Overview

overview

7

Static

static

3

SKlauncher...up.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    439s
  • max time network
    444s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-es
  • resource tags

    arch:x64arch:x86image:win11-20260130-eslocale:es-esos:windows11-21h2-x64systemwindows
  • submitted
    27/04/2026, 16:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SKlauncher-3.2.18_Setup.exe
  • Size 3.6MB
  • Sample260427-trmfqaex7z
  • SHA256 5d7f6d20b4de8c600f81d64b4608bb65bccf92bfc72a727831c8785a63b68997
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Signatures

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Network Service Discovery 1 TTPs 3 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 45 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 34 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 17 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4024
    • C:\Users\Admin\AppData\Local\Temp\is-M1L3XDXT5Z.tmp\SKlauncher-3.2.18_Setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-M1L3XDXT5Z.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$60204,2154364,841216,C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4784
      • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
        "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1388
        • C:\Windows\SYSTEM32\reg.exe
          reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
          4⤵
            PID:2564
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe -XshowSettings:properties -version
            4⤵
            • Executes dropped EXE
            PID:6128
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe -Xdiag -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -Xmx4096m -javaagent:C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar -DMcEmu=net.minecraft.client.main.Main -Dlog4j2.formatMsgNoLookups=true -Djava.rmi.server.useCodebaseOnly=true -Dcom.sun.jndi.rmi.object.trustURLCodebase=false -Dcom.sun.jndi.cosnaming.object.trustURLCodebase=false -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\log4j2-1.7.xml -Dsklauncher.discordrpc=true -Dsklauncher.gametype=vanilla -Dsklauncher.minecraft=1.8.9 -Dsklauncher.dns=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump "-Dos.name=Windows 11" -Dos.version=11.0 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\1.8.9-natives-676885427860 -Dminecraft.launcher.brand=java-minecraft-launcher -Dminecraft.launcher.version=1.6.93 -Dminecraft.client.jar=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\1.8.9.jar -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\netty\1.8.8\netty-1.8.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\3.4.0\jna-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.6\jopt-simple-4.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.23.Final\netty-all-4.0.23.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\17.0\guava-17.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.3.2\commons-lang3-3.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.21\authlib-1.5.21.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\realms\1.7.59\realms-1.7.59.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\6.5\twitch-6.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\1.8.9.jar net.minecraft.client.main.Main --username JennyLovers --version 1.8.9 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.8 --uuid 3097d576429832fbb1f805c0fb4f4d2e --accessToken bf95991718a843679ff9092fb923df42 --userProperties {} --userType msa --width 854 --height 480
            4⤵
            • Executes dropped EXE
            • Modifies registry class
            PID:3828
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -XshowSettings:properties -version
            4⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:6976
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -Xdiag -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -Xmx4096m -javaagent:C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar -DMcEmu=net.minecraft.client.main.Main -Dlog4j2.formatMsgNoLookups=true -Djava.rmi.server.useCodebaseOnly=true -Dcom.sun.jndi.rmi.object.trustURLCodebase=false -Dcom.sun.jndi.cosnaming.object.trustURLCodebase=false -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\log4j2-1.12.xml -Dsklauncher.discordrpc=true -Dsklauncher.gametype=vanilla -Dsklauncher.minecraft=1.17.1 -Dsklauncher.dns=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump "-Dos.name=Windows 10" -Dos.version=10.0 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-751773582120 -Dminecraft.launcher.brand=java-minecraft-launcher -Dminecraft.launcher.version=1.6.93 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\blocklist\1.0.5\blocklist-1.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\patchy\2.1.6\patchy-2.1.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\github\oshi\oshi-core\5.7.5\oshi-core-5.7.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\5.8.0\jna-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna-platform\5.8.0\jna-platform-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\slf4j\slf4j-api\1.8.0-beta4\slf4j-api-1.8.0-beta4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-slf4j18-impl\2.14.1\log4j-slf4j18-impl-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j\66.1\icu4j-66.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\javabridge\1.1.23\javabridge-1.1.23.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.1.25.Final\netty-all-4.1.25.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\21.0\guava-21.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.5\commons-lang3-3.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.5\commons-io-2.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.10\commons-codec-1.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\brigadier\1.0.18\brigadier-1.0.18.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\datafixerupper\4.0.26\datafixerupper-4.0.26.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\2.3.31\authlib-2.3.31.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\it\unimi\dsi\fastutil\8.2.1\fastutil-8.2.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.14.1\log4j-api-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.2.2\lwjgl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.2.2\lwjgl-jemalloc-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.2.2\lwjgl-openal-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.2.2\lwjgl-opengl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.2.2\lwjgl-glfw-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.2.2\lwjgl-stb-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.2.2\lwjgl-tinyfd-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\text2speech\1.11.3\text2speech-1.11.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1.jar net.minecraft.client.main.Main --username JennyLovers --version 1.17.1 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.17 --uuid 3097d576429832fbb1f805c0fb4f4d2e --accessToken bf95991718a843679ff9092fb923df42 --userType msa --versionType release --width 854 --height 480
            4⤵
            • Executes dropped EXE
            • Drops file in Windows directory
            • Checks processor information in registry
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:7064
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
      • Network Service Discovery
      PID:2568
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:5436
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      PID:3396
    • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
      "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
      1⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1760
      • C:\Windows\SYSTEM32\reg.exe
        reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
        2⤵
          PID:1780
        • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
          C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -XshowSettings:properties -version
          2⤵
          • Executes dropped EXE
          • Checks processor information in registry
          PID:5360
        • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
          C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -Xdiag -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -Xmx4096m -javaagent:C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar -DMcEmu=net.minecraft.client.main.Main -Dlog4j2.formatMsgNoLookups=true -Djava.rmi.server.useCodebaseOnly=true -Dcom.sun.jndi.rmi.object.trustURLCodebase=false -Dcom.sun.jndi.cosnaming.object.trustURLCodebase=false -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\log4j2-1.12.xml -Dsklauncher.discordrpc=true -Dsklauncher.gametype=vanilla -Dsklauncher.minecraft=1.17.1 -Dsklauncher.dns=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump "-Dos.name=Windows 10" -Dos.version=10.0 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-804739974530 -Dminecraft.launcher.brand=java-minecraft-launcher -Dminecraft.launcher.version=1.6.93 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\blocklist\1.0.5\blocklist-1.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\patchy\2.1.6\patchy-2.1.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\github\oshi\oshi-core\5.7.5\oshi-core-5.7.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\5.8.0\jna-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna-platform\5.8.0\jna-platform-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\slf4j\slf4j-api\1.8.0-beta4\slf4j-api-1.8.0-beta4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-slf4j18-impl\2.14.1\log4j-slf4j18-impl-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j\66.1\icu4j-66.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\javabridge\1.1.23\javabridge-1.1.23.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.1.25.Final\netty-all-4.1.25.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\21.0\guava-21.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.5\commons-lang3-3.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.5\commons-io-2.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.10\commons-codec-1.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\brigadier\1.0.18\brigadier-1.0.18.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\datafixerupper\4.0.26\datafixerupper-4.0.26.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\2.3.31\authlib-2.3.31.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\it\unimi\dsi\fastutil\8.2.1\fastutil-8.2.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.14.1\log4j-api-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.2.2\lwjgl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.2.2\lwjgl-jemalloc-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.2.2\lwjgl-openal-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.2.2\lwjgl-opengl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.2.2\lwjgl-glfw-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.2.2\lwjgl-stb-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.2.2\lwjgl-tinyfd-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\text2speech\1.11.3\text2speech-1.11.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1.jar net.minecraft.client.main.Main --username JennyLovers --version 1.17.1 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.17 --uuid 3097d576429832fbb1f805c0fb4f4d2e --accessToken - --userType msa --versionType release --width 854 --height 480
          2⤵
          • Executes dropped EXE
          • Checks processor information in registry
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:5716
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
        • Network Service Discovery
        PID:720
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:4988
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Checks processor information in registry
        • Modifies registry class
        PID:3024
      • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
        "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
        1⤵
        • Executes dropped EXE
        • Checks processor information in registry
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4808
        • C:\Windows\SYSTEM32\reg.exe
          reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
          2⤵
            PID:6184
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -XshowSettings:properties -version
            2⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:4636
          • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe
            C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe -Xdiag -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -Xmx4096m -javaagent:C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher-fx.jar -DMcEmu=net.minecraft.client.main.Main -Dlog4j2.formatMsgNoLookups=true -Djava.rmi.server.useCodebaseOnly=true -Dcom.sun.jndi.rmi.object.trustURLCodebase=false -Dcom.sun.jndi.cosnaming.object.trustURLCodebase=false -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\log4j2-1.12.xml -Dsklauncher.discordrpc=true -Dsklauncher.gametype=vanilla -Dsklauncher.minecraft=1.17.1 -Dsklauncher.dns=true -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump "-Dos.name=Windows 10" -Dos.version=10.0 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-908203821290 -Dminecraft.launcher.brand=java-minecraft-launcher -Dminecraft.launcher.version=1.6.93 -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\blocklist\1.0.5\blocklist-1.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\patchy\2.1.6\patchy-2.1.6.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\github\oshi\oshi-core\5.7.5\oshi-core-5.7.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\5.8.0\jna-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna-platform\5.8.0\jna-platform-5.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\slf4j\slf4j-api\1.8.0-beta4\slf4j-api-1.8.0-beta4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-slf4j18-impl\2.14.1\log4j-slf4j18-impl-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j\66.1\icu4j-66.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\javabridge\1.1.23\javabridge-1.1.23.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.1.25.Final\netty-all-4.1.25.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\21.0\guava-21.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.5\commons-lang3-3.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.5\commons-io-2.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.10\commons-codec-1.10.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\brigadier\1.0.18\brigadier-1.0.18.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\datafixerupper\4.0.26\datafixerupper-4.0.26.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\2.3.31\authlib-2.3.31.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\it\unimi\dsi\fastutil\8.2.1\fastutil-8.2.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.14.1\log4j-api-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\3.2.2\lwjgl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.2.2\lwjgl-jemalloc-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-openal\3.2.2\lwjgl-openal-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-opengl\3.2.2\lwjgl-opengl-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-glfw\3.2.2\lwjgl-glfw-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-stb\3.2.2\lwjgl-stb-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.2.2\lwjgl-tinyfd-3.2.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\text2speech\1.11.3\text2speech-1.11.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1.jar net.minecraft.client.main.Main --username JennyLovers --version 1.17.1 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft\instances\c8726973d00243739a0f429b32554087 --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.17 --uuid 3097d576429832fbb1f805c0fb4f4d2e --accessToken - --userType msa --versionType release --width 854 --height 480
            2⤵
            • Executes dropped EXE
            • Checks processor information in registry
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:5920
        • C:\Windows\System32\GameBarPresenceWriter.exe
          "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
          1⤵
          • Network Service Discovery
          PID:2612
        • C:\Windows\system32\OpenWith.exe
          C:\Windows\system32\OpenWith.exe -Embedding
          1⤵
          • Suspicious use of SetWindowsHookEx
          PID:5404
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
          1⤵
          • Checks processor information in registry
          • Modifies registry class
          PID:6964
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
          1⤵
            PID:5584
          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
            1⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            PID:4144

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                SearchHoverUnifiedTileModelCache.dat
                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                • Size 20KB
                • SHA256 fbb203fce3408b3e73ddb4aa291caa6bfea061cc944a255ddecc204bb84caacd
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF10621477242352055674.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF10621477242352055674.tmp
                • Size 393KB
                • SHA256 4c392dcc8ad916f0f9df7559ab5563b01dd94f9f3b2db34617fe392e00060339
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF11222295678010626327.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF11222295678010626327.tmp
                • Size 405KB
                • SHA256 0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF11359946115773818008.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF11359946115773818008.tmp
                • Size 404KB
                • SHA256 6bdebeb76083e187c7ae59420bfc24e851edb572e1a8d97c1c37b7b2dc26148c
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF17413074127149183098.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF17413074127149183098.tmp
                • Size 398KB
                • SHA256 1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF2861251111185688676.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF2861251111185688676.tmp
                • Size 397KB
                • SHA256 64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                +JXF7135880057873226080.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\+JXF7135880057873226080.tmp
                • Size 401KB
                • SHA256 1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                SKL_TempStyleClass16654007170950346928.css
                • Path C:\Users\Admin\AppData\Local\Temp\SKL_TempStyleClass16654007170950346928.css
                • Size 264B
                • SHA256 203015cc925d561820d225a795e1c6a56e49ff12fe4c874709e717335aa0dc18
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                discord-rpc.dll
                • Path C:\Users\Admin\AppData\Local\Temp\discord-rpc\discord-rpc.dll
                • Size 390KB
                • SHA256 5cc2e504800cf4ed2f4781364f661ea22349658ddc391b5d54195e573109d87b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                flatlaf-windows-x86_64-5553400045300.dll
                • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-5553400045300.dll
                • Size 33KB
                • SHA256 390ed515d10c94bb91e30012d4ef5545f9ebf5fc20c5c5c9c28b8ea16bf4af60
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                imageio16754841701257212358.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\imageio16754841701257212358.tmp
                • Size 12KB
                • SHA256 0801cc8ccae927add5f44b56ee8bfef75d638625b05328a9a1ec7bf39589d63d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                imageio2096299679251671424.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\imageio2096299679251671424.tmp
                • Size 1KB
                • SHA256 face76c9c4fad9476a1d80483d41772c805808a1383012b1c22065e30d32ede6
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                _is7z.dll
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\_isetup\_is7z.dll
                • Size 971KB
                • SHA256 f97cda058bfe97a7e9ced5cde7018bbc26e35155c3c7405c6146808f8d06806d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _isdecmp.dll
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\_isetup\_isdecmp.dll
                • Size 28KB
                • SHA256 8287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-0.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-0.jar.sha1
                • Size 40B
                • SHA256 a1f58b506c61eb64f9d38183fa7002a7fd5f7dbecb1f3bd16d1c5a7f181df050
                • MD5 SHA1 SHA512
                Submit Download

                javafx-1.jar
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-1.jar
                • Size 5.7MB
                • SHA256 6f8dde0282b96c215f1d1b7638c78031ddfd970e6e7f8d6834a723ebf85be6ae
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-1.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-1.jar.sha1
                • Size 40B
                • SHA256 d8e035498ba5918acb7899067177fdefb3300d7690419ec6b564e49902ab0160
                • MD5 SHA1 SHA512
                Submit Download

                javafx-2.jar
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-2.jar
                • Size 2.5MB
                • SHA256 0ab89fa8531f5d6f1a15b6c76cf5a7d44e60e273932ad282b29b8dd324e725ff
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-2.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-2.jar.sha1
                • Size 40B
                • SHA256 d147881dc89769b2b4c524d01a1e498aa228eca808f18755a5f1ea1742b00546
                • MD5 SHA1 SHA512
                Submit Download

                javafx-3.jar
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-3.jar
                • Size 1.1MB
                • SHA256 6828f4fd83ac7caeb7e25c21e4050606d384baebb18bc3b1f35cd866020757cc
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-3.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-3.jar.sha1
                • Size 40B
                • SHA256 16309d1718c54dc502e50a4918fdfd0b24ddfaba28ba35bca30c89d42fab437c
                • MD5 SHA1 SHA512
                Submit Download

                javafx-4.jar
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-4.jar
                • Size 88KB
                • SHA256 0dc9f29e41cf9be601990c270f84b2f6655e4d95ebb27ccc9cb0953be50d1229
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-4.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-4.jar.sha1
                • Size 40B
                • SHA256 c3473edda477b297e19bdbbdfe306c1475d93addb21b80f923ddce3fe822556b
                • MD5 SHA1 SHA512
                Submit Download

                javafx-5.jar
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-5.jar
                • Size 30.5MB
                • SHA256 5f3fb26455c8d8d61f6b1080483234cf8b2cc1b8e44f5e9e50ecc176d2a064e1
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javafx-5.jar.sha1
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\javafx-5.jar.sha1
                • Size 40B
                • SHA256 b52f2348ae1c287ea01956214bf5b74a0ae4aa1d96fd5992e35848194b85aaf0
                • MD5 SHA1 SHA512
                Submit Download

                jre.zip
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\jre.zip
                • Size 47.2MB
                • SHA256 a72b61a7902ea2baf940fca8e89913e2347b98c294943632a4f9621c0226e684
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                is-5HQULE49XK.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\conf\security\policy\unlimited\is-5HQULE49XK.tmp
                • Size 146B
                • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                is-6BUWLIAFZP.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-6BUWLIAFZP.tmp
                • Size 33B
                • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                • MD5 SHA1 SHA512
                Submit Download

                is-C8ZFPOG2RG.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-C8ZFPOG2RG.tmp
                • Size 49B
                • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
                • MD5 SHA1 SHA512
                Submit Download

                is-FF58W8T2RL.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\is-CK6I5233YH.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-FF58W8T2RL.tmp
                • Size 44B
                • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
                • MD5 SHA1 SHA512
                Submit Download

                SKlauncher-3.2.18_Setup.tmp
                • Path C:\Users\Admin\AppData\Local\Temp\is-M1L3XDXT5Z.tmp\SKlauncher-3.2.18_Setup.tmp
                • Size 3.5MB
                • SHA256 942c7f45e3ee02dae9acc679d028a7a0322d28107dbd06750e803a9e35a019dd
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jna3836666908858676804.dll
                • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna3836666908858676804.dll
                • Size 267KB
                • SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jna5153595761504871159.dll
                • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna5153595761504871159.dll
                • Size 248KB
                • SHA256 76f19b52423774932831dcba0596989ec56213f9b217a0432fbc122f99704a2a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jna7407407801837566573.dll
                • Path C:\Users\Admin\AppData\Local\Temp\jna\jna7407407801837566573.dll
                • Size 195KB
                • SHA256 b7f1133492a060a857a1ef0877e18e382f1c418e5dac2e674abc65f336241d61
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                skl_cacerts8422368740040432532
                • Path C:\Users\Admin\AppData\Local\Temp\skl_cacerts8422368740040432532
                • Size 160KB
                • SHA256 9be4f8e5809fb149498c469b08f61066e6521f3e1de3a9b71360186344feca0f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                1.17.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\assets\indexes\1.17.json
                • Size 338KB
                • SHA256 aeb44561c6e587af85b5dc47344e0a106e4054ad68a61e77044efc373385fc53
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 831B
                • SHA256 2961e9cb6e9463f626643d46b5f24e3d15b1c76f39e58fbcca053090ede7d55d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 831B
                • SHA256 e1a3e426a8722202a8b5a8a1e4cf9e19e9dd3e3f3776dfdb222a4af3aef06578
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 603fe84a6ca3154a1c4cc281a595387029d27eb4e212cb44871c3c2ea11a9a1b
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 4cedbe7e09e5bea33f1e1dbe7683c749baf025896856712c6aa293e1b2653449
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 08d7c965e4a53399b388ff0fe5d6b7a0c5cc9880cc063296b8667d6ccbd6b175
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 c430164a4ca34b49935ab308650af7cf1c2fdcfa95b5ebc5e1bdfbcf7e7e4649
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 d2067c9a4b1b52d617d24306fde7c3f104f3db3f8e7a32d072b0eeb7b21797c0
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
                • Size 1KB
                • SHA256 4d65ad7baa58028d821539f4e7d5acedc7273633c0695bf762ba373c820d3872
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json.tmp.1777306752893
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json.tmp.1777306752893
                • Size 530B
                • SHA256 bdc8f15dba41039743f8fbf1b70fb1f863c4566b35679bc7e866b0161fd5f7bf
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                launcher_profiles.json.tmp.1777306962220
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json.tmp.1777306962220
                • Size 1KB
                • SHA256 7f8780c883f959f064ce727c2e660c70cdb90b46a9f694389255fe5d119e4bd2
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                jmxremote.access
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\management\jmxremote.access
                • Size 3KB
                • SHA256 0c25d26ee212ca1e8c33f67c3c460d43fe849c3a1d23dbe341148517602b280c
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                jmxremote.password.template
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\management\jmxremote.password.template
                • Size 5KB
                • SHA256 0273b6a6b9e20e6ce54c5aee70164028e0395063b2b7d39060a40b6495543dbf
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                management.properties
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\management\management.properties
                • Size 14KB
                • SHA256 f80096ec028dcb71625c398ec16d12023cafc6a1c055aceaed07d02e8d56f637
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                net.properties
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\net.properties
                • Size 6KB
                • SHA256 5bc726671936e0af4fdf6bed67d9e3a20a92c30b0ba23673d0314baa5e3ffb08
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                README.txt
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\security\policy\README.txt
                • Size 2KB
                • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                default_local.policy
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\security\policy\limited\default_local.policy
                • Size 647B
                • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                exempt_local.policy
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\security\policy\limited\exempt_local.policy
                • Size 566B
                • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                sound.properties.lz
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\conf\sound.properties.lz
                • Size 473B
                • SHA256 3f76592a5a233c6c14a827da2dddfa01ae352cfa2c5fac1a2374b83350333a8c
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                ADDITIONAL_LICENSE_INFO
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\java.base\ADDITIONAL_LICENSE_INFO
                • Size 2KB
                • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                LICENSE
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\java.base\LICENSE
                • Size 18KB
                • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                aes.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\java.base\aes.md
                • Size 1KB
                • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                c-libutl.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\java.base\c-libutl.md
                • Size 1KB
                • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                pkcs11wrapper.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
                • Size 2KB
                • SHA256 371974b1fca3744a3892c7ee1fcc593b8b4281fc218f4cafd2f709e9df5fd81d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                dynalink.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\jdk.dynalink\dynalink.md
                • Size 1KB
                • SHA256 17312591cabee3ef6c34ed8897d92e4e361ba9cea41ec00dcd61a322a8fc2cdb
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                cldr.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\jdk.localedata\cldr.md
                • Size 33B
                • SHA256 09972449731a1d1a0863af0384aeb7839f84cac74983c96856e6c305e31ed8b2
                • MD5 SHA1 SHA512
                Submit Download

                thaidict.md
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\legal\jdk.localedata\thaidict.md
                • Size 1KB
                • SHA256 c326144a2351c9608fa708b5d7d3c5a3da03e82b66479b128e9db4969539824a
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                psfont.properties.ja
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\lib\psfont.properties.ja
                • Size 3KB
                • SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                psfontj2d.properties
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\lib\psfontj2d.properties
                • Size 11KB
                • SHA256 780c565d5af3ee6f68b887b75c041cdf46a0592f67012f12eeb691283e92630a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                tzmappings
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\lib\tzmappings
                • Size 21KB
                • SHA256 9146158fff31bd9632a6aa13b7f1aa38027019f7b15d85936a25de929914ab10
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                msvcr100.dll.lz
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\plugin2\msvcr100.dll.lz
                • Size 310KB
                • SHA256 5333f096f433d0014a377889e04b81b21dbe8e814e3f277351cb3c415892702e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                messages_zh_HK.properties.lz
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\lib\deploy\messages_zh_HK.properties.lz
                • Size 1KB
                • SHA256 4df05d0c04afbeb8c6a44ff055be0dd3981b37d85535c014b9751e84d44d56fe
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                sound.properties
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows-x64\jre-legacy\lib\sound.properties
                • Size 1KB
                • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                accounts.bin
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\accounts.bin
                • Size 47B
                • SHA256 e489c79e8ce8aee1de754ebb11ad4c44dd9c641ea0de1b23ef16eea2210c46da
                • MD5 SHA1 SHA512
                Submit Download

                accounts.bin.tmp.1777306998846
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\accounts.bin.tmp.1777306998846
                • Size 145B
                • SHA256 3a35b8185405b8a10f9aee04ec69ce49ad6e6fc1885c1d3c99d5432ef184b990
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                javafx-base-22.0.2-win.jar
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\javafx\javafx-base-22.0.2-win.jar
                • Size 739KB
                • SHA256 17154354881d15014510b55361999931240f03e247023409171b83286d605776
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                INDEX.LIST
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-751773582120\META-INF\INDEX.LIST
                • Size 182B
                • SHA256 fdc94eeaca588c5721805ee22d28fc88135e9c0b24eae687bb06b27c76bc2757
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                MANIFEST.MF
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-751773582120\META-INF\MANIFEST.MF
                • Size 346B
                • SHA256 9faacedbabf86c814b3e31f0af91137662c93e5393ec3a9e592cd4ee070eb7f4
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                module-info.class
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-751773582120\META-INF\versions\9\module-info.class
                • Size 194B
                • SHA256 1c7bf91f71462537a3aa10b40231c8c3311a6474650fe8d28ebdba926fd5b5f3
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                OpenAL.dll.git
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-908203821290\OpenAL.dll.git
                • Size 40B
                • SHA256 6369f0eb7ede17f649b06cf6b34bd8a1e5a44edb69e93c975aada2adc683a4dc
                • MD5 SHA1 SHA512
                Submit Download

                glfw.dll.git
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-908203821290\glfw.dll.git
                • Size 40B
                • SHA256 61b515bfe67f2fb251566dade93ff3450ee0123e58bd94231bcab3ac255608b4
                • MD5 SHA1 SHA512
                Submit Download

                jemalloc.dll.git
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-908203821290\jemalloc.dll.git
                • Size 40B
                • SHA256 f6701bf0645e8b4fdc10cdbff75bd1a5b5270c000318d41e4cbf091c6fad53a6
                • MD5 SHA1 SHA512
                Submit Download

                lwjgl.dll.git
                • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.17.1\1.17.1-natives-908203821290\lwjgl.dll.git
                • Size 42B
                • SHA256 5d8b82df24b919dbf2efbfeddca59dfa676f982998c078e9d08a0be6c81f2a7e
                • MD5 SHA1 SHA512
                Submit Download

                SKlauncher.jar
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar
                • Size 1.3MB
                • SHA256 25a73e3770a1d8d14bce53e8920e2e893aacc3c715d0fb22f878ef2090d03863
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                awt.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\awt.dll
                • Size 1.5MB
                • SHA256 bb338d549c0a83441b876f776b46ee1028309d63314e6ec672d896c07e2dd262
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                extnet.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\extnet.dll
                • Size 24KB
                • SHA256 eb3f74cb6ac67cce51dffdc79b3d071f54232cf18f37bfdc438c6a3d9e43ad3a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                fontmanager.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\fontmanager.dll
                • Size 956KB
                • SHA256 a30c3feee9d5942800f54671c2863af2f9e610ccc17a29bcf562c8ac60dc216c
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                freetype.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\freetype.dll
                • Size 542KB
                • SHA256 07f0707ea6eeac8c941c9eeff83073da2c9f3070358b13a2f5211eb44c58242d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                java.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\java.dll
                • Size 126KB
                • SHA256 30be3e831787caaae87922a1a611e0ca51811e1552031f3c3ed045eddafcb102
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                javaw.exe
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
                • Size 49KB
                • SHA256 a3a771996ffc7fd62fdba27b3bca8be51ffe6da50e4f9dd21bcee329a76ea358
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jimage.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jimage.dll
                • Size 33KB
                • SHA256 e3829acbb109a1c79cfb21189f544f7d3df759489c6488637a14a30d739f726e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jli.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jli.dll
                • Size 92KB
                • SHA256 8934a508aef04ea6aa9dbe1972618f1f525abf6720511ae04f4f9e14534f2bca
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jsvml.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jsvml.dll
                • Size 850KB
                • SHA256 66a8d2b7a85deebc98f6acffd8a73bb4a22a5acf62d16d2d8e83583a80a1454e
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                msvcp140.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\msvcp140.dll
                • Size 561KB
                • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                net.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\net.dll
                • Size 60KB
                • SHA256 a6cc6548685840ae4fac0da5aa2a871ec650958b3078311ab1bdd3b838ca6c4b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                nio.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\nio.dll
                • Size 81KB
                • SHA256 259aa47a3aac56ef4d2eec9480e548358f70b9b29cb7e8cc887e97f702e8cc3f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                classes.jsa
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\classes.jsa
                • Size 12.2MB
                • SHA256 3465e58c9ef81802f0bbecdf3265cf927b9e8a9defb11dd3d4523e9932b4ae2d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jvm.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\jvm.dll
                • Size 13.5MB
                • SHA256 2b9a1b32004851eed285193c031e241821ada16d6c5658a99ab4e43e6981a137
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                sunmscapi.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\sunmscapi.dll
                • Size 49KB
                • SHA256 c397bfe08108a68b2af00764cc8d852f35f9c3b078dad6c40ee7d7c4b06b9c38
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                vcruntime140.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140.dll
                • Size 117KB
                • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                vcruntime140_1.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140_1.dll
                • Size 48KB
                • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                zip.dll
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\zip.dll
                • Size 88KB
                • SHA256 fd7d99732f5ba371964bbc35b67d07cfdf2ddf8d175e6f420f24d1b1f508ed37
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                net.properties
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\net.properties
                • Size 7KB
                • SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                java.security
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\java.security
                • Size 65KB
                • SHA256 c34c3504e41af63639661aedf8d0864d8157df0980dc4c22d014a7170c5897e1
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                default_local.policy
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\policy\unlimited\default_local.policy
                • Size 193B
                • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                fontconfig.bfc
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\fontconfig.bfc
                • Size 4KB
                • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                jvm.cfg
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\jvm.cfg
                • Size 29B
                • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                • MD5 SHA1 SHA512
                Submit Download

                blocked.certs
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\security\blocked.certs
                • Size 2KB
                • SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                cacerts
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\security\cacerts
                • Size 129KB
                • SHA256 707312d3e8018928f53d108e4534f628cbbfad18196df1a2e72884300be1a69f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                tzdb.dat
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzdb.dat
                • Size 100KB
                • SHA256 7be2a3adf10ff841579629f7725b15f0db41e8856527ec72847b5477073a3d29
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                tzmappings
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzmappings
                • Size 21KB
                • SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                release
                • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\release
                • Size 1KB
                • SHA256 e7ec64455bb89ac4d09831b6fadbb453a8566499d9819f190f5d86f5915ee795
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                desktop.ini
                • Path C:\Users\Admin\Videos\Captures\desktop.ini
                • Size 190B
                • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                memory/1388-1463-0x0000023F80000000-0x0000023F80270000-memory.dmp
                Download

                memory/1388-2060-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2090-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2111-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2080-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2099-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2094-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2100-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2110-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2109-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2106-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2107-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2108-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2103-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2101-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2097-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2095-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2093-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2092-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2102-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2142-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2132-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2083-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2081-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2082-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2089-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2088-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2086-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2085-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2084-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2079-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2075-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2073-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2077-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2072-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2055-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2071-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2087-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2053-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2054-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2070-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2059-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2065-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2064-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2056-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2057-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2069-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2067-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2052-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2068-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2066-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2061-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2058-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2062-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-2063-0x0000023F80000000-0x0000023F81000000-memory.dmp
                Download

                memory/1388-1851-0x0000023F80000000-0x0000023F80270000-memory.dmp
                Download

                memory/1388-1852-0x0000023F87AC0000-0x0000023F87D30000-memory.dmp
                Download

                memory/1388-1812-0x0000023F87530000-0x0000023F877A0000-memory.dmp
                Download

                memory/1388-1811-0x0000023FF4B70000-0x0000023FF4B7C000-memory.dmp
                Download

                memory/1388-1464-0x0000023F87AC0000-0x0000023F87D30000-memory.dmp
                Download

                memory/1388-1438-0x0000023F87530000-0x0000023F877A0000-memory.dmp
                Download

                memory/4024-1453-0x0000000000F90000-0x000000000106D000-memory.dmp
                Download

                memory/4024-0-0x000000000104D000-0x000000000104E000-memory.dmp
                Download

                memory/4024-1455-0x0000000002480000-0x00000000024FA000-memory.dmp
                Download

                memory/4024-21-0x0000000002480000-0x00000000024FA000-memory.dmp
                Download

                memory/4024-20-0x0000000000F90000-0x000000000106D000-memory.dmp
                Download

                memory/4024-1-0x0000000000F90000-0x000000000106D000-memory.dmp
                Download

                memory/4784-1442-0x0000000002DE0000-0x0000000002E5A000-memory.dmp
                Download

                memory/4784-1447-0x00000000005C0000-0x0000000000958000-memory.dmp
                Download

                memory/4784-51-0x00000000005C0000-0x0000000000958000-memory.dmp
                Download

                memory/4784-22-0x00000000005C0000-0x0000000000958000-memory.dmp
                Download

                memory/4784-23-0x0000000002DE0000-0x0000000002E5A000-memory.dmp
                Download

                memory/4784-8-0x00000000005C0000-0x0000000000958000-memory.dmp
                Download

                memory/4784-7-0x00000000008ED000-0x00000000008EF000-memory.dmp
                Download