ac6b5d86e7a2334235f07f2b3f902b22d9b7a88cd802
SHA512

91f3c29b748bf3fce5ccb71eec14a510f0c0a8c99052f8a4e2db5cdc54e4245b24419bb0befd3835c139b7c1268fd05eedd68a760a2257103e32844691bd0dc0
SSDEEP

3145728:yMgRSQ2KSTiV7/PtzU16inj2o9gWVmOMhR8G6apB:yrbS+XA16inj2o2WVPMrDzpB

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
996	Minecraft Launcher.exe
2172	Minecraft Launcher.exe

Loads dropped DLL 6 IoCs

pid	Process
2756	Minecraft 1.7.7.exe
2756	Minecraft 1.7.7.exe
996	Minecraft Launcher.exe
2040	javaw.exe
1992	javaw.exe
2660	javaw.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\launch4j-tmp\Minecraft Launcher.exe	Minecraft Launcher.exe
File opened for modification	C:\Program Files\Java\jre7\launch4j-tmp\Minecraft Launcher.exe	Minecraft Launcher.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000063528a908c3b1e4d8606b9fc99e40e9700000000020000000000106600000001000020000000732244f90bfd4abd9530ec921cd71d08325b9777ef8922f2af8cb230ace4ee76000000000e800000000200002000000018d1ca7ba9318f791e1efd3f97d39408330463b288a3decb5779a52f9d23a3d890000000c34bdc723f4657383605e32707d414c481ba261183bc872685e8b4ff7305adbd24ee425da880fc35e024bc7122955517f6e6b9f4cb2e6e68164209d36943c512e2230435f4d82745d2291ab0cca1822dc15bf7a243106b6107d2c5d12a0fba5b9bfffda440a7d341d696a040efb21b3a2a89fc871ea37d617e183e334089cd411824b085cb03b03eb00b138b30c996594000000037d329f0622e1d2dca32e5f00588304b2a99026e4fe337013a463d2179c978b7aa3915b86023be03ad19c0ddd4027acf0322f5a9308d1c187eb78d18cc972e0b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4C96A831-22A9-11EF-9CEF-E299A69EE862} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\MINIE	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000063528a908c3b1e4d8606b9fc99e40e970000000002000000000010660000000100002000000004f1ce128d03e96db9f3c5f8795839edf82174212a4cc172433c0c5c17c86d24000000000e8000000002000020000000f2640308cd1c8c61a48e5380aaf114578680f20a58d6c3c32cab453dee7fef7e20000000d0ac83bd104a899396fead7948fee30de6135864f36aa5c2e231695406dade2f40000000dcb54f8ad55b0fbf8f7b6a83b225528779f0af4ba6e5ac2b7a97084fe74cd093dc4261d357bfe819bde7af07a6430beff4323fc60e10248ceb7267080263157c	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000000000001000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 809f6121b6b6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1868	iexplore.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
1868	iexplore.exe
1868	iexplore.exe
1920	IEXPLORE.EXE
1920	IEXPLORE.EXE
2172	Minecraft Launcher.exe
2172	Minecraft Launcher.exe
2172	Minecraft Launcher.exe
2172	Minecraft Launcher.exe
2172	Minecraft Launcher.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 2988	2756	Minecraft 1.7.7.exe	28
PID 2756 wrote to memory of 2988	2756	Minecraft 1.7.7.exe	28
PID 2756 wrote to memory of 2988	2756	Minecraft 1.7.7.exe	28
PID 2756 wrote to memory of 2988	2756	Minecraft 1.7.7.exe	28
PID 2756 wrote to memory of 2536	2756	Minecraft 1.7.7.exe	30
PID 2756 wrote to memory of 2536	2756	Minecraft 1.7.7.exe	30
PID 2756 wrote to memory of 2536	2756	Minecraft 1.7.7.exe	30
PID 2756 wrote to memory of 2536	2756	Minecraft 1.7.7.exe	30
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 2756 wrote to memory of 996	2756	Minecraft 1.7.7.exe	33
PID 996 wrote to memory of 2172	996	Minecraft Launcher.exe	34
PID 996 wrote to memory of 2172	996	Minecraft Launcher.exe	34
PID 996 wrote to memory of 2172	996	Minecraft Launcher.exe	34
PID 996 wrote to memory of 2172	996	Minecraft Launcher.exe	34
PID 2756 wrote to memory of 1868	2756	Minecraft 1.7.7.exe	35
PID 2756 wrote to memory of 1868	2756	Minecraft 1.7.7.exe	35
PID 2756 wrote to memory of 1868	2756	Minecraft 1.7.7.exe	35
PID 2756 wrote to memory of 1868	2756	Minecraft 1.7.7.exe	35
PID 1868 wrote to memory of 1920	1868	iexplore.exe	37
PID 1868 wrote to memory of 1920	1868	iexplore.exe	37
PID 1868 wrote to memory of 1920	1868	iexplore.exe	37
PID 1868 wrote to memory of 1920	1868	iexplore.exe	37
PID 2172 wrote to memory of 2040	2172	Minecraft Launcher.exe	41
PID 2172 wrote to memory of 2040	2172	Minecraft Launcher.exe	41
PID 2172 wrote to memory of 2040	2172	Minecraft Launcher.exe	41
PID 2172 wrote to memory of 1992	2172	Minecraft Launcher.exe	42
PID 2172 wrote to memory of 1992	2172	Minecraft Launcher.exe	42
PID 2172 wrote to memory of 1992	2172	Minecraft Launcher.exe	42
PID 2172 wrote to memory of 2660	2172	Minecraft Launcher.exe	43
PID 2172 wrote to memory of 2660	2172	Minecraft Launcher.exe	43
PID 2172 wrote to memory of 2660	2172	Minecraft Launcher.exe	43

C:\Users\Admin\AppData\Local\Temp\Minecraft 1.7.7.exe
"C:\Users\Admin\AppData\Local\Temp\Minecraft 1.7.7.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c rd /s/q "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Minecraft"
  2⤵
  PID:2988
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c rd /s/q "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft"
  2⤵
  PID:2536
- C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe
  "C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Suspicious use of WriteProcessMemory
  PID:996
- - C:\Program Files\Java\jre7\launch4j-tmp\Minecraft Launcher.exe
    "C:\Program Files\Java\jre7\launch4j-tmp\Minecraft Launcher.exe" -Xms256m -Xmx512m -jar "C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:2172
  - - C:\Program Files\Java\jre7\bin\javaw.exe
      "C:\Program Files\Java\jre7\bin\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xmx1G -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-254438778330 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1\vecmath-1.3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3\trove4j-3.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5\jopt-simple-4.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final\netty-all-4.0.10.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0\guava-15.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1\commons-lang3-3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.6\authlib-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1\lwjgl-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1\lwjgl_util-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.16\twitch-5.16.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7.jar net.minecraft.client.main.Main --username ala --version 1.7.7 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.7.4 --uuid 2699416e-f81a-4831-8946-8082ba952fc4 --accessToken 1337535510N --userProperties {} --userType legacy
      4⤵
      Loads dropped DLL
      PID:2040
  - - C:\Program Files\Java\jre7\bin\javaw.exe
      "C:\Program Files\Java\jre7\bin\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xmx1G -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-266260400990 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1\vecmath-1.3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3\trove4j-3.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5\jopt-simple-4.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final\netty-all-4.0.10.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0\guava-15.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1\commons-lang3-3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.6\authlib-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1\lwjgl-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1\lwjgl_util-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.16\twitch-5.16.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7.jar net.minecraft.client.main.Main --username ala --version 1.7.7 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.7.4 --uuid 2699416e-f81a-4831-8946-8082ba952fc4 --accessToken 1337535510N --userProperties {} --userType legacy
      4⤵
      Loads dropped DLL
      PID:1992
  - - C:\Program Files\Java\jre7\bin\javaw.exe
      "C:\Program Files\Java\jre7\bin\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xmx1G -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1\vecmath-1.3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3\trove4j-3.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5\jopt-simple-4.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final\netty-all-4.0.10.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0\guava-15.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1\commons-lang3-3.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.6\authlib-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1\lwjgl-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1\lwjgl_util-2.9.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.16\twitch-5.16.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7.jar net.minecraft.client.main.Main --username dsdssdsddsds --version 1.7.7 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.7.4 --uuid 9fe4ccaa-ba1d-4a93-ab90-4de8db041d9a --accessToken 1337535510N --userProperties {} --userType legacy
      4⤵
      Loads dropped DLL
      PID:2660
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe" http://teamextrememc.com/
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1868
- - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1868 CREDAT:275457 /prefetch:2
    3⤵
    - Modifies Internet Explorer settings
    - Suspicious use of SetWindowsHookEx
    PID:1920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
16620c87c899b7f9e9ff3b27a4d32e95

SHA1
950c69b6ff051b089738895819535cef8cf490a0

SHA256
eb67ba7614f715e143b4051b18e9c3be3a663325a85837b0f282c1c2d6d21cf1

SHA512
7bd0bc0704ba38afd2aa5a05ad4c5f98f85dc89236b266b5a7b50893b6ab387f64a2642e9bfc0d941f70d252ea0fec2d614048029055897e83c6b1d2ad00f08f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cfa80d6ddbc7fb9637fb3b212521f3b7

SHA1
b09f56dab479d13966c4aec8aa53027b2a32c7ff

SHA256
ccc1eff3dc5d61efe3c62b47bf1344ed55ffcff7f934ec27316585a1a0de6336

SHA512
3fd5fb35db80f2290309c5d0fd28268d24dc7a012cb12a647a9da19e4be6db6d82365fa421e923ff20a7c063e51bedcac05a3dca19ef8368912069c1b9aa618a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4e7cc07d3e8c5a06cf56f776d3975779

SHA1
60b4cdb5f1cdb44588ef6f5ac0236b32bfa62819

SHA256
5ad1de27c1c784a376847e8a39b942b1194988c5f5c33e065ebf5ff5ec763ffc

SHA512
a8bef0d0c9916319ae838788d6d9d48698787ded65105cfa88a7ca57ee14f7fda700f1a8ab8a0ddc1c4908c09ebd21cb5b0517cae4cb89c55a889f55838fcba2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ebb487c9107f7d2943d6263c2553f419

SHA1
da3afede4452da5eff4081a13d13e9339fb57314

SHA256
c1d8db1034fcfad311549b104738cac65bc0f90d16cdea75bee097bf69cfc223

SHA512
13db9f729b9ce0606df9237461ca52f9c2e235516249a43ff1acf329ae7b9fae17cda42d9f2070d715dfe94299f7d7d3c9e06aab8de4355c4aae64212e188aa6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9d641e28fad177ee19edcc149bf7d820

SHA1
e01b8c88fde47a06dfa4eb143afec585efc055d8

SHA256
4b77b516c4237833838758952f66576b5a23872c25c335e58fefb2b9d8300c3d

SHA512
9c5c412d835794edfae8e546729347abb1df9155ca91a75c18de237a19bf464cf8b07ad61b39992948bb23e3d8c4dbe872dbe6bf58234fea500a7d651dea32cf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
78196fd474d2e033b3f883a93840462b

SHA1
8394cab22f2453d68035c8ef3b9505141d6882f9

SHA256
37ee97cda5765d17da73d634537e3136e184ab371b182259e04dc0710835d10d

SHA512
e33c55b49128ab7894159c557af92263288daa4618203c84e0b5559d1bdbab569f374c96382c5daf6c45a00ef8ad7118f2d38402aadfc1b7a8818b2a2404d7fb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eb81ec252da95d27e98f4b1dd0ac5ec1

SHA1
ffd1233f250a03cb2e2b61455854b8ac18b77a93

SHA256
c79f8cf50a9f1188dc92ae2fd0de7a5db1800fdb7e8217ea0e09edeee9249104

SHA512
453fafa5e2d605eb8179d7aca6490ce3f2525d3fbb1933b8cd780e6ee4feaf1f65b83b74aa2b4b1d5e8883b5536a5a3c83566dc80ab6fd1f3d17a96413f01a20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
60b08c938ad94e81dcc47a4a355e2809

SHA1
7d67ba1e543f4952b87984502160ee2cfb5a23c8

SHA256
46bdb20695051ea406bd5be1fe54d4d0ddfb479ac82fed550334064566cc244c

SHA512
b35bbab87a26b71c35f7024c868df13cb89f62dc2352ed33f0aacdaf754f20b3f2e4ae9ed23a166cb20f12d2f958ee7f177dad20473dd578d7b2f4de56df5d69

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp

Filesize
8.0MB

MD5
0281490ecb52fe115370314611ea1300

SHA1
a2e44d489bdc2e95fad03522c58de095ae0137c2

SHA256
4465453c16cb80b477504e080e6b3978cb1bb37df6a6374bc71600516de80573

SHA512
8032cc2dc7878b44cd5adaf231c9e467d93f49c2912d777b2c62ddbda1f684db497acfcc85c8af7814b3c72cd0316c0037978ed8d9b1134050de4d9ccccc1cca

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp

Filesize
8.0MB

MD5
36119fb5593941dee90b3bb47881b0f1

SHA1
b5f7cf642334fb0b04c7349744ec2fe27ba5531f

SHA256
d05440dd527f2304a7ac19caeb18b775b76e8a44e7ad5dbfa34412ffe1e59c8b

SHA512
bea9e25eea0f6c8988713e6b46cf8a42eead2ab8d48e44961ef5fc0f0cc06a8ecfbb2ef4e7e2485b6e627d27b59918495148d2b7e014341b9300d992b9d378e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp

Filesize
8.0MB

MD5
28be4eccf12093804546fef0435b4a91

SHA1
72d88ea9537cbfadd2f5e6c9db014991de69a55f

SHA256
69032c2158d70ae0607f0500732e9e82c348566b9af61e791d86a545ed51d6ef

SHA512
4bab5bbf52921123a863cdb049a645c8068fa2995119a7b9e2a39d7b0da19b84275ad17f20aa6f121e8723025c76380cd14378ea7a89094715cb74bacb6e0ad2

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp

Filesize
8.0MB

MD5
c8e780ade925e7c32b2e31b69f0b34e9

SHA1
a2523a743d69f72ad602fc214bea9700d2795829

SHA256
b342688c9bb98db3e8c51ea4093194c6570fe6aa749b70082d7788c114858254

SHA512
b9b9c92f782301d145fc137c4847db625446a1d526a02c1f0ac3adbb6b683522874b704f75594d9e6049e9a793a319c524a76d6bcf3635f8769bf05fe801aa00

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp

Filesize
8.0MB

MD5
66f2e3ece21d1942ddde5cd818db5217

SHA1
177f8660fb0fd11aa82adfa06b6189bc60d7ad9b

SHA256
677b59a59bdbe8f455ff55b96dcdc18f34a01b25ef4f4ebc3c2c2329b9678494

SHA512
2eb4f79f179d5e3696b6664b33e07131def5b3270cd834a1de7889b37d6280f45259707f432b682e47f3f824b21081bdd10e7f93e8cd495ff12113429967efbd

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0007.tmp

Filesize
8.0MB

MD5
ea75221e9562fb6b165762b80545be6f

SHA1
45440a66698ae5ec2fc4bd45d7817e52b83e5c57

SHA256
69dacc9fca1b1562e7ff044e87708bfb07f87d38128969243de8ba4e4c4394c9

SHA512
a9606b996703d3b1dbad6bc547bafed552f58779a200760f1185be06e8b50139dc0d85bba990c267ef9f023a9052c1e35522bbf8d298feb8ae2146434d4b434a

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0008.tmp

Filesize
8.0MB

MD5
5178d6e3431e68d42f20959ac5f66f62

SHA1
5105675c49782cdcbdcca64d0d5af48651895075

SHA256
9f1bbb3510bda26d57a9fee1fd60b65a2330f083eef5e1cfad6c747368d0b66e

SHA512
f79bcd3976cdd4a568450d502335d76ee49beebd68c3c6426e5f3b4406d084fd7a7d8ed75e7ef5e3778f5eb5e20b917a749c975a26737cfd3de62fc5d613e3d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0009.tmp

Filesize
8.0MB

MD5
1ecf22e5094f7234ec8900f16539b6fe

SHA1
13d97449664b68cf395e4404c6cb4b6d59152536

SHA256
74c1727ed53b261228ad0da5c8f28352c6bd0413ad8098d69e9c2c6ecf02d296

SHA512
4e096d9d69e92b95549e974b7a64f5b3b1892fbd089a7d63e4c2b2176b3106dba0ad0820bae7be819ade61cb4f4a6a3689369292cb818f9e52fffa4b89728f91

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0010.tmp

Filesize
8.0MB

MD5
8ad8b1845154266604f36194fab6b986

SHA1
4805f409bf6a11af850a95b56c115fa5fa89262b

SHA256
94f9697be5dcd4db7cf612aadad2891b5801963e202ad1162ea8307854edb733

SHA512
ed063715a2ead175d93c5203f081530fa4fe64ccc7f8f55806264f7a45e0240d341cade4ec2bcdb73e9f8a7a42e05db301d1450ca3c2085310971cf9e3dc61cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0011.tmp

Filesize
8.0MB

MD5
815180ff9cf4c2ad47db80265684a81f

SHA1
b4fb10e272dd1c8d43e0b9f96d3c087d0c4d4a86

SHA256
fadd0273989a6177ce8e8297986668618da3987179856073febd08c98a29657b

SHA512
0170fd5d444a396beb9553b7192d20c510b69b00b131d30640bd2d00c730ca2551e8c231bb2591544fcac656c644b17cec4880b8c742acd7de13b079a0ca16f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0012.tmp

Filesize
8.0MB

MD5
545258620a8bc9f46da28863bdb7963e

SHA1
d3bc6836b6e85a9df074158ad0c718bb438dbcfe

SHA256
72adde217b27cef3d80999727a747d30e5601c576f686d92b1e3d20dbff1f384

SHA512
36797be2fcadda798cc2d9ece3530ef8cc2c9e83ade7bf2761647f646b4e32aa038304ab1925ca6254d6cffbb19a6345d4ec6aca0e05d406c1990e0d979cb433

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0013.tmp

Filesize
8.0MB

MD5
1b6432fb7c2dcd3c6fa1e3397b8e0cea

SHA1
1ebd77bb0da621c817056f33646a19bb090b80c9

SHA256
1701ef39dacc525909aff1c91545f23a6883f05c6044c7167359f88e7e505775

SHA512
c8c7e18d29cca8ba721fad23a723240e8eb07e373f121d329d5aa6f9b9bc7e53278cfac5856fb0bdaf6a32907e2627b2a089df8273a54d89274201db80240121

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0014.tmp

Filesize
8.0MB

MD5
945dcc2c7bf18e369f3542e7a376368c

SHA1
fc825574e1928bc9b2428a29f312966a2937e0ae

SHA256
048994fe982f3065c36dfedd31094b42ff06f043e7ac8203c2dea9776dff92bc

SHA512
8fc84169862f1e67a497819302aaf568f12e78277b925c0da0d7e34af7bcae876624ad1f20488888a03ec6f0496bf7d180b916a2438e508f13ce47ec53df83f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\$inst\0015.tmp

Filesize
3.9MB

MD5
b2e33db5792efae80db74d29f0c00593

SHA1
51e07df1407f68746301a990875924bcd969aab1

SHA256
8f2f000079488aeb4f01882db8c62fda3a845150b9e21f33df0c52c5af845fb2

SHA512
2c65c319cdc8d469dad3a4f00cf03a910e0c9e04e255dfad3947c47aba07fe19861592036928ac066d551736a12934e3e6e141d789c1524759900e4456a3337a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA6FC.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA817.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA83B.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit
C:\Users\Admin\AppData\Local\Temp\imageio8953565345972650869.tmp

Filesize
344B

MD5
d141cc8e71a3351f1aacb88a74b45fa4

SHA1
323cb27d8b7772b4b928a00706d4efe3b1104f52

SHA256
2788675e062e1111ead50a9a05971a7c11fe6246a89f571cf9f59ed68c72bb17

SHA512
315dfcf01f450b907f2cdfc9661db728789ec2440dd6985d914d024bd3c0798e602f7e230e60a8ffee8f39c95de68477d3b4def580a292e263d48bc23babae09

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\Read Me!.url

Filesize
56B

MD5
ffa157178d9281ed769e695f6225b91d

SHA1
ad7b15cd4eaa8cf2f4a75b32a77f3c17d405d1c5

SHA256
4baa30a7d1b4a1eb9e74bbd207b78bc35e74205a9b88a66d47f3e86c3b3e5c3c

SHA512
bd5de0402d6c2e87581c38993f1fa1030fc7984cf180504a2eddd1f85067ed70100982e0c056752c96c7cbff4eb7195954e2a759b0cdcbc64287fae3739d9b42

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0\guava-15.0.jar

Filesize
2.1MB

MD5
2c10bb2ca3ac8b55b0e77e54a7eb3744

SHA1
ed727a8d9f247e2050281cb083f1c77b09dcb5cd

SHA256
7a34575770eebc60a5476616e3676a6cb6f2975c78c415e2a6014ac724ba5783

SHA512
47d9a7526c3c039b3793750f537fee19b645b1293b574fd1939ee058d8fdeb8ad956e0e0aa36b5d4b527e9cace51b71aefa6c8fdf40acbf611606a162d878f58

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0\guava-15.0.jar.sha

Filesize
40B

MD5
f0bb78ea65f9314ca2b7dfb959479ad5

SHA1
2a2bbfe4ca09fc3510c17503634d3acd6b4be494

SHA256
c295ea299176b64d71aad8edea683a40d29ab42e8449aba19c37a28442a61ba2

SHA512
7010b047468891169273823921fd6fc4ab1c19ab785e77ca057f0a691bca60033958ded6326e7d352ed04c89f257fec87ca561db9ce7d4314036b436b00bca69

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar

Filesize
1.6MB

MD5
aec124acf7b3c1c6ed41a6270a4452b8

SHA1
63d216a9311cca6be337c1e458e587f99d382b84

SHA256
147592c5eb8e11fc8394125954f877acf25918bae13aa210c2825aefc3030ed8

SHA512
ca585221ac4b06ed7b12891b43882e1c219d4656bab0f291a25fb9bd971d09371f1c8e35181a9ae5dafd9a429367ade86ec3f06eb0dc887e8a790c671132cac1

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar.sha

Filesize
40B

MD5
4ef467ec59738c27f9927aa988d2bbb5

SHA1
0fe7a954e4832d0d1aa323e0c6be31917703ec8d

SHA256
6a7e73c46f0b5de1ae84181947f30c10a4f3e39f99b2613ed47ea5fbc5427fd8

SHA512
ba2263c9624f2ed19fac538d47b066a675291a3bd9df110b3b6f0092c0931ecd29fd3e49b31d1c3b72ee16fdb930c460d5edc56fcee0f3aed47f35971956d0de

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.6\authlib-1.5.6.jar

Filesize
58KB

MD5
5b2470827910500f966e2937305b1614

SHA1
8e55bce5f47f1b3ffc43aa72720b28e376182934

SHA256
cd01699b3bd11fc35f541f55f1707dc4a3900525a8d189e8c4dd3e4a141fc6ff

SHA512
301f7847a858fc5fd51f166dcf0a388a120beb03316793592618dbcde696ac8b6bd16df67fb7495d6fa7dc59d58b24436343dd5bf9fa80336d9bed30c542c717

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.6\authlib-1.5.6.jar.sha

Filesize
40B

MD5
3d6c665cfd96364bfaf1f0edf8eb6b51

SHA1
780022d3e00b92555561de6360d0f6d5a88cea6e

SHA256
5d8b16a2dc91ad7f9a9191df1e5e4f7924ce64797b8ddd9aa742d72f85b4c5b5

SHA512
571a90f28a3fc9798c34f51a163f01fd52d161a507db7dada802dd929c342ba6d1e91dad0d173b47dce0eeb672010bd8c65d9b37d71a0087cc94c82aafe9a27d

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar

Filesize
101KB

MD5
0d622e2ac4368b5a33d540a9e4819e0c

SHA1
c73b5636faf089d9f00e8732a829577de25237ee

SHA256
6c4b4e50e608763564afa1bde2d25ece9dd715e7c9129540faa1faded4896506

SHA512
304b55520c48d574cb046efa45687000b640937ea86119b81c152bfb192aded3de61b993bb83275e21efa4cf0f50efd3025d030b18dc1a0f53fed1dcdcb151f9

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar.sha

Filesize
40B

MD5
30230350345b0dbd5047cd5259f366a3

SHA1
de64465526c27ff823f87df381cc9776ba1496a5

SHA256
365e36a9b24f70c9b2c20e5e866c1a0b40c1b57a9970ee3cebd35836df537151

SHA512
78250a77c081779b45c4b57758c398a779f7715808561fe5533bea32b4534bf697f586a5fb3c229787e7af9b1f1fc484b3d583f0845f8cdf82053c546e14c6ef

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar

Filesize
5KB

MD5
f6a93b7eb8083e4ced92e7e253657057

SHA1
12f031cfe88fef5c1dd36c563c0a3a69bd7261da

SHA256
bb7d17b340afe6abdfbfdaa03683bce4aef39a64887dbab0636eaff3cf2d59ba

SHA512
994af7ab19036542162d75a94dad4c7645f60626879f715d308966b8a018c84474cfcac28e2555f4a6e7a925bc919c54da276e2ee45bad2eb512ca1abeb7a2ed

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar.sha

Filesize
40B

MD5
e53b8853c61e7ea6740806d046686e4d

SHA1
44e95e6e289d907d28f0a855690fbf4b60cbef81

SHA256
f503c061807e7795ff06e796bdf46144d69d7acf2125da641b7d78f0a6cae210

SHA512
93daa50f7a9c2b82c02a7ec0d03cfc2c86f7a51196e9927680a7ba8e323f5b83b4df56c80a966ac7f42c6835c299767bece28060da8a894f5eec47e9eaae7416

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar

Filesize
21KB

MD5
247b45f9d2f0071ad543c14d0ff31d5c

SHA1
5c5e304366f75f9eaa2e8cca546a1fb6109348b3

SHA256
333bbefeff5eb1722dc9b8d2e26c38bc69c1efa07d0ca870480f29d8858aa336

SHA512
eac73f86f1f85c94f5df309c4a27b02ce33e63635ef731e088f4dbeae2679d837c0a82efd96d853bc0a193edf5636d949a91b41e2b43de8bfbe376d2e717984c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar.sha

Filesize
40B

MD5
ad1d352fbc3a1d5be61180b1706647f6

SHA1
d80284c4d37c561ab00631a7c1408c42d6dca1f8

SHA256
dc2f644fcb4c219adb5b28bd311a14eff1db4758aa753a95cb8fa9745694ac11

SHA512
7fb8c8639ace985674f020ad06a31a29c53f918d1c4c37564a3f534c25ef125528d69b97e87d844908b813bd51f5d4ea47a7b1216f10c796027b075c2820695c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar

Filesize
18KB

MD5
93730cef2e75762c5a1431c6d7a0c78e

SHA1
73e80d0794c39665aec3f62eee88ca91676674ef

SHA256
107d11509f6af59b8c2ba23df828bc5d3c4e067b58f3d858c7deb90ca5308f84

SHA512
0e0956a0c16943c3bbeee89b17a556b2f4a57e7d87db1bca2449a77517c46559f4b2dcb541695f89693fedb533e627671466915758dd0f0299477bf374a58dc8

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar.sha

Filesize
40B

MD5
ee03b1717c10b6c0b76b6b65949cbdb5

SHA1
cbe5a5e72e2a172936199af93b9a76fcdd3a7ec0

SHA256
139cb6fb24cb13e4893dd4c81edf26b761d7e376940e38d4641ff955647bd364

SHA512
a8aa647a13fe73f4776b88fb15c99a74142f08b40ae683c5473cb2f076770dfaf81f34677f4c19b10a2d92461223a8b36c75c6e61a7d106a7b2544ec9bf85f65

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar

Filesize
63KB

MD5
6d9d7d6c163caf74984465694d3566e7

SHA1
419c05fe9be71f792b2d76cfc9b67f1ed0fec7f6

SHA256
2882d64550240dd0c026724da664d9f97ef205c91d6a85273d10790d88608f34

SHA512
8b5c995c3ba0b58f60269793418f3d52c766fa182c92bb76856b7bb7fb79e7c74eecea8d50fc1fac665328b00474851a8ea0c959373d84269e550ad1cb6e327c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar.sha

Filesize
40B

MD5
12d6cd2d0c032b3d473f36e59a6c9521

SHA1
0394267ebc3cd7e6f6848485410c03533c7c5b8a

SHA256
8221ef234de98ad6f3f8a6dd40822d4e04f9e6cf1060947f6538083def3ce952

SHA512
cb912f4fe19dd2830cb1115a225e639cb8869509c00becc240da21a06c2b86dc91b07246b175b44f3895b4a81ab2c6dcabadaa7db554ddd15243c10bb36801e5

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar

Filesize
257KB

MD5
75615356605c8128013da9e3ac62a249

SHA1
9ce04e34240f674bc72680f8b843b1457383161a

SHA256
ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce

SHA512
b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar.sha

Filesize
40B

MD5
593bd7b05243cc4034fd530597e35e81

SHA1
7864023d9d4b5ca7d8379a52c6ca2be8d3b8d27d

SHA256
d67fed2c2edaf973614898fac8f3f2b05589a6e56401e4eae3e57afa5641bd14

SHA512
f96274ef5bd7dea7d4be6793550e1d835d88ee24274ae164ce58bd846839943e015eedb479b39802782c504885da150b5b9e4d6c2de7e5ce8a096874eb56117c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar

Filesize
180KB

MD5
7f97854dc04c119d461fed14f5d8bb96

SHA1
b1b6ea3b7e4aa4f492509a4952029cd8e48019ad

SHA256
cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581

SHA512
957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar.sha

Filesize
40B

MD5
579671e671959e15f9b259fc48400c58

SHA1
a3b89652c01c85ecd3ba2d2f8e790b8eb619558f

SHA256
1b19e9d588d66775176a58558de013f9dbfde7cb708d0db10629fd802e1857f6

SHA512
638451b56ea1e7da7af1fb5fda6efa1501a8bdc9fe54a85b599ec5b7fa6ae35c9db7113cb5af6d7fcd38b52260cb19528ab827446f0a8a064944ca50b52b9455

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final\netty-all-4.0.10.Final.jar

Filesize
1.4MB

MD5
ec0ec0f03adcc9800cbda8cbc2dc6560

SHA1
9e50bd52ffe257a0e2cd8d971688d6ce7d174325

SHA256
96eaa32232b5a5b0f9afc121a0e1b2416e3dca50657b31e5431c0a04ae650552

SHA512
471b0ee0748717e3881b6de54123ba84dc7503bca72ca4b6ca2c788489e32695eb4912ca6bcb50b9cbf7738046ac1f34cde6da0238b26b3b582860169ac69a45

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final\netty-all-4.0.10.Final.jar.sha

Filesize
40B

MD5
78de8a6174ffdfa806d9d598e50f8218

SHA1
890d7db8a83733cfc08d1ae6dd4f0c072d4f047a

SHA256
fe234d09c9b9825b43ea9d261afd2c9838c63ba249a8f5ddd5c109fa8cb720f5

SHA512
cd9c5e621ce81352960dea21b1aed72804ccd2ac37e9b750dc13f81fc8685d9798b2035ce36be98144625b63d817fcfa10d7ceff3ca6990919e151df9f6d07d0

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1\vecmath-1.3.1.jar

Filesize
283KB

MD5
d7e1ab8fc389a50f2b4bb4a6bebc9e1c

SHA1
a0ae4f51da409fa0c20fa0ca59e6bbc9413ae71d

SHA256
dbaa088690a23a954eff669a99d2452a24dd9f10d866725ff5d29ff4740a897e

SHA512
70ba5c3b7b2e4a8180da318956e43868f6f7ed9a969470cd776a1c4fb053b858e46a26ece1014022579c3ae86a6ae96eb9875b9f0b58e72e3bb96471bb8cca1b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1\vecmath-1.3.1.jar.sha

Filesize
40B

MD5
367261076a26d6247ffa5f86c194e416

SHA1
fd3600dc59ee203e22871030614d249bff980872

SHA256
1bac6f4986a810d2aec1556680e3e37cd2077061a83cc45700918a2f15aaad09

SHA512
f366dd3af8a358db38c2dd38c5c36cc70aac7287102aaddb8b3b0ee2f843e029eb4701b17ba88a62b37173e76712afe2f62f489cff328d2482b3549fd6780722

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput-platform\2.0.5\jinput-platform-2.0.5-natives-windows.jar

Filesize
151KB

MD5
b168b014be0186d9e95bf3d263e3a129

SHA1
385ee093e01f587f30ee1c8a2ee7d408fd732e16

SHA256
24afbd5e1fab17da57d16a4d3f19d53f36155ef46a9976484201a4bb9722287f

SHA512
e8dd2c73c97cb0ec065acb3973a89cacf742005d60eca5f68edfd5306a23c4a6be8dd8deb4f7ff870075f75d79fff9a87c2aaee980ef7b4da764bcb822257dfe

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput-platform\2.0.5\jinput-platform-2.0.5-natives-windows.jar.sha

Filesize
40B

MD5
43fad8bbd488f81e2456f39379edece1

SHA1
1623eef169a4b1913bf5f8eec872b2d4f3157230

SHA256
07cdbdc83178c3262fc41dffd86398b6cb8b729e53468b87bb11f9ee4adc4be8

SHA512
d623fd7420dcaa86525b5a5fba0c11a8c8d6f75d5fb4b9f948317894edc23800a60290529eace816a2746469352c1fd17c436a89f374a39167a555f94baec6a0

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar

Filesize
203KB

MD5
cc07d371f79dc4ed2239e1101ae06313

SHA1
39c7796b469a600f72380316f6b1f11db6c2c7c4

SHA256
79b5a4f5829e1a49a415711f7fb8eb5b9ad22defa72929fda2da96ec30d3f018

SHA512
d75e3e35844ce41515fd25f34f9cc2228c5b94e479894dc832e07c78f70cb0d83819c7d574d01bbd0363e9387c9ac15f43a1171a8bd75b783aa5c856b492d24c

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar.sha

Filesize
40B

MD5
9f6bda3b8de8df587c6c12b8be9f85d8

SHA1
a53d497f87008e249768f6f171894ff934a9c027

SHA256
bd9127a3a96e53223dd424e066024eba08d4809eba1338c95cd104d9fc3387af

SHA512
4a3a72ed6e42328886e0d47eb8b2d07451c1edd6dc34a23b707951d4436b63d1b1a7a90a0b979e057a9238d0a978134f0f82ba2b227353ac5d2634a614660603

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar

Filesize
7KB

MD5
f60976b19661c849c5c87433045a9885

SHA1
e12fe1fda814bd348c1579329c86943d2cd3c6a6

SHA256
c3334ff39cf0ab3b54925619101054c90098b7c733b1e7834c7b75e4c41e84a5

SHA512
39cdb29204df770b84ecd5d0041d8cf662c25bd16ef1e7d8257704a1ed3355cc3bb554b99d1fa2e8f0b5d99973201d344ab6cef04cacf98cd041f93a66e36bec

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar.sha

Filesize
40B

MD5
c3aca000f10b37536ec34b38fe3655d5

SHA1
b4d45e8c311d419731b833ff33256b1b9382591b

SHA256
426eb8d71f6c1fec0fad3d2d89452e0fd7935dff2037baa27099612035760213

SHA512
1e50025f37b3519fb95d267fee234938647dd2b18e34cf2543f109aabfb40d9a15926ca530841105c24f0d21e3c1e60d24add16bd455ec9c67bb46c7ff91dc24

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5\jopt-simple-4.5.jar

Filesize
59KB

MD5
1372bd4823bb1ef61e7db6724f601150

SHA1
6065cc95c661255349c1d0756657be17c29a4fd3

SHA256
64335a48be6b142a7d0c13ec5c82a707857aa58c0234e6eda3eaca0e96eea51b

SHA512
eda5b875f357116ee1c3b72ad2bd48d1b40b504a19c1ed8f2e93e42e7f688df7dada366a8e1b4df1853ad8601ca0aa74de52836ab993af3380c3c1d5e0df8b77

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5\jopt-simple-4.5.jar.sha

Filesize
40B

MD5
6cf47a8f8e8540e7d1b1d6d87f2e1e48

SHA1
3d6f3c1216bdc650b553d86bca7a11f0885f8a90

SHA256
5f93679207609ec59042db2739bbf84d53281eaba8c9cc9b5c5a9ee508ed0891

SHA512
d259aeece682bbdc72deb92b2e8deab0f3b97bda2902f2bf16ddfb835966f29f6f01e0f486315e5d1b21a1dc89f35c30dfe6985bda7baa28f9e08c7b5ac2cd03

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3\trove4j-3.0.3.jar

Filesize
2.4MB

MD5
8fc4d4e0129244f9fd39650c5f30feb2

SHA1
42ccaf4761f0dfdfa805c9e340d99a755907e2dd

SHA256
3c8616203d61a12a7e3487e8b34f3c198c2b5ba9e90da0c7ea32d99cd4958012

SHA512
a53815fd52c43ca069f8526e2d1041c881ae833ef64272989c54ea6491c529a7bb830f88a1c8dd016aed158f961b8f404e76f510a384ce89df4edf44c87647b5

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3\trove4j-3.0.3.jar.sha

Filesize
40B

MD5
beaa6057b89e81a0ea96a1afa5b2910e

SHA1
c2e3af36e6e556413b90c78b0aa6122046a62535

SHA256
96d30d2409d222ac22ec8f3dfd5b0c6a4e3efc6cb841050d7f8222fd43a41262

SHA512
1a81f501282ec4c9fef6c2dbb85ba8fcdd5ee982260deea525f25f8018bceef21d20a7a4d86ee31007146f006dc47c490f9506315b0477897c35d0153a3de200

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1\commons-lang3-3.1.jar

Filesize
308KB

MD5
71b48e6b3e1b1dc73fe705604b9c7584

SHA1
905075e6c80f206bbe6cf1e809d2caa69f420c76

SHA256
131f0519a8e4602e47cf024bfd7e0834bcf5592a7207f9a2fdb711d4f5afc166

SHA512
7173397dbe5af36d712e41c5cf0594b2b41a60eade154031c733511115be07b0bab388ae64515351846a423a5b8602c826fd4b1919cb5b8f672c3bb74a59c1e9

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1\commons-lang3-3.1.jar.sha

Filesize
40B

MD5
7e950f30d575403ee583e879aab4f027

SHA1
51a7c6353bc005edd177f611cd2ba2d66aa1fd24

SHA256
ef30aa92867fb38ef232900aa7170b7a7bc8c15a2ae60e04e03e46e8f49d30ed

SHA512
c671a43f8e314fb763d6899b521882d70bdfb40b5386a4060c158719314a12c6445f8e7ff88d0fe8372465562cffae41cd32671d60fb5a41a068f75c04f00577

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar

Filesize
105KB

MD5
243049406066e313938e168335069d32

SHA1
1dd66e68cccd907880229f9e2de1314bd13ff785

SHA256
eb0ca9bdd938f80711152a758d6bc331a8b0d769199d457294dc67ed03f73498

SHA512
a24a425416856973576371b208f4e75b99f7aac2bbfe87a21c8ca8c63dba7525bcd0afa745e0bfd02efa66f593b0e97d6acb4317ff48baaeca32f09e7efa23e6

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar.sha

Filesize
40B

MD5
d382bd53615938e58602686164ec0732

SHA1
dfd0ad05af8fed4ea39ceb6a20c0ca17a0eff882

SHA256
3e79e79ccfed37f32d4e34cfab3dea70997cf206562df2d1c348cb9c7105aac7

SHA512
846baf17a68ad82b93b6c5f8eeb5f52ee5d1744017d8a97ca2bb5affc315964fcafd17e69bbe63fc2815980a2b64c1936e68c9df60524a7c5d1e893a800bf33a

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar

Filesize
665KB

MD5
152ecb3ce094ac5bc9ea39d6122e2814

SHA1
678861ba1b2e1fccb594bb0ca03114bb05da9695

SHA256
dcde6033b205433d6e9855c93740f798951fa3a3f252035a768d9f356fde806d

SHA512
34d98ac898cab200103ba854cdbf9e031009dd4566a09a556613af088d9b7fa900fc86a7fd5f15561b61838f6bfb1a1311cd2fd3148cb0aa3e02c5293114013e

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar.sha

Filesize
40B

MD5
e862125fcfe305bab561ee9cbe3ee9c7

SHA1
73cda0be507395986a7e66b8da0782f6a7365bd9

SHA256
9280d83793574cb842b855cd49618e4b1f25e7f2e98b284bfd2d832e68e0c5d0

SHA512
deba5cd32471147bf425fd8bdf2475c7e321fe8568c719ca4d7dec597e34b7b0ee91d4e08b6d67ee668b1cc9336c78a7f48b9b1fdb82f77dbad55bb59bb365a5

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.1\lwjgl-platform-2.9.1-natives-windows.jar

Filesize
597KB

MD5
4443a2e9eb9a92f62eb1d7202210216d

SHA1
4c517eca808522457dd95ee8fc1fbcdbb602efbe

SHA256
ade8deedceb0b60c630f3e78a7b052b7f8f02ff53d91849d1985d3146bf95590

SHA512
872c06ffecf4f4b2c31175159e55a5ea0ebd2fa560b869bb81a8e6ac255b6e6bca03b024710f431e3b66d5d8e952ab54dab0fed86e95ef99c2df440ce335970d

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.1\lwjgl-platform-2.9.1-natives-windows.jar.sha

Filesize
40B

MD5
ce9886f89c7831a02e4361145f4486e5

SHA1
2a15e5c4e59e69f12312920361c62b6cdaaee588

SHA256
d56c9135473969ccd17bf2faf19f5c01ed19962f7b53fc431b7f450ee8eb1ae7

SHA512
8a7d97efb9487471369071902cdc9cab8416011370af7aeabd6b798426a9ea4655f6982dc149547ac0d4b8a999cec5c7ba05f1bc265b3ab95f2d86cddd0ad42d

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1\lwjgl-2.9.1.jar

Filesize
991KB

MD5
71dad15991e937f14ba6e412aef5debf

SHA1
f58c5aabcef0e41718a564be9f8e412fff8db847

SHA256
c118f8d84313980f79e1e7f7ae4b14b10c2f20c77ea4a1c29f6f0b02bc139077

SHA512
70f76ea8fd466b46ffa78dd48eb17c8e10ccb977b6d7cc112c0ac6d79cdafa4d0be239387351cb4ca7a6ba43a420453269307e0b4b95e22c2f3a97035bf04e58

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1\lwjgl-2.9.1.jar.sha

Filesize
40B

MD5
eb55ca02907e3aca832d1b17d21a6e6c

SHA1
d992e19f07225de63915b2783aad8e6cbd730379

SHA256
83a761ee83f636e46556e3eeb2e3e70a6930b519f1b7fd5d48364379e9c1ea9f

SHA512
e62332b7b06533ddf91adc3b803db33b781df873e5e454942114692a348067e81e610b13d43977e06691610696a91c1b116e9199d77fa21fcaac28232a1a6459

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1\lwjgl_util-2.9.1.jar

Filesize
169KB

MD5
26edc5b18436597e001b3235c785bac7

SHA1
290d7ba8a1bd9566f5ddf16ad06f09af5ec9b20e

SHA256
32d7e73005a2dc0ccc3c62470c435b351f6501de8e8718e26960534754570a77

SHA512
13d2f60ace5aef7347fdecc373c77cee792a8d59513798c3dc6718919ecd9277e0f5d677f985e0bf1d3b90ca10f71ba8c9985d67e53a54847ed100f2c5f2d698

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1\lwjgl_util-2.9.1.jar.sha

Filesize
40B

MD5
f462ce08e64469747fef6166a9188f48

SHA1
1a4f82b0cdd1bb453c5fa400d29b740dbc898b65

SHA256
260f95cdd277a2e17c469e6cc252ad5dedb40634883f5a7f184ed9fb6db659fa

SHA512
1b6ebbd2b05e2a2d129516e06a816202ab7f3cbdbb1ee112230b59e708f4f91bde96bcac9a0f8626219b28364730a06dd4c1dd214ab282776804060995dabb9b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-external-platform\4.5\twitch-external-platform-4.5-natives-windows-64.jar

Filesize
7.1MB

MD5
2ac293bb34ea1934e5554f192c740e85

SHA1
c3cde57891b935d41b6680a9c5e1502eeab76d86

SHA256
6428eb438f53afc563d58c7f2a563ca9fcaae80db3520af744de5e5db1c9df6a

SHA512
2ef826a34b25b6844152a8169e78222a5c030731372dcc89b14a80d30ebf33441350f258bd9956ad14f69ff12aafe047590326cb8f4e83636fb1487858495a61

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform\5.16\twitch-platform-5.16-natives-windows-64.jar

Filesize
452KB

MD5
96e990bdc5568140ee4d40a8d146e3de

SHA1
39d0c3d363735b4785598e0e7fbf8297c706a9f9

SHA256
e4857d9ede9e94a75642cfbd4f9ca45981c76de49842716bea7e4081c2ba3245

SHA512
064193e023a2c6771a31d4b50a6f5fadf042cb80a97e36aad4037e2afcd56cd05bd26b9ca57e28ae64a240eb12f153859e28c910df76b7e7e3270083c3855a41

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform\5.16\twitch-platform-5.16-natives-windows-64.jar.sha

Filesize
40B

MD5
ede29371503d5a8afd6dbec35057bd4d

SHA1
8080b06ae2abe76b74a5142cce1621a9a9372a5e

SHA256
c31272c43c8e07b51507ab747d16367d1c854c76fda594ff6f91d1473ac95a1e

SHA512
0d7166f8dde16e7db0de04b66492d888cf880dff14f3de3c4e9e795b924aefb063165436b248c0e06566fa3a595179ee4e1856e86def8e8b731c0e7630e7b994

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.16\twitch-5.16.jar

Filesize
51KB

MD5
a74ff1813e2d8d4872049ca519b56c81

SHA1
1f55f009c61637c10c0acfb8b5ffc600f30044b4

SHA256
f921abc9c792f594f7fc6fc06b4a7ea330b646ea5ed3785e3589f90b16b2aad1

SHA512
2fffa037e063011be30442b777dd564072fc3b07791447c9f0d6f751e72f3151d70bf63cba7c03484a6d56bce4db462ba5fd255ceef2c4576e389eb36bcd5c9b

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.16\twitch-5.16.jar.sha

Filesize
40B

MD5
269dfc761612ea5f88d400a50805826e

SHA1
08d81383f4888f6c1bf30fb3ef559d4eb29050ed

SHA256
c6e65d5f4cb6018f54d672b346c20f1aac8a65c7b4e14220967a250716358e0c

SHA512
eb0b5b532d264a4dd9d1db6edba508c77d451c9314b56538f214e678d079e0fe62f765c787c9cc6011984c1fcaec76134e815c261c8740c14b8cb3ae49c96eef

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Launcher.exe

Filesize
1.7MB

MD5
1069dd304b0d1aa0cd3fc085a51e82f2

SHA1
b97acdeb3d1593ff1327e6325487d43405aa8a68

SHA256
9c3af5ac2de6bcd9809387e1fb09c7b8ce8b2a6d5fcb029d753835f943bfbd7c

SHA512
3b646a237311c4a37e9a82c1bfa2284ed956727ec5876df518caa265baf4118a2536d150090cd7e1e471c1d349ad02bcee7837700642cb1a35214ab938e5bb1e

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Minecraft Update News.htm

Filesize
17KB

MD5
0da46cc1bcae0b982259fd0d87a7087d

SHA1
892ee8508953678e2ebb26ca383da826f0f3145c

SHA256
7ab16c1e7f9d6d56ef6c32bc4780bdf5984b0a7d22646b7e3201231cb19be698

SHA512
d047ae0fdaad7fe2e017c04da55e16a97cbb6fe0af8404b95e91d69cfe19523a213e92f9a8ae15c4c71b3f8beeb974a5f06e62eb2c7fb71ed919ba82113d6f63

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\Uninstall.exe

Filesize
65KB

MD5
f7d29d45dbf17e171473073bd6ed2b4f

SHA1
b1e70405d209232c0ef5b0b0a10b8e78766558ad

SHA256
36bec0f2f3377c39ad671b7c2fc46f2eefad31d8d2fcc5ca48fb59a867f0444b

SHA512
d3339798811f0371d283d4cca36a5c8f01ce70d020ffba16b0510820477da8dd11cd8521edcef584960c8a35f2d8ae7acfe16f4e932a446b03badb66f3c6565f

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\bg_main.png

Filesize
434B

MD5
f1596e0654794b9a0dd94fa78ddd7d17

SHA1
6dc1edda038fabdf6715b7798eaf3671d56e19f0

SHA256
181a1e60ba5ee57497c0f97f5c6bcd49751dc6c4ec7355332c74056a02946d0c

SHA512
3fad79b1f3bac971458d23c199b34aa56cf6967839aa90bf61f866b69f0b0541e93984eea7653c8cd92fb8bdd1b26de4a25529a9852020640425402c645e82d4

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\minecraft launcher\options.json

Filesize
74B

MD5
12da885bfb96cad652cad7dce74f0943

SHA1
d7b38595024e24a4e41e9d2290069f20a90af416

SHA256
6ba27debfe6c1754604d27a04388966b127c29866498b12d98d6fbf47f8dd2ee

SHA512
b469a10f1c9b3f8a4f3ead85ac7abdbe0fc10b5e190a338bcd10e9ba90e6c8a2383c7d907fa7f39ae3c6474cd483ba6509f31113574c7528394dc4f3d68f591e

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\servers.dat

Filesize
12KB

MD5
0b6707b6bab513066df83dc121c89f9d

SHA1
a435d99b465d3a856c358d9157c113829b1fdcdd

SHA256
8cb2f73c02ae91089c1734d4c32880509b90740a7c8543b4291a134d841e8265

SHA512
22178dc9cb8a39959c29586fbffb227d88a0f7de3d8f268e16c2eb673f50b8cb8230af60e2b64ec9fae2595dd647fa67021d989cb32a9a89f42e599537124f90

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\OpenAL32.dll

Filesize
381KB

MD5
9e02334f9bba622885eadb059f0633b3

SHA1
ede381bf55e7d0cd3a7e058237bbc66a8ff63837

SHA256
baf27fc91dc852d78889e052cfc9ed2b6fc0927258bb507a895c6fcd50f10fef

SHA512
066eaaee241976d99e3f11de415976fb0e47e97035d4d7a7c121c33882190f3546637650f841a2858ac1734655f4994dc2cb8c5bdda5828557485fc20a779def

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\OpenAL64.dll

Filesize
373KB

MD5
89021c218a3f6feb807a664f852ffbd3

SHA1
97362fba53dfb6d9581b8c64829f4b1d98a97855

SHA256
9261b66010a845ddef9f61d5e4266fe2f08a53f3605da002e9e8f8d202bdbc5e

SHA512
e511c707c4453016cdeefcbc863fbf2750ad9cda12ad31f27369d5a396f9c98d9ef37fafb4030c683f17b1e2cdcfce924015fe49dd6652c3060bb0ba77ea3064

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\avutil-ttv-51.dll

Filesize
638KB

MD5
c804476200c9b4910cbc350c102fc3fe

SHA1
97ae5816326546ef5672ec795d4e79e75d9298d7

SHA256
d16151cf613bd26f9138188efab2e55df37b0c21956ea70adc252d0fa35ae3cc

SHA512
468a2b13880dca54314c4a4105c714b0b189a5918b983e8bbaf4a43c78a7c995d99cae737d0222ca6923e194478e9a656dda6dca2d09f2ddc676bda4b20ed7b5

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\jinput-dx8.dll

Filesize
60KB

MD5
ec587acff9c06d699829908b515ea17e

SHA1
50348b2958b017df3bf30d7915ab61a4cb9a2b33

SHA256
89779abf806a93dd809bc7a4914967d0e6924dedf293afd48dd205dbce87d8b8

SHA512
2a7895d6196e3f1f740982bd4d0daeba255a033c971638e3aebd2cd2233c39f7c8e92c72d2eeb41f8b368d388a3b270fee2cbe219ee239f5d62af9f6f8ed72d7

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\jinput-dx8_64.dll

Filesize
63KB

MD5
90cab52fca89e7d233741c0439dc2005

SHA1
5d9a7d3fb6224dab97aaff7bd9430232732d9be8

SHA256
a38cb458b9e5a246d7418f38ac04430c2e5a3f46b082955d6dfd5d2bd74f4222

SHA512
041ca3aa3d6560f207d841c8af1939e4e93538fe4f34d74fb9eee003733d98783914c6cbe45022c483a6cfb54f0e4f25013f67851d9ae6e9ea6a8cc158d28936

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\jinput-raw.dll

Filesize
58KB

MD5
0862d141de8b4dd93ac55cd4a1a78b69

SHA1
4d982f408e815519c2289cd720c78338392a9887

SHA256
0a8c0b47e173453bd92da224f73a6aff35b07c2db315abaf33e68edbdb147971

SHA512
c070516f902082c3eda3f19fab6d6a6998442664f1b25d5d4c2229c03b7cac1a2a41d78b98474dfde3514bc206f5fb92e1949627e3e64052e0ed880e3f6a52ad

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\jinput-raw_64.dll

Filesize
61KB

MD5
ffc85e4a631d90112aee8e213cd367cd

SHA1
067c11135f9ebeb554d5f80b7a8a5244c0f3b7d7

SHA256
832308f96b1760f2ebc183d1a1771278bb3236e4567dd7a23e1eaecf95f9c03c

SHA512
376393d9351ad2317bdff831df012ef993039c6bcb0616dec3c91ff1b13568a6f04c3bc8a0f9888aabafa7182513fe5f7fe5fe1fca7f14f64b58414e02bd8c48

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\jinput-wintab.dll

Filesize
55KB

MD5
7b5d669b490d5737d8a9d1f96274e2e5

SHA1
e7b9beead279298611d0c4753089d3af07c4c9e9

SHA256
59201c94eb563025e47fe6b6f5c4dc326f0059d49285e2d3a44482cb60ffc9e2

SHA512
ac43cfe9e3ef9dc0e1d2e49a8bbba041b5eca0d4822e694031c694f463017f39ad0131b9f689cc30d177bbf0253f6d2942314683c1ab51a54674ad1309baaeff

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\libmfxsw64.dll

Filesize
19.6MB

MD5
29bc29f7c4116ed33810a85c7de74532

SHA1
034e6cd4ccfb319fe18007151cbe661436661ab5

SHA256
b5eaa1918ffbdcdfaf91a4895dac20b6325a9f53d20f343b7e7f05ff95c9aabd

SHA512
9413ee1260c2eb758efcf32b5531e334d459542bb38164caf02aee93915eaafe33ff4f9ff4bca4b63081777cda9344ae81e365d82906d51dc0e9511dacefa084

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\libmp3lame-ttv.dll

Filesize
672KB

MD5
80af59d20146e88b50814bb5701140ad

SHA1
cc0c9bf8e76734d23313ec83efba7440dce31b91

SHA256
d2941e4392fe2c55f7858b0e5d76567b6dea00c99ebbbf9e6049cefc5241c0e0

SHA512
cfdac48d58fdcf1208be32550a6948895c93bb49d27b485bf824d3e33749d8212aa8477c31fa12eb2f282ca9a662874cd258ce1bf1d35ab25424c81408dc8239

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\lwjgl.dll

Filesize
291KB

MD5
f4a31218fcb01a9a8946f4f315e91aa8

SHA1
6f63e2a98d9bd272e99eec0f4d453a25795298e5

SHA256
cd99d747587038b9488a9b183e30b3004e5c2cb4dfab02b11c6b6c3af2ffc391

SHA512
ffa778ab22c01dc81fce13654efa7a2b34bc938be74bc20aede71bb535e5ca70cad3b778c8f0752aa5acd15c746699cdb8f7c6b16cdf336ffe02576c9f9cceba

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\swresample-ttv-0.dll

Filesize
352KB

MD5
052592f7f5afaf2b6b470c4b94c84ca8

SHA1
25d1923a17511a9fc1ef56c510dfb63621826274

SHA256
d2e299de60803d5c4f869b45a3c9f9eff3876dd466bfc5b8071bf34ef592afea

SHA512
b14710a6d95411023c13e54e90f53fbc1f78d7a3f3d996e4350724d434ca4b4b45659320b4d4d7e93b8b2cf518bf9796d512590f1b30c69073d5ebdea4c5e345

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7-natives-289731603530\twitchsdk.dll

Filesize
1.1MB

MD5
9b2be86d480c57dba42264bd6a713bb1

SHA1
5815596d257b904820ad838d07cd8093458e5ce9

SHA256
09b72e85709036c154c3a11ab02a1cc33a38234631936ccaade107888b4f6361

SHA512
626cafb2c848ad95dee3604d1271428bbf415e3ce176378a5a6516615a2e72d4a9a83234e6a0a876119c994420ff84a43934bc29b53b5df8ac02a368dec63b64

Download Submit
C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.7.7\1.7.7.json

Filesize
3KB

MD5
c5166e8f1efaece18847f77acd9b2c3c

SHA1
cecc8f1b27ca243d11789e7b008ec56fedcb222f

SHA256
9eda4609f0bb17668ac2cdb024a38d1dc59b505b0cbefd7e2c5bb01f52f663d8

SHA512
3b337246a7595d5bddae9bb780c55d0b97a0caea4671622bde29481d9d37e5180297bdfdc401a074016599c138777875dca8c8c2783879d85524cd7c0acac3f0

Download Submit
\Program Files\Java\jre7\launch4j-tmp\Minecraft Launcher.exe

Filesize
185KB

MD5
846245142683adc04baf77c6e29063db

SHA1
6a1b06baf85419b7345520d78ee416ce06747473

SHA256
c860377e71c0bae6821f9083123f55974a549e2c57ff50cec572d18ed06f2d6c

SHA512
e0a7c9d9da3d062245718bb54553170857f647798308e4e28e5b5fbf3ac2a0496cf55bfc7a7663810113cf71807923bb365b27652a12c106e1908a89ec12cbaa

Download Submit
memory/996-2143-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/2040-2806-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2040-2825-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2040-2818-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2040-2815-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/2172-2178-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2168-0x00000000021D0000-0x00000000021DA000-memory.dmp

Filesize
40KB

Download
memory/2172-2756-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2216-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2696-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2842-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2695-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2205-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2157-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2793-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2167-0x00000000021D0000-0x00000000021DA000-memory.dmp

Filesize
40KB

Download
memory/2172-2204-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2715-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2172-2777-0x00000000021D0000-0x00000000021DA000-memory.dmp

Filesize
40KB

Download
memory/2172-2778-0x00000000021D0000-0x00000000021DA000-memory.dmp

Filesize
40KB

Download
memory/2172-2201-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2756-2134-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/2756-2144-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/2756-2091-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download