34b13cd9a0a9e98febeb566dad486dced3bef0e926a63a4b52125c8091f4265f

Analysis

user interaction
yes
max time kernel
97s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MinecraftInstaller.exe
Size 186.8MB
Sample260416-tbcataev2r
SHA256 34b13cd9a0a9e98febeb566dad486dced3bef0e926a63a4b52125c8091f4265f
MD5 db45fa108ff7f03936bcde1075a7ab24
SHA1 f87d0214da4fc83a69612b5585093912809cfde1
SHA512 4b1b18c3dc0f1bf774fe90c568e490913be97b5f46a46d61dd578c5bb6bbdcb10f6eb4f186a581e175b9fab8683bfa71cd9f73cdb0f9962a195ecc7849e6822c
SSDEEP 3145728:IMveDHVDFnz01jXyb+T52KjFQlQCR9l966AySv0lDHsIuFEh00tAiGOD3xETzHhd:d2LVDF0jMIRjFlCDpAdMlDMIu2tABOy7
TLSH
T1979833EA6F063315DC1064B086DCFCA008E3785E107BEEFE416D6BAADE5828459B5C5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery persistence privilege_escalation spyware stealer trojan upx

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 23 IoCs

pid	Process
2656	jre-8u51-windows-x64.exe
2244	installer.exe
4852	bspatch.exe
2352	unpack200.exe
3664	unpack200.exe
3572	unpack200.exe
3672	unpack200.exe
3952	unpack200.exe
3860	unpack200.exe
2764	unpack200.exe
3732	unpack200.exe
1220	javaw.exe
1436	javaws.exe
1504	javaw.exe
1992	jp2launcher.exe
2148	javaws.exe
1912	jp2launcher.exe
4440	ChromeSetup.exe
6268	ChromeSetup.exe
6384	updater.exe
7356	updater.exe
6976	updater.exe
6996	updater.exe

Loads dropped DLL 64 IoCs

pid	Process
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
2352	unpack200.exe
3664	unpack200.exe
3572	unpack200.exe
3672	unpack200.exe
3952	unpack200.exe
3860	unpack200.exe
2764	unpack200.exe
3732	unpack200.exe
1220	javaw.exe
1220	javaw.exe
1220	javaw.exe
1220	javaw.exe
1220	javaw.exe
2244	installer.exe
2244	installer.exe
1436	javaws.exe
1504	javaw.exe
1504	javaw.exe
1504	javaw.exe
1504	javaw.exe
1504	javaw.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
2148	javaws.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
488	MsiExec.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched = "C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe"	jre-8u51-windows-x64.exe

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
9	1140	msiexec.exe
10	1140	msiexec.exe
11	1140	msiexec.exe
12	1140	msiexec.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	updater.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	updater.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004

Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

BHOs are DLL modules which act as plugins for Internet Explorer.

stealer adware

Modify Registry

T1112

Browser Extensions

T1176

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\NoExplorer = "1"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{DBC80044-A445-435B-BC74-9C25C1C588A9}	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\NoExplorer = "1"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}	installer.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
716	GameBarPresenceWriter.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\system32\WindowsAccessBridge-64.dll	installer.exe
File opened for modification	C:\Windows\system32\WindowsAccessBridge-64.dll	installer.exe

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x0002000000025cd5-1390.dat	upx
behavioral2/memory/4852-1391-0x0000000000400000-0x0000000000417000-memory.dmp	upx
behavioral2/memory/4852-1396-0x0000000000400000-0x0000000000417000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre1.8.0_51\bin\j2pkcs11.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\jfxswt.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\cmm\CIEXYZ.pf	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\ssvagent.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\wsdetect.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\images\cursors\win32_MoveNoDrop32x32.gif	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\rt.pack	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\THIRDPARTYLICENSEREADME.txt	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\jli.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\policytool.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\splashscreen.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\w2k_lsa_auth.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\currency.data	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\deploy\messages_ko.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\deploy\[email protected]	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\fonts\LucidaTypewriterBold.ttf	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\java_crw_demo.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\WindowsAccessBridge-64.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\jfr\profile.jfc	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\eula.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\kinit.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\net.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\sunjce_provider.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\security\java.security	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\classlist	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\access-bridge-64.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\cldrdata.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\fontconfig.bfc	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\sound.properties	installer.exe
File opened for modification	C:\Program Files (x86)\Google\GoogleUpdater\prefs.json	updater.exe
File opened for modification	C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad\settings.dat	updater.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\meta-index	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\images\cursors\invalid32x32.gif	installer.exe
File opened for modification	C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad\metadata	updater.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\deploy\messages_sv.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\javafx.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\logging.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\management\snmp.acl.template	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\management-agent.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\rmiregistry.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\deploy\messages_ja.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\README.txt	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\fxplugins.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\deployJava1.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\sunpkcs11.jar	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\java-rmi.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\prism_es2.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\cmm\PYCC.pf	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\management\jmxremote.access	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\tzmappings	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\jsse.pack	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\JavaAccessBridge-64.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\zip.dll	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\content-types.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\nashorn.jar	installer.exe
File opened for modification	C:\Program Files (x86)\Google\GoogleUpdater\updater.log	updater.exe
File opened for modification	C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl	updater.exe
File created	C:\Program Files\Java\jre1.8.0_51\bin\rmid.exe	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\cmm\GRAY.pf	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\images\cursors\cursors.properties	installer.exe
File created	C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.pack	installer.exe

Drops file in Windows directory 20 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\MSI555A.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIA10A.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF7150F480565D6889.TMP	msiexec.exe
File opened for modification	C:\Windows\SystemTemp	updater.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{26A24AE4-039D-4CA4-87B4-2F86418051F0}	msiexec.exe
File created	C:\Windows\SystemTemp\~DFDDF7B81EC0CCB40B.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e594dc8.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\SystemTemp\~DF0BB96683D32AC9CE.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\Google6268_499519000\bin\uninstall.cmd	ChromeSetup.exe
File opened for modification	C:\Windows\SystemTemp	updater.exe
File created	C:\Windows\SystemTemp\~DF481D113D994A1306.TMP	msiexec.exe
File created	C:\Windows\Installer\e594dcc.msi	msiexec.exe
File opened for modification	C:\Windows\SystemTemp	ChromeSetup.exe
File created	C:\Windows\SystemTemp\Google6268_52833149\UPDATER.PACKED.7Z	ChromeSetup.exe
File created	C:\Windows\SystemTemp\Google6268_499519000\updater.7z	ChromeSetup.exe
File created	C:\Windows\SystemTemp\Google6268_499519000\bin\updater.exe	ChromeSetup.exe
File created	C:\Windows\Installer\e594dc8.msi	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ChromeSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ChromeSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MinecraftInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bspatch.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4928	147.0.7727.102_chrome_installer_uncompressed.exe
5152	setup.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msiexec.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msiexec.exe

Modifies Internet Explorer settings 1 TTPs 18 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppPath = "C:\\Program Files\\Java\\jre-1.8\\bin"	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\Policy = "0"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\Policy = "3"	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\Policy = "3"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\AlternateCLSID = "{CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA}"	installer.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\Compatibility Flags = "1024"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5852F5ED-8BF4-11D4-A245-0080C6F74284}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppName = "javaws.exe"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\AppName = "ssvagent.exe"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\AppPath = "C:\\Program Files\\Java\\jre-1.8\\bin"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44D1B085-E495-4B5F-9EE6-34795C46E7E7}	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\AppPath = "C:\\Program Files\\Java\\jre-1.8\\bin"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\AppName = "jp2launcher.exe"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}	installer.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}\INPROCSERVER32	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0036-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0129-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0364-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0144-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0115-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0145-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0275-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0378-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0110-ABCDEFFEDCBC}\ = "Java Plug-in 1.8.0_110"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0123-ABCDEFFEDCBC}\ = "Java Plug-in 1.6.0_123"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0225-ABCDEFFEDCBB}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0132-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_CLASSES\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}\INPROCSERVER32	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0224-ABCDEFFEDCBB}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0139-ABCDEFFEDCBB}\ = "Java Plug-in 1.8.0_139"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}\InprocServer32	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}\InprocServer32	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0105-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0197-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0292-ABCDEFFEDCBB}\ = "Java Plug-in 1.8.0_292"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0084-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0121-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0218-ABCDEFFEDCBB}\INPROCSERVER32	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0260-ABCDEFFEDCBA}	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0008-ABCDEFFEDCBC}\InprocServer32	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0101-ABCDEFFEDCBB}\InprocServer32	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0119-ABCDEFFEDCBB}	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0084-ABCDEFFEDCBA}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0275-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_275"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0017-ABCDEFFEDCBA}	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0222-ABCDEFFEDCBB}	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}\InprocServer32	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0105-ABCDEFFEDCBA}\INPROCSERVER32	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0153-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_153"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0120-ABCDEFFEDCBB}\ = "Java Plug-in 1.6.0_120"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0196-ABCDEFFEDCBA}	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0196-ABCDEFFEDCBB}	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0246-ABCDEFFEDCBA}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0250-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0253-ABCDEFFEDCBB}	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{CAFEEFAC-0017-0000-0253-ABCDEFFEDCBB}\INPROCSERVER32	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\INPROCSERVER32	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}\InprocServer32	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0221-ABCDEFFEDCBB}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_14"	installer.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0239-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0360-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0026-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment"	installer.exe
Key deleted	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0138-ABCDEFFEDCBB}	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBA}\InprocServer32	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0298-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre-1.8\\bin\\jp2iexp.dll"	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0104-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0315-ABCDEFFEDCBC}\ = "Java Plug-in 1.8.0_315"	installer.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0339-ABCDEFFEDCBC}	installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0369-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment"	installer.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
3496	MinecraftInstaller.exe
1992	jp2launcher.exe
1992	jp2launcher.exe
1912	jp2launcher.exe
1912	jp2launcher.exe
6384	updater.exe
6384	updater.exe
6384	updater.exe
6384	updater.exe
6384	updater.exe
6384	updater.exe
6976	updater.exe
6976	updater.exe
6976	updater.exe
6976	updater.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	3496	MinecraftInstaller.exe
Token: SeShutdownPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeIncreaseQuotaPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSecurityPrivilege	1140	msiexec.exe
Token: SeCreateTokenPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeAssignPrimaryTokenPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeLockMemoryPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeIncreaseQuotaPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeMachineAccountPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeTcbPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSecurityPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeTakeOwnershipPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeLoadDriverPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSystemProfilePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSystemtimePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeProfSingleProcessPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeIncBasePriorityPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeCreatePagefilePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeCreatePermanentPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeBackupPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeRestorePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeShutdownPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeDebugPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeAuditPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSystemEnvironmentPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeChangeNotifyPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeRemoteShutdownPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeUndockPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeSyncAgentPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeEnableDelegationPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeManageVolumePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeImpersonatePrivilege	2656	jre-8u51-windows-x64.exe
Token: SeCreateGlobalPrivilege	2656	jre-8u51-windows-x64.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe
Token: SeTakeOwnershipPrivilege	1140	msiexec.exe
Token: SeRestorePrivilege	1140	msiexec.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1992	jp2launcher.exe
1912	jp2launcher.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3496 wrote to memory of 2656	3496	MinecraftInstaller.exe	79
PID 1140 wrote to memory of 2244	1140	msiexec.exe	81
PID 2244 wrote to memory of 4852	2244	installer.exe	82
PID 2244 wrote to memory of 2352	2244	installer.exe	84
PID 2244 wrote to memory of 3664	2244	installer.exe	86
PID 2244 wrote to memory of 3572	2244	installer.exe	88
PID 2244 wrote to memory of 3672	2244	installer.exe	90
PID 2244 wrote to memory of 3952	2244	installer.exe	92
PID 2244 wrote to memory of 3860	2244	installer.exe	94
PID 2244 wrote to memory of 2764	2244	installer.exe	96
PID 2244 wrote to memory of 3732	2244	installer.exe	98
PID 2244 wrote to memory of 1220	2244	installer.exe	100
PID 2244 wrote to memory of 1436	2244	installer.exe	101
PID 1436 wrote to memory of 1504	1436	javaws.exe	102
PID 1436 wrote to memory of 1992	1436	javaws.exe	103
PID 2244 wrote to memory of 2148	2244	installer.exe	104
PID 2148 wrote to memory of 1912	2148	javaws.exe	105
PID 1140 wrote to memory of 488	1140	msiexec.exe	106
PID 488 wrote to memory of 3812	488	MsiExec.exe	107
PID 3496 wrote to memory of 4440	3496	MinecraftInstaller.exe	109
PID 4440 wrote to memory of 6268	4440	ChromeSetup.exe	110
PID 6268 wrote to memory of 6384	6268	ChromeSetup.exe	112
PID 6384 wrote to memory of 7356	6384	updater.exe	113
PID 6976 wrote to memory of 6996	6976	updater.exe	116

C:\Users\Admin\AppData\Local\Temp\MinecraftInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\MinecraftInstaller.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3496
- C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\jre-8u51-windows-x64.exe
  "C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\jre-8u51-windows-x64.exe" /s"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - Suspicious use of AdjustPrivilegeToken
  PID:2656
- C:\Users\Admin\AppData\Local\Temp\Chrome\ChromeSetup.exe
  C:\Users\Admin\AppData\Local\Temp\Chrome\ChromeSetup.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4440
- - C:\Users\Admin\AppData\Local\Temp\ChromeSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\ChromeSetup.exe" /silent /install
    3⤵
    - Executes dropped EXE
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:6268
  - - C:\Windows\SystemTemp\Google6268_499519000\bin\updater.exe
      "C:\Windows\SystemTemp\Google6268_499519000\bin\updater.exe" --silent --install --install=appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={F71D11C1-3B99-FF63-1E6D-1528126ABDA0}&lang=ru&browser=4&usagestats=1&appname=Google%20Chrome&needsadmin=prefers&ap=-arch_x64-statsdef_1&installdataindex=empty --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
      4⤵
      Executes dropped EXE
      Checks whether UAC is enabled
      Drops file in Program Files directory
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:6384
    - - C:\Windows\SystemTemp\Google6268_499519000\bin\updater.exe
        
        C:\Windows\SystemTemp\Google6268_499519000\bin\updater.exe --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=147.0.7703.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0xe998ac,0xe998b8,0xe998c4
        5⤵
        Executes dropped EXE
        Drops file in Program Files directory
        System Location Discovery: System Language Discovery
        
        PID:7356

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Badlisted process makes network request
- Enumerates connected drives
- Drops file in Windows directory
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Program Files\Java\jre1.8.0_51\installer.exe
  "C:\Program Files\Java\jre1.8.0_51\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_51\\" REPAIRMODE=0
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Installs/modifies Browser Helper Object
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2244
- - C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
    "bspatch.exe" baseimagefam8 newimage diff
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:4852
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\deploy.pack" "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2352
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\javaws.pack" "C:\Program Files\Java\jre1.8.0_51\lib\javaws.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3664
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack" "C:\Program Files\Java\jre1.8.0_51\lib\plugin.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3572
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\rt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\rt.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3672
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack" "C:\Program Files\Java\jre1.8.0_51\lib\charsets.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3952
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\jsse.pack" "C:\Program Files\Java\jre1.8.0_51\lib\jsse.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3860
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2764
- - C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.jar"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3732
- - C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -Xshare:dump
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1220
- - C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe" -wait -fix -permissions -silent
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:1436
  - - C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -classpath "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar" com.sun.deploy.panel.JreLocator
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1504
  - - C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe
      "C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_51" -vma 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 -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of SetWindowsHookEx
      PID:1992
- - C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe
    "C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe" -wait -fix -shortcut -silent
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:2148
  - - C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe
      "C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_51" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfNTFcbGliXGRlcGxveS5qYXIALURqYXZhLnNlY3VyaXR5LnBvbGljeT1maWxlOkM6XFByb2dyYW0gRmlsZXNcSmF2YVxqcmUxLjguMF81MVxsaWJcc2VjdXJpdHlcamF2YXdzLnBvbGljeQAtRHRydXN0UHJveHk9dHJ1ZQAtWHZlcmlmeTpyZW1vdGUALURqbmxweC5ob21lPUM6XFByb2dyYW0gRmlsZXNcSmF2YVxqcmUxLjguMF81MVxiaW4ALURqYXZhLnNlY3VyaXR5Lm1hbmFnZXIALURzdW4uYXd0Lndhcm11cD10cnVlAC1YYm9vdGNsYXNzcGF0aC9hOkM6XFByb2dyYW0gRmlsZXNcSmF2YVxqcmUxLjguMF81MVxsaWJcamF2YXdzLmphcjtDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfNTFcbGliXGRlcGxveS5qYXI7QzpcUHJvZ3JhbSBGaWxlc1xKYXZhXGpyZTEuOC4wXzUxXGxpYlxwbHVnaW4uamFyAC1EamF2YS5hd3QuaGVhZGxlc3M9dHJ1ZQAtRGpubHB4Lmp2bT1DOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfNTFcYmluXGphdmF3LmV4ZQ== -ma LXdhaXQALWZpeAAtc2hvcnRjdXQALXNpbGVudAAtbm90V2ViSmF2YQ==
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of SetWindowsHookEx
      PID:1912
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 96AF7B8BE4A27ECB69FD73E0AA9AA01C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:488
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\SysWOW64\cmd.exe" /c del "C:\Program Files\Java\jre1.8.0_51\installer.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3812

C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
"C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --system --windows-service --service=update-internal
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:6976
- C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
  "C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=147.0.7703.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x9e98ac,0x9e98b8,0x9e98c4
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:6996

C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
"C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --system --windows-service --service=update
1⤵
PID:7140
- C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
  "C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=147.0.7703.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x9e98ac,0x9e98b8,0x9e98c4
  2⤵
  PID:7160
- C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
  "C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --unzip-worker --system --mojo-platform-channel-handle=1832
  2⤵
  PID:3340
- - C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
    "C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=147.0.7703.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x29c,0x2a0,0x2a4,0x298,0x2a8,0x9e98ac,0x9e98b8,0x9e98c4
    3⤵
    PID:4160
- C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\147.0.7727.102_chrome_installer_uncompressed.exe
  "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\147.0.7727.102_chrome_installer_uncompressed.exe" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\cfed762c-9326-404e-92fb-c9edde7c0104.tmp"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4928
- - C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe
    "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe" --uncompressed-archive="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\CHROME.7Z" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\cfed762c-9326-404e-92fb-c9edde7c0104.tmp"
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:5152
  - - C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe
      C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=147.0.7727.102 --attachment=C:\Windows\SystemTemp\chrome_installer.log --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff6fad6b840,0x7ff6fad6b84c,0x7ff6fad6b858
      4⤵
      PID:5220
  - - C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe
      "C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe" --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
      4⤵
      PID:5680
    - - C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe
        
        C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping7140_664546324\CR_72062.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=147.0.7727.102 --attachment=C:\Windows\SystemTemp\chrome_installer.log --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff6fad6b840,0x7ff6fad6b84c,0x7ff6fad6b858
        5⤵
        
        PID:5668

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
1⤵
PID:5188
- C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
  "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
  2⤵
  PID:5244

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:716

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:3208

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
PID:8012

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:6700

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
PID:6864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Browser Extensions

T1176

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e594dcb.rbs

Path C:\Config.Msi\e594dcb.rbs
Size 789KB
SHA256 08abfb0b7badeafaa468c2e5582dbb966a6d469b718b7dd7b9740e076d90949c
MD5 79395989013644b9651c9962724e60a1
SHA1 59a02b2d887150a8fa991f504d02dc8ed6e943b2
SHA512 567bdf8e24cdf2d45c9bfa3737b81943940e4fcbc10610343c7c09880b9155df5b4d45a0c3059bc4ba4c497e392324cb126f7dd9e59cdba2bed9a1d6151141f5
SSDEEP 6144:XszPKZCvAr4XMs7cRthGzXAMzId8STn2xLKzz0wTRdR6ToB66ivMXFVVAOErUNcb:ayKXMs3jtST2xLMb6e6oVVVNGJoSQa1
TLSH
T174054B0D9E644465E4A6E97689EF0272EBB2F4810F34C7471761EA2D0F6B2305F3876E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\Crashpad\settings.dat
Size 40B
SHA256 ca9ec77cd58c2ea9400c6b055ac4680b32ee6afa44508c942ab8b73fb95a8a69
MD5 dba35f22dd7742de68d094f00fce22e8
SHA1 2f696197ffda1389a426a7372e3dbcef21b31127
SHA512 7e4314641592268c6f0327a35379b5b116df12796dcd1462e7787a726fa702dd898ffaf692bb60bf441eaed8a5b39b72860e4efcc90da4e0991e952c496730a4
MD5 SHA1 SHA512

Submit Download

updater.exe

Path C:\Program Files (x86)\Google\GoogleUpdater\147.0.7703.0\updater.exe
Size 6.2MB
SHA256 c8fab4adf736152b4650fbb452c7564586f4f193fc259907d40f70c17965ae9a
MD5 c9acd5f7be448a40fb60a96e65d5845b
SHA1 41a73d89765b6c5f33261409e27827de3c86af14
SHA512 5b466f5f2d6e111a66e36632c2cb83124cf3484bd5b8e8973a970ceefe46e9d317cabc6b508e5fd4c21424e60a409586bc2804488e913324bf79be614a8c402c
SSDEEP 196608:c3lTzaQF5LQ6oFKD7KTYQNnxvr8dYAsQgUnuJTe0EHup:WTzaQ7hoFKD7KTYenxvr8dYAsQgUuJTN
TLSH
T15966AE12B8604171F4A73231753D673A89327E66AB3585CF86807CD89F7C7E2A43A35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Program Files (x86)\Google\GoogleUpdater\crx_cache\metadata.json
Size 130B
SHA256 adbcc8d28605ef4f5b2eeea82b7f56ce7549eb293e94345b47725b7222950df4
MD5 cc48ebfc0b820fec5fdf502dbe9d69b6
SHA1 e822c2e648aeaa511ff0790e9330a3542cd59e30
SHA512 634d94b16cca5d025439240578e8f3de0662b33dae00779ebc99ed73b3191f663fc8ba910c442344ff872819b58b96ef19c964630d7f584f8856da249fef801b
TLSH
T114C02B670B4AF3E30E080E5110714D94A2040502E3BB29501D09D1F404104985050498
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.json

Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
Size 421B
SHA256 b7c0cd3ed64a92ee592531cfa6d28ecd77fe7e7ca84856a104479c13c4055f7e
MD5 f3772c03721391c30a40ab4917e485bf
SHA1 399a869beeff56c9d556e541fea110c114a4d5d0
SHA512 1ea30e8553c53efe5fa1dc15bae0011541149e26ce8c13cd593457c4c6dccd495d86734750c09118ecea4480bb383b3035b105ab23a54413d2c583f8a54a4a4e
TLSH
T155E0AB0AD922E1E3FC494E2F81490BEC83D55C594138019968CD585E049AD9EF40F81A
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.json

Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
Size 525B
SHA256 3d8d9cca8abb7b50cd6fb857c97ea22735b62efad36d142eac63382a13f80154
MD5 290e807b90aa27ce4743d4faafdfc7a1
SHA1 7a34180ede713fd726b5e29c41f49320c7c020f1
SHA512 37e83a98510a032e6947d731a3fdc6bb842b03aaa5150ccb45abc9c206ae8ed6ac3b131cabd5c22b2095e07d2dd279e3f954137723a2b6759639fd4530f99429
TLSH
T1D7F0051ECA12D1F6FC010EED820967AC93D4851E0214648654D84C6D28DD54D550FC7F
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.json

Path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
Size 420B
SHA256 e0fca779958ef34c8988062211c9eca83049b42ea426136588caa70e62c9f76e
MD5 b9b3d5fecf2e3f396e6402eaa212b958
SHA1 3c54dd6a4281f4d9ad23602b4c95a7e81427399b
SHA512 603578e334d6adfe8182bff647a548b83188b77a4715ab3868b7232e5b9551d1e41c94486376ba8cc8a475373406ed21822a3e27c56f5e82eb264c0b9428461d
TLSH
T1C6E0AB0AD922E1F3FC494E2F41490BEC87E55C5A4138019928CD585D00A9D9FF40F81B
MD5 SHA1 SHA512 TLSH

Submit Download

chrmstp.exe

Path C:\Program Files\Google\Chrome\Application\147.0.7727.102\Installer\chrmstp.exe
Size 7.1MB
SHA256 5c334ac7c7d7cd3e9c620b69bc02e6cdf3c72ff4a020a9660389fe5ee38cbf0e
MD5 58d111e8ddbce24db2663ce98912ff37
SHA1 c2a8f53ebbeef1d81e2192807de50d85d7994360
SHA512 c7736e9004247559ac916724f107bdc0af94445da80e9cd5feb0df56fdfc4272bff8905b6af433d1fcbfaef6a2d3129759b8d14c024ab15dfa1978a8d733d6b7
SSDEEP 49152:itxEfgmwUqu0agYjuWhWU+qd9WnLXEckGHh1GW7mv5FjCmxnh2bJtGmNVg1HzNlX:1fJX+MWnqWYjvdmbbS/sSRkgK7rYi9zM
TLSH
T164766C13F2B501E8D05ED9B4CF3956229F357C4A87B0A2EF269436E11A75ED47B38B20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am_MASCULINE.pak

Path C:\Program Files\Google\Chrome\Temp\source5152_327628785\Chrome-bin\147.0.7727.102\Locales\am_MASCULINE.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

deploy.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\deploy.dll
Size 563KB
SHA256 240e962a459979f4c67020f9f6c21492dde53ef03fc79f150a02e2bed3146986
MD5 dde10ec36be410229d7af47a2bcecdf9
SHA1 ef377955905bd228548a02e55ba65800271ab059
SHA512 a585cb3ba177549fcbf477a28328b0f34db9c0909a56e24b5ffc491fbd0a97871bb495b10decb117239f7fda4eada210f6e92dfc9e3c57f19c2cf8ff67703e5d
SSDEEP 12288:gMlIz8puA7YuB+KSBCeXIegpZuMxV/Jav4/xrmpRU9vq+Y:gOZMuB+KSBCe4BpZuMxV/Jag/xgRUgP
TLSH
T1D5C4291362D80095F0BBE637996E8106F1B33D4957709ACFB67CB9192F32EE2A578701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\java.dll
Size 154KB
SHA256 3e060e1aafa2fe99f06c34db84a49d3a2f994c1a0dbef40f37dbafd45cd69533
MD5 31401e170ddd8437635c4c8571a80341
SHA1 b79de1ce1b96ad0c3d00c8a32e55043eaeb1bad7
SHA512 fc5e52e5398563a39dd5d8204ffe52a8668c19e1f1bb9706cf408c6c7ed81f8be667d87233bcdfd8739ac022792c36b9147249e5eedb51b21493100ffbf1e5c9
SSDEEP 3072:9UiwiCAYX+v/hqHQ525w25r87Wh8AH6MPVbH5ED853:9tYYAw5W5uMJOi
TLSH
T1F0F33A0A935640A2F89771B8B0255003F3BA7858023C937B57E58B4E9FBFB61BD57781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
Size 202KB
SHA256 32546ecf1236769d2d777331f90282fb97589bec75da11c8e727d61d3d4c988a
MD5 7b23b0aab68e65b93bb6477f05999574
SHA1 920752e4c22e1165e6df27f69599483187edfbb3
SHA512 e3395303e53edce3dfa8fe11b7338c77795595a17dac17818e4bc8b77feee4900d541201d6762aa8f46565730e24a5423684049d40bbd074186ef7223c96b604
SSDEEP 6144:DKTNOY/WrlzkTa0OtC8QZKHkZjTB0bgvex:DKTNFIlGOCjTubgvex
TLSH
T13E14AE92739020F1E9979275C5969912E7B27C9F03B0830F13A877761F733A1781EB5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaws.exe

Path C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe
Size 314KB
SHA256 60f2898c91ef0f253b61d8325d2d22b2baba1a4a4e1b67d47a40ffac511e95a5
MD5 5ed6faed0b5fe8a02bb78c93c422f948
SHA1 823ed6c635bd7851ccef43cbe23518267327ae9a
SHA512 5a8470567f234d46e88740e4f0b417e616a54b58c95d13c700013988f30044a822acfef216770181314fa83183a12044e9e13e6257df99e7646df9a047244c92
SSDEEP 6144:m1S+hpoGUtIFy1Tx+j5Zw4pxRkT+lSEJyJnqFSJ7yvN:m1S+foGUtIFC+3vRa7yvN
TLSH
T1DC646B5173E809E4F8779639C9768911D9B23C6A5B30C3CF23A06A1A1F337D09D79B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jp2launcher.exe

Path C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe
Size 99KB
SHA256 04bea7aab6eedc3a3f3787711f368247668800596921b8da551d1a4694d510c9
MD5 a13967cea5f949a3a50cd58c91a28d45
SHA1 b53f6477d45b2010389b69bbb4cdf03bb6af4a63
SHA512 ba5b4ba0f4842cfcf94af50f660614059511673ad26b2151ecf15a9d1ac3793d79ebe053b6bde26a028eb26a5304c5d5ad3c16632ba7b185dbd489a3374018ce
SSDEEP 3072:qF5lIUp7asheLp1wdYvTVsUfQOBFOzvwGlNA:65lIUp7aXadYsOrOTwG4
TLSH
T107A34B87366861E4C866D13EC9968216E7F1BC241B2643EF63A5764E0F337F16D3A312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcr100.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
Size 809KB
SHA256 1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36
MD5 df3ca8d16bded6a54977b30e66864d33
SHA1 b7b9349b33230c5b80886f5c1f0a42848661c883
SHA512 951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0
SSDEEP 12288:3gzGPEett9Mw9HfBCddjMb2NQVmTW752fmyyKWeHQGokozS:QzJetPMw9HfBCrMb2Kc6ymyyKWewGzUS
TLSH
T13E059D9536A907F6D137D63DC996D606E2B2741513315BEB01A08BAF1F23BE09A3F312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Program Files\Java\jre1.8.0_51\bin\server\classes.jsa
Size 17.0MB
SHA256 9f6b41a834cda86f258f6ab51198a7212f5f9770b6f381019d924d46ed4673fb
MD5 bcfb124ccad8512b3ae29b4d3e1e3247
SHA1 c86de0764195a62bffabfb3eb563d27b3167117a
SHA512 e1618deedfbca42b411012d69cedde57706915b0fbb0885e81c9c02880183fb1a332801ea370eb788946174f3731da5ff13f630c4582362993297b2b44333657
SSDEEP 49152:8rYkl+7D24giX9H60mCjZrqAVCxRxOQLTLIwc0y7DCOvZNQci+sURDDMJ5tZFUt3:8rY28Lgh0Y/RwE8c
TLSH
T1D207F9DFFA124E93D6F8467284E5C7A43335E4A1EB474787A12452BEFC832850E26DC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\server\jvm.dll
Size 8.3MB
SHA256 04d85639dacb86c6efca146051681608727f0376ca5293b9f83b232fc4db6a54
MD5 2894ece7b8de355b13978d6b8ec6e68c
SHA1 cec5cd8450498ee6f81eae2f10e56726b6125be2
SHA512 634e1cedf63d384c072bbd32dbca35982f7b2a7a77ab6d11130f2d45fd164d17ad080206a650854473370e824ec1153c61821c318a2af7954d2031a38d37bfd4
SSDEEP 196608:9kUYI8+So/zQYbmWpNOXN5HZ0jM/i/MpwR:fYI8+So/zQYbrCN5HyM/i/MKR
TLSH
T1D3965C6A617030E8E67BC2BC8A199507C7F338A4073597CBD6B153911B43BE969FAF10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unpack200.exe

Path C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
Size 192KB
SHA256 cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf
MD5 5b071854133d3eb6848a301a2a75c9b2
SHA1 ffa1045c55b039760aa2632a227012bb359d764f
SHA512 f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c
SSDEEP 3072:qVgG2jZU/NbQcpe+m1bVKBtrMXK9HTBfUfy/NTwph6Ad/JGu:ggG2iN8cp3Ab6HtTBcfy/NTwphH
TLSH
T1EE146C6227A411A2D0F78179D9D3872BE7F67965037897CB80D843B22F036D42AB53ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verify.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\verify.dll
Size 48KB
SHA256 238f96dc1effcb719a9efe8472c34aa880e2cff4af94e26b8a48b5c00695d688
MD5 5f317dc17d83fd8d80df4eee1a6f1024
SHA1 256a67812cf7e6f6d41884d290e995e144c41c6e
SHA512 5f0e62e0c314d9aed7d61bb79d77c3389855afbfc3765262ec61ab8c4b1648c1d1b7cd7b23f54319d4139ab2132a2471c115790ec25ac4a03d340abde0fe0e75
SSDEEP 768:4kAC+MiPYBO1/aJsjSZymc0U9lsb+TjRxRv8RLv+TguulQR3PvNOC7V:8JO9c0+YkJyr+T8O3PvNvV
TLSH
T179235C73A3E578B3F9C38C34C5A4A29BDAF1B8901354C74FE5E64A0A5F43F512668E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Program Files\Java\jre1.8.0_51\bin\zip.dll
Size 75KB
SHA256 d62088f0dc6aff56b2bc71185a88b225d61700bca55fcc721c9e9d5b02459790
MD5 d027f8fd7d74aff3bf8cbddba3aa04e4
SHA1 f6b97d03bfc4870f33414ec235160f77581452ec
SHA512 eab8cfc41482bbcdfba5d0e77397b15d65227d98ed764cde0c56cffe75a314ed4aca9d3a12414ab6718e01064d6939a2b75f2c845f91742bd02aae5bcaa05b59
SSDEEP 1536:oLW6LkTgB9Fc4mENkn+IOQIOpVnToIfisBrTwFk:oLjYMFGsGp9TBfisBrTwFk
TLSH
T194739D569AF46222FAF65470C4E6CA2FC7B2305052D4979F929C97811F433A23F983ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.cfg

Path C:\Program Files\Java\jre1.8.0_51\lib\amd64\jvm.cfg
Size 634B
SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
MD5 499f2a4e0a25a41c1ff80df2d073e4fd
SHA1 e2469cbe07e92d817637be4e889ebb74c3c46253
SHA512 7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d
TLSH
T152F00CAB8009672653A221E77680385CEB52D13CE22BBCFA1148AE883D03CBCA017856
MD5 SHA1 SHA512 TLSH

Submit Download

charsets.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\charsets.jar
Size 2.9MB
SHA256 2b44da184819640f10a93fa64f1cdde2bbad735017f7c20d504d5379bf126cdc
MD5 eadb8bf14fa96d280b7c754df1f6e347
SHA1 5b8d6ef3c38cf9211dcc25aacfcd872d26ff406f
SHA512 274ff96580c1524707554329e9e9c44b807e8592cda48c844f375cc778a04268de785457b79624794acb59ee12bb72182fd6786f3d1a617c0743689dc2c826ee
SSDEEP 49152:owiZBz1nmjkISd9aODXRUouyunvvoplbIktIS:owiLzNRRdhwn38lbII
TLSH
T11EE59FD344451EAFD60B52BF1B60ED0B770E78A61907B240FDBA4C1AEA5C62F64D2F21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

charsets.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack
Size 1.0MB
SHA256 91517ff5c74438654956aae554f2951bf508f561b288661433894e517960c2ac
MD5 45288142b863dc4761b634f9de75e5e5
SHA1 9d07fca553e08c47e38dd48a9c7824e376e4ce80
SHA512 f331cd93f82d2751734eb1a51cb4401969fb6e479b2e19be609e13829454ec27cec864c57bdc116bf029317c98d551e9feafc44386b899a94c242bc0464556d8
SSDEEP 12288:YyE+xE5GQaUkkxrXJZmbfyhTM8GomI4T2LiqohC68Ln3KEU5dzk544F:YAkLKkd5ZmbkGo6Iiin3JF
TLSH
T110354103F96C3A65D61E5F314ABB8F72937350397A5E0AEB9A146A14CFF21F34501AE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classlist

Path C:\Program Files\Java\jre1.8.0_51\lib\classlist
Size 78KB
SHA256 406b68d923e9ce01f19194bca03eaaf9fc0efce6590713b6d066485cd94d1339
MD5 51531cbbe256939e7ab12fcc256fbf3a
SHA1 5754126190f818b7d39d5b725a1878fb33233d26
SHA512 dae90c8f429bfc7782bed9116b6a3b30110ce2b2da865f63fefdbd6be965284c7d90ff8ebf869481e01246d35264110a3d8690b397cb1a109faf61d2f937bcc2
SSDEEP 1536:66FJ8yxScgLrUl2BcCarY9z5Ho6foMw4xYFjcGrKndG+Xs6KPUlbeJhpqR/66VEX:JJ8yxScgLrUl21foH4xYFjcGr3
TLSH
T19E832E6391C972A75758D1DA70B28B66F03CD4739E01C540C06688C7E9FDD8E8A2DFAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deploy.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar
Size 4.6MB
SHA256 f8729d0cf43df8b85acc2670f353dca017f16acf95d32f22c611876e78b666a0
MD5 ead52a7e271669b340218ac3b60ce429
SHA1 c49afc97e994be2e904d36e8794d791d35718e74
SHA512 349edc648b7450a752ea3ffe296d5bc79b80a3839e275a997336637900cc0712db4a589e7a5e7cc01f1ed558c174370ffa2e4c831270b78fd6d28dc6542c3418
SSDEEP 49152:lm3Qn3mq8giecWXHNaG63nl1uacMgRuYpu0h4Cks:aXpiuCu0aCks
TLSH
T11C366C5BF108B877EE43C6FBA50307A4716278F48513E1E06ED98FD4E7C89958B990E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deploy.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\deploy.pack
Size 1.8MB
SHA256 80ba80d2a6c20deef6e2f3973337e15e22eec30508899ae998bf191ba725db26
MD5 5cfc3a1b269312f7a2d2f1d7c0497819
SHA1 d048284db9ce7103156f8bbce988b4d9978786b7
SHA512 8735af7c8bc5b48aac42120326a5dee21f98512ba31c57c77b6fc3906b7b1b98e5f22f57a31f26dc3e16abe63a6f15ef2e115c7fc17bbab35e846dc373da9c6b
SSDEEP 24576:qsLHObjUh+CFaVftuda488TGOm0iP1TJvOHre90FriO0:qsDGVuda4PQtvOEqid
TLSH
T1E68515A319CB746A93A21F3A53765B25403BF11812237F0EF924F3FCDB65262EE12195
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages_zh_HK.properties

Path C:\Program Files\Java\jre1.8.0_51\lib\deploy\messages_zh_HK.properties
Size 3KB
SHA256 ff4a3a92bc92cb08d2c32c435810440fd264edd63e56efa39430e0240c835620
MD5 880baacb176553deab39edbe4b74380d
SHA1 37a57aad121c14c25e149206179728fa62203bf0
SHA512 3039315bb283198af9090bd3d31cfae68ee73bc2b118bbae0b32812d4e3fd0f11ce962068d4a17b065dab9a66ef651b9cb8404c0a2defce74bb6b2d1d93646d5
TLSH
T1217154FE0A1622472ECA80E1D985A58FD7A2FE01B122C52BF5FD6D01775731BC913A38
MD5 SHA1 SHA512 TLSH

Submit Download

jfxrt.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.pack
Size 4.8MB
SHA256 0840d659560e62fcc41cd42dec9d7aedb8359f606097b540806452ca8ad05e21
MD5 8dfebf0b78c6e3bf5aa5002ca9a6da1a
SHA1 1edee53b9e0af5d767d0051c2beccc474035024f
SHA512 f9bf6e9558b52969ec152fbfebc239c1bcb7e4343b3dc58da5e7cac015d1fe75f255bd9ceb3fdeb86b2c05be62c62b552a25c94aba4091df3eaf163cf91da444
SSDEEP 49152:uCTbVLrqgbejNIJqcdTok/EWCdomwkX/YmYybyROodO0rW:1nTB/EmmwkX/YL2yRdS
TLSH
T154368C0BBF422C1BD185563550FB67D02725E24166222B933EAD7528DFEC3CA3D26F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

localedata.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.pack
Size 1.3MB
SHA256 7cdc489fa093e924649e82f4eb9689bc1bc0d28e20e37a0a94060efd5428c2db
MD5 2ad7c3462a7494b29edbe3701ebeab4c
SHA1 7358ab9b0c4771efdc0d28764b90a46aac55e865
SHA512 8b1f0f5932896f1876e5f8137dc8f74ff79f02b7708220b53ab2146fc742403ee952c68dddff9a92c786d4a534f7a266327934a8fe84a3c979c016cc8c93efdb
SSDEEP 12288:Dv+So+Sl16pQj2gM4f82usk0aGYkaqk876mGTwj0ehh/k9SoBUaBYI:sv2gX8t05k7nmUw4eh5iUAh
TLSH
T1FA55F09361CBB94BEF901B3847724A64117FE62815A27B08F5A1B3FCDB735A3EE50460
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaws.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\javaws.pack
Size 211KB
SHA256 0a95ab97c85e534b72a369b3ee75200f8075cb14e6f226196b18fd43e6ba42f5
MD5 5a83bc9b3e4a7e960fd757f3ad7cd263
SHA1 f5f308aec7e93accb5d6714c178b8bf0840fb38d
SHA512 b8e554bbf036d0500686e878597ffdefa8bcd091ab6533eae76fa04eda310cec7cac89b71911f1f81012f499c7bec890ac9032685945f7e5e6b68f7ad3f7430c
SSDEEP 3072:gGnvg4FHrovbd9G7UDQmDQo28TDR0u2b/MhGNBrMj8j5CYj9kKK1BWPdAZWROOMK:548k935QRNL6kYIj5CYjaKKnWPigRO6P
TLSH
T184248E077F065066D7A36A7282B5E756536AC3022A3227939D28011DCED56C7CF3FACE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jce.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\jce.jar
Size 111KB
SHA256 c57cf3b05d552d8a573b31a46e97a13201cf1df8f0d5cd4645514ba9a3f1c6a8
MD5 df21aa9a2da9f94763bdcc80f07c9afd
SHA1 bccfe5cfbbf0791e752754b964313f9079f748bf
SHA512 034bbbb0a12eb21a08947e70ab30c15bb938e295f40d414b1a8df57db0a47828f23e7c612dcb936c4ab745f8ee217da571632d29fe115d946851538040d51756
SSDEEP 3072:GlPcBow3GDMXVnhcz4T2ZSy1HP16IpZuExIk:GAlnhc9SmYEZJ3
TLSH
T1F2B3D0253C99DE68EA53D03E8DF0D537B84D00AC5106E34B57A6D0E1A6B0EE19F07BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfr.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\jfr.jar
Size 542KB
SHA256 1bbcb162afe5db029fa889fde95ac0551f01395bce09fcc749feb26b5a10e6da
MD5 efa3ad7225fb79074246e8911e473264
SHA1 1e19fe8dccf71d430dec20d613ace2b99e380d7a
SHA512 cc1245475c0652b08e53e503b3917262999c2db8a1962bc9b12a4fc87e689a8d51570c6432c3e55c3e7f6c3ed19892afc51868bc815bfc34ab5ad3b10e0a706d
SSDEEP 12288:x5l+qU67FYWg+YWgYWeoXqgYSq8eh2f/m5NwaHkSIJHvWQ6Q7ooMcgH5lY7TQ5cY:x5l+qU67FYWg+YWgYWeoXqgYSq8eh2fM
TLSH
T14EC4E70BF19A25EFF280E63F29918F6422F0D472432BE6614F15AD5B1DDB8D7EA006C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsse.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\jsse.jar
Size 549KB
SHA256 134730589e2c0519b1885df121869725903abcdb05a5e844348d56bdb84efb3a
MD5 411db7604ce2ca0ca1782d04f861e610
SHA1 fd88154b1cf75333ed59753f722595a133d2ee4a
SHA512 a2a9c82b515b2d90172e27cc7558b956112d1ca6678665ee847d63a79826059cac9161e4c3a0005711af6e21400f9850d6879348517bd9242700fa1e19c9fd82
SSDEEP 6144:KLYpDHVmykXa97F3V087ZhMNsIsZC+QepvYlEV261/l:YQDHDbVhgkEepAUl
TLSH
T16DC4A517E20D95BFF290EAFF9870432C23346C325963E3784E49492AF5DA5F14A74AE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsse.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\jsse.pack
Size 150KB
SHA256 5552e52e39c0e7ac423d6939eec367a0c15b4ca699a3a1954f2b191d48a034e6
MD5 168f72fd2f288a96ee9c4e845339db02
SHA1 e25b521b0ed663e2b050af2b454d571c5145904f
SHA512 01cdf3d8d3be0b2458d9c86976cef3f5a21131d13eb2a1c6f816aeb2c384779b67d1b419fa9233aedd3bbd16970ec7c81689bf2e25a8bebadec5de8e9b5a19f1
SSDEEP 3072:jdZM4a0yDJ5uobJyFYgswFGCCCCbfCwYFOGoW2X:jd64a0yDJ5fbIFirWa1X
TLSH
T1A3E36B133F0A4157C7DA7BB661F4B292637AC200367B2B539F4509A8CDCE9E2961DED0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

meta-index

Path C:\Program Files\Java\jre1.8.0_51\lib\meta-index
Size 2KB
SHA256 4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4
MD5 91aa6ea7320140f30379f758d626e59d
SHA1 3be2febe28723b1033ccdaa110eaf59bbd6d1f96
SHA512 03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb
TLSH
T10741566F0287842F9E980DCBB577DB964BA8843618D8A3FC43E41C4576CDC4B0734A74
MD5 SHA1 SHA512 TLSH

Submit Download

plugin.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\plugin.jar
Size 1.8MB
SHA256 9bb5e9d62ed28b0e3f17bf911dd9c2e4c558dcca7a6a8aa0f6877143e07fa94b
MD5 7b63f25d7adb2452df1b911c188fa25e
SHA1 122500f1c1a418353cf6f37c7bbfa0c83d012b1f
SHA512 4a5e737d1e01b9f08ad9796ce6dfc2921327157cbafaed8d3cab7a8a6523b64d169d6496d63c83cf67aeb864b8f31f41f7023b2f26653a6bd9f3c099efdc11a5
SSDEEP 12288:rl7gN1ETH+/+5JT63pzqF7mi8WIx9kRp617xncIxxDX:rhgNEycJTEzqJmJ9kD61llXDX
TLSH
T159950B37E348D89FFA25F1FE241513903325A9746A02F1A16F3E4C275ED59A28B522FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

plugin.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack
Size 482KB
SHA256 9948b1c18d71a790e7b5a82d773fea95d25ab67109843a3f3888f3f0ac9d1135
MD5 538777ddaa33641aa2c17b8f71eed307
SHA1 ac7b5fdba952ce65b5a85578f2a81b37daed0948
SHA512 7a5877e0eaef6424ea473a203184fedb902cd9d47df5d95d6f617ca4efa1162f0ffd418e9bc6b7492f938cb33fc6384907237487d6ad4f6d0d2d962402529d8b
SSDEEP 6144:2VWDzAJyxVHzlR7ngoJ8P/skXFiOkUTuZcnVPzbY5bKeh2Rqkx4KMWpeNi+:2UzRzcvEaLTu8I5MqkkWcNV
TLSH
T136B4C007BF07605AF6AA297210F567022324C3543B73ABA79E141564CDC69C7DE3FACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.jar

Path C:\Program Files\Java\jre1.8.0_51\lib\resources.jar
Size 3.3MB
SHA256 d4d63c2e0743c901ac579c5bcd7b438a3c02619aec1a148cd335b37bf9600c57
MD5 d00b062395ebbcc4269c4e1fba474d11
SHA1 a82654f4b8cb34856e30f10973a85b386b4c8d47
SHA512 173271af48b4ddb89b7d11b989ae104b0e58070e96b7d5be447ff5597c3c2db8457f76a1a44680e8315cdedc3d747e3cab21b3e2cae17e61be48549c665fef4a
SSDEEP 49152:bH0qyfVln+1gpcynGyHvjhrEaG18ThmGakJxeVMfa+QcF377CBkqHSQUx1NxtTLi:45A
TLSH
T1FDF54B6FB942112BCAB340B6EC3326C7E96019B183A2D627F1EC9F663F8485C9757354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rt.pack

Path C:\Program Files\Java\jre1.8.0_51\lib\rt.pack
Size 13.1MB
SHA256 93c1e08034b68e12d78005c2950145595327477c17c1f716248d3e16313b4eec
MD5 f0177701b36068c9a2bb4924dd409fa5
SHA1 71e4b32c95e20dd565a6603d3de3819eb4f19d33
SHA512 8e198bf60dbb95f38bf5eca67c9b7cd4fe9920890ba3d569e08de59b38c1b00830a0a37168fd74c874df86b7ff0915c8b69adb1591432b42b5ff35e5885e6641
SSDEEP 196608:kosdkngHsK204JpwQzkOnAA4DAVQhbyN6MAdztCl9oGin5:Yf2ljnAA4DAVQhbyN+dxU9Nk
TLSH
T1C3D65B037A8F7906E2911F3042F267A6137AD304267777977E042AB8DEC62D3ED19DA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sound.properties

Path C:\Program Files\Java\jre1.8.0_51\lib\sound.properties
Size 1KB
SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
MD5 4f95242740bfb7b133b879597947a41e
SHA1 9afceb218059d981d0fa9f07aad3c5097cf41b0c
SHA512 99fdd75b8ce71622f85f957ae52b85e6646763f7864b670e993df0c2c77363ef9cfce2727badee03503cda41abe6eb8a278142766bf66f00b4eb39d0d4fc4a87
TLSH
T11A213B3F770AA55F17D600B839BC8A2F91CC0A3E5D63A4C028AC4301BF4A8876D51E46
MD5 SHA1 SHA512 TLSH

Submit Download

bspatch.exe

Path C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
Size 34KB
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d
SSDEEP 768:Fp4XNCtaTJqd422XQ13h9SwE8iCpr7URlfdybhgmfr:WCtads4XXQ1HXDfULA6
TLSH
T154F2F18A6918D28BEB2105B4332FDC9D88A58EAE4916D30F7A43606B9DFDDDC007DF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

diff

Path C:\ProgramData\Oracle\Java\installcache_x64\diff
Size 9.1MB
SHA256 3b3657c83e4f588f0e759cd46e99309cece2ebb54af2c377f9dc087ec764fda8
MD5 d417682702b140d7131851bae877f046
SHA1 aa78da727e8a62c839a9bb6f7a93b48d3a04be70
SHA512 9e107b7f61e42410807aa1e6761ac7adce412846f69ae8e2e21b147e39d1a95d41367e21624381750eb11c77322206c4d869a477e5442e8323405c85854c03cd
SSDEEP 196608:0Hjb0eeKLxLmJYNliDckV0eR22Gz9jcRnXOt+y1yIo8ezG:0HjoeeKZ1ycK9R22cJcR+tx1jRb
TLSH
T188A6335B270EC921F9B20D76C493F9157E163E2625A5E98F1AB07A6FC02C34532FAE11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deployment.properties

Path C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\deployment.properties
Size 1KB
SHA256 d7a9530110fb42ec9d3779238f7c7ce11e93b5f925812f47a648645e885c5127
MD5 cbeb15abbf49bb8399c6370bf7ab1c0a
SHA1 c9d6574186ef62c410c2cc19faf2b8461941b7c2
SHA512 16fcaac97d61e81ea37eeb12ce6ffc45e57deb73513c9dd73d50686419bfd4996181764a25586ab0ea3dbc9ac69a0e12660e408a04d33d54fe67f1b73dcb3713
TLSH
T1B1214D42A81BA5B07D1131B5EACF82F63BB2977D49A5217571C018DFB8A0F3206F7C65
MD5 SHA1 SHA512 TLSH

Submit Download

deployment.properties

Path C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\deployment.properties
Size 1KB
SHA256 fba0ddff233e230a366d1804000b2369223dc414d7586016ae3ebeb5633bfcc0
MD5 f5c08f66ceaec4176533cd00a84cd65b
SHA1 fbee597375bc0786f3f4bc72b481a5b4819698ff
SHA512 f1d9fc3f6f21db8f587c342ce6c0eb0cea29569743a4c6a526c09e43114d72e51ac179612f6ad5cd69f47f64a4e31fff00fdb8e31e3da86aba23948c8f23b75c
TLSH
T11E215882A82BA5B07D0121B5EACF82F63FB1977D49A5217571C018CEB9A0F3206F7C65
MD5 SHA1 SHA512 TLSH

Submit Download

jre1.8.0_51.msi

Path C:\Users\Admin\AppData\LocalLow\Sun\Java\jre1.8.0_51_x64\jre1.8.0_51.msi
Size 38.7MB
SHA256 d4bdc230eaebefe5a9aa3d9127d12ac09d050bf51771f0c78a6a9d79a1f9dbf2
MD5 1ef598379ff589e452e9fc7f93563740
SHA1 82ad65425fa627176592ed5e55c0093e685bfeef
SHA512 673f4b08fc25e09e582f5f7e01b2369e361f6a5b480f0aa2f1d5991f10076ba8a9d6b1f2227979b514acc458b4fdc254fc3c14173db7e38b50793174d4697f23
SSDEEP 786432:NIL77/mXteC+c78UZnibhhr7pYA/NSkv7JrpzUyHTrD0N6U1cNYGO:NK7gf3iLrNYrk1rpwyPD0N6vYGO
TLSH
T1A297330DBE904526E4AAD6B1889F8773E9B3FC501B31C6871351B22D4FBA2205B397DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 171KB
SHA256 70c0e172d224c832a5345deccc272ef2196866b1f3fde0d727307e8bc3192646
MD5 51112bdca1e9384a4301c2e763ede1f5
SHA1 4e37eeadc118ea3d4b90e8499f09f97776e26bd6
SHA512 2f834ef026dd0f02cf3e0c27ed14ac12d34668cc0ba53f22b9c29f61ccd5c2b7ad18ef392754e0f7a4cdfda0a8b1b0f3c2b58ec9999788bef6072c600c68d23f
SSDEEP 3072:no5ZOTNLpT/VA5UR+Y1f2neM9RXEECQ0GjW4AoOhuoNYC:ocL1YC
TLSH
T12E045297C91F41BB38534BD7C3AD7EA85566150A53AE1A2C32CF82CFA445807CA1F4EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 180KB
SHA256 e9846c62738ec50241358637df24b119cb0378664dc122b2d5dd22f9db357e42
MD5 65092e53558505e080310d342a76a77b
SHA1 66e3f4be8f12a2f933027b1ffedb739e942c39cd
SHA512 b9aff003cef5ad7b3f59378a66eb76a8de4e45c4edf58e891b14bd3b8d9def9563f2dc09e3a5efcb445ba38d4329edfad9a96f0ab96c13626a32571a07b213a0
SSDEEP 3072:no5ZOTNLpT/VA5UR+Y1f2neM9RXEECQ0GjW4AoOhuoNYb:ocL1Yb
TLSH
T1C2046597C91F41BB38534BD7C3BD7EA49566150A53AE1A2C32CF82CEA445807CA1F4EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jre-8u51-windows-x64.exe

Path C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\jre-8u51-windows-x64.exe
Size 41.2MB
SHA256 3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01
MD5 b9919195f61824f980f4a088d7447a11
SHA1 447fd1f59219282ec5d2f7a179ac12cc072171c3
SHA512 d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6
SSDEEP 786432:lIL77/mXteC+c78UZnibhhr7pYA/NSkv7JrpzUyHTrD0N6U1cNYGOtss:lK7gf3iLrNYrk1rpwyPD0N6vYGOtT
TLSH
T1AD97331DBA946025E4B7D7718CBE4272D6B2BC810B31C68B32DCB61E4F762624F3475A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsr3D25.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TLauncher.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
Size 9.2MB
SHA256 420b9a31c49746587bd5607d6edcdec3f773880bc03958f89f236b1bd01c7da3
MD5 2ee4ad0802c547a0b6585fbc3e911151
SHA1 eba7dbc5dc2fd11247a1c745212ec4ed3632d37e
SHA512 ffbb1fa3e3e8da7874c53036b984ea8697aec47acb2229df59b7716c9ecb45337e3139d1bb19d5b940b1875aa6189d00e7daf90bfc0f0e7613f523d3776583b0
SSDEEP 196608:QOhNVPPzMDzp37tp5ahrePa+52Pk6ptJT:QOhN6Dzpv5C
TLSH
T139A6F15BFED8C069FA0784324162D067B82D4BD8D14BF19B15BC669A88B1C894F07BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_US_export.policy

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\unlimited\default_US_export.policy
Size 146B
SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
MD5 1a08ffdf0bc871296c8d698fb22f542a
SHA1 f3f974d3f6245c50804dcc47173aa29d4d7f0e2c
SHA512 4cfca5b10cd7addcff887c8f3621d2fbec1b5632436326377b0ce5af1ae3e8b68ac5a743ca6082fc79991b8eec703a6e1dfd5b896153407ad72327753222fdb3
TLSH
T178C02B07BB17D0F800D0EF4617B57916B1701E89B0A1121CFA00C2A41EDC6108330394
MD5 SHA1 SHA512 TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\ADDITIONAL_LICENSE_INFO
Size 48B
SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
MD5 512f151af02b6bd258428b784b457531
SHA1 84d2102ad171863db04e7ee22a259d1f6c5de4a5
SHA512 1a305bc333c7c2055a334dc67734db587fd6fda457b46c8df8f17ded0a8982e3830970bee75cc17274aa0a4082f32792b5dbff88410fa43cc61b55c1dce4c129
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\ASSEMBLY_EXCEPTION
Size 43B
SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
MD5 bd468da51b15a9f09778545b00265f34
SHA1 c80e4bab46e34d02826eab226a4441d0970f2aba
SHA512 2c1d43c3e17bb2fca24a77bea3d2b3954a47da92e0cdd0738509bffcdbe2935c11764cd5af50439061638bba8b8d59da29e97ea7404ea605f7575fc13395ca93
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\LICENSE
Size 32B
SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
MD5 663f71c746cc2002aa53b066b06c88ab
SHA1 12976a6c2b227cbac58969c1455444596c894656
SHA512 507b7d09d3bcd9a24f0b4eeda67167595ac6ad37cd19fb31cd8f5ce8466826840c582cb5dc012a4bd51b55e01bb551e207e9da9e0d51948e89f962ba09606aab
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\COPYRIGHT
Size 3KB
SHA256 89471aea3957922df21c7088d2687c4e43f5ff14e635e7d971083dde540b45e3
MD5 51f72c3c2569e1174a83a294f7c082d6
SHA1 1909c04288dd294dd539723c0ca3289656ade95d
SHA512 14f13277afabd4dfb0b7e53b7e0d6bdaf8127fd97e478f203d4112f7aac9868ee27b4a97b9fcf4a0ae868aee6872afc1de2fffbeb1e7da4e3ff08757731e9788
TLSH
T14261869BF35417A20AD30277750558ECEF2B99FCB37904A53E5E405C2256D98533F326
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\LICENSE
Size 40B
SHA256 23f9a5c12fa839650595a32872b7360b9e030c7213580fb27dd9185538a5828c
MD5 98f46ab6481d87c4d77e0e91a6dbc15f
SHA1 3e86865deec0814c958bcf7fb87f790bccc0e8bd
SHA512 ac2c14c56eea2024fcf7e871d25bcc323a40a2d1d95059c67ec231bcd710acb8b798a8c107aad60aaa3f14a64aa0355769ab86a481141d9a185e22ce049a91b7
MD5 SHA1 SHA512

Submit Download

README.txt

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\README.txt
Size 46B
SHA256 963095cf8db76fb8071fd19a3110718a42f2ab42b27a3adfd9ec58981c3e88d2
MD5 0f1123976b959ac5e8b89eb8c245c4bd
SHA1 f90331df1e5badeadc501d8dd70714c62a920204
SHA512 e9136fdf42a4958138732318df0b4ba363655d97f8449703a3b3a40ddb40eeff56363267d07939889086a500cb9c9aaf887b73eead06231269116110a0c0a693
MD5 SHA1 SHA512

Submit Download

THIRDPARTYLICENSEREADME-JAVAFX.txt

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\THIRDPARTYLICENSEREADME-JAVAFX.txt
Size 107KB
SHA256 38995534df44e0526f8c8c8d479c778a4b34627cfd69f19213cfbe019a7261ba
MD5 ab9db8d553033c0326bd2d38d77f84c1
SHA1 d13cac18fec0c71d4a5cb550f6fa93fc60c39e45
SHA512 178eabc5d8883e3e0a32f40acdc8db5a80cbabfa6689d3902880fe521b1a84425758f22cc7dd236416033b20a3fadce6acc03db579f582bae2c0affc0b2eca5e
SSDEEP 1536:Sli851WMeF1vb9nJIa1r+jQ2LpMtzs6CSTmLNUkuiYLOeBWwpZKf:L8P5o9d1r+jxQzP/yZbxQOeowpo
TLSH
T154B3A72FB3451B7206D202916A0FA4DEF32A907D32275A54749CF15C236FD3983BB6DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

THIRDPARTYLICENSEREADME.txt

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\THIRDPARTYLICENSEREADME.txt
Size 174KB
SHA256 70ab017c19119bcaf5c79bbda41ed727d5adaf15640831c94ba8e12ac315c350
MD5 61d2b0ca27981f86ec901d528e9a26bd
SHA1 8fa753c36aec630b1a7a56e57b988c67aaf4cfd4
SHA512 04949d005f2685c59282eb7a033c3da69f5206282b5b7b1b34ab60f53ac5682fb982d0a71a9b36c071a57c5c1ed1e082ed34d3b039d0799909ea1f5247ecec43
SSDEEP 3072:Yj33DuJYSqN7amC35q6dNFiG8OpEeowp6cw+4oHHZZvc9HNhJhxe+p/U0UIdKJpi:3qN2p5Jm1cw+4o0HMWEyHrNRj
TLSH
T10004E62B7F44077206D3C3626A4BA8C9F31EA03E372B5954345CD258276B93983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Welcome.html

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\Welcome.html
Size 955B
SHA256 84599b5f0c5eca91886b743c17a9614e77facf1e31f6f11fc59a60dd60dd40df
MD5 55fb6ecfb9c81819a76e8d91d83dfc6b
SHA1 8d1db6cd5df4626eee7df051e2dedcf28ed08b51
SHA512 5ea60538f50d38aa9432d1482efc0bc69051c8982dcc6fb5125c4e4a778ff0c69ed811a62bcb6f63979c2a44866c6ccaa4910acf4ad15e4654cebc93076e8781
TLSH
T12F11D0EFE9F49B12B76015D321E466E4BBA941F55C63C85A3A1182029040E36930FBBD
MD5 SHA1 SHA512 TLSH

Submit Download

JAWTAccessBridge-64.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\JAWTAccessBridge-64.dll
Size 15KB
SHA256 fa500ce4398a6292b98d0a7ac2a29c9022c54761d40765ccbcb25fc081fa96c9
MD5 94dbe8e68afc4535ba555b000a14e394
SHA1 6322a0a207ce822e521950c5124afc77a572023a
SHA512 6fe1e0106799d92c0279fedfca257a8d3ed4eb31ecc24ea6d903adfebc280cff77926d0f56ebb625297819ca73a25020f4d6c5e37befd6809ed9efdf4f974bee
SSDEEP 192:lro+qusvKUGj3X2ayNChWhu2nYe+PjPriT0fwEM+:lrMzvKHbGFeWhu2nYPLr74+
TLSH
T17B625B878F686023FEEB8D308AEAD216AC31B6D06F6585AF10A543551FD2FA1271C71C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JavaAccessBridge-64.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\JavaAccessBridge-64.dll
Size 139KB
SHA256 dc3f53a86259d60e82d675ef593a322832a3d9561ff3e0a1cf9c222443252683
MD5 7a691b501044d545ca3444e7a3476d7b
SHA1 ca1914343d02ccd2c28907de4595f018e86bf984
SHA512 7407f8c15e3ff84215bab70cf656faca0872003d653b1064438574bcdc9c7ab34b96a3c462f33a5e57046ba666ca7de2a8ccb153e117e4779aa2ef7f07751a13
SSDEEP 3072:8UuxxTlvMw+/J7ke+V6DOWXbwsKkpQHj/oNw7u1LDZvmmwY3JyuDzlcJxjj8uqIC:8UMlvMw+/J7k5H4/5
TLSH
T11BD3F8237AD57276F37B5238CC91E520E66071186337477B9DAE933B13A3002B968E5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WindowsAccessBridge-64.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\WindowsAccessBridge-64.dll
Size 108KB
SHA256 69cd12bc4ec5bd7f0e506542b5d47f503f91f2236adbd39e6e191445060cf1e1
MD5 51e8850c0ea1bf609100b1f37a4e680b
SHA1 756ab35b823e3b403a0757a7d13fb937ef51bf6b
SHA512 1194f41b36409727c78f9199f8fdb3ccb6a9029051870622dc733e682cdb680418ded66c318f79438ccde7b266e6bb9f2275f93b838ddc3731491d13c9d0a07c
SSDEEP 1536:V9sX8aK/rw8poVsaN8KU5ZjQo0RKRBcJmT14fGQlyIflkMnZPlsuX+VzX8TXz6MD:ZIPU5qNJmT1H0JfDsW+dQXzpfL
TLSH
T1C8B35C13739430F5C1779178CEE68A04ABB639AD0732434FC9BA515B5F936829E39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

awt.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\awt.dll
Size 1.4MB
SHA256 ac612d2bc779ccb51cef132cb0a060695ab124f5ab9a94dc29f7692d91509233
MD5 d2091a567e834c4a2eb952de168e977d
SHA1 407977085c52d84de710abd103e9961a70c3e038
SHA512 1e0e5bbdffa46a458fb209e513f0413cfdab1f2bdb2fd8d01fcdc454842fa577f4d07023af8b0e8de81df80e76a130c0c47f3aea4fe5f87680275378923928d1
SSDEEP 24576:FLvM8ABiiEZJ64ZyKNTPocH0wE9FXUUuLuDZC8IP5glvyeqO:FLvM8dnZJnZrNTPDH0wEE3N5veT
TLSH
T1CB658C0AAB9480A9D077C2B8C65B870BE6B27449135083DB31E9D72E3FB7BF55639311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bci.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\bci.dll
Size 16KB
SHA256 f4f50a215bc327c5f016b55bd57223e242498d0008256a42a0d399d4a7e71f3c
MD5 5b2038c4aa4430561d07d0328324c717
SHA1 f0916fdead2b0a567212ce617d88424db446f102
SHA512 8f61e980d1087830986f7b9c1a06c4b9bcde659f0e9317231a59aa6bb49f968f8ff0da8093dde2ba062001f40ac5daa26ba66858262501fef14f6b0c942db940
SSDEEP 384:vlyvVIHIAwdQ1XW+OmJk6aQKfhnYPLr7w:vlI/AwdydqQKfhC7w
TLSH
T17D723A866B292056FDD7C970C7F6C64AE871BAA09B61969F00B492491FC67D1373C30D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dcpr.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dcpr.dll
Size 156KB
SHA256 9053f78ccf014cad648f65653a433c79390bfd9bc78ed902b1e11f122f9fb34f
MD5 191d85b926247a8aff45ee30808cd614
SHA1 71be1d2fb07860d22d0fab60c22523f9a95751e0
SHA512 f2ec8574e1f22a1ce58a69c11445b308ea944415f78a7d1a00263f3433fdf2ca29773a5385485590d86ecbd2b78a681c8a0c186022351d95465f39a7297ac454
SSDEEP 3072:fBwwblHavjHptXiXuKbVfXcD5ojGylYCE2Iu2jGLF5A9bE8LUe3hAsc:fB9lHMH3UNfsoGgYCE2L1F5A9bEGUexc
TLSH
T142F3AF4776718026E227817DE093670BE63174804998A30B73E453FADFD76E09ADA3DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

decora_sse.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\decora_sse.dll
Size 84KB
SHA256 d7a921706d51e59f57a2f7ae89a887f79c9523a8da355a99a6ff7b4c58b5d1ff
MD5 71c240bfb4825ffbaa762439f5a6f99f
SHA1 5335de31ef5058a7ca84598dd228dcbca231588d
SHA512 8aeaeb21f595bbe90cb74c1e1e174c6d7750f06723e26d45e2b447aee03f3f3ed155595873d3cb2f050a4f2205a539df8e739c0ef3747977e26bb1bb9c539177
SSDEEP 1536:ip85f5oFmXXuhI3FTvtBjt6cUdmSu1Mn53u9EMZ/1B6h:BZvvjYn53A7b6h
TLSH
T17383F603F1E9C1D8F12F6D74B2A9B11FFA2030842A4947CB43E09A495FE93A45DE579B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dt_shmem.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dt_shmem.dll
Size 29KB
SHA256 4c2c7af7c10979815703ae81da7e8801227479ec49a53ddc0683d6d4dc4cdd00
MD5 9c4fa6c85a740e223ee3182fd8488b5a
SHA1 b025e2bab50ccf0f5d9a38dc56d6e7a9f1d058ed
SHA512 2beacbb69f6be29d8a40f98005704a082caf995f6041065e9812d736844c1c2a5e34a9424dd334f71e3489bd5b446cee59f74d220c46521314eabfbf2b16c876
SSDEEP 768:U3B/EDqu/LbeATa0uFoCnUiDefslah9HC7x:Ux/iqufeAx+bSfNh9ax
TLSH
T189D25D421BBD30BAFAE7C671C9924306D5B2B6606332170E176543AB1F937E2722D71B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dt_socket.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dt_socket.dll
Size 24KB
SHA256 03090eed8fecc57a717f9b8b90e63cdfe5fdacae857f4432007266a7adbaab7c
MD5 b1afa5ba110d55ea89e59cda9ea22d06
SHA1 6ae2fb0a770e2a00694d518050f894a12e5bf378
SHA512 a57747fe8b21a7345636bc91b560c9d2fec5b45356975aca9939940045c5799f95b15506680764f15255dc0975b5acdbd624df6e1a0a40e35f039183f6992f3b
SSDEEP 384:atlT0TmZU06hKYxU1relY+LweZY7p+nYPLr7KF:8Y8UfhHxU1qC+LFYF+C7KF
TLSH
T1A8B22B861B38717AF593C570CBA39E52D8B132A087A2515F76B48A9D0ED6391333DB0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deployJava1.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dtplugin\deployJava1.dll
Size 989KB
SHA256 8b90bd96ee62daf37a1bb4b803bee0755c894944e4a41f810e3b74e8a0a3802a
MD5 fa737f0eb9b5915d681affcad6a5e28b
SHA1 acec5ab33ed56c5c9dde20273c93b53c8f9a7a7d
SHA512 cb1ff5140172556569bf886c858ba52c8761582810e3a143a7ba701963e72bb81004abf6026fb06b804b413ae1d94c14537b0c8ffe94cecb6635d19067b9af5e
SSDEEP 12288:zVKkXDUPauT37kSdWltEI31uHv6eK5z6a4E0wvyfvChbOso6CyQJ1ed:z4kXiauT3gSd0ETvI5ma8S
TLSH
T18325E65377E8425BF0B7D73299B98231EAB27C5D5B3487CF2260225D1F32AD08979722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

npdeployJava1.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dtplugin\npdeployJava1.dll
Size 1.1MB
SHA256 b3c10bf5498457a76bba3b413d0c54b03a4915e5df72576f976e1ad6d2450012
MD5 cb63e262f0850bd8c3e282d6cd5493db
SHA1 aca74def7a2cd033f18fc938ceb2feef2de8cb8c
SHA512 8e3ad8c193a5b4ab22292893931dc6c8acd1f255825366fdd7390f3d8b71c5a51793103aeacecfb4c92565b559f37aec25f8b09abb8289b2012a79b0c5e8cb3b
SSDEEP 12288:KNKZWIlDtEhsO25wovWaqpUUliqPhhFFgppxvwfgO7svChbOso6CyQJue5:KNmWIkh2woGpUUlBhhUHl
TLSH
T1DF351A1373EC4267F0B7D73289B68671E9B27C4E5A34D64F2260125D2F33A608A79727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eula.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\eula.dll
Size 133KB
SHA256 ce253c68a41d3567034f486d7bc9fad9d4c92edb99e91d551a7123bcc0e5a0e7
MD5 94f6be7c545cc08032b6d9cdecc51ccb
SHA1 4adbe10d110efb17e3ee6713e92a3e3f9bfe8d8f
SHA512 803a882ff304742f12866617269e78b3fdf220b49bcfad29629b1cfef93377a54b54a902a191cc8d85402251a06589037c74d4933268c110497f8510c531a180
SSDEEP 1536:T6mmYoEgRiok8mifpYpiGe5U62WKsZIU/7keQwumbuuPuO/Zq0t11VTB2z7a:Wip83YH7KIA2wxKuWO/c0t11f2fa
TLSH
T1D9D3182273A8A195F1B7D234C9B1CB49DB72BC921E31834F3261731E5F76BA15D28362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontmanager.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\fontmanager.dll
Size 267KB
SHA256 ebc7d009c0bee5a45efa60b0e74c6926fb57e583d3c4e8614442dbaa14f9a874
MD5 84a04b93034abab9d3f1bf9579c0573d
SHA1 9fed686fd40ba50c407d1ab4e76da4dd717117b9
SHA512 7ff3e356e656d93cfbed3e7684917f6203222fcc9ead71970e19021937a546615ed32b530d48003b1de838c8881cdd00a1d4d64b4e6fffacdc7199173b0c5dbb
SSDEEP 6144:28ykFI4KbfXhRaUY4FGMReiD1EWO/H7JOe:BykF0X73tGSSp
TLSH
T169444AC2B65B4EB1FD6F813A447B8A1EA6313C598706C7CB53606BC91E2BBE455F9300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fxplugins.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\fxplugins.dll
Size 183KB
SHA256 bcd0598cc4d26f93e072be401b47663985733a1e9913d6f5d87395bab4a58e93
MD5 0a248b2be7ae671c4c9f2b8b9abbe918
SHA1 190a3534faafba52f64a0cc7e3ea0e393ce18a50
SHA512 379f874bcedd3214509291798961798bf6fb7cdf44613208331393e6ed9fcd852daffe228a311b90aa4f654886518e106646c2ab76ccdc86b72326fb667ea238
SSDEEP 3072:p1rZqKoOxj0GHTaqV9NIl30UtMgJh3XRus58O/x/ZDHpNC:sKbxJTaqV9iWRgX0O/xxC
TLSH
T1450429CA777444AEE12B8139CA16DB17E7B278950F24930B3774937E2F33361691932A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

glass.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\glass.dll
Size 250KB
SHA256 0d69c26ce8b1abac19cb9b226e79455f1edbca235a3384cd3a671f158f209e2d
MD5 9d16601f2b98eb7cec5ecaf44664850d
SHA1 ffc9666a08bae5fa2ee5ee55be1523a7377bb328
SHA512 2fa9ca86bb407ad6952309083682252634ff283dd6f17bd49c9cb19fa8460260a67af284a42987714711326881e4529ba31050c856aa635093e6fb96e1f2ff76
SSDEEP 3072:hv6WRlGZeR3oaSrSOknDnLHMWU8h1eo/wbZ+6eQQg7xtxijO/TMtbbW:HYaSGveo/wbZsQQSMO/TMtO
TLSH
T14844072A73988C92E073907E9965C346F6B378641B71C7CB2AB0437E5F339E5693A701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

glib-lite.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\glib-lite.dll
Size 445KB
SHA256 3dee62dad9ec1e7e3fac1495519da1c2f0bba7e655bfaa98e5dd9f0d3e3463c0
MD5 133c6c027522dc5d0aa8c6c32a151259
SHA1 25b95124b429b44470110615179be58569b77395
SHA512 e9e078e724d7d07cf1ec7d9622601f02367d6c6f20b9f0d2d7de4af56da6e498df7d34fd69563f9fb01d9631edc80f0c87b258993ab2eeae64ef11b18a7748d0
SSDEEP 12288:YX3WTkFNh/pwjflTRVvQLf9Qd6swIp5WhkNbB14:YXGwFNhuddpcQdmImSBy
TLSH
T17AA44B89779054F7ED9AE13998D281D6C2B1755A03A3730E3FA0A79F6B133632509F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gstreamer-lite.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\gstreamer-lite.dll
Size 607KB
SHA256 48c1fff8414681a5b4e26aa6a790c30d0851c5b097f8c1e1330e2aa6d5f697bc
MD5 907ea1847d6a585884f750818d7e9b4d
SHA1 8ff56d205bb34c6322e6d7a2195da83cb8e3bc5c
SHA512 0c0b5eec023099274ae65de05d8a7c6160e62f4664a86c7cf35a7bda3a067d2ea701965237bc4b2294a8d9ace89fa493cb9c98c598168cedd015ed450d5f4914
SSDEEP 12288:z3N6CF6Ds8/F8+h5xdq7DC5r5U28ZdHIusaYL:z3N6CFg7xdEvDHqlL
TLSH
T1B6D45C9A63F014B8F5BB8235CA529B5BE7F2744412749B0A37B087891F23731672F729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hprof.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\hprof.dll
Size 154KB
SHA256 b938282cf0611875143cf1acc63fa3ee639e89c08dd6c0fe2efc32f2d258f52d
MD5 f55671e307bc086de1decc97200a5a0a
SHA1 e5eda732f915417b7bf642464f56f640b2117f2a
SHA512 3735c1f7496338d8d3ab78a1d4c9b93e78256fc9ce66792eaf158f08c05a6363dc1b44ca863fe965d41a909bd4c364d4b163c8990044a945be7c9199a1f41a46
SSDEEP 3072:cbNS9CFQPCsGu7xvqHYX+4jX0hedDAkaZLB//3vJBjg/:cbNS98SxGulvh+4j0hAmvvJBY
TLSH
T1DAF36C6A7A7910F5C7B7C174C892062BE5B130541B304BFFA79C8BA61B337E8623E255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

instrument.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\instrument.dll
Size 120KB
SHA256 2e9bfb362b1bbcc079bc138fa0bd255f5a623538bd97ef94aaf7d168c0e3471d
MD5 d3bb1dbdcbc9a380797a908c3f2d7216
SHA1 5bfd3d772a2cf720ba385930f9f0332bb12f2746
SHA512 44247c5721677ce806c28c99eb214ed21b01786b8400a4b4e3e792631b2723bfe8a6e29a0a2941932b1516c6e0123ea67585b0abf11e9cc1bdb0782aae25cb40
SSDEEP 3072:vIhc7PGYyWbnz+TBOsuLGlTBfkjDjh8l0N:vIe7F57z+ToFLGlTBYN
TLSH
T196C38F8A33A411B9EDE39138C5F69917D3B2B8121334E74F23B886960F63751BD2D3A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

j2pcsc.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\j2pcsc.dll
Size 18KB
SHA256 bd8d9aced5f039dc09fb6962bdd5a023d86a580ebce3bc71f06915754c33ed79
MD5 b1e0fe3d691d595c9ddad9623599386a
SHA1 9d396dc2dcf40dad178d4a154c99b9342526b400
SHA512 a5b6d4a16b6ac04ec0aacb8fdb56567537ccab3e039a7c04131c9a97c45ab7c50b10db893d909b06efedd9b80904650918982c5e99297268356dbbd068232562
SSDEEP 384:BANvJalGYd9zE1Rnx7pIlT9CBwtyk6UdLwnYPLr77UogI:B4vJAGYdi1dx7pew6g2LwC77UrI
TLSH
T147825B861B6911B3FEBBCA38DEA78202E973F95067556A9F007583451F93BD0273831E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

j2pkcs11.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\j2pkcs11.dll
Size 62KB
SHA256 3a698fadaa6376dcb05b8f5e1d2bd5088842ca2fe48781ce2fa4b1f51f197aba
MD5 c3b0b352d63b2b86b0e717a95026d400
SHA1 b4d5076c50c8f67e1227dd1e3c9e8c34c22012fd
SHA512 132fc3f6b34e37f611801512d93df9e159ec80ddbe0ec8c95c6d633b452345e52ebcf7424d2736745af23607749d69fedf6705a550885ee572e80aa141005d85
SSDEEP 1536:gixSsZj209BNvIS8oXORbZT9SxnDy4/r0b19r7xn1bTPUAhU9hOBAnWgFgUfnu9d:fX9BNvI9oXwRg+22
TLSH
T12C53094F13681059F8B7527ED5225903C6F2B8992252A35F13D8CB4FB3EBEA3621E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jaas_nt.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jaas_nt.dll
Size 20KB
SHA256 c1a880cb336c0cb1e39213a58f58726f419e54dc0990326b0074813c16aef8d4
MD5 649632ac140ac3400ca72413ba90e826
SHA1 3631d096e49404e087aa10d309b7b8a5c026c2d1
SHA512 defe51b2b377e9f6105bef5a70cec282cf81eb555f80e3eaa3cb00eacc8d0f25cae567b106ca4fc58ac9b9f55d1af7db649ce9f59b6d6e7e4a5ff81f38fd30d5
SSDEEP 384:nW4MtZTQVo8z7h4omjkzTsouUqHu6hBOq64KnYPLr7XYzi:WXZGo8z7h4oskzTKlxKC7XSi
TLSH
T1DE926BCB27165157FEE38AB491F6C6239CB1B5D05335892F00B4C2940FD2B92339EA8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jabswitch.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jabswitch.exe
Size 33KB
SHA256 4219fdd8ea118be869a497a0f777488af516ff087d34b76bed3868d6e8f457c4
MD5 1a496db0e43e0fe366c7286314b65e05
SHA1 685293fdc6362e0f69236523326b29e33133381e
SHA512 895ed08ffa2b224df31b33dc6a363a016ed6dc3251085e04c48897db7ad2dc9b5a5e3f31955d594b00069c981b4e8eb2dce2f2983eab7786b291cd47f68b12aa
SSDEEP 384:xCcoo7fpevgGRifnK0X4mVXePGwbuOMW5aEL7G2veQUJGm+nN3F/08sufS+jYnYA:zTprGznRXb9HpVU7+nZF//s0FjYC7M
TLSH
T11CE27CA717F920D6F4A2C470C6A19653EEB1FC92633196CF89A006461FB17D0BF38B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java-rmi.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java-rmi.exe
Size 15KB
SHA256 0ca356ea7a0f04094b2d8e2e35748386dcef67a7c216457f89ac8231626ad550
MD5 2520e902aedd041f580ea629bc48ae61
SHA1 75ecfbf01b12ff56be99e81e396d50a7dd7b95d3
SHA512 441612643e67e0fd24504cca66a95114ba6aa8f77744a7bef641baec36ba5672450bbb1c5b9885694566bd1934ec07870c7c252bf7d5e58756111661bcf1f5fe
SSDEEP 192:2mNKL2cwsTbzXIKEfoJclMee3nYe+PjPriT0fwEia1tk:FueGz4KNJAMee3nYPLr7BiH
TLSH
T19A625C820E746491FA9748F197A5EB0AEC72B7E09F95418E70BD82952F91B81370F22D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java.exe
Size 201KB
SHA256 26d7b2c990c1d12829e3105ac9b1120d834839c49c08caa4c05ee424721e5639
MD5 f3e13221f477836ba6a7bdfe656f5749
SHA1 e69bffb8015f7f6d2593a357141a153208de53a0
SHA512 41e722be527fcb81f39d7e9ffd62dbd560c7d6f90528aee9037d7489d0bd177175e440e789f858f17d9e5595444c5fb8516a646642813465451c3eafac33c3e4
SSDEEP 3072:IMt+i+5aUC/aDwIHyuRp4C3TXqpMjk8TvxhmFGyQ56wTBfYDjnXZxljZqMNeaKH:lZ++/KToC3TXx4kxhmFGjwwTBWxXvvG
TLSH
T14014AE92739020F1E9A79275C5A58912E7B27C9F07B0830F13A877761F733A1781E75A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java_crw_demo.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java_crw_demo.dll
Size 29KB
SHA256 fd0213cbee471fb42128e407b77050eb3bbd4d3e09ee04fef9db68b3d134f5ad
MD5 a8857dad57402f03cb0f3e9a5eca2fbe
SHA1 5ce4b6fa32205d98e59d76483eadfdf42816a125
SHA512 aad283a5910c6241cf31f68040e82c9f6a335442d34047c5b9145020e0e90e9e7dfd64b7cf9ebab99cbcfc71e298b04de21fddf4a1cde4ee04a6793acac4f354
SSDEEP 384:FfnpNch5aX2kbY0VYUdC9RkEtUl/aSvLhMzZa+1rmUd4IKcanAlgk6/8QxnYPLrM:fNAYX7bzYUknm2ZlmUdo8uDxC7g
TLSH
T117D27B12177124B1F4E3D83CD292871FE9B1B5855AA197DF01F28E9ACF43B81726C31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javacpl.cpl

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javacpl.cpl
Size 166KB
SHA256 195957a4ec7b249c714a4b99d2c01b50ef33a1a1c98a7e6a9ae6bc6361079794
MD5 a3a2881dff896f65bdf0672a1664c4d4
SHA1 4b40a979d753d8f294a21dae4e8104439ae1ae7b
SHA512 281911cd24fcc59ae0464b2d3ebc8b0654573a55c491efb29da6b40fbc8927351436507de2a5157fc3e80c428739adb4c7095ff956cbc0a24cd346267a590339
SSDEEP 3072:y3zztoyYsUA5Mick/ODuxROv9TPfPPfiKojIQjvetu6hlPzSo/jZqMNIy:y3zzt3UAm0TxRi9TPfPPKKojIQr+ZTdv
TLSH
T141F37CA2725450F6D467D276C8A78D11E7B23C8E9770838F12A8761A1F333E16D3E726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javacpl.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javacpl.exe
Size 75KB
SHA256 bb80d933bf5c60ee911dc22fcc7d715e4461bc72fd2061da1c74d270c1f73528
MD5 f49218872d803801934638f44274000d
SHA1 871d70960ff7db8c6d11fad68d0a325d7fc540f1
SHA512 94432d6bc93aad68ea99c52a9bcb8350f769f3ac8b823ba298c20ff39e8fa3b533ef31e55afeb12e839fd20cf33c9d74642ce922e2805ca7323c88a4f06d986d
SSDEEP 1536:RoqEqfsnar1PGoTLrDJmZO42VK7qjh3rmKPNY/y6:eqEqdr19fJmZO4GtjZqMNY/y6
TLSH
T126731BA1F258A0C5D567C9B3C96ECD2294B27C9D9BA046CF21B9721D1FB33E1007DB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx_font.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_font.dll
Size 73KB
SHA256 23e7c7d52933f9a3856f28070e283ad536976ce0cbf06600175ab1eb86c9d15b
MD5 62b6858186ce0dcfcd9b685d4090607c
SHA1 23f67a8e2783c044e8178f124be1c34ba854fa6a
SHA512 bd9988c01a0635f94e96685c5029681695a0df04c5e449be75e197a9da50c85cef79a0f1af2dd42ecaa39bd785e591d3817e2b2729a2f8e8819764293ed3966e
SSDEEP 768:Jatyl8Vm77cdIJ0z/cG2LLzFuhARuNjcjGlFOP/RIIp64RrMf3LcedaNEwRO/jna:hl8VNTuyQRIIpq/yNtRO/jn54tIpEms
TLSH
T180733A1BA7E11053E45790BCA761C383E2333A64572546DF96F883A79BD7EF05A3A302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx_font_t2k.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_font_t2k.dll
Size 526KB
SHA256 7cb155cd02afe8020ea958841bbff831d6dcecd465e91ee766500620521fb9d2
MD5 271c881d2ffeb455a478d2376ca34c9e
SHA1 bb705c4af24fe615d7c0259d6ec8c3327bf3afa2
SHA512 7bf069d1154034aa20079ecd0ce275a7d2252b7eb2ef76124eb93dade5a0ffe4f66fb20365919d85ec725ab9243f4ca233ed1ef466dc100e94ed1e56b6f9095c
SSDEEP 12288:z0alycOxGXMcmv2OZdB3P0JL+/GSe0hey:ga3zmr3RPKL+/2y
TLSH
T1E0B47C85AB6B07A5D86B813D44B7494BE77D388847558BDF73A21BC81E2BFD01DBA300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx_iio.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_iio.dll
Size 133KB
SHA256 57454c33bc533fa038635eaeb5e7d2ee7e7c9090884485d146810960e47be11e
MD5 7c561ea070de7d1d9d1aa236ebe4a2a2
SHA1 628250b5008f4469f454a7498fdf26a76843462f
SHA512 ad13fc455b9c172fc8abd544c51639712974694064e50aef6549b312bd8a25292fbc9fc2731e87a56feff45d05ae63c684bfd3a5a951c95458d2c3e1110d579b
SSDEEP 3072:y3O7506OHUEAp2QNgQjm4HyI0na8J9l+2EaAvHEE+BEZqz5ooDxGNt/:ywgUEAp2agEm9IKdJ9lVEaAvHEE+BEZL
TLSH
T170D33A427A7424D8CAEAC47D87EAC2C6DBA130851B5897FF519083923B13ED93D7E718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jawt.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jawt.dll
Size 14KB
SHA256 6feb5b3df1f15227bb5d308dade3672d6f7e9f9f4403c23caa34bb36bdb84f7d
MD5 249a2b3acce5b62086cb0c1c949c4889
SHA1 a459c50fb87d1eb02dd2636eda9f0131f07fc2cf
SHA512 d77a93ae301aa8fc613f407ff061f8a3051e2486e87c7c013eb0794d512c9ea86233349bb27ec78fd58cfd33850f11ab0a15c870ca85d293376489bd41094679
SSDEEP 192:g2UqCTJfVU+YB3X96hd7nYe+PjPriT0fwo/WoV:VCTJfVtY9N6D7nYPLr79V
TLSH
T1E3523D865F2954A7FBDBCD7096EDD20AFC727AD0ABA5856F00BA41510EC2BA0371C31C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdwp.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jdwp.dll
Size 196KB
SHA256 16ae6fa97b099fd87db19fe8d2f12a16c847a217e87bab6476d92587ad01933a
MD5 4c5058699eb4f437f7ce6c0a75e88199
SHA1 005f6bea247a1841c97a1892fbe919beedc4d053
SHA512 59b5300e72bcbdba63dbdac268d01e0077164d82a94d2ca190bc3910f09e1eccfcb0172b92872a3e4ea61737e4ab99ee35ff583be5c6f589e80c6a4533cf0ad0
SSDEEP 3072:/g+xhH0WOAiGjrKahY4w+QP3p514cfm9QEtXQ37gkFj4hFZeQcAU5llZTAzcNydj:hr6hF+m3p34qEt7t8ZpKjdh
TLSH
T11B143AAD32B800B5E99B907ACAE19217CEF270951F75571E1BA483720F33761F90DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfr.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfr.dll
Size 26KB
SHA256 f92a630f80bdee6760ec822777fff2f02107fdfe6775adacf1df0249207a3f27
MD5 856e7bdeb0f766723f927c71427875b9
SHA1 0616d4a819bb5f3a45252beaab3d86f426f03487
SHA512 79df0cae67aede7b5e7394d10d180292a11c1de7b6354f04a91cc9b78c86fe9caec6191ee7d9b474eb040d105b3a9178f0b2f9dd7bbe3225572786065c79528f
SSDEEP 384:R7jd55nSWIHCpYaNHA4epAoJLMKtrwUTqXr1Tq2Yk72kxS/k6YqnbHJnYPLr7IsF:R7jPFnIgYsgdsErVqEbk4IqbHJC7dB
TLSH
T1D3C24BBF63A2509BF897907CC250CA0BEC7171215727862F56B9878A1FC7F91271D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfxmedia.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfxmedia.dll
Size 135KB
SHA256 a6d925c88809e24d85cb86023cca259fbef81387bb6625de53741286c589672d
MD5 f839a5b9994ea8648b3e66c833de7d81
SHA1 c230fcd9a7508dacfd04c8b90f5d0e129e47bdaf
SHA512 65703625ac6621815ed0bfbfd415e7d1e79cae5de9dedd24a53f320c02f32783f9640689c905760667923e6d723d530386c74487e1ac0e04dcc6d5f47d77b1cc
SSDEEP 3072:AQV4bl8f+ONXENzIlSYp/7VTNmanAjUO/vRXy7p:y6b4YpNNmanZO/vRXk
TLSH
T16FD3281A772880A6E027C27CC9A68347E7B278681F7187CF6771A31D5F73AD05D39A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfxwebkit.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfxwebkit.dll
Size 19.8MB
SHA256 5678716d0cb2d2cf2edf44077455ffc8ddfe2b48f4dc36d9c2066add58a65468
MD5 b14a883241cab264cfeb29c5d0ae5ba5
SHA1 5f86143e3e19f75e0a0fd6169ff08d8f9a7c356d
SHA512 f368f29f3a9f72e6a94a8eb6d45150596398e1fbe9d0b759bf7a50584e2f7f2c84d3a85616af1a9c53fa8d4b4db157560c246b9cb251b6ebdda65f2002e53f81
SSDEEP 393216:j+wwp+sy8PRXwoA41qtePIJ7TsBCTDUzOLhh1M11wZJkq0TlY:jTWayY
TLSH
T1052739AA5ABC80A8D176C13C8EC68297E6F238211B7057CF3266561E2F73DE5057DE31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jjs.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jjs.exe
Size 15KB
SHA256 326d3b02e3edddc9b51a11c3b62bfb79dd60441cc4faa2afbaa60877b4e9de21
MD5 a8215d3539ff54b3abbc304fa51ba3b4
SHA1 ef4f4194c50e36cc6673b96a865e11a5254fb226
SHA512 d9154282943d6a73f4da7e472a89fc16aaa590b7c82c5a163e52908cb499fc9bd12ca31eede94586516db2e60d42ac5f7a828d6cec5b7cec656dcb351b13d57d
SSDEEP 192:29XNyTHT/8YzVG3pIKEfosXYWeejnYe+PjPriT0fwy0IIt:EXiFzoeKNwYWeejnYPLr7VEt
TLSH
T16E624C864E7460D6FB9388F1A7A1DB06EC71F7E09F96424E70BD82552F81B81271F12D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jli.dll
Size 170KB
SHA256 d35e289838fb91c55107c76d8224e4c561ac0d37627b19775ae289f551387272
MD5 ede8a32e77975127f2f010c14d5d0153
SHA1 f6b54e9f0b07c72d281f6226fe23e7256d5e8d58
SHA512 34d9aa38503b4c333bf8fe72587df18be71d842c51711a3495539e69a1b94103256ed429128ca76520154d7503c3b4664c1c27b9e7de4b1aae6173107ca9e97b
SSDEEP 3072:pJh/KlL8g6yncfQbyrbHoPT1E2dxZrWTg5wNlqYYcSFymbTBfY928bI1N5OkcgO:pvSx8gLcIqbIPSOZqTXlqYYcyHbTBbBm
TLSH
T17004AE8633E420F5E9A39239C5A18607F7B274570370D34F43A487B61F637A2B92E796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jp2iexp.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2iexp.dll
Size 283KB
SHA256 db84ba217329dc2131b4082e6b589f29c099a116f7bff49db27ca22aa529cb9e
MD5 c5767eae1e5fabaf111456b92969487c
SHA1 7bce3ac298f3a0fb3965fab8efc46c7aef572465
SHA512 b54d5a59cc09cbeae9326afe08734fc5f612c9ac1c3caccd0d2f542c9c49c796db2a12c911e61896714dafb8cf28fbe41f5c9baf551f534335de7a77729fb83e
SSDEEP 6144:Mpqgz5VRgvJka7SLlx6w48TRBmO/SHfFv4wJS81R:Mpqgz5VRgv2a7+vyR
TLSH
T128544B9673987CA5E863D13AC886C646F2B374804B22D3CF9665436E1F776E0AD3DB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jp2native.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2native.dll
Size 19KB
SHA256 38d2ec45e685d96b21e0ae9951719222b008baa6617a17a39b46825831a2f8f3
MD5 d22b8fd4273cb2870d6359487d887036
SHA1 80141f3bab469d9796aece9f8cb38b8b9b822603
SHA512 f377496e1d4635e16ca490eb9bc334574c19ace212d04029e2ee48c075fc4b0ed01d78188fc973c5725c9416d68b0f96242e3af508974ae8d006fc046932a573
SSDEEP 384:UTPtQJbR0kgoCQjsn6F58Q499UUthnYPLr7pLen9:UTPtQJbR0aLuhC7di
TLSH
T1D99239620B289453F9F7A674C1E99A06D930B2A06710A2CF06F882513FD7FE3273D25C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jp2ssv.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2ssv.dll
Size 207KB
SHA256 49e8eec6a8d9c5fea7dbbca6b049041606c1249ae93e2c31a9d3024feeb9cc51
MD5 6df8f8634c7e5c0b119b71a40d2acc00
SHA1 0ec8a8ec739b22a42667d18e483027efa0b8021b
SHA512 a02fcb31fdf557670eda30a32a3b93a79fcabafbdd28698af21ecdecfcaf2962ce0de5104e82c88213b8d9c1d91f9807377d10be5f7ab47e1099cf4be519e2a7
SSDEEP 6144:6VoOeWf4UA/fbQQbmjrrT2L/AWep0tQ/jFW250UL:6GRWfqvXKfJ6y
TLSH
T1C7248D4972AC20F5E497D239C9938A52F2B27846473583DFA3A846791F337F0A63D712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jpeg.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jpeg.dll
Size 181KB
SHA256 a150da0043f3739cdb54c8e51d664d314f54eddf9f13cee18e5bec1d3eec74cd
MD5 ddb7b5da3cdad8606e4e840883d6e7a5
SHA1 1f6472f3cd45c647b82fd8a4cd506509963960f6
SHA512 3726bbb308afaf042741c6f7eeace5a18ec98e1cfc4105c055963e58be75d9d1b6cd01909fcf2bc89a0fa9e789a85b66d4a2e45ead6f9316d4d993c7b1920f12
SSDEEP 3072:JUQRJIPvBBZlviAemwgWr/kfOij0biYIqJloXtQXan6CBbRlpnI1iK36VdNX:e8JIPvBBDamw5rMfpjQeqJloXtcCBbiy
TLSH
T11D04395677B410A8E5BBC0BC86AA9A07D6A270500750ABDF439083B32F57EE53E3F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsdt.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsdt.dll
Size 18KB
SHA256 356e766557e00eabbcb4d49d23aeb001604a8b52b5b5fc037261adadfd57d3b8
MD5 43ca3385921eaaa797735fc3d57a195f
SHA1 b50f52a73209af1914dda32c52516ce0c98c7be4
SHA512 00664f20a27d43909b948bbbb626c60fb38fe07bc5239b573dd59ea326f5b39affc5482e2beac464ec85d7c10a397d5eaed27f739652afedc66be79f67441cda
SSDEEP 384:lGfP60j6bZ2rfY4XHBhmcnyihSq+Ua6AYxQnYPLr7t+6:cS6CORHBhmre2YxQC7/
TLSH
T1FA825D475BB8A023FDE78875C2A69316CDB2B56093A182BF05F583A60F53BD1271C62C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsound.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsound.dll
Size 34KB
SHA256 5434dff18247d1fcbc848118489f858b07c0f7edf4fbb0cb418fd31281bd8f94
MD5 8440e22eed0b0d23c6448b7462a3f5b1
SHA1 d47f2179b2606b9e5c90909fc2424ec96b5d64fa
SHA512 ef6bba5512e514a7d8fd919fe63c161f9ad3c46d00d8065980896f00b29d4b4e3f4f2d8be366ee76c28d749fc6ae11c36227225497d6c0750ea0666218c2c813
SSDEEP 384:HUf2esSw2/uXqQm3He+W97w3VWak8BrkuGLvtUeCsb7il5ICxQZ0k681yE1EVnYQ:HVea88w3VzZBr/UjCL5IH0FE1EVC78Ws
TLSH
T141F29ED76712902AF62FF2B6D612D60BD8323CA053919B9F4AA043F61FD7361631DB06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsoundds.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsoundds.dll
Size 30KB
SHA256 9708de28bdf8098527b6c029ea448bc0989e47ad8dbba1b0580f5737645295bc
MD5 3044662faef0cbfdb1799fa2eaf5efd6
SHA1 667e7e91de9a113f35cdfaf8071375d1ef684fd7
SHA512 40b0b148cb4d3c3792044d9c7b661789d9576179fd3e3d814bc986954a9b2cd0135e09c157ed937c88d45354a8231ebada530401f15428fbafc86f710184a052
SSDEEP 384:onG+gpHO6ATxsASKhR5FNH83gD3TVDDQ48Nnu1vtHwneIarp6UMionYPLr7lCea:onRg81sASwCQTTAQlvzrjMioC72
TLSH
T182E22ADAB755FAA7E4CB987897C3B323C2313A44435A0FCE57658F590F4A2035606B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kcms.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\kcms.dll
Size 215KB
SHA256 0588e40307a498df5bbd0596212ed264a179415663bf51e7114dd3772ba30f85
MD5 b08b8d197bb0e81474e3ae571c82338e
SHA1 579ca056cf6719991e043f0fc1b5d32e639f5921
SHA512 1e1c5026a23cd8e1d2fe5362f19735aba4fd14fcc0f628a71b1ef5bf99db2970dd9d132872475cc0279ba360d43caafee21acbfc2b54e7f6248de2c8cb85b51a
SSDEEP 3072:Vblbk9LyUR9PUbjugVs+JtZPZJ8huzhuvtEnbsjE0XBdbeSrbUgBWB/w:V56Lya9PUbjxsstZPIzmnIjE0XBdRD9
TLSH
T17A246B0AF2942EF9D5A780788A566253FB7278662734D34BCBF04D561F47BB16A0F302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keytool.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\keytool.exe
Size 15KB
SHA256 f374d5c3d59bb4d0967c355c0a6a8e723072481925ea3d8b536694affed58ff7
MD5 e90da043972903bbbc17c0266cbdcb2c
SHA1 50e57c7aec913c9847e07e9ca831bfa9d23760ff
SHA512 99d65e9f8e068c29c19005155fca17b5666bfd75a576eda39724df77262c5d674989f74147d9b11c89989535e62d6b4352e45ec5235bd7750e196483c4d2d742
SSDEEP 192:2CfFyTnT5u8z2jZIIKEfoGWeennYe+PjPriT0fwYdNQ:ffqlz8KNGWeennYPLr7Fc
TLSH
T176624C820B7460D6FB9788F0A7E1DB4AED71B7E09EA5428E70BD82552F81B81371B11D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kinit.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\kinit.exe
Size 15KB
SHA256 5682b4b2b6c86a439382c3406615e62bbcc9ba1665ac682a1db2fa338fd918de
MD5 9cbd0fcba87760b7f7ff1ea4581a4997
SHA1 8bbcab26fac38983972d5c506740a51cedc20670
SHA512 24e5c0ce7a206f8a735b34e3ea4f0ba5455c6a06928f10b48e0167e970bc847bc149d33486494a32953cda0cabda3538e40ccf51468aab05f5b9c4ee64b32970
SSDEEP 192:2ZaH9yTnT5qOzQjZIIKEfoGb6eeMYnYe+PjPriT0fwjpSF:pHSjzyKNGb6eennYPLr73F
TLSH
T1EE625C830A7960E5FB9788F0A7E1DB09ED75B7E09FAA414F70BD82552F81B81270B11C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

klist.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\klist.exe
Size 15KB
SHA256 ddcb5eab8f50382401d653ca55fbf4161911ca84b4ed8b0f3e0ad1328df9931d
MD5 5d94deea8e16c6e00c45fc4188dab209
SHA1 4689d5f8a8adddd36a2d9cfdbe103d21e6f8bdf3
SHA512 ef31f33ef76300864058746ee568581505fb2300c938592b38f25bacd6d3387f9bc5dd6b01a0db5ed7200fa2c4000448552878e532bc963b35db90e194f39580
SSDEEP 192:2HaH9yTnT5q0zwjZIIKEfoy0eeMInYe+PjPriT0fwoA1uhaD:DHSJzSKNy0eeTnYPLr7QD
TLSH
T157625B920A7460D1FB9388F0A7F1DB4AED71B7E09BA6465E70BD82552F81B81370B11D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ktab.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ktab.exe
Size 15KB
SHA256 e2cb9b6ba58a5561e4e4c1ee4a492d6fa02fdaa23f756b59fb0aa90c4a49f4e3
MD5 68e5afc53b78733b46e3bea978f164bf
SHA1 e1f0a5aa01a0cda62635d4ac361368a44899bcdd
SHA512 14f565579632f63123502b64065f391c47b0c6598373377be09cd3ceb7a80d2bacc9c5827aab63ef1091d9c9a42c60706595af7bc9e9da9b7aa27d9180bc0250
SSDEEP 192:28aH9yTnT5oDz/jZIIKEfoUmeeRnYe+PjPriT0fwpuuq23k:yHSAzVKNUmeeRnYPLr78k
TLSH
T1C7624B830B7464D1FA9788F1A7F1DB4AED71B7A09F96424E70BD82952F81B81270F11D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lcms.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\lcms.dll
Size 228KB
SHA256 e017016d966edda3e09d78dd68b349f2478ae944208634adb6c3480adfb4bd4d
MD5 79dbdf92c328e1f4ecd2ece82c93264d
SHA1 2a5191ffade771e84a634b308296f79e01ae12c2
SHA512 eaf06521774a2d5cbe1af66dbfceb742b638e9a911ef4fabd18f2afa0abc294b2b07d96e993df82d1ac0a201611014edd0ada23c4a615653ca81e5ea03ad6b2c
SSDEEP 3072:kUKAoH6l8BwaZfYMR1FESAZ9EI7ODA8udXgmC1TAh68IRLRdDaJpbQ7Za:kUj86l8+X9EI7OuF/iA08qLfaJpf
TLSH
T1BD346B82B26820F9D077A179D5926017EAF130111321A2DFD3E54FB92F27BE6693F742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

management.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\management.dll
Size 36KB
SHA256 1b067978dfc615e7512216dda00d54621e9f335ecba7dc267d7f1d632936566f
MD5 aaa5d109c6a3970f71392b5e42bad6ca
SHA1 4159d867c635d1eb369f185313e82c8d2ffe6c64
SHA512 28cd74ca8fc4fd791e57738f15c77f4185f86fb90524e75bd12fb3b7dedc2ed1af706af9f103f58ab7c8e97f5054b51d87983c2762cfe752a1101f5611ce6249
SSDEEP 768:vIJvrVqdgJOQ2/ww7XD/GDfxkZ7YOSoC/C7UmB:W1OLGDJkZc3FyJ
TLSH
T1E7F21A13772D6156F5DFB076A0510233C9B2B4C56B91934E04B4CB695BEBEF2B33822A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mlib_image.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\mlib_image.dll
Size 638KB
SHA256 c6af6349ceba0fd2b08c4f60f7ef257f40c802b6ec697fc1122894283f41541e
MD5 4601eee1e2f4b9aef8f941a1d05b79d7
SHA1 aa4466045b65a2d7761e48f6ea7958a1e5dcf481
SHA512 46d51cfb7336828a0c0c14d423921e276475cb298e2d35bfaa4ec47000e77db32b72ec5da369b0c6e312c558234830cba4b867e84b0279829b21a95fe598acc7
SSDEEP 12288:YH13IxR4bzpA3RD9gvl+NEnVIx/ZJtsAhWyd+6KgVBr6rxi+kxI:jxR4bzpA3B9OxIx/ZJt5vd+6DVBr6rxL
TLSH
T104D46C07F1A64BECD06E983446B83167FA50321807185677CF629E692B39F61FDEB306
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\net.dll
Size 92KB
SHA256 6f230ca8eea5f6ed768db850563d4038ae12d9c78ec28ee2eb33184bbcc0ade2
MD5 98751c8908360f86d7f0655bd90bc0f2
SHA1 6ff2b3dd64d32be4ea21d21680a5a40cb8ac3ca2
SHA512 ef97f91b0830b8bf645ffbf184e37144c83dafda3e4c109b7e5a01022ef69beed85acd32741ba668ad8a44e99074a793e28975e21ebc5a6e3c9116b66bef12c9
SSDEEP 1536:MpYR61Ntq0p49agEgitz6scx1O1jaCX9e9q2nY8ijXI9Scwn0n+:f6Pt34ez6scx1O1RCq2Yt499wn0n+
TLSH
T1DE932818636820D5F8B7E1FCC6458217D7B270706620939F13A1CA9A6FEBBB17E19B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\nio.dll
Size 58KB
SHA256 7f1a54f4f22d0acf09c2f157187a3f4dd2dc53a60edf78941a33bf40bf0fd504
MD5 6d0892ff3079db69326c9a7149e3d252
SHA1 551dc409379688bce07f5d805c72407598e1371c
SHA512 c49f6d9b624689b25ba2bbff9a6da71c96cc788d48af3a3ba3a28d60f99f1b3fbc43d1cd527084e9040473a61b1760a68f1d1e55df70d4fd9a24baa5386562b0
SSDEEP 768:mZXFaYmFDGArFy7u4JFteu4AvBB9PaNn+VE7qT8o2QspwPcOVnM4Nygh8WCEBIyi:FYGMUqvBHCQapwErE8Wfv3eJMuD
TLSH
T1624319B2932494D7E46A7138425F478BE063F8105524672F413CC7569BAF7B33A3EB92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

npt.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\npt.dll
Size 18KB
SHA256 5cd9041a126738fa41668dbbe97c62c7498bfa942caeca8eeda5967eded1007c
MD5 a92a8d3601cd8980da444f2bb006e87b
SHA1 e061b4c68926c17d5c6656e2e89a16505cbb0184
SHA512 00fbfb7a6f4e650bf53de070cf7bd8d7d89c9b8544a34038920774b9c675baa5e40975aa86a087f9fffe809018dc8a2e09ebef2ef681ce00fafd8fed22ba0dae
SSDEEP 384:KIRHUVICdwSlkhONj0naK5ONe6DzbbnYPLr78:KIRkICdw+khOxsENbbC78
TLSH
T1B5824C991F2861BAFDE78435EEF5870AD931B6A09B91AAAF10B443450F937C1372D31C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

orbd.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\orbd.exe
Size 15KB
SHA256 24abbf5d53ea5ae7bb37312ca33da03fb8e82cd9e76488a5ee8577986f7d5247
MD5 0db1572f1b53adb54925aea8a1ec34f0
SHA1 7096dd1122714c2fa33fc7917a40693ba6e5fabe
SHA512 89f84f9a405612b79aac8f4ce74b583858f692b91e75830989cd3ae0470c6ca532faed068522f5b3fb7dc83fd9ea99667297a71cb8b3b41f8b82a9a0b5696678
SSDEEP 192:2AOvmg3lzzv9zLpIKEfopuee7nYe+PjPriT0fwz5mb3:Q7R9zaKNpuee7nYPLr784b3
TLSH
T165625B831E6470C2FA9788F193F6DB46EC75B3D09BA5415E70B882552F91B80270B22D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pack200.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\pack200.exe
Size 15KB
SHA256 ba59a4a536ed7f55be605efb8af7bc17c25c221212f90ee6d7e2291f4128e5b1
MD5 1f55ecf63f67f9672f116cb111e08bd5
SHA1 e06eeaa84b306a6d0f50f68b9f46e26df0668062
SHA512 94de128bb73784a913340265ba40bbe97824195f0999d67d7279bdd723fa9144cb4c249519cea80ee7f0af2874626ad68b68323b5d79387bf8b4c09454fe15d6
SSDEEP 192:2cnH9yTnTYYzzCIKEfod8yee2nYe+PjPriT0fw5fNiv:3HS9zRKNKyee2nYPLr7/
TLSH
T11B625C870A7860D6F75388F0A7E1EB05ED36B3E09F96425E70BDC2562F91B81670B11D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

npjp2.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\plugin2\npjp2.dll
Size 223KB
SHA256 f5e85d13081af51803d768e134cab7667065358193647063b72dc971fd85e5f0
MD5 c5bb20c40021c10b74525c7f88d70dde
SHA1 e2ea401c686b297cf963416e707cd4b28beb1c55
SHA512 8f493ece885cbad41b6f5941449a02809c8a54a3e8de5e1b50809634bb75eecea224b8e589c173942c406f44a24b3138ba758bd9935db6e95c063e5d64801856
SSDEEP 6144:LhjwcWQm0JtVIFCO/6ZCzbBBhxn0OqzedSaPp9JYXkiZDNKZ4mTyyJiKyQqJN:LRwzQm4DN
TLSH
T16B24F71232E86065F1B3A239C8A54681E6B67C919F35D7CF9354437E0F33AE09D79B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

policytool.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\policytool.exe
Size 16KB
SHA256 64f73ca3d02938ec83c4ddc875722986fc42b894fdd3d451e72726da06ae3559
MD5 86cac781c7d94a42bb76e43592846f43
SHA1 2a835246af22b9be4a224c53f42f613d39e3b427
SHA512 d7193a68923ee4c86612a7759f238d0c2ceb8caa31514a0d58830e1bcd18603e37badb750c7712a164d06dc6a836f3594b57a5cbb68f11dc8a575744a109f9db
SSDEEP 192:2dP1yTHTkUGz55IIKEfo5+eef+nYe+PjPriT0fwyRs:APaCzvKN5+eeWnYPLr7o
TLSH
T154724B860E766092F6534CB0E7E1DB85DDB9BAA37BC6515FF2B982451FC1B40234A13C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prism_common.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_common.dll
Size 56KB
SHA256 8460c620d7f9023bde0671377a0b92af5396f799d955840c3bf7d8d1a52d5197
MD5 c4770d6b1b41150085a73605fc9069ed
SHA1 bd6769d9d642dad224c3e94418bcffd9a28d4609
SHA512 11843a2433d954a8879f6041bae64d686460fc94fadbc1c72d44e6af4688ad2f9a18154a75c032682b004d015954379c557512b80943ee2109622bc740ef50ae
SSDEEP 1536:+5fo+9U8VQ7+WnxM2Rad9pIC57y7AGne8JqT:+m+9U8VQ7DxT89pg780qT
TLSH
T1EB432985F6EA80E9E12A98B5B150B11FF93334241BA188DF03E4155D5FA67C093FB62B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prism_d3d.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_d3d.dll
Size 162KB
SHA256 40dc50b9538c07eaf51f8d96b25b9d2bb07022d06c38fc29ca62294a5e0f9644
MD5 bf01fd179b69258bfc1253363d87016d
SHA1 6006ec9f3fcff897005e7a508d4ab87871be4ae2
SHA512 7c9936035c32d7233fa6ad2a4b58c9f874e1be5d00cf3c52a5cf422074a0abd1453a670b68b16e968db0b04f2b6cee4004d094228cbb48557a659d4f9ce0cfd5
SSDEEP 3072:Afn3tDKfdqGdVXvekF4uGF446Gtgmgrg5pJ+gQgxgeAeLnbnNnfBF7nZnznjIcmS:AfOdVF4uGX0aOlCLPLWG
TLSH
T129F3B50E72959836C00347394987A766F2B2BD661B469BCF72F0733C2FB63D099B5158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prism_es2.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_es2.dll
Size 47KB
SHA256 72b349e181e7650cbfc108d2135ce598a689e2711db98de57d2e89a9f0f10284
MD5 a4fd14c13d0f6edb35d9a64c0bb1fe23
SHA1 7e0ae104250cceb410d58d2d259c1d4630a400ee
SHA512 b128fde2a3808f98da7977dd816db40b7755d4b58bb07ed7e906af11bca0b6ca636a6dfd7d88fe0d2fa42321f83e6d872daabd63ce57bdba7495bcf8563f92eb
SSDEEP 768:Ru/imdZz2PBZvRdtjrv9hHzRzE55lmdltuYX8FuC7N:ReVdZziBJB/z655lmdlAYsFPN
TLSH
T1A323393E832A4066FA9750B6E9264607D571B4221729EFDF186CC3289FD7BF902BD740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prism_sw.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_sw.dll
Size 55KB
SHA256 32115e66573c933df3503cb045085c300d62e212eeff84e1c922b567a49ab491
MD5 7dd216a6c8c7daec52a815bc9bb962b7
SHA1 5ca4eb9db8682c910c6d19f1cfb1bf05aac3686a
SHA512 1dfa5d79a0bb41211fc6d3b62dcbe1e3a0f9aa234b2143d720fd3d45208e152dee878884bc4a99ede06eda992dc58dacca56deec6e2adb9d687a43cd07ba53c0
SSDEEP 1536:R/ymMAcVI0cf20EBJyGdeJnvyQg0lQdMP9vw:RR0c/GQ2MFvw
TLSH
T13B436C53E3AE51D5E4A7843AD2D9A21BF67070581300AADF8A81C72A3F57FE4533930E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resource.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\resource.dll
Size 14KB
SHA256 6e8def8bacf87cb4e814beac1be718c9c7648808f098a9a839c3bb1b94f4281c
MD5 6e5fbfedc2841a62fc6b7ba9927eeed1
SHA1 22946ec03978513bd478a0fed36b83db43d7d95b
SHA512 211ce015a00e9586ce2e55139c35e10bda0473fc20c38c180fee356af51977ee273b32a2472294c29abd6c1aa6f37565bcd62ec68fdef14d72fa5d1dfca7b235
SSDEEP 192:2qBVg77BYqoxW0x3X96XxvSq0WBnYe+PjPriT0fwggsW5J3:3BVgXBno00NN64DynYPLr7CsmJ
TLSH
T14C624B87673C6472F6AB4870A1A9D326FC7275C09BB151AF406882541FE7FD1370CA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rmid.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\rmid.exe
Size 15KB
SHA256 5034b8281a50fe866a232181409c2a529dcd6a00db70a076fc23c37f6f0815a6
MD5 6630c51a361d0ba5ecaa99054ee9ac0b
SHA1 0f7d6e141db223dd8e1975b4f26f280b0ed212bd
SHA512 e331757be438d319a2c3a8e291a80ff5d7c2642230c0c7d59c0370417787a32d97a6e324881f9d97ef209d8846b67b9ed28914f45cf72e088c059132aa467585
SSDEEP 192:2/BfFyTHT2tOzvSXIKEfo8M6I1eeonYe+PjPriT0fwPrh6w:0fqDzHKND6I1eeonYPLr7/w
TLSH
T1FE626C821BB474D2FA9348F1A7E6EB06ED71B7D09F95418E70BD82492FC1781271B21D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rmiregistry.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\rmiregistry.exe
Size 16KB
SHA256 261292991ee976b8be501eb02bce8da4f281bd010db7a338f08c3c3e74787469
MD5 5b8a3605fda84b05b087c04db11bcfc2
SHA1 905d90fc836bdb29238130d4650c38c15b615c98
SHA512 89fb601c2e5f50556c201b4926dbd967544c07687fde4b389c7c95ac03e1b6447ca295e23520a2a406defa7347324c7b0a27e1d45b391ff13df6620070623468
SSDEEP 192:2b9fFyTnTwTzGCIKEfolwUeevnYe+PjPriT0fwqJSMS:UfqyzkKNeUeevnYPLr7PJNS
TLSH
T1F5725B860E766092F6534CB0D7E0DA85ED7DBA937AC6615FF2BC82451FC1B81224B13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Xusage.txt

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\server\Xusage.txt
Size 1KB
SHA256 37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08
MD5 b3174769a9e9e654812315468ae9c5fa
SHA1 238b369dfc7eb8f0dc6a85cdd080ed4b78388ca8
SHA512 0815ca93c8cf762468de668ad7f0eb0bdd3802dcaa42d55f2fb57a4ae23d9b9e2fe148898a28fe22c846a4fcdf1ee5190e74bcdabf206f73da2de644ea62a5d3
TLSH
T19A21F323359032B1661341E662D71350B1B3806EA7183518F4ED22683F0F41372E7BAA
MD5 SHA1 SHA512 TLSH

Submit Download

servertool.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\servertool.exe
Size 16KB
SHA256 6450298e910f2cbecacda298db7f5ab1f79fb301db5e8a93f4f46c0266086b99
MD5 9ec10e4a9aefd1e14ada56d757dda0d5
SHA1 ca84b964be959b4286aed3d9ae5341beaa67303c
SHA512 ebdc159ff10bbcb9ad7b2d5c222d554aed48ed5629cd15652094de4bf89c56ed1788ea8a2d0b5205b7c471daf09fd95d4272bcc8d91739c182beff7b3f3a0978
SSDEEP 192:2JP1yTHTkUv2zC5IIKEfo621eernYe+PjPriT0fwzJM4j:YPaj2zUKN621eernYPLr7p4j
TLSH
T146725B860E625082F6534CB0D7E1E785DDBDBAA37AC6115FF27882951FD0740234B13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

splashscreen.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\splashscreen.dll
Size 205KB
SHA256 bc4f9e01334e4ed1c2883af3030aefce4808cea3d2f406df7f505d645094007a
MD5 3b22ca5da5b9a454044c1eac84f938a9
SHA1 873fd9e648bc6d406eaa7ffa04df601eec241406
SHA512 4d7f77f497bb1026e9d36e56d049e305027d2319f714f173aa12c76e3b62c88545f9cd3a9677a912d1e449bb99882aecb750dd21fe657c2c5582e712a7f23f4b
SSDEEP 6144:HE39wZMjDOR/J2w5O65HN7OhGK18Ga1x9TBa76X:QAR/JqsHtOb6G29TQI
TLSH
T1FA249D4AB7F424B5E9F78078C6D6851BC3F130A60398D74F92D887A22F177613A1D3A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssv.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ssv.dll
Size 538KB
SHA256 50b68306c7438ba089690b16533e1ce44f92ff73237597defbdd41de231622cc
MD5 e8611000c5d1ef0143066196187ce5c0
SHA1 049963da9f94fe1d6cc39f82c8b63e0f01814748
SHA512 98343a3f52ed76b732cd65cadd04a3917fe825a1e2834b16f964cb62c98d90b51060f7671de1ee27b2e90cad54267e728bbfe3a2e85f252a5ff09e9d8165c354
SSDEEP 12288:lYjhoYFXYLG59rHC28myOy49D43sS7SRZ:lYjhoYFXYy5plxy49D43wb
TLSH
T175C46C12F3D865A5E07792348876C751E6727CDA4B7093CFA268765E2F336E08E38B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssvagent.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ssvagent.exe
Size 64KB
SHA256 0c957f502f22393aec107ea670e7de19e4adc2be0c8c1b0898d5ff5bffd65bc9
MD5 38a702e0aa0b2a7a2165747ed672fa7b
SHA1 3e8af66a3e1990a46671a418c0e3f3d0e5c82bc8
SHA512 d85efb4e9d08fc57b41dbcd071431efbb8ca0e16c019f3ce6e6144034decef7d8ec3a3691ee2c9ad9502dc347e72cc4c7b864eddb91367a6268ca6b785228b0a
SSDEEP 1536:dJs33iQ8XdqZsaOslp+X+fNrLYuDAOOQ1o2QTi:/S6dosJkcX+xcOOQTQTi
TLSH
T1A7535C9267E860EEE0B7E536C9A58216E5F1B8505B2197CF23A0861F1FB37D0DA3C315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunec.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\sunec.dll
Size 131KB
SHA256 da7fbd2ca77d8bbe3fc17b89ae37fd0a7c2956a0bc592de539a5c466278a330c
MD5 7c7f0b7a9fbd02a03689eedcb8b68634
SHA1 34db4822d1fd57d0063f495cb19f9fff5a124f16
SHA512 940de69a2c38c47603dec2d97ecbbf36f3c6d18821596f5ccb7ab8b52f8c14d77019490d35fd0dd720b0651d43922a2cf7a19511cfa9d37d43e5c0c26df4ce03
SSDEEP 3072:CbMlcG/fLTGZb+yZOpRZ3GEAyvOZvXuzPy5dJbdKZOz:CmcGrTGZb+2aj2ByvqvXuzPYdJbFz
TLSH
T1C9D33A5232E072A4D9528233C952B256EEF0B45432D04777E36B0A05DF677E4AEEEF12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunmscapi.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\sunmscapi.dll
Size 31KB
SHA256 8217b2fda3d8892032136c180a262ed4ed877bc0a8d25b47dfc5e34b7e3861ed
MD5 6cd89cf0905db3c543ef818a37953084
SHA1 cd6c4101216c9da1955f739e6dfd3264dcc3191c
SHA512 2ae6d73669ceeb8e0ed3bebcedff3abf578999b41d7fdb76cbeb1a5e393ab6b5e88dc10357472e7cab4d85825aeb4fbffe7e319c695655dc52dd175d74091f8a
SSDEEP 768:ispWjRaOwsrCM3kBQtWxRbWEsh1FORc33tu4C7uu:ppWjRTLrX3W81Fv3tuRuu
TLSH
T1C2E23A53DBBA10D2FDA7C9BCC4329617E871F9556321CA8F017686099BAB6F1723C306
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t2k.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\t2k.dll
Size 248KB
SHA256 3279a0ed45eeaa51f932b5255ccf709964f33ed7e4e5844a8f07ab4f2ba910dc
MD5 1077883868cb42ff899a085d0f948769
SHA1 0f71ee2c95671d3315a5e9e9388ab83f4e9b5f21
SHA512 7b7940e66cefd9f24a9efb6679c0d5da7d44679b36f9b92f555d626ce5dffeb6f7f5f47946730ef181fb94c0b400463a849eac9d4cb06381832ebba0854d49ad
SSDEEP 6144:XoLzScLrHtRa4wbFXJdvJx35arG++OKKA:XjiHGbJF357
TLSH
T1D5448E89DF3239F5C8878A398562190BFBB5795811289B1BE3D16B911F037607E0FF26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tnameserv.exe

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\tnameserv.exe
Size 15KB
SHA256 0fbed22765850f988959d80e38f21a81da7dedb1f912ceb8c6d8faa78bc93ea4
MD5 8b3735d28a8d712781e513c02026593b
SHA1 d9e0a529789d558a5db886285d9c89a734ede8bb
SHA512 c11cef0e2f273c6fb2cac61a1eb7daebc0e968453da8af912a718bf7a9efc0653770ff8dde9c01fb02740b5ddfd060e25e4c9865312b73a43855185c9887f282
SSDEEP 192:2ny+vmg3Fz8vMzoIKEfoN2eeqnYe+PjPriT0fw5P:JM70MzvKNN2eeqnYPLr7c
TLSH
T14E624B820B7824D2FB9B48B193F5EF46EC75B7E09B96416E70B883192FC4B816B1711D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unpack.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\unpack.dll
Size 78KB
SHA256 515a2a8293f06d9c94f23d6d6d4e8e89cfb367255c88f0ed1a0e233a1500a9b1
MD5 cac99fd0b0aaaf8c0e294006d69383fe
SHA1 265db382a435ef6380b00238a1c35bfb78c826f6
SHA512 17dfed20d41dcc1d6186c09d5c5fa30c2e01d1719d9a83169a1b974a52938c8905ed320f09a3fcf88d30f7a6db09492041dae99bb80bcc68d2d262731b27910f
SSDEEP 1536:MnCiIzW2WDCvdn5wFZpk5Zx4+2VNzQZuGdKAQsBV:MnSz8Dy5w7pSxANzQZueKTsBV
TLSH
T1E9736BA313A06075D0E78175E8D7D227D6FA78B50B3C874F81E487B32F172915E92B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

w2k_lsa_auth.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\w2k_lsa_auth.dll
Size 23KB
SHA256 c435649e8b088686d08c5fef31167067a3dac6b168e0e4a0a31dc4dae2bccfeb
MD5 822bc5c020c19eb8af9288a874c875a2
SHA1 1580c6b00534553db179ac988feb55c2f3bc392f
SHA512 4831338184347c4a4f8ed7f386e3b229b9f7fd57086d2d1434a2f1a39b8397d5b0b330f4823d9ba7c35a878f3b0b90a9e3ecd40b738f3405fab8f21f5b5aff4e
SSDEEP 384:JOnkVet15ym9Yxtcvmhq2zUpiWNLEy2THbqhlnLSLbLMDpbGGNET7T7T7T7dBE+L:JOnkYT5ym6xxhJzUpiWNLEy2THbqhlnQ
TLSH
T1FDB26C4B07B531A9F97789B8E6729103F6317793337186DF01E04A6A9EFB7A07624708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wsdetect.dll

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\wsdetect.dll
Size 188KB
SHA256 c37efb9fe3fb0ed305ca80d2c8a29f63410d2734a5d636370ea44d5a06f4831c
MD5 0b684e3038a662dae061211a4d87e15a
SHA1 be7762879cfffa6089cd779fda14171660cd0493
SHA512 92bf56934370a681ada844677b358b700b697e7703900d1f4b31d9b4386f0cc796872265e936f8996447123e767b3180d0143e2d6ab87360ab3d8e2a67edc607
SSDEEP 3072:FTeFRGA/3uwxK/Ld1sBO3qeTXApGWwmkr3fCJLicP6NvFZ1Ej7UHA5V1G0ciU:xKRGA/txK/JFqeTXApGWwmkDrN9wj7UT
TLSH
T1E6143992766860B1D1579238CD92DA41F6733C52C76083CF9360637A1FB37E1B93AB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

accessibility.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\accessibility.properties
Size 155B
SHA256 a46372b05ce9f40f5d5a775c90d7aa60687cd91aaa7374c499f0221229bf344e
MD5 9e5e954bc0e625a69a0a430e80dcf724
SHA1 c29c1f37a2148b50a343db1a4aa9eb0512f80749
SHA512 18a8277a872fb9e070a1980eee3ddd096ed0bba755db9b57409983c1d5a860e9cbd3b67e66ff47852fe12324b84d4984e2f13859f65fabe2ff175725898f1b67
TLSH
T15CC08C06B18A266A181424FB42CCE4D4B280948E8028130B649A213A0781D64108886B
MD5 SHA1 SHA512 TLSH

Submit Download

calendars.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\calendars.properties
Size 1KB
SHA256 d93fb6d3451d1b82256b0e31aae7850152fa5df76f116a9d669aa4ace6bb68b4
MD5 40a6f317d17705b4d0241f4ebb45962d
SHA1 42ebb0988124433b8f2a6e5d9a74ed41240bcfc6
SHA512 e4c95f8f1354833f440672c0761ce1b4895daa52e7f143a110533f978cc6c094847aeb66636efa6de74b0e900fbbe79a3cc21280c4063627ce8d259068084a3a
TLSH
T192218C04C8B515A1C37621B4DD06321F385A78BFCACB7DB76A88BF4072E6C4D04E6617
MD5 SHA1 SHA512 TLSH

Submit Download

CIEXYZ.pf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\CIEXYZ.pf
Size 50KB
SHA256 207d748a76c10e5fa10ec7d0494e31ab72f2bacab591371f2e9653961321fe9c
MD5 10f23396e21454e6bdfb0db2d124db85
SHA1 b7779924c70554647b87c2a86159ca7781e929f8
SHA512 f5c5f9fc3c4a940d684297493902fd46f6aa5248d2b74914ca5a688f0bad682831f6060e2264326d2ecb1f3544831eb1fa029499d1500ea4bfe3b97567fe8444
SSDEEP 1536:2Qnt0y7xFNksbeCqY39JJ8GmaNo68GmaNo68GmaNoW:JOy7xXjtqYNfHxNo6HxNo6HxNoW
TLSH
T17E336C01FD995406F2B5C4FE4AB293A35B3B21C83742015E2297EF946CCF362EBC9825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GRAY.pf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\GRAY.pf
Size 632B
SHA256 081caac386d968add4c2d722776e259380dcf78a306e14cc790b040ab876d424
MD5 1002f18fc4916f83e0fc7e33dcc1fa09
SHA1 27f93961d66b8230d0cdb8b166bc8b4153d5bc2d
SHA512 334d932d395b46dfc619576b391f2adc2617e345aff032b592c25e333e853735da8b286ef7542eb19059cde8215cdcea147a3419ed56bdd6006ca9918d0618e1
TLSH
T1E0F02BFEFF3A2B6CE510A33990C037713E63D7B56C296EEE555E410D3A865C40C56682
MD5 SHA1 SHA512 TLSH

Submit Download

LINEAR_RGB.pf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\LINEAR_RGB.pf
Size 1KB
SHA256 712036aa1951427d42e3e190e714f420ca8c2dd97ef01fcd0675ee54b920db46
MD5 a387b65159c9887265babdef9ca8dae5
SHA1 7913274c2f73bafcf888f09ff60990b100214ede
SHA512 359d9b57215855f6794e47026c06036b93710998205d0817c6e602b2a24daeb92537c388f129407461fc60180198f02a236aeb349a17430ed7ac85a1e5f71350
TLSH
T1801163448339A308FCFA177A24E01BB17C113215C1AB1A83EFA3271CE705BC41D10493
MD5 SHA1 SHA512 TLSH

Submit Download

PYCC.pf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\PYCC.pf
Size 268KB
SHA256 48122294b5c08c69b7fe1db28904969dcb6edc9aa5076e3f8768bf48b76204d0
MD5 24b9dee2469f9cc8ec39d5bdb3901500
SHA1 4f7eed05b8f0eea7bcdc8f8f7aaeb1925ce7b144
SHA512 d23ce2623de400216d249602486f21f66398b75196e80e447143d058a07438919a78ae0ed2ddf8e80d20bd70a635d51c9fb300e9f08a4751e00cd21883b88693
SSDEEP 6144:nJleRNRyAnAqNaADEJHeeeeevoAuaiqwV6sg0pUjRVgYgI:nJleRNRpN0j3qhjRC9I
TLSH
T16D44D015FDA1D6B6D3EBD47996C252B0D6F172349922623FF041C1E3B886BA4708F872
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sRGB.pf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\sRGB.pf
Size 3KB
SHA256 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
MD5 1d3fda2edb4a89ab60a23c5f7c7d81dd
SHA1 9eaea0911d89d63e39e95f2e2116eaec7e0bb91e
SHA512 16aae81acf757036634b40fb8b638d3eba89a0906c7f95bd915bc3579e3be38c7549ee4cd3f344ef0a17834ff041f875b9370230042d20b377c562952c47509b
TLSH
T13351FAB9EF67D3A7EA71D77854F12BD4B2D37339D321768560249B2502411C0AB8E09E
MD5 SHA1 SHA512 TLSH

Submit Download

content-types.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\content-types.properties
Size 5KB
SHA256 46f47b3883c7244a819ae1161113fe9d2375f881b75c9b3012d7a6b3497e030a
MD5 f507712b379fdc5a8d539811faf51d02
SHA1 82bb25303cf6835ac4b076575f27e8486dab9511
SHA512 cb3c99883336d04c42cea9c2401e81140ecbb7fc5b8ef3301b13268a45c1ac93fd62176ab8270b91528ac8e938c7c90cc9663d8598e224794354546139965dfe
SSDEEP 96:r45Vf4fq7MBzO4pYEZ2MQ6KXr3NO0slzMX+W1CuHvvABbiAQ+xaW/ioLHTU+Wsch:r4KJO4mEZ2MQ6Cr3NO0slzMX+WIuHvvv
TLSH
T15FB137DDEF0E62424BDFA0BFDD27919CD536632E2969AA6235CC00E4E7103E687B7010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

currency.data

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\currency.data
Size 3KB
SHA256 5a55dbb9f6dd2bd6024e9f9e81b26d7fa72e74c13a0e8b0a7d5c4715a08c5739
MD5 d072fb69e4c180d6704a9da8ff64772e
SHA1 66e52daa2eee4f81644816b64289c459bd009400
SHA512 2d152a5a475878850bd3cc28d032d19624ff1ade99465bf975bbcffc548006e9fb60971ba416f2e623750acf9dc266aa4b0c3a2a2761f63c00fcaef3181e9991
TLSH
T11D8153027F228797E4075B7259D867D4B6332D809B97C162A094B71877F37E06FA30D0
MD5 SHA1 SHA512 TLSH

Submit Download

ffjcext.zip

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\ffjcext.zip
Size 13KB
SHA256 4b59033c9c8b45b276d0802bff94c611cef4c620c9e1cb1cf2927783b3da5bd7
MD5 ab6c441cd302e2eb77fbfdb2f3b4590c
SHA1 94195d01ed73335718aa5f160d300ee215d18b45
SHA512 57765b9548e3fe0b9e211c4a6beaac3951bc977955bb8e6147bdfc5852e7c4eb6db568d7c2dd0b46db132e096a128d6a14bc916bcaf42ff18e6e96eebbcac4c1
SSDEEP 96:RXqlB6evHp5L98TdfBUUkOSk7sZykPmpae+tTFc:UlPvHU2ZLJS
TLSH
T19B528B956C715173DA198D36AD657BCAF91C3981A0D35E893E0BEF88221BACC31F4F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages.properties
Size 2KB
SHA256 926ccadaec649f621590d1aa5e915481016564e7ab28390c8d68bdaaf4785f1f
MD5 811bafa6f97801186910e9b1d9927fe2
SHA1 dc52841c708e3c1eb2a044088a43396d1291bb5e
SHA512 5ae9c27dce552ea32603b2c87c1510858f86d9d10cade691b2e54747c3602fe75de032cf8917dcd4ee160ee4cc5be2e708b321bb1d5cdebfa9fe46c2f870ca7c
TLSH
T1BC5172DB882623776BC300F2900E60A79BF0706AEBF20139BC0E51A4E3DF761D927550
MD5 SHA1 SHA512 TLSH

Submit Download

messages_de.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_de.properties
Size 3KB
SHA256 c9399a33bb9c75345130b99d1d7ce886d9148f1936543587848c47b8540da640
MD5 d77c3b5274b8161328ab5c78f66dd0d0
SHA1 d989fe1b8f7904888d5102294ebefd28d932ecdb
SHA512 696e28b6bc7e834c51ab9821d0d65d1a32f00eb15caa732047b751288ea73d8d703d3152bf81f267147f8c1538e1bf470748df41176392f10e622f4c7708dd92
TLSH
T14C61B78F8CA123177B850363F626D3CBA7BF51527326402DB84D116C9B876B355AB23B
MD5 SHA1 SHA512 TLSH

Submit Download

messages_es.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_es.properties
Size 3KB
SHA256 be987d93e23ab7318db095727dedd8461ba6d98b9409ef8fc7f5c79fa9666b84
MD5 6d32848bd173b9444b71922616e0645e
SHA1 1b0334b79db481c3a59be6915d5118d760c97baa
SHA512 8e9e92d3229ff80761010e4878b4a33bfb9f0bd053040fe152565cfb2819467e9a92609b3786f9bdbf0d7934cf3c7d20bc3369fe1ad7d0df7fadf561c3fdca3c
TLSH
T1A071429D42E0033307C6E27EFC52F09BE3ACA491B230D197B96D1A2457CD681EE23695
MD5 SHA1 SHA512 TLSH

Submit Download

messages_fr.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_fr.properties
Size 3KB
SHA256 8deeec35ed29348f5755801f42675e3bf3fa7ad4b1e414acca283c4da40e4d77
MD5 c11ab66fede3042ee75dfd19032c8a72
SHA1 69bd2d03c2064f8679de5b4e430ea61b567c69c5
SHA512 072f8923df111f82f482d65651758b8b4ba2486cb0ea08fb8b113f472a42a1c3bcb00dae7d1780cf371e2c2bd955d8b66658d5ee15e548b1eea16b312fdcbdf9
TLSH
T1F061628646D12207236711AAED369087E772948027E4C005B88FBF6077CB5F9DA73AF1
MD5 SHA1 SHA512 TLSH

Submit Download

messages_it.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_it.properties
Size 3KB
SHA256 550954f1f80fe0e73d74eb10ad529b454d5ebc626eb94a6b294d7d2acf06f372
MD5 a81c4b0f3bf9a499429e14a881010ef6
SHA1 dbe49949308f28540a42ae6cd2ad58afbf615592
SHA512 6fed61cbcd7fe82c15c9a312aced9d93836ebcffaf3e13543bc9dd8b4c88400c371d2365feee0f1bb844a6372d4128376568a5b6fe666fd6213636fcbd8c7791
TLSH
T1136185F71DF265130B471268C11BF0CAE776ACD6BB781226788F1609B3CF515AC35164
MD5 SHA1 SHA512 TLSH

Submit Download

messages_ja.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_ja.properties
Size 6KB
SHA256 8d499c1cb14d58e968a823e11d5b114408c010b053b3b38cfef7ebf9fb49096f
MD5 b7279f1c3ba0b63806f37f6b9d33c314
SHA1 751170a7cdefcb1226604ac3f8196e06a04fd7ac
SHA512 4a3bf898a36d55010c8a8f92e5a784516475bdfffcd337d439d6da251ddb97bcc7e26f104ac5602320019ed5c0b8dc8883b2581760afea9c59c74982574d164b
SSDEEP 96:Ltk1ZccBD8M25jCTDrk9/RoaG7THG9o7f6tEflA44CAmIbIC3j5pN/o8woJb:W1xBY1CG6OlG2r
TLSH
T1E5D129EBB90D16BB8972455EEE07B54769B05B2F23B0E13BBA0C76717E11052534760C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages_ko.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_ko.properties
Size 5KB
SHA256 4de0d5ceaf4eb8c8c657246cb91ff8dfd6903cda274b8ed9eda531bdd6d499ea
MD5 d52d6766cd66f3967127b219e776c7b1
SHA1 e4c609b2b7c3860b9614d74244f141d0fbc43d48
SHA512 5cba8878db7f83408668fa1f4fe78bf902f488f334404fd9e744fe5f26fd3dbefa30116f4e211a10ec7cd49325dd27e8a2021aea27603e46aaccd6d83f6c2084
SSDEEP 96:IiX7fdokXLqlz9yx3f7yhJxpmG32idnr+ywc8LHD7ycX70DL70Dj:d7ucLoINAYGbh/I9i4
TLSH
T108C14945CA20F2A74E1941B6F46A23DCE7140B22E2A47F36E6FF85DBB34215ADD42F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages_pt_BR.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_pt_BR.properties
Size 3KB
SHA256 40aeb9eb0ab79be2d25764cbc16e5388a3be12ebaf10e96837feeecf44354948
MD5 9bb1253a3f79152ea273cf6a52a18080
SHA1 c1084130f767d3955dac9c89c2cc67c59a9bbb8c
SHA512 6396cbbe7672a7a2e7c3b7b64c150a13356c8eddac84b764789c1c421942f1bc5a166d635ce1dc122050bb8a9985bfda96b25c2adf52409af981bd89fc4db5c9
TLSH
T14D6146CF02D21A264ABE0151ED3AF247C7B6509677E0805BBC5F5F3393C9290BAB3552
MD5 SHA1 SHA512 TLSH

Submit Download

messages_sv.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_sv.properties
Size 3KB
SHA256 5ccee63720fcac2a136cf1fa90cbac05040f89ffe8c082c2d067247bfcd76b87
MD5 a6005be45c88900a15bc80d461b60c30
SHA1 ca3e18b5aea928a8465656c86970d9584d85ef7f
SHA512 9442ffb47bf0f158a44a81a16b2ab94bb36fac2f75b0c9467654ab9a8df26a63c0c7a7717deaf5476068bc0a0d602b828ce1e8d229cbfaaf201c24c0f78be1f9
TLSH
T1E46130C69B1001239FB60379AEB4B157D77A20E667E25050344C8F37B7CF2994963AA3
MD5 SHA1 SHA512 TLSH

Submit Download

messages_zh_CN.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_zh_CN.properties
Size 3KB
SHA256 a1752a0175f490f61e0aad46dc6887c19711f078309062d5260e164ac844f61a
MD5 e6f84c081895acdfd98da0f496e1dd3d
SHA1 1c2b96673dddd3596890ef4fc22017d484a1f652
SHA512 d4d28780147e22678cd8e7415cacfad533ae5af31d74426bbe4993f05a0707e4f0f71d948093ffa1a0d6ea48310e901cd0ed1c14e2fbdf69c92462d070a9664f
TLSH
T1848131DD0B0D33639E8A41D4CD13A8CF9B52CE022339C37BBEF9A48377812694503626
MD5 SHA1 SHA512 TLSH

Submit Download

splash.gif

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\splash.gif
Size 8KB
SHA256 113b01304ebbf3cc729a5ca3452dda2093bd8b3ddc2ba29e5e1c1605661f90be
MD5 249053609eaf5b17ddd42149fc24c469
SHA1 20e7aec75f6d036d504277542e507eb7dc24aae8
SHA512 9c04a20e2fa70e4bcfac729e366a0802f6f5167ea49475c2157c8e2741c4e4b8452d14c75f67906359c12f1514f9fb7e9af8e736392ac8434f0a5811f7dde0cb
SSDEEP 192:91m4OqvVyG+LMIcBc2qPjHmxJCCG/h97dIYhOX:9/OqdivcqzjH3tfDE
TLSH
T11802AF8AD61CCEC60A07F48828FF56654DC2C992ACDFE30B50DDB4598E066B66E607C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\[email protected]
Size 14KB
SHA256 9dd5ccd6bdfdaad38f7d05a14661108e629fdd207fc7776268b566f7941e1435
MD5 cb81fed291361d1dd745202659857b1b
SHA1 0ae4a5bda2a6d628fac51462390b503c99509fdc
SHA512 4a383107ac2d642f4eb63ee7e7e85a8e2f63c67b41ca55ebae56b52cecfe8a301aaf14e6536553cbc3651519db5c10fc66588c84c9840d496f5ae980ef2ed2b9
SSDEEP 192:onqkbSDLFgIBL0IgyZCE/oIuuemXclVO/HemZ8GbRdziHm6tIclW3ZYvvebtssZn:lKMLWkpgy8sdsnOmEyPLaYoauAdI
TLSH
T12762D12C9DEC6995673CE9F4388F2058E8C765F0A8F89B3638ACED0D5B5A17550713C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

access-bridge-64.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\access-bridge-64.jar
Size 183KB
SHA256 6486ccb862ff85099f5fd281c65d537cc53accc789bdeed380295c30815d0106
MD5 c29c5ce0afb0c7dc8eae4fe4920f0b92
SHA1 d27d1398edad109e499d5e419b2034748ee0e786
SHA512 9baf4d620cc47b857cc499550428434241180cc7fe4ef5f35c1ec55ca06ddd74f55a0895610e679d29c7fc38f98a851772725f2d8de4625f4f81643c22e9813c
SSDEEP 3072:bc6sCp7WawK3zUcm5nexxACeExsCTVDy9J0RUpzTRS0oZu8oagepYwFox:E9anzUcm50iCRh+n0RsmRoveiwFM
TLSH
T1DC046B03FA49C45BFD07D2B21091DE53BA096EFCC0A253AE4DD91B4A6661C5B0731BBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cldrdata.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\cldrdata.jar
Size 3.7MB
SHA256 2ce081a8a12e944e2d0b1de28a8cd5fb09420e6319d6cf8b944a2c6350d2b8ef
MD5 ac5eb85f5063095db364508d2c193b8c
SHA1 e7ac59e1e8442bde83cb81b13b03bd9c2be1fe35
SHA512 62cd3a1d9ef7053480cfa5d624acdf645ea830c03684ea1a32061b273c4b25cb6669ef721a2b9d69105c465e692425b2c428d4e5e4b29990b99f75099d821a8b
SSDEEP 98304:Hz/dsPz2xBElWJy1vMD67RdNdVdE8uGKEaydPc3m4jEI:Hz/e4EegvMDkTfHF024II
TLSH
T1380602527EA54833CA67F5B00428D203E507C5C9E0D5A187D7B58A876AF5BC39382EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnsns.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\dnsns.jar
Size 8KB
SHA256 11716897463ee8cce7f2aeec8d1154e6b7ac1dcb8cb588776380f731a6a2f5c5
MD5 afe6e1a4176d639129449121e45de3fb
SHA1 8344ccf3c6d18e85ff6f7f2fc7cc3c52a4ef6525
SHA512 aafded45413af7d219d312320bbfa33349cbd53a691b7015dd58ee04110758ea7a79149ee9f9ca7e64b68f0017010dc5bea7e42786376a6622d053c51d7cade3
SSDEEP 192:h35jIgA7WbMCIoXmHTEIWB7EH+mqcEb+wYtvEm0Zc/Y:h3ZA7WbM0WTFWBAH+BCrEm0t
TLSH
T1E8025C5BF9C1E078D815E4F33CA68A16902A48C49409A29F46F0D50F70FCD2E3662FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jaccess.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\jaccess.jar
Size 43KB
SHA256 fa110300329b45911946df1a48111878dacfa897bac1f0fad954d19670be5be9
MD5 fa6246ba92a7e2474addf23ce1777b2a
SHA1 e42c301220ff2f1bb9674bee07ce78faca703b11
SHA512 d340a7a466e507c21e7237db8c974e806359f92d542d3a8eed1e65d36f4cf388a56a5439ffdb8c7a7836e53b54f61399fcdbfdec252b43d935d86565da82afda
SSDEEP 768:zGT1QBd0LT4iCeXaFEhLJYUocQBI0gq//a5MWGyOEgrDfRzt:zGT6B04i4GhLvJNH3lLOEglt
TLSH
T13313BF1B5F99D07BD657F2B3466043D267168CF4903625AB1C940F463BA2C5B13327EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

meta-index

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\meta-index
Size 1KB
SHA256 f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8
MD5 005faac2118450bfcd46ae414da5f0e5
SHA1 9f5c887e0505e1bb06bd1fc7975a3219709d061d
SHA512 8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9
TLSH
T114316B1B458BA16EBE2E0ECABF37EB81665CC23B041951BC04C90C85A50DD0E2F38D75
MD5 SHA1 SHA512 TLSH

Submit Download

nashorn.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\nashorn.jar
Size 1.9MB
SHA256 de5595dd213fd8198447d4d3b681c22273df3327475b96df3a964f0f8da7cdce
MD5 d1b2a627fe8f79cf1fb3d2fefc58f8ad
SHA1 e4bd140b1c32f4b29bb6d258a654123d293c8fac
SHA512 008b47de512884e476a4b118bb44c1e6a5e432145b89904093c6d64891dff6bdc697925c66c9ecd82ab21f40859d515b360acc382293f6d38cacdad29e1d0684
SSDEEP 24576:6z1tppPBYpfD7dNKxxIel8rQZ8bjxb79MjS9n/i4ZdPyzDtMHGpIBWVZF3LKLI/S:6BtNWfdpelaQeVNIK7yzDe6IQV73PK
TLSH
T1CA95E0277EE2B53AE923C13108659152E12B18CF90C6D4DB19FC078AD8B3EC95716BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunec.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunec.jar
Size 38KB
SHA256 869ea30322a9db85878a15fc0120dfd486d10df1d8fb3adeda0ec3863b08dce5
MD5 65e841cbff7777c462c064a105cd6693
SHA1 2a168e4dd5f0385ccde79ce9edf6643e6d1cbc97
SHA512 115ef69f0d7d39f74828cd66719e441310d98d98d69ff9071bd7377bafaf392f01139dcec314c0833f815084950072def3ad61d9884af55ccae487f42259175f
SSDEEP 768:wXxOqJ0Wnb3MsCJWVNB3gX083/ae1W2pBUmnVw6pjrQb5dZWMB7VkJBJorQeA4U3:8xO00kb3MsCJWbBQXNT9HUmnVw6pjriY
TLSH
T17003C089687450FEE01211FF8262940B370D4DAE6689922F5D50C53EFA2AA771726FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunjce_provider.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunjce_provider.jar
Size 271KB
SHA256 453889131438a5bce6a3dd353b33112ebf6482002f376225ca808e313d96794d
MD5 70049626a96986f398f823ec19bc8058
SHA1 7ecf376cdd6639df6a48430ddf9d8cd9784b6ece
SHA512 d3c4b4b5f1ef67f4404fd3cd2156f7100f7459e008c2f480d0caad46c0dbe6a58394a7d299670c487384e26731f1096e07eb4f21cdc37658f7abbb932d525eff
SSDEEP 6144:nipoVdRDbbHEifp2hc1ve9p8pUcee9EDep:ipoVdR3bxUc1qOdR9CC
TLSH
T11844BF276D9DE878DE4BD4F928F1CA15F90D80F8A00AB66A0BD10C74B5E5C435B21BED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunmscapi.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunmscapi.jar
Size 31KB
SHA256 1f910115e8e774ff59252124e293bc24ba6a2fcee50fb888054493efcccdcaea
MD5 352d3349bc9293814990a1579062c575
SHA1 4c517b0332501940a54306743c233c6e5e15d2b2
SHA512 7a29241099147202e65e45ffcc295910ed94b7d190ff46f0c09c6e151c010627eb1b560bd6055e0b8422a0014aa52cc8f4ed13375d618a27a03956227d327c67
SSDEEP 768:R1yNOqG8RdBXuqt7H/g43Wkc1QHoqvq6mbE0sdxWBv1mhie7vzKTqfBjHS3yy3Cv:TeOL8/BX9tjgnGH1q6mbEHxWB18h7vzb
TLSH
T1DFE2AF667E68D4E8F25740F781308417732D4AE99DDBF2170D8AC24EF928F074625AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunpkcs11.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunpkcs11.jar
Size 243KB
SHA256 67768756ddd5c7ab6ace309a5d51554efcee45e2ff5d7257ff06e1ce55f2b162
MD5 60e972a0420e4bd8a23c18cdb52eec41
SHA1 5a7cf98232798a000d939c2315d335b166557b38
SHA512 2e9c933d090124d16812f05b161635621de1ff765c45712dbb42803ac1d91f36e62baabeb8324a2281dd2de090c33307d8d032030a946d45f354f85407ef56ce
SSDEEP 6144:23DysyLPfo+PXv0GAbQ5yK9BUAyQqzXOJFSXIXw/:23DdSrvAbQg8zyZzXOjAIg/
TLSH
T16034F01B38D48479E93357BFDC119207682809DD9A8AE16F07A4CC4DF578CAB4763AF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zipfs.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\zipfs.jar
Size 67KB
SHA256 8989822cf07be9cf0e0a2221748f23aece60e357db9aa8626cd93ea0734dc713
MD5 577bff07383c779a991810fba874958b
SHA1 3c8c8b47aef7c73508e0a15c699ce11bd9c0b7a1
SHA512 9355db266c0bd7d5f0d5b7eda08888d5e66598f78297104f085515e5c9c98699dae8e370941a3cc67483732e9438bdd4656c07c2f46ed616ed34e77f56aed26f
SSDEEP 1536:EWAvIxNL+QD4gh34IFmdYAaZfefpU2jVClA4su:EWAvIxDDhSIFmdKZfEfclALu
TLSH
T1CC63DF132F5D821ACE03C4B780AFD71B56A618F17106E2FF59A49C97D560C8263E63AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flavormap.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\flavormap.properties
Size 3KB
SHA256 c2748e07b59398cc40cacccd47fc98a70c562f84067e9272383b45a8df72a692
MD5 d8b47b11e300ef3e8be3e6e50ac6910b
SHA1 2d5ed3b53072b184d67b1a4e26aec2df908ddc55
SHA512 8c5f3e1619e8a92b9d9cf5932392b1cb9f77625316b9eef447e4dce54836d90951d9ee70ffd765482414dd51b816649f846e40fd07b4fbdd5080c056adbbae6f
TLSH
T16B81359ABF9D73710F8220F5A1DED288960D94FC73F9D95930DA4718220AEA121327F5
MD5 SHA1 SHA512 TLSH

Submit Download

fontconfig.bfc

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fontconfig.bfc
Size 3KB
SHA256 aae23acc42f217a63d675f930d077939765b97e9c528b5659842515ca975111f
MD5 e0e5428560288e685dbffc0d2776d4a6
SHA1 2ae70624762c163c8a1533f724aa5a511d8b208e
SHA512 c726cc2898399579afa70acace86bec4369d4541112243e51721568b4d25dcc6c66fa64ac475aff9ba9de07a630b24a9f221fa00426ad36845203ba809219e3c
TLSH
T19671BF02E5FB231CE6F7FBB115F601248F62BDA1EF628E9C2010781B66929306D61F35
MD5 SHA1 SHA512 TLSH

Submit Download

fontconfig.properties.src

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fontconfig.properties.src
Size 10KB
SHA256 2f3067fb80574523307836e50990f575aa50aca3bc4fed9bcbdea291d36012a2
MD5 1c2ffea868138a14fcf8ffcc375a0ab1
SHA1 d1b1a3c3658fa5c42b8090b60d379a3f0d3ea934
SHA512 5d8116a78974c395c44fc8bc377e2a33914bb218bc6ba1e546279639c071793a420bf95ba39b0b18c9ac4865438eedfaa4c7a81a31673d234306a858c5d7679b
SSDEEP 192:4+e6a1nsNi8bTeOiO/Ywca9nB2RwhCQvBZGuo61:4lnHIR9B2RwhL7
TLSH
T14422130A320C0B9ABBBDB49271F6A9127D1DA47F4283AF4725FC8609DD525C5F692333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaBrightDemiBold.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightDemiBold.ttf
Size 73KB
SHA256 72cee3e6df72ad577af49c59dca2d0541060f95a881845950595e5614c486244
MD5 af0c5c24ef340aea5ccac002177e5c09
SHA1 b5c97f985639e19a3b712193ee48b55dda581fd1
SHA512 6ce87441e223543394b7242ac0cb63505888b503ec071bbf7db857b5c935b855719b818090305e17c1197de882ccc90612fb1e0a0e5d2731f264c663eb8da3f9
SSDEEP 768:H8Jwt1GIlZ6l0/9tRWhc0x/YxvsTjyIDXCrGU/tlDaKAgKrTLznvzDJIZmjFA0zG:Mwtze9xQcQ/LDaKAgK3LLvzFogbFt5WD
TLSH
T1AC739F1AE396AE1BE36A3C39A913A3F15B877445D31A8B77B84C4F35C2C83507B44B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaBrightDemiItalic.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightDemiItalic.ttf
Size 73KB
SHA256 895c5262cdb6297c13725515f849ed70609dbd7c49974a382e8bbfe4a3d75f8c
MD5 793ae1ab32085c8de36541bb6b30da7c
SHA1 1fd1f757febf3e5f5fbb7fbf7a56587a40d57de7
SHA512 a92addd0163f6d81c3aeabd63ff5c293e71a323f4aedfb404f6f1cde7f84c2a995a30dfec84a9caf8ffaf8e274edd0d7822e6aabb2b0608696a360cabfc866c6
SSDEEP 1536:lww80sTGzcKHwxWL0T+qHi/sbA06PoNORsr5sOnD0OyuusGa7bs4J:lwL0i97WL0T+qHA9cOR05FD0Oyup74w
TLSH
T10273CF5EF392DE27D3DB747DD962E3B1032BB446A313832B788E4B76C0893805B55A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaBrightItalic.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightItalic.ttf
Size 78KB
SHA256 d68819a70b60ff68ca945ef5ad358c31829e43ec25024a99d17174c626575e06
MD5 4d666869c97cdb9e1381a393ffe50a3a
SHA1 aa5c037865c563726ecd63d61ca26443589be425
SHA512 1d1f61e371e4a667c90c2ce315024ae6168e47fe8a5c02244dbf3df26e8ac79f2355ac7e36d4a81d82c52149197892daed1b4c19241575256bb4541f8b126ae2
SSDEEP 1536:jw9ESkPFybxWj1V7zbPUoOPjp85rFqXpLboVklDNTc2Wt:jwZO0xWPTU7l85rFYpLbott
TLSH
T12383AE8FF3229F2BE395707ED052A3E15B1F7146E762D7AB384E07B6C48C3506549A90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaBrightRegular.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightRegular.ttf
Size 336KB
SHA256 0faaaca3c730857d3e50fba1bbad4ca2330add217b35e22b7e67f02809fac923
MD5 630a6fa16c414f3de6110e46717aad53
SHA1 5d7ed564791c900a8786936930ba99385653139c
SHA512 0b7cde0face982b5867aebfb92918404adac7fb351a9d47dcd9fe86c441caca4dd4ec22e36b61025092220c0a8730d292da31e9cafd7808c56cdbf34ecd05035
SSDEEP 6144:oBfQeUG2CCTufrmOufymM8hvFHp277tS9iZFYSATxNm:oNQ3vCCTcaFNJw7tSgYS82
TLSH
T1CC74BE1FE3D3DE2FF3749477EA22A3A3D7A23820A75B85B7BD0D0624C9C93515658A01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaSansDemiBold.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaSansDemiBold.ttf
Size 310KB
SHA256 53773357d739f89bc10087ab2a829ba057649784a9acbffee18a488b2dccb9ee
MD5 5dd099908b722236aa0c0047c56e5af2
SHA1 92b79fefc35e96190250c602a8fed85276b32a95
SHA512 440534eb2076004bea66cf9ac2ce2b37c10fbf5cc5e0dd8b8a8edea25e3613ce8a59ffcb2500f60528bbf871ff37f1d0a3c60396bc740ccdb4324177c38be97a
SSDEEP 6144:R5OO1ZjNDE7/MsTJ30otegK4zJwz3UhG5jXsrg2HLzYv7cf0R7o7+WX/ov2DG:bOO11CEo9xzJwljXsrhHQ7cMuX/16
TLSH
T1D164BE0FE397EE0BF225513AD61793F3C2A3B911A717C6BB758E4335D4C92A2A744842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaSansRegular.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaSansRegular.ttf
Size 681KB
SHA256 f8d877b0b64600e736dfe436753e8e11acb022e59b5d7723d7d221d81dc2fcde
MD5 b75309b925371b38997df1b25c1ea508
SHA1 39cc8bcb8d4a71d4657fc92ef0b9f4e3e9e67add
SHA512 9c792ef3116833c90103f27cfd26a175ab1eb11286959f77062893a2e15de44d79b27e5c47694cbba734cc05a9a5befa72e991c7d60eab1495aac14c5cad901d
SSDEEP 12288:6obn11t7t7DxT+3+OQ64cctiOAq12ZX/DmfT6R83Sd8uvx7wSnyER4ky+SH/KPKQ:6oTJZzHniOAZ783Sd8uvx7wSnyER4kyI
TLSH
T10FE4BE1FF3C3EE1BF6ADA13AD12293738663B529E36396E7790D5525ECC82B05748600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaTypewriterBold.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaTypewriterBold.ttf
Size 228KB
SHA256 fc908259013b90f1cbc597a510c6dd7855bf9e7830abe3fc3612ab4092edcde2
MD5 a0c96aa334f1aeaa799773db3e6cba9c
SHA1 a5da2eb49448f461470387c939f0e69119310e0b
SHA512 a43cf773a42b4cebf4170a6c94060ea2602d2d7fa7f6500f69758a20dc5cc3ed1793c7ceb9b44ce8640721ca919d2ef7f9568c5af58ba6e3cf88eae19a95e796
SSDEEP 6144:3BPS7w5KIMtYwqcO3GbA4MJcs2ME9UGQ2n9gM/oD:xVMtgcGGPMJcs4b9gM/4
TLSH
T101349E0BD3C78E3FF5252036E55743F7C7A374036706D6ABA68E4276D8C92B6AB04582
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaTypewriterRegular.ttf

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaTypewriterRegular.ttf
Size 237KB
SHA256 d9d0aab0354c3856df81afac49bdc586e930a77428cb499007dde99ed31152ff
MD5 c1397e8d6e6abcd727c71fca2132e218
SHA1 c144dcafe4faf2e79cfd74d8134a631f30234db1
SHA512 da70826793c7023e61f272d37e2cc2983449f26926746605c550e9d614acbf618f73d03d0c6351b9537703b05007cd822e42e6dc74423cb5cc736b31458d33b1
SSDEEP 3072:VwzZsJcCrn271g+UGFDUnrrHqMyBtlc3+fzx5R1zeqZdDgfSkecUfEDpEXzSyPMx:GWcCrn2C46Ak+naqaucYEDpEX3gZoO9
TLSH
T1C634AE1FD397CF3BFA22207AE26673E3D67274036F0BD69BA68D5631C0C52729604586
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hijrah-config-umalqura.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\hijrah-config-umalqura.properties
Size 13KB
SHA256 69becfe0d45b62bbdbcf6fe111a8a3a041fb749b6cf38e8a2f670607e17c9ee2
MD5 1eddfb1ee252055556f40cdc79632e98
SHA1 84aa425100740722e91f4725caf849e7863d12ba
SHA512 a0fdbf42ff105c9a2f12179124606a720df8f32365605644e15600767e5732312777a58390fdb1a9b1c0b152ccc29496133b278a6e5736b38af2b5fab251d40c
SSDEEP 96:RgZass+YXdGOS8NhN9Yd9Yq67IwOYUuUS9O0:RyJO/BFi9YqAInYUuUmO0
TLSH
T14B5201DDF17C63BE0A0D3085F3BE74A582E0B29591EE000E216DBF39628D558CDB894E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cursors.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\cursors.properties
Size 1KB
SHA256 7b8b63f78e2f732bd58bf8f16144c4802c513a52970c18dc0bdb789dd04078e4
MD5 269d03935907969c3f11d43fef252ef1
SHA1 713acb9eff5f0b14a109e6c2771f62eac9b57d7c
SHA512 94d8ee79847cd07681645d379feef6a4005f1836ac00453fb685422d58113f641e60053f611802b0ff8f595b2186b824675a91bf3e68d336ef5bd72fafb2dcc5
TLSH
T1B321E07D3D001DE37EFD008112C25687410CE178493BEA0AA77CBAEA6FF9519ED419AD
MD5 SHA1 SHA512 TLSH

Submit Download

win32_CopyDrop32x32.gif

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_CopyDrop32x32.gif
Size 165B
SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
MD5 89cdf623e11aaf0407328fd3ada32c07
SHA1 ae813939f9a52e7b59927f531ce8757636ff8082
SHA512 2a35311d7db5466697d7284de75babee9bd0f0e2b20543332fcb6813f06debf2457a9c0cf569449c37f371bfeb0d81fb0d219e82b9a77acc6bafa07499eac2f7
TLSH
T125C0805FC244DB10E449823C1C7782842E50595A494D11445154078D7C21176A3886A6
MD5 SHA1 SHA512 TLSH

Submit Download

win32_LinkDrop32x32.gif

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_LinkDrop32x32.gif
Size 168B
SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
MD5 694a59efde0648f49fa448a46c4d8948
SHA1 4b3843cbd4f112a90d112a37957684c843d68e83
SHA512 cf2dfd500af64b63cc080151bc5b9de59edb99f0e31676056cf1afbc9d6e2e5af18dc40e393e043bbbbcb26f42d425af71cce6d283e838e67e61d826ed6ecd27
TLSH
T145C0800FC7459F51F08C423C2C7A42801DA4151BCD8D1458A6341559794609FF648996
MD5 SHA1 SHA512 TLSH

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 153B
SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

Submit Download

win32_MoveDrop32x32.gif

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_MoveDrop32x32.gif
Size 147B
SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
MD5 cc8dd9ab7ddf6efa2f3b8bcfa31115c0
SHA1 1333f489ac0506d7dc98656a515feeb6e87e27f9
SHA512 9857b329acd0db45ea8c16e945b4cfa6df9445a1ef457e4b8b40740720e8c658301fc3ab8bdd242b7697a65ae1436fd444f1968bd29da6a89725cdde1de387b8
TLSH
T103C02B0FC200F720F10C82BA6C2E83C01D2018514E9742488771138D7C16006F3CC2E6
MD5 SHA1 SHA512 TLSH

Submit Download

javafx.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\javafx.properties
Size 55B
SHA256 b5b67c9f896edb103afea16d1d408c85e396fa8baad0f6a668895b380415d043
MD5 e57fce4e57f292bfae09c6de315d0b03
SHA1 363b36f733eae57a54c608096626757b521acf20
SHA512 5c0b48abe72c68d4bc1f73a90ab19b0d99b4a95ab1403118104a70a8294128539b85dcf542bf0625f80c65a5afed4a75baaebec8c0cf0eb682ef2e6c95e250fc
TLSH
T1FF9002143A806051080C0B132E361FE44B36C02D00627045D85C59A1DF8548E9D13E54
MD5 SHA1 SHA512 TLSH

Submit Download

default.jfc

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfr\default.jfc
Size 19KB
SHA256 0e90e5023f69c44497f1886bc11fcdc8caf8e5bdb0fbd86ac653327a61e51451
MD5 971683e69ca9cc831afec282e999517c
SHA1 b054de4c4a6f6e04800942c3fcdf2e99963d91fa
SHA512 99db3a71c96d959b8bc5e5896c834be43f37ad1eff5f7d915183521289563ab7e103dd7d00028c73cb05bae1c0d53441aa0c1d47b2034cd9e08aad7f2d2ba247
SSDEEP 192:/JA1ySPBhRt0ng3Ca66LAsmztuxqCbCdCsCNG2ixzTi5OAdzAMzVdWVqGKxtOymo:/J4yS5zaaedc2FMhF
TLSH
T13292685005F86EDDA68E9B37CF6656034DA1C4F3536AB03470EC7E945F898A242B38F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile.jfc

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfr\profile.jfc
Size 19KB
SHA256 0f459267c79fec84d7c01f1bc7085821248d91d16324af7eef04274a243bed38
MD5 0876bcedfd8e60815378359f5a428f3e
SHA1 eee5a1d7f47cce948af54821f0c5dbc9fca28925
SHA512 132a5b8e78bd2d047f1a09654c63c4d59b892546270e1d99694e4cef5a7b064a34ca3dacf6bb8028354205c348153820c48d79d2e9a42bbad5a90eb252976c45
SSDEEP 192:/fA1ypPOdhJt0ng3Ca66L0smztuxqHbHdHsHNG2iYzT95OAdzAMzVdWVqGKxtOyx:/f4ypy3aamd79Mbhx
TLSH
T16392375004F86EDDA68E9B37CF6656034DA1D4F3636AB03470EC7E945F8989242B38F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfxswt.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfxswt.jar
Size 33KB
SHA256 f883ded4b82416eaa277ad35e44b19ed004560057ec77e050225d84d4268d35d
MD5 68704dafee92b51b1ee8c12230298d81
SHA1 f7d0aac9a440e1177fd738b4a6a1cb4144496d18
SHA512 39305453959844fb46a07312876c9600c773f5c085dcd7330e56c91834b4190c2aafb6759f3682135d539a2fbc826800fe915b8a8eee953fc509178cd1f88a70
SSDEEP 768:nYnF5MNB40NdBH/8/d3BF04ojTxQYuWBN:nYjMNB750gpjTxYAN
TLSH
T158E2D0D66AAA5513FC9353722B106591F82E42F5C02A4288733A9587C2FCF31FF22742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.hprof.txt

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jvm.hprof.txt
Size 4KB
SHA256 b055bf25b07e5ac70e99b897fb8152f288769065b5b84387362bb9cc2e6c9d38
MD5 c677ff69e70dc36a67c72a3d7ef84d28
SHA1 fbd61d52534cdd0c15df332114d469c65d001e33
SHA512 32d82daedbca1988282a3bf67012970d0ee29b16a7e52c1242234d88e0f3ed8af9fc9d6699924d19d066fd89a2100e4e8898aac67675d4cd9831b19b975ed568
SSDEEP 96:CYrYJDrYJ+RvJ3z3d9uGG7hPxTRnhTbraYfwE5DyK:CYrsDrsgvJ3z3buGG7LvSmhDz
TLSH
T1CB91B527578843B286921354265BB4D4B759C07BBB3028007CAD929C6B57A3CD3B76EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logging.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\logging.properties
Size 2KB
SHA256 ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232
MD5 809c50033f825eff7fc70419aaf30317
SHA1 89da8094484891f9ec1fa40c6c8b61f94c5869d0
SHA512 c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c
TLSH
T17F510E6E9B4E2D35430A00AA9E6FF5967E2898BC1C23E5B6B39E6304310D43885D77C2
MD5 SHA1 SHA512 TLSH

Submit Download

management-agent.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management-agent.jar
Size 381B
SHA256 8f981c688a4b5cbfbe0898b918b803eee332338a352e7bb18292627dbcd5d56f
MD5 aa2ad1e76bd7841fd9fdc4f5990892e4
SHA1 e8046ccb762e77d64c77fc3d05f46198c83ee15f
SHA512 3e5f84216bb2f2b8fbbec6c9aa78aa9255565d095f49ca1197d6160daedba7a5f1d11b012c3d57bd34d7d5201bd24f77caad5ff36b0ae720a87510cc95efcee4
TLSH
T1EBE0CD392FD5C55DFA0DF7B45782B61E962704C44B0C638747202857DA34D405E03FD6
MD5 SHA1 SHA512 TLSH

Submit Download

jmxremote.access

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\jmxremote.access
Size 3KB
SHA256 439158eb513525feda19e0e4153ccf36a08fe6a39c0c6ceeb9fcee86899dd33c
MD5 f63bea1f4a31317f6f061d83215594df
SHA1 21200eaad898ba4a2a8834a032efb6616fabb930
SHA512 de49913b8fa2593dc71ff8dac85214a86de891bedee0e4c5a70fcdd34e605f8c5c8483e2f1bdb06e1001f7a8cf3c86cad9fa575de1a4dc466e0c8ff5891a2773
TLSH
T163812007F78607730BC6621B1A0D53E2F621C17EFE630608791CE978B7579AE02E7961
MD5 SHA1 SHA512 TLSH

Submit Download

jmxremote.password.template

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\jmxremote.password.template
Size 2KB
SHA256 3d83e336c9a24d09a16063ea1355885e07f7a176a37543463596b5db8d82f8fa
MD5 7b46c291e7073c31d3ce0adae2f7554f
SHA1 c1e0f01408bf20fbbb8b4810520c725f70050db5
SHA512 d91eebc8f30edce1a7e16085eb1b18cfddf0566efab174bbca53de453ee36dfecb747d401e787a4d15cc9798e090e19a8a0cf3fc8246116ce507d6b464068cdb
TLSH
T1A451BD036FC61E620B85D2145709659BF704D17F6E730154396DCA68732BDA642EECF3
MD5 SHA1 SHA512 TLSH

Submit Download

snmp.acl.template

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\snmp.acl.template
Size 3KB
SHA256 f1dc97da5a5d220ed5d5b71110ce8200b16cac50622b33790bb03e329c751ced
MD5 71a7de7dbe2977f6ece75c904d430b62
SHA1 2e9f9ac287274532eb1f0d1afcefd7f3e97cc794
SHA512 3a46e2a4e8a78b190260afe4eeb54e7d631db50e6776f625861759c0e0bc9f113e8cd8d734a52327c28608715f6eb999a3684abd83ee2970274ce04e56ca1527
TLSH
T1AF6110132FA973225745C0B2698E93DEF109913BAEA70C04394C99747332EAD49BDE96
MD5 SHA1 SHA512 TLSH

Submit Download

net.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\net.properties
Size 2KB
SHA256 5d62f39e6eb46c7a731b6997a14acfeb63f5c95dfcef8de3d4d94b5d571372c6
MD5 19a5c7f5186854362281a152e756ce2f
SHA1 cc738221f126334de60d73b5db63789c41e282ac
SHA512 24e3489b825015226c7c2a1ac6cc2d20d5056c8d578d612f73a35aa43a953cfe331fd6cbdc251ce23cfaa403130848822dd3efb30ed427f25a1221ba0a2b2bf3
TLSH
T168511E82FE125379837CC360926EE7D5E72CC0AD9C33B0B922FD49095A56D37266E1B0
MD5 SHA1 SHA512 TLSH

Submit Download

psfont.properties.ja

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\psfont.properties.ja
Size 2KB
SHA256 0c790de696536165913685785ea8cbe1ac64acf09e2c8d92d802083a6da09393
MD5 7c5514b805b4a954bc55d67b44330c69
SHA1 56ed1c661eeede17b4fae8c9de7b5edbad387abc
SHA512 ccd4cb61c95defdcba6a6a3f898c29a64cd5831a8ab50e0afac32adb6a9e0c4a4ba37eb6dee147830da33ae0b2067473132c0b91a21d546a6528f42267a2c40e
TLSH
T102513CA00E7C970924131695B2EFBB94AA1A7F92C636714794F12C01A049CFDFB85B37
MD5 SHA1 SHA512 TLSH

Submit Download

psfontj2d.properties

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\psfontj2d.properties
Size 10KB
SHA256 7d51936fa3fd5812ae51f9f5657e0e70487dca810b985607b6c5d6603f5e6c98
MD5 f8734590a1aec97f6b22f08d1ad1b4bb
SHA1 aa327a22a49967f4d74afeee6726f505f209692f
SHA512 72e62dc63daa2591b48b2b774e2479b8861d159061b92fd3a0a06256295da4d8b20dafa77983fdbf6179f666f9ff6b3275f7a5bcf9555e638595230b9a42b177
SSDEEP 192:hPwn+Cyub3Ee4OECKDIcYOhAgZ50OKDQLT2IcpRuWRbHr9NRXUh/QTv9Ho39zPxq:5xzubEFOEscAW5VKsCfHz8RPxGt
TLSH
T18A224581853C267411530762728FAFC0EE5DEEB69430A31790F679026A9EDF52F29F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

US_export_policy.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\US_export_policy.jar
Size 2KB
SHA256 90012f900cf749a0e52a0775966ef575d390ad46388c49d512838983a554a870
MD5 ee4ed9c75a1aaa04dfd192382c57900c
SHA1 7d69ea3b385bc067738520f1b5c549e1084be285
SHA512 eae6a23d2fd7002a55465844e662d7a5e3ed5a6a8baf7317897e59a92a4b806dd26f2a19b7c05984745050b4fe3ffa30646a19c0f08451440e415f958204137c
TLSH
T10751F96ABDD9C17DF25B46B90A48938370F6854C1748FA470890C9A52EBCF110E57EEB
MD5 SHA1 SHA512 TLSH

Submit Download

blacklist

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\blacklist
Size 3KB
SHA256 6c73c877b36d4abd086cb691959b180513ac5abc0c87fe9070d2d5426d3dbf71
MD5 b2c6eae6382150192ea3912393747180
SHA1 d4ffb3857eab403955ce9d156e46d056061e6a5a
SHA512 898582c23f311f9f46825e7f8b6d36bed7255e5a4e2fa4b4452153b86efbd88db7e5b94dbd9cb9db554f62b84d19f22ae9d81822b4896081c487fb50946a9a9a
TLSH
T1A38180AA2E5D2405EAD8E0D40CBFA813795DF50B929782DF6EC072FD3196A7C32B0175
MD5 SHA1 SHA512 TLSH

Submit Download

blacklisted.certs

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\blacklisted.certs
Size 1KB
SHA256 a8e6daf874fa9854c80eb6aba7b4d327b641f74d95033adc2a80c6d6d0ba26e2
MD5 91c7195d1abf0081758ce00c8248732c
SHA1 9f8852ffcba434070e23dc2e1f22b3b284ba8854
SHA512 c1d464158aa86c622becb197c0f95c9d2b24d5e9cd38707ae47e6d7b2f614cb1f99f146c9288e1e93c6b103b0e78471544ca1b08bb08d24bfde758e894626377
TLSH
T1EB21DAD5C56EC1D9EC402BDF55F882EB667183B67358603628F41D270F7289695074E4
MD5 SHA1 SHA512 TLSH

Submit Download

cacerts

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\cacerts
Size 97KB
SHA256 75d0b9e7caba8e28c93532629c9141cd6fb2d772404761fff7e7f85f379f311b
MD5 b40b81544993ba86a858d579a06b3ef2
SHA1 52f9b640aec7e55e12454e6361bd2af76eaec0e6
SHA512 9acd5156c8b2c68e54259e9ce8c61ffc121d7be6b2db3ee7dfb084aa5732113bf04b0719b7f110caf9f5d360a476a3927db560493b7d9db2b4c74d8fe5465135
SSDEEP 1536:7nYlyRELn1Swd11lEa27bwbDBca98zpzHoS0LUzp:7nYlyRQd5lb1PGpLZ0L+p
TLSH
T1CDA35BDB4F383921BFC5AF546288E2377E35B3D4669A24172566C4E66DD27F03A4C00E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.policy

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\java.policy
Size 2KB
SHA256 b8582889b0df36065093c642ed0f9fa2a94cc0dc6fde366980cfd818ec957250
MD5 11340cd598a8517a0fd315a319716a08
SHA1 c0112209a567b3b523cfed7041709f9440227968
SHA512 2b6dadc555eeb28dc1c553ab429f0cb9e3ad9aa64dfa2b62910769a935a1e6030a7ff0dde2689f29c58d1b0720416d6b99ffa19bd23e6686efb1547afb7dccfd
TLSH
T17251694FDA4E99B21599C2D723382480F1B4C02671E1952DF35FC6316B8CAE1C2D6FEA
MD5 SHA1 SHA512 TLSH

Submit Download

java.security

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\java.security
Size 23KB
SHA256 c50c923c2b0dc5a3c598671be2cd980f7f06e7254cce04a1fe498f6e17fce3ec
MD5 b7aba3dfea0468195be1256c959135e6
SHA1 8c30082493935efda5ba54489d8605199c976b29
SHA512 c91e110a3f3fc74596d22ee9f59bfa952be75b1b87fdb0e7ca8f188671c8e1d22bf02bc0c0b9f1321ad4df0c8c8db6f660efbba513888686b5ba9f86d7c30b7d
SSDEEP 384:Q6b+BL6qv57AAPpNdt2vrlANbwZbBGPL1AdLAp7U8RjAEEqUNPw2t2ylDgTWHp+B:rmLHAEdqrlANbwbqL1AdLAHaPw2kqgT/
TLSH
T128B2C833A74B26B017B11167168DA2D6E71D75A61AB3405CB3CC831CBF26F55C22B2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaws.policy

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\javaws.policy
Size 98B
SHA256 b7a87d1f3f4b7ba1d19d0460fa4b63bd1093afc514d67fe3c356247236326425
MD5 9107d028bd329dbfe4c1f19015ed6d80
SHA1 4384ca5e4d32f7dd86d8baddd1e690730d74e694
SHA512 81b14373b64ce14af26b70d12d831e05158d5a4fa8cec0508fef8a6ca65b6f4ef73928f4b1e617c68ddeacff9328a3d4433b041b7fb14de248b1428c51dbc716
TLSH
T103B01207825F01300058D99372F418903C18C026308811FEC980C1803A58884C153AA1
MD5 SHA1 SHA512 TLSH

Submit Download

local_policy.jar

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\local_policy.jar
Size 3KB
SHA256 b8becc3ef2e7ff7d2165dd1a4e13b9c59fd626f20a26af9a32277c1f4b5d5bc7
MD5 57aaaa3176dc28fc554ef0906d01041a
SHA1 238b8826e110f58acb2e1959773b0a577cd4d569
SHA512 8704b5e3665f28d1a0bc2a063f4bc07ba3c7cd8611e06c0d636a91d5ea55f63e85c6d2ad49e5d8ece267d43ca3800b3cd09cf369841c94d30692eb715bb0098e
TLSH
T180715E263FCDC26CF16B10F783008206A5E455481FC4B6471DD0C8C96EF9D160A43EEB
MD5 SHA1 SHA512 TLSH

Submit Download

tzdb.dat

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\tzdb.dat
Size 98KB
SHA256 79f315b59efa1c8eb1c43b8a56cf4b2efbfa7a0d8cd1f49ea3ff3c67ad095945
MD5 15587f96261d342f4195b7b5308e415a
SHA1 61ef3adae0d6565e80fdc5cb9e33791c211dbfb2
SHA512 746d464f40b6199500882af39b8ed2c36f41949afdffdfb55dd29e4cb6246e5ae799b00ca306d8ed812e810aaa8f35c9b117d5cd8dfe3fb746f2825470877e2d
SSDEEP 1536:UovmEMaoVdLe4mG5CV4+5a/////wn+7TaK69rUMt7qdI1oLqoXo:UqMy4/mFSGKkrjt7qdIqLbXo
TLSH
T1DBA3D5783B6190B7B2CB4222162B9B93197DAD816FC3080279F17D5E4A76AD7613334F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzmappings

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\tzmappings
Size 8KB
SHA256 d936ee24810b747c54192b4b5a279f21179fe3ceb42d113d025a368ebb7cb5a7
MD5 7d4abbcfb06d083f349e27d7e6972f3c
SHA1 eb91253590526f7be7415839ccbf702683639c8c
SHA512 e5c2fbbc07cd53baf14f3cc239b56b42b73de47f9b7904aabf7d97695d2ab8866d0c8179235cbf022245949b9b8e419985e328aa5ed333b14b8b4de2c82b225e
SSDEEP 192:qwfOC9OYOxUmHomjgDwlZ+TFXsq2H+aUHCHQj4mEo:qqgniTyq0iV
TLSH
T13102FF007260A7CAD5B3AC4B374A7397F416B2D81CC19E6C2A6BC7AF5D059B611E1A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

release

Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\release
Size 527B
SHA256 6231a6bd08e537b72b90929fd90a7f576eae91b6dead14412ac3638139d6d913
MD5 80c849b03d8457346027b4da21d77958
SHA1 f6788e7bd9375d85180070dfb76be6b32fea8372
SHA512 b5a57ece251c6f6367486b66701ff297a5bb42c8f8e6f0d0790a4e06a86875a646c203f76e4cb2ca06d163f931e9f5044b250c95a8e06a5b1d8344dbbcddc894
TLSH
T144F0057345C62B3192D333E63F21FA41B6114CD953613ED1B89875C115C9ADD1539A01
MD5 SHA1 SHA512 TLSH

Submit Download

starter-core-1.266-v2.exe

Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.266-v2.exe
Size 2.5MB
SHA256 7458896aa864fe93cad9cd64e87bff2efe922d139cdbf356e70205aa549ca86f
MD5 12c1240fb44a90b10a559aae10c3a632
SHA1 42257b0b9e313a2158fbefe93081765a1efef869
SHA512 835cd7a01dfc30d57cbe228551709e90fa3aabd8152436c63e1ae4f53f382ede15fa2ca3a8fe40df7f35161457ee2836d04d5c930c77e161bf64e8fe755a22fb
SSDEEP 49152:Be+HIcnaiHOAB/DTtYyYCXuiQCgm72NVezOo1VQWUzKz:EgnZPeiQCghNVrbWUza
TLSH
T148C51229BEC680A5F527943500D2D59764728ED8C017E5CFD3F8BA4E8876C824B87BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1140-1657-0x0000013DED550000-0x0000013DED6EA000-memory.dmp

Download

memory/1140-1662-0x0000013DF04E0000-0x0000013DF04E9000-memory.dmp

Download

memory/1220-1676-0x00000000028B0000-0x00000000028B1000-memory.dmp

Download

memory/1436-1949-0x0000000001350000-0x00000000014EA000-memory.dmp

Download

memory/1504-1899-0x0000000001590000-0x0000000001591000-memory.dmp

Download

memory/1912-1998-0x0000000002D40000-0x0000000002D49000-memory.dmp

Download

memory/1912-1997-0x0000000000D60000-0x0000000000EFA000-memory.dmp

Download

memory/1912-1996-0x0000000002770000-0x0000000002771000-memory.dmp

Download

memory/1912-1988-0x0000000002770000-0x0000000002771000-memory.dmp

Download

memory/1992-1946-0x0000000000F90000-0x0000000000F91000-memory.dmp

Download

memory/1992-1931-0x0000000000F90000-0x0000000000F91000-memory.dmp

Download

memory/1992-1940-0x0000000000F90000-0x0000000000F91000-memory.dmp

Download

memory/1992-1948-0x0000000021450000-0x0000000021459000-memory.dmp

Download

memory/1992-1947-0x0000000000CB0000-0x0000000000E4A000-memory.dmp

Download

memory/2148-1999-0x00000000013A0000-0x000000000153A000-memory.dmp

Download

memory/2656-2032-0x0000000003580000-0x0000000003589000-memory.dmp

Download

memory/2656-1300-0x0000000003580000-0x0000000003589000-memory.dmp

Download

memory/3208-5012-0x000001E7E9DB0000-0x000001E7E9F4A000-memory.dmp

Download

memory/4852-1391-0x0000000000400000-0x0000000000417000-memory.dmp

Download

memory/4852-1396-0x0000000000400000-0x0000000000417000-memory.dmp

Download

memory/5152-5000-0x0000013F27140000-0x0000013F272DA000-memory.dmp

Download

memory/5188-4329-0x0000000000400000-0x0000000000420000-memory.dmp

Download

memory/5220-5041-0x0000021B10DB0000-0x0000021B10F4A000-memory.dmp

Download

memory/5244-5025-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5048-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-4650-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-4634-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5140-0x0000000002470000-0x0000000002479000-memory.dmp

Download

memory/5244-4595-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5008-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-4577-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5015-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5027-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5141-0x000000001EBB0000-0x000000001ED4A000-memory.dmp

Download

memory/5244-5032-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5042-0x0000000002470000-0x0000000002479000-memory.dmp

Download

memory/5244-5139-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5043-0x000000001EBB0000-0x000000001ED4A000-memory.dmp

Download

memory/5244-4673-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5055-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5060-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5132-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5244-5097-0x0000000000B90000-0x0000000000B91000-memory.dmp

Download

memory/5668-5096-0x00000271FE8D0000-0x00000271FEA6A000-memory.dmp

Download

memory/5680-4996-0x000001CEF56C0000-0x000001CEF585A000-memory.dmp

Download

memory/6384-4297-0x00000000046C0000-0x0000000004724000-memory.dmp

Download

memory/6384-4299-0x0000000004A20000-0x0000000004AA3000-memory.dmp

Download

memory/6700-5104-0x000001248FE20000-0x000001248FFBA000-memory.dmp

Download

memory/7140-4300-0x0000000002C60000-0x0000000002CC4000-memory.dmp

Download

memory/8012-5102-0x0000015FD2F80000-0x0000015FD2F92000-memory.dmp

Download

memory/8012-5101-0x0000015FD2B40000-0x0000015FD2CDA000-memory.dmp

Download

memory/8012-5094-0x0000015FD2B40000-0x0000015FD2CDA000-memory.dmp

Download