a7c997ba3c3e91c048f80f96f08754948428f6d3fe4001bab79c4ae09d06c5e0

Analysis

max time kernel
90s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20/11/2024, 05:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LegacyLauncher_Installer_legacy.exe
Size

112.3MB
MD5

53eea8664d54198e1989301b12f795da
SHA1

00bddca8bba387a76d6f18fc942859acf9ff5a60
SHA256

a7c997ba3c3e91c048f80f96f08754948428f6d3fe4001bab79c4ae09d06c5e0
SHA512

e05bd2e369b19b818f715a14ceb2c35b2f8409e5524d347d3093ef82667675bf719af17ab77412156aa62748aa17572d622b163bb6d187d917282f49e56ff831
SSDEEP

3145728:kNS0yY1k/bQS8yJQZI3XeKBPKi2O3hE4AGzUVeQgnFV:koqcQ+3XHD2OxEfPQQgnFV

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation	java.exe

Executes dropped EXE 4 IoCs

pid	Process
5040	LegacyLauncher_Installer_legacy.tmp
2864	TL.exe
5008	javaw.exe
1840	java.exe

Loads dropped DLL 29 IoCs

pid	Process
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
5008	javaw.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LegacyLauncher_Installer_legacy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LegacyLauncher_Installer_legacy.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TL.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5040	LegacyLauncher_Installer_legacy.tmp
5040	LegacyLauncher_Installer_legacy.tmp

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeBackupPrivilege	1840	java.exe
Token: SeBackupPrivilege	1840	java.exe
Token: SeSecurityPrivilege	1840	java.exe
Token: SeDebugPrivilege	1840	java.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5040	LegacyLauncher_Installer_legacy.tmp

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1840	java.exe
1840	java.exe
1840	java.exe
1840	java.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 5040	4584	LegacyLauncher_Installer_legacy.exe	86
PID 4584 wrote to memory of 5040	4584	LegacyLauncher_Installer_legacy.exe	86
PID 4584 wrote to memory of 5040	4584	LegacyLauncher_Installer_legacy.exe	86
PID 5040 wrote to memory of 2864	5040	LegacyLauncher_Installer_legacy.tmp	102
PID 5040 wrote to memory of 2864	5040	LegacyLauncher_Installer_legacy.tmp	102
PID 5040 wrote to memory of 2864	5040	LegacyLauncher_Installer_legacy.tmp	102
PID 2864 wrote to memory of 5008	2864	TL.exe	103
PID 2864 wrote to memory of 5008	2864	TL.exe	103
PID 5008 wrote to memory of 1840	5008	javaw.exe	104
PID 5008 wrote to memory of 1840	5008	javaw.exe	104

C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_legacy.exe
"C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_legacy.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Users\Admin\AppData\Local\Temp\is-FO367.tmp\LegacyLauncher_Installer_legacy.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-FO367.tmp\LegacyLauncher_Installer_legacy.tmp" /SL5="$A0070,115841256,1202688,C:\Users\Admin\AppData\Local\Temp\LegacyLauncher_Installer_legacy.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5040
- - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\TL.exe
    "C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\TL.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2864
  - - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\javaw.exe
      "C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\javaw.exe" -Xmx128m -Dtlauncher.bootstrap.restartExec=TL.exe -jar "C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks processor information in registry
      Suspicious use of WriteProcessMemory
      PID:5008
    - - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\java.exe
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\java.exe -Xmx128m -Dfile.encoding=UTF-8 -Dtlauncher.systemCharset=windows-1252 -Dtlauncher.logFolder=C:\Users\Admin\AppData\Roaming\.tlauncher\logs --add-exports java.desktop/sun.awt=javafx.swing -Dtlauncher.bootstrap.restartExec=TL.exe -classpath C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar ru.turikhay.tlauncher.bootstrap.Bootstrap --packageMode windows --targetJar launcher/launcher.jar --targetLibFolder launcher/libraries -- --settings tl.properties
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:1840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-5289786105290.dll

Filesize
9KB

MD5
697d496ac9f5aaab8ae025322358c61e

SHA1
2043eac8cdcc2e24b854af1eacd77a5f2a395a27

SHA256
a7273a4cf48ab3413f2c186cc95a3367a73ce99f8d45329383219d4cc27003aa

SHA512
b6702cd49a3af9f97f697565136f140692af9f8b271e672f2e91c920a23212b778583786f2377078117113647926338614a92c4a2423318b7a21ba2fe3a89838

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-FO367.tmp\LegacyLauncher_Installer_legacy.tmp

Filesize
3.4MB

MD5
07b96c2d1823a0a548832c1062799d85

SHA1
65a35826b0e6d93700256fd8a4710cc039bd7b8d

SHA256
c5ba29e4c82fca9adfcd3a6b60b3bf786abe7178928f80cb60eca3564e35b3de

SHA512
abf2ba63976bd6622f3a1cda816c8f2267b59c079d6092ff60e7f52be893a993e3b457a174092c74056628e9694fa9efc8d823d14b4d658a9eb59c622d992f65

Download Submit
C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna603325990559360141.dll

Filesize
248KB

MD5
34d12b1e2af72d9bb267bbc8c0d53e4a

SHA1
d9ed8776645f6b4f52df16132450863c47ea92d7

SHA256
13b2cac3f50368ab97fa2e3b0d0d2cb612f68449d5bbd6de187fc85ee4469d03

SHA512
c0a063477cf63a8b647ea721842968b506d70ea22c586a412707d7293b46c218b6a510f34b7dbedd3ed29a9d4b5dc5c6a1995403d65884b17348a9545e580a10

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\TL.exe

Filesize
399KB

MD5
96c64d11cf26ebd227ad754b62d480ae

SHA1
cb40090b892c34feb8ceb995a0d0b90ecfe54acf

SHA256
2b11f487e853e952dc677071202cbe25d6800ccaf3f93a3232c5eed715a1c033

SHA512
0be0c2b657ba8814112a9ea075e1ec6c6a0fb965c7308ba24e40b98ec90e9e60afbe09328c0f6c3aa27b54762bf880dfec4aee5f20d24c3b644288e0be311d5f

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\awt.dll

Filesize
1.4MB

MD5
b1d2a27a2acd73f1a450ddd7f9f7b5de

SHA1
b90cce4d67ef958e70db333a3da023c49a6a4589

SHA256
d61a008af1d8b9cd4d4a0ab41d04e64945b0416d03ac385675ed8ec200dcb17f

SHA512
e45bf43a5e1685667584d824a4941f18d6f685d0ce1adfbacb172edf12b6210cef2be41b1ce7496a44efeafa6a9f5b31afda509aa228953c9c1dd1d4e59d7971

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\fontmanager.dll

Filesize
658KB

MD5
114d9393ecba213f3b6a0b26cca3074c

SHA1
48046b2d494f09be650f5bf3f44b78a395ca80b6

SHA256
4be4f4ec0596535c91d2f2e0a854ac58bb4630559a5daddf36191b2ea407a2b6

SHA512
54d4adae6ef850f7e3ccf213fac713bfc2d95027f94938caa92eb4eb5d5d5c43940f136655238f1ca054120646f324da338499368a2c81afefba9e147f4c8528

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\freetype.dll

Filesize
539KB

MD5
9510cbf804f2e28911328f9b25322182

SHA1
cdc13d53d85166aeedab022660cf896937a4f95f

SHA256
c852580670b8bf832f60315ec3ec0ad5cd40ead1a18392c4c98f4a817d116aeb

SHA512
a60a93c58124d7264d7debd745187aca4e94053d8fb798a1ad926290be7d79e63437176d5b3c18cc8673157085c6ad75a31991f86799fc7b9ae47c0185c1758f

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\java.dll

Filesize
140KB

MD5
0fe24d48daeb2dbd44c5971545ff4387

SHA1
e43792d276ba212ad84cfbef6d6b5405fc4b76c0

SHA256
86b0f15814202f36fbcb4d220bb37445aec6c03d5473744ab4f567670c142adb

SHA512
e9fd5c87832063a040acc77043d88fae198b7d1d664142144b24954305b2191051bcdca1bd0ad067dc80ef3c9b4cb45f2fc9be1a2c4087407ce883c8c9fd96ca

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\java.exe

Filesize
46KB

MD5
6661f36687a2bbf86d9c1cebaec8037f

SHA1
42a23f1bec44465256738b9189870954abf31fe6

SHA256
88929241f30cbb0ba439bfab1cd82cf6d092f776e5c73a452f80ed465355adec

SHA512
92bc2f5364f8ab43b70fd344fd19dfd7045be7f6c445863263ab30e93020150fbfb3b291206ef3fdaa79e33818dfaca590c8ebc78978a98e80bcffc496cbae15

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\javaw.exe

Filesize
46KB

MD5
d5b6b6976511114000dfaea05c8a9c8a

SHA1
122df7bfbc5b058242e0c18fee9d9bc6489d512c

SHA256
3850d4f443b2a97014a1dcb94db893f0b3396201a8573aa4c4b967ff61528ac6

SHA512
cebaee71e2813670534c18a8363a127c6f8ca759b86262d3e69f6d2ee180ed0fc34bfcde63bf1fd3e91088f09c5950cac22be4cb5d875f2901a7b323ebe2f739

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\jawt.dll

Filesize
18KB

MD5
c20ca62a5a998e984c102d38fec7baf1

SHA1
0e0af90e02981bddac1e01fdd546c99d6bdb6f9b

SHA256
ab1710e71cf0251ab22a20a8e2852927d2159c4dead273cc567879efa4a20b63

SHA512
0f59d1b3ce5ffe174d809ef5db4b4bc7f96e8f0a8a232ce55869cfe5b707bb2a681cb5a6f8450f13ce3dfe81ced8188e49898ea76147232c86918b244f3dd871

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\jimage.dll

Filesize
30KB

MD5
36eaca4b8c0e14921e79a47f91f3a3b3

SHA1
ffdf367e09a2d365de26527b53bf04758b7bfd76

SHA256
8e8903cc2231f28e682df62ec7623fabfa6a2112bcd14cee6f79e6924239b75f

SHA512
32d20959585aea57554f74baa36ea0dd54d47aa9f055cea39182267d70034d99a2d7aa3e8935dcdb2ea32c6b03c0485132404cd9717593e16f7a0ae5b7bda748

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\jli.dll

Filesize
83KB

MD5
e9c6f790d97a491dc6dba58605d0a48f

SHA1
8d39cf612880ab33b4c247997649e12035783c2f

SHA256
d6eae7c72044fdd83eea7ae2c36dfa163b6093df19e360f980980334b14ff934

SHA512
a47c38871f08d47ac4b0e59f8a01dc9865dc730afceb66337f046a28a0e90c34700cffe00dc85be2294713fb507d3d89ab0142797beb490b6394575cde1b2091

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\jsvml.dll

Filesize
847KB

MD5
4eda79660a4a3b38c23dfd5e123c2e76

SHA1
14815b9257142b19530e9a170f6b86e9d7830a01

SHA256
4d08e64796f7b0ecc270952a8bd356c285d0e3645809de5e68e3857a6506ee41

SHA512
04803dfdaea74b891f21bb302e7a126e536eb9f036a6e0ac21a6e3f247bac6e2351e3392f81022e2c19735bb5fb65d2fc0c83800790284fea70ea00687007321

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\msvcp140.dll

Filesize
552KB

MD5
cb75d6437418afe1a7b52acf75730ff1

SHA1
54c2da9552671b161cc87eb50fbdb86319b00f56

SHA256
7c4ce9d6bfcd6d9db4eef4e75ecdcf5a8e5320106e80f1eca617439fa43f33e8

SHA512
f58abb740a30467e2d8aedd7eed357da020fdc7d966e245890d102a52e96fea296e122c1d2bc112423fc64b6f5e70b7df3f3eb7de1bf5c2f5f0eb3644f1e06d6

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\net.dll

Filesize
92KB

MD5
087ab68f6e8896b64ad3d268d4910c9e

SHA1
959c75107f682e6b161d134e158c462f79729e21

SHA256
02c6f0713ae7b898ea27fa39d3344fcfb777aca5dc71d51bcac8e772f6ffb6e2

SHA512
a8ff006078e2cf232b49ba7d6f65b686494a32b3fb5f365a91ea27a7fcd22e9bcad697162cb52659dc6adc171b169df4f5a35b4dc9cc171792ef2a4251c47f86

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\nio.dll

Filesize
75KB

MD5
4ce8193d98e378dce8adc994cd919d5b

SHA1
4752bd35373cafce4edde8d7028ce6d858367c0a

SHA256
2fcfd19a49bd03f3b1eb60ced72568e5e48d13b3a7b4cd1806caaad8ce17cd34

SHA512
d87e61a18759a4c2b6debc05d6978fededa8ecb02d6f3ee8ac2258c253142d0ba3ddaab350340136146d474fd0d6f463369b2dade709f07675548c31ca44fdf6

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\server\classes.jsa

Filesize
10.8MB

MD5
8b9b52368b134e51cda121ceb2afedde

SHA1
71ddb0e10becce311a09e050c50f754cab950eb4

SHA256
acd0e7b19fdbe51a38adff8effeb473aedf0f5833daf3b4723efd4c8437019df

SHA512
6cac52345a0e12c56a1765dffe86b300626952fbd1465bb8369fee3a1e7f0f53db87126d95f1a504249e24e62eb8b7d927772eb0966f787fa96a27f1e9119422

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\server\jvm.dll

Filesize
12.1MB

MD5
be9c05daabf6ee77db5564b5ebcf7f4c

SHA1
96d487233a3f47f3441679470359c1528658b064

SHA256
064a55423c55802d3ae7147c4f33d30d79d9b7f4f339c99fcb30c8759d0f8268

SHA512
e082b3bc5bdb332bf4281e3ff52cfea6e5b176cbf2a466c7826c6ffd386a326ec469ac1aa410bd6696b0d4f7bf36d174363ecea7df21285bca4ce6484722b3d7

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\vcruntime140.dll

Filesize
94KB

MD5
a87575e7cf8967e481241f13940ee4f7

SHA1
879098b8a353a39e16c79e6479195d43ce98629e

SHA256
ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e

SHA512
e112f267ae4c9a592d0dd2a19b50187eb13e25f23ded74c2e6ccde458bcdaee99f4e3e0a00baf0e3362167ae7b7fe4f96ecbcd265cc584c1c3a4d1ac316e92f0

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\vcruntime140_1.dll

Filesize
36KB

MD5
37c372da4b1adb96dc995ecb7e68e465

SHA1
6c1b6cb92ff76c40c77f86ea9a917a5f854397e2

SHA256
1554b5802968fdb2705a67cbb61585e9560b9e429d043a5aa742ef3c9bbfb6bf

SHA512
926f081b1678c15dc649d7e53bfbe98e4983c9ad6ccdf11c9383ca1d85f2a7353d5c52bebf867d6e155ff897f4702fc4da36a8f4cf76b00cb842152935e319a6

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\bin\zip.dll

Filesize
82KB

MD5
183fac113c734fdb636e40403b3d2f98

SHA1
5cbb8fa03d69c4558443ede1542b93f41260c4a2

SHA256
b275b290d6f29e02cd32500eac256303aa1273bc3ef2a83c0a9344b9bb2d223c

SHA512
7cd8ab77f6e4df0e10f3bc74fbcd286c02f42481189d8bf84275918d041f5f9b3bfb0f708c704ddbdacd2b76e160bdead169056c4a83ce0e8401a7d8702b7ec7

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\conf\logging.properties

Filesize
2KB

MD5
0f00ec3e7a7767a4efeae1875fb5f3d4

SHA1
167808418571e9209b952188ddab2f4e62920e68

SHA256
b62d2733ab99556b108a1951d894c5a8d76b1ac7a00c02c388f9eb9be046c56f

SHA512
e869f4a3b821a9933796dc9a56ee00483493369dfbfe07b3b1d895cb8318c6821cd44134eb37513f15b830c25861b596646824ed56672d08b678fefe6a4c7504

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\conf\security\java.security

Filesize
56KB

MD5
00cf40959861f61f17b90c6b6002a9a1

SHA1
982e48466428e1f49c1a5941c73afdacefd1d22e

SHA256
38166a975348862d693d95de8d676cf19cecccc45af4a1896c73c45f7bd966ef

SHA512
bad90152685279d896a4063d76dec5befe14831d3dd3260929b9a639505e898fa996b52aab3821a51c6c9aa09d956a23a8bdd870377a10e75c9399629cab5779

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\legal\java.compiler\is-DR0QV.tmp

Filesize
44B

MD5
7caf4cdbb99569deb047c20f1aad47c4

SHA1
24e7497426d27fe3c17774242883ccbed8f54b4d

SHA256
b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a

SHA512
a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\legal\java.compiler\is-E2V15.tmp

Filesize
49B

MD5
19c9d1d2aad61ce9cb8fb7f20ef1ca98

SHA1
2db86ab706d9b73feeb51a904be03b63bee92baf

SHA256
ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9

SHA512
7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\legal\java.compiler\is-Q1CP7.tmp

Filesize
33B

MD5
16989bab922811e28b64ac30449a5d05

SHA1
51ab20e8c19ee570bf6c496ec7346b7cf17bd04a

SHA256
86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192

SHA512
86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\lib\fontconfig.bfc

Filesize
4KB

MD5
0e25b41e6acf99681eaf2e8b572f18d1

SHA1
d6b4290da768e050fe6c310366272f87e6c2b6d2

SHA256
968ac99bbaaf8a49a474c934e73ad58f88c6c7f2a363cb44771e0378444e36ba

SHA512
7c1e98bc6582af9e9c58c13cdc4d257e441a6d48fd395a3601ad558ebd481257f138d6f0dcbfe12735eb6bebeb7c8985b3d8af633b545fa01d56738f56360c08

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\lib\jvm.cfg

Filesize
29B

MD5
7ce21bdcfa333c231d74a77394206302

SHA1
c5a940d2dee8e7bfc01a87d585ddca420d37e226

SHA256
aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0

SHA512
8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\lib\security\cacerts

Filesize
169KB

MD5
e6777014990779f07517e069c0630eb3

SHA1
d4653d23161c506338473c2864f2f9d405350b5b

SHA256
c67664fa718b6d2df0d7385d7e9f703ac3acf8d0786175eb29d08d50bcbcd5bc

SHA512
ebaede2d7ab548e8b54953480a68b40901b3a92caca601c11037bf8cb1f79010cb6e5aeb06bb4105585c20180d35bc6403c437d386c1ee19ece5447042815ccf

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\lib\tzdb.dat

Filesize
104KB

MD5
2b934ee4d2245aaf987b78aba9a4f703

SHA1
d451309196d502ea0fbbad9d5d56c0a491c0d046

SHA256
5865a073e635cfd523b4bab03bc0cd62d7f66c6fef63da5b762c4d0a4e541980

SHA512
a39b7ef40ee20a23bb7de10aacaa1eaaf40652faa95ab74373ecdafb856cf742bf92af196dcce28c6a8367a95e6180301cb44e889745aa4da4c29dc6f59738e4

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\lib\tzmappings

Filesize
21KB

MD5
b02ee240a8db902961fe886a19beba16

SHA1
c52c42d591f4c650b629e6b374e967e211fb5aeb

SHA256
36dc51c4bf787f640a4b45cbb84ab6954f6e595cbd3617c2f5a4e1e607b38bff

SHA512
024811961511b7182860ed03a5670f82412a45d005a1db0876f6b0c9af7e96c104566abff0ebbded11a780349444214291f439039d20fb92071c7dd24bda0e23

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar

Filesize
9.2MB

MD5
45e7627b8542f033fc67ac7fb6d22537

SHA1
e6149d3d7d34f1ba3d8214e66433ce7dd25fb0bb

SHA256
df2d2516e905cdc87a68ec456f881664a5b158ba810934251d7b70a740679588

SHA512
a573ce983c6c93ef53459bffe16b9d442ca1906e58064e53444f74573f43ea2e62c7516823a3eb0f17fc3beadf6dc4fb4ba9b0094b6ef7f02c26d97e0f579f48

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\launcher.jar

Filesize
5.2MB

MD5
f33a7fba0abade30c14499ddb322026f

SHA1
9ae54af9b6b007bf7e306103ce3a7d532b53a051

SHA256
5f1f1b8ef187c5fcea69830d4dec87c84447a6c134c314fe5a840340e4ee5e6c

SHA512
76df75a465ed1357651a735343acbf2090191281434f9117fe4606ef20d3b78edb0aa49f82e346fdfdbf716f1fc07590585b6bf26f89f6a05d152a67ac5a0cf6

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\tl.args

Filesize
125B

MD5
ced792b61824f55e8e70a22214b55d19

SHA1
5270aea99be95b59c339450c451e1b2148b88599

SHA256
05fa49f9ffe7a22d1e3443fd8cc993e62b7f20a976162ce69d306ff9581f1d87

SHA512
9c9bd55f7a63bbae85c4c662ff2e2480d094c5f00ee3ca50c5c0d80cac5e7692aed35c1d90e6d4f5d88e537728773acf8aedb3db3747374418bb748939a354bb

Download Submit
C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\tl.properties

Filesize
216B

MD5
60925c29f4fb68c824d9fab0cef4b19d

SHA1
ee13b2ff5a3437d8cf46caed30936a4550cadebf

SHA256
693b916f8f75c010581295065fe42667875f53d5b4c7188eec3d71b94daf572b

SHA512
862f9030a4b44758deb78b6c4f0326d1540e201703dc28563794f864f0a0f55c9ca2624904e85ac9653949405c78b79362a08a4a73b857a8e75873b18fcb1d4b

Download Submit
memory/2864-862-0x0000000000400000-0x0000000000472000-memory.dmp

Filesize
456KB

Download
memory/4584-9-0x0000000000400000-0x0000000000533000-memory.dmp

Filesize
1.2MB

Download
memory/4584-0-0x0000000000400000-0x0000000000533000-memory.dmp

Filesize
1.2MB

Download
memory/4584-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/4584-903-0x0000000000400000-0x0000000000533000-memory.dmp

Filesize
1.2MB

Download
memory/5040-14-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/5040-10-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/5040-12-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/5040-7-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/5040-816-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download
memory/5040-901-0x0000000000400000-0x0000000000776000-memory.dmp

Filesize
3.5MB

Download