1c3f70589543e9f4c2658f7150891f5c170fe9d1ecd0a28e19766155a82dfbb1

Analysis

user interaction
yes
max time kernel
99s
max time network
101s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 11:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LegacyLauncher.exe
Size 110.9MB
Sample260710-nfk6mabs81
SHA256 1c3f70589543e9f4c2658f7150891f5c170fe9d1ecd0a28e19766155a82dfbb1
MD5 1330d55bb752305168cc64d56cb0cf38
SHA1 5afbe960fb35cc5aa67b8277c813e55aa4413f94
SHA512 a8e3f9ee20d8bc938544425d7d36026b0570f86d9c526aced12e5f4c9ea888d28bb9b8ffb082b8321c6d3bda5e7c9cc5f2e8884a0ea32524689a0e9612582ded
SSDEEP 1572864:XRXFJJUMEthroOQFv+O0wtMI5t4VMCYPn2G0shkj0wsEWZdfhcNP21GMGj/ZYOve:XZSBPZop0OMI5GY+cBh71Ij/uOEf7r
TLSH
T142483326E68B947BF6E935F009B7C075413B9F1129218622C6BC3998EE305CBDC1E75E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 7 IoCs

pid	Process
1672	LegacyLauncher.tmp
4324	LL.exe
5516	java.exe
2288	javaw.exe
5916	LL.exe
4408	java.exe
4784	javaw.exe

Loads dropped DLL 60 IoCs

pid	Process
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
5516	java.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
2288	javaw.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4408	java.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe
4784	javaw.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Network Service Discovery 1 TTPs 3 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
3120	GameBarPresenceWriter.exe
3712	GameBarPresenceWriter.exe
3504	GameBarPresenceWriter.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LL.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LegacyLauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LegacyLauncher.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LL.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/4104-1-0x0000000000720000-0x000000000085E000-memory.dmp	innosetup
behavioral2/memory/4104-11-0x0000000000720000-0x000000000085E000-memory.dmp	innosetup
behavioral2/memory/4104-1011-0x0000000000720000-0x000000000085E000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 12 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{A83C714E-9B50-44DC-9150-D6954957757F}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{5F2EFC87-33CB-40C1-8253-DAE699B2E851}	svchost.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1672	LegacyLauncher.tmp
1672	LegacyLauncher.tmp

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeBackupPrivilege	4784	javaw.exe
Token: SeBackupPrivilege	4784	javaw.exe
Token: SeDebugPrivilege	4784	javaw.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1672	LegacyLauncher.tmp

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
2288	javaw.exe
2288	javaw.exe
4964	OpenWith.exe
2288	javaw.exe
2288	javaw.exe
5224	OpenWith.exe
4784	javaw.exe
4784	javaw.exe
5712	OpenWith.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4104 wrote to memory of 1672	4104	LegacyLauncher.exe	86
PID 1672 wrote to memory of 4324	1672	LegacyLauncher.tmp	88
PID 4324 wrote to memory of 5516	4324	LL.exe	89
PID 5516 wrote to memory of 2288	5516	java.exe	92
PID 2288 wrote to memory of 5916	2288	javaw.exe	98
PID 5916 wrote to memory of 4408	5916	LL.exe	99
PID 4408 wrote to memory of 4784	4408	java.exe	101

C:\Users\Admin\AppData\Local\Temp\LegacyLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\LegacyLauncher.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4104
- C:\Users\Admin\AppData\Local\Temp\is-45R2E.tmp\LegacyLauncher.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-45R2E.tmp\LegacyLauncher.tmp" /SL5="$60192,114175046,1238016,C:\Users\Admin\AppData\Local\Temp\LegacyLauncher.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1672
- - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\LL.exe
    "C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\LL.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4324
  - - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.exe
      C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.exe -Dtlauncher.bootstrap.restartExec=LL.exe -Xmx64M -jar launcher/bootstrap.jar
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks processor information in registry
      Suspicious use of WriteProcessMemory
      PID:5516
    - - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\javaw.exe
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\javaw.exe -Xmx128m -Dfile.encoding=UTF-8 -Dtlauncher.systemCharset=UTF-8 -Dtlauncher.logFolder=C:\Users\Admin\AppData\Roaming\.tlauncher\logs --add-exports java.desktop/sun.awt=javafx.swing --add-exports javafx.graphics/com.sun.javafx.application=ALL-UNNAMED -Dtlauncher.bootstrap.restartExec=LL.exe -Dloader.main=net.legacylauncher.bootstrap.Bootstrap -classpath C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar org.springframework.boot.loader.PropertiesLauncher --packageMode windows --targetJar launcher/launcher.jar --targetLibFolder launcher/libraries -- --settings tl.properties
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:2288
      - C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\LL.exe
        
        LL.exe
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5916
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.exe
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.exe -Dtlauncher.bootstrap.restartExec=LL.exe -Xmx64M -jar launcher/bootstrap.jar
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of WriteProcessMemory
        
        PID:4408
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\javaw.exe
        
        C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\javaw.exe -Xmx256m -Dfile.encoding=UTF-8 -Djava.net.useSystemProxies=true -Dtlauncher.systemCharset=UTF-8 -Dtlauncher.logFolder=C:\Users\Admin\AppData\Roaming\.tlauncher\logs --add-exports java.desktop/sun.awt=javafx.swing --add-exports javafx.graphics/com.sun.javafx.application=ALL-UNNAMED -Dtlauncher.bootstrap.restartExec=LL.exe -Dloader.main=net.legacylauncher.bootstrap.Bootstrap -classpath C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar org.springframework.boot.loader.PropertiesLauncher --packageMode windows --targetJar launcher/launcher.jar --targetLibFolder launcher/libraries -- --settings tl.properties
        8⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of SetWindowsHookEx
        
        PID:4784

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4336

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:3120

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:4964

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:5236

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:3712

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5224

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:3504

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5712

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

flatlaf-windows-x86_64-6739189570900.dll

Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-6739189570900.dll
Size 22KB
SHA256 6f1fd322c52bef87a624256e185bb88c4e6ccc6462cc036c6248ffd77cf787ff
MD5 8d40e76db043f4d56fe5df5ae0040223
SHA1 b8576a6c107bc475891ac3b45c0431df1b9bd2db
SHA512 bf87a4a9feb92df6ce491410a48ee4c04b077febc8d292fc228cee8807a8061e45841b0565898702c5b052155ce28a32220b925dc51d58578090e0dab8187228
SSDEEP 384:dQpPX3l1FuqmnkGyzGy3i4EDOerHpwKNsOfJL1+fAM+o/8E9VF0NyBPcB:sdiqx0gTeIeJRuAMxkEPkB
TLSH
T110A25B576A309882DD5A89B9A0D91FABC5B1727263408DDF71B4C2048F53BC3377A3D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LegacyLauncher.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-45R2E.tmp\LegacyLauncher.tmp
Size 3.8MB
SHA256 1376001087d42866c6de97c0d676d3c09a51b63285659f63fb02084e9b9bd010
MD5 3458ed46f8e2df819cffe236d2468ba6
SHA1 e19008ad7487b22646cb6e5f7de97afcdced1f07
SHA512 ecfb6d5c953eea657163b6dcbbd4468b2653fab084af96536ce47f1e0071aa9b7b816b752a978da3d78685626ed8cf3dd0fbd49bc8891162f1fc945d151c01b0
SSDEEP 49152:0WwGHAkqMu7ot6SCiGogq5i18ue5TEhkq2nV9oNq3Z52gu3cfcz333TcqB:09GdkS5i181E2V9oKdu3z333Tce
TLSH
T16B065C23F24D643ED05B3EF9567792A0943B6E602D128C17A6FC398C4E35583EE2664F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jna11629832858971486882.dll

Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna11629832858971486882.dll
Size 267KB
SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
MD5 2d2475f1f026dd54e9f3e787ae4f81da
SHA1 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA512 07ef110d202d51f096a8b474d25c66b93b16af8b2ecdbf3ab23138273a0771c94dda6426fb644d43dd26cf53924f37821dca4c539d889d435185fff2198b3e76
SSDEEP 6144:cZkI0LRMj+xkFxdHuGL0x65sz7QZBx4Cp+slm/mgye4:cZX095x65sz7iP42
TLSH
T1BC441917A7B648E5E9B7C03D44236A16F6B178294320EBEB47844A531F73BE09B3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher10164952941888218870.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher10164952941888218870.tmp
Size 1.9MB
SHA256 b3a9408e7c51e08ef0e3bfcc08f443f6ec0f6191ba8cd7c18d53d2b22e5bdbc0
MD5 08fc1e1f239ec4511e8d9e5a433f6244
SHA1 33d12735bef894440780fce64f9758d420c7bae2
SHA512 33f352528fc70a07ffc9184ff80647b02c51ea26ceb11ce70eea4adbd9419a6f811bc11746dc73ddf40ff2a21daedbeaabd349e901f30ec5e841a1f5fc6f1b52
SSDEEP 24576:U2qoCVZtr2BOfAELeselZ62R0c1HTG28fERgCsgV55Xkuh+RYRnuSrzSPaiu0wH3:U1fA0eHZn0mHTG2/Rg/oIuh+2YUOeVF
TLSH
T139952363740FF039ED5749B7D686A3E3F01F11FC8409266ADBF525C2252286A8BF1E94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher11571096219168054567.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher11571096219168054567.tmp
Size 34KB
SHA256 9d29897685d25c8fde10f2d4d052999cb343a59b293410483248afc4325ba2fc
MD5 3a5bda85afca478966f58fed8095ec26
SHA1 e3cb2af8504826bc347f884935baaece4d7d9ab5
SHA512 549096f58f004e3e43fa7425f9d9e1a7fe7e354c2b3870af83fac89936cb700b972268e997677ca2c517813a09ed371db5675364d09bd26dafc7caefc83240dc
SSDEEP 768:W0cbusjoivleCvePHIl9HDgnkRwGYC78uDhmnB5kkG9l:5c39BvAHIDH0ki9c8uDhmHk
TLSH
T1D3F2AF66FCE2BC15D8631A7950D33ABBF99D40E82C83E371905E2B53ACB2501A153BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher13523965151417907718.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher13523965151417907718.tmp
Size 5.2MB
SHA256 364b9add9a3b0e74e553439b3f0e33a573bb5d28667adc028180d509b0459eec
MD5 9f889c571c7096e010209a7cadbe9680
SHA1 f1038b24572409aad8cded85f22f8ec2e84b4d1d
SHA512 d347a479dfb08a9c4470f5ec78e35928da4433e1e4e636e07d3ce300a08dfcf3a671468871f7504661073b198855be962dc2d130c1e011ead1a5f3783a19f135
SSDEEP 98304:UFo6px1cJHSNsoPYgRI/02gzh0zFqZffZoSbZffZoSBez:UxWFoPYgqs7huFqZpvbZpvBez
TLSH
T10446123360BD95E1E237837B80490623DC9E495CD80EB167B0B8849A9DBF54DAF877B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher15602558034991103674.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher15602558034991103674.tmp
Size 19KB
SHA256 a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc
MD5 75e3b25da8b8a2136463c4674f5e49bf
SHA1 4381275efdef6ddfae38f002c31e84cd001c97f0
SHA512 e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30
SSDEEP 384:GzGvxk+KGHaMIvqURstW9SzWa677Iltcex:GK9QMIvqEs4Ja677S
TLSH
T11B92D7A7BA84E53FF90B947231308026F835DEA4761E7697ABA015445D82C1D5F0BBCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher15757824523287133303.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher15757824523287133303.tmp
Size 68KB
SHA256 7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
MD5 b6480d114a23683498ac3f746f959d2f
SHA1 d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA512 9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9
SSDEEP 768:eSmYsC/maUVnS8oaS9kh7By+ZcdtJPi3BMf+vYJWeHf9RdwgTxttQHot+WgurYlf:eS1s/BCuQ+CUyhXHDdfttuHHlH/
TLSH
T15963AF59EE9A812DE30F70F6E0D34596FB2C118C46AA900336E95967D938E4C9733FC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher16323565960924586107.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher16323565960924586107.tmp
Size 22KB
SHA256 17100a33f45ae438443363a6f9a49ceffba6b6beddaf26135a831e34fd9cd1af
MD5 51e1c6b5e895b0df827a4b28552fba18
SHA1 5d981224c5fd8a516107ea13cba46d2c68650e0c
SHA512 d4ef5b567b281389e421ec122675f4a20939b626657dcf6e5e958595a2aae1aef1d9277cc177071a7242149ea957dd398b2fbca978462327e028972fed045b3b
SSDEEP 384:M176g9+dfxht9/VrqX/fN6N0DB41/gtvv9amKSEVd00IYwSNU:M17D+dvH9yTBG/gtv8dXW0pU
TLSH
T19DA2BF5978BC8AE9E36A937263460172BEC58F0C920FB567BD38245896CD58ED78F070
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher17377908210366471592.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher17377908210366471592.tmp
Size 215KB
SHA256 6cd91991323dd7b2fb28ca93d7ac12af5a86a2f53279e2b35827b30313fd0b9f
MD5 bb0f7e4e04a71518dfe5b4ec102aa61f
SHA1 321c614f85f1dea6bb08c1817c60d53b7f3552fd
SHA512 7a6a8952b07302cd2ae1beec3241c36cdaa24215b23671ea4a47eb70b3430e99398e3b9a52c6fdaa017e464b5ee5ef5473da250df06c301c5331f7b4535ce4e7
SSDEEP 6144:jcniUhxBMJSIoNacIBlIKzhSH0CjO13E1s3EMxxN:j8iqB3I6MoO90M1
TLSH
T1ED24F139C98ECB31E636527147C34C13182A069AF9B1537DDCBE128BF8BBE4A4537A54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher17880442237111126834.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher17880442237111126834.tmp
Size 283KB
SHA256 dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0
MD5 a2c47e14ce5e956105458fe455f5d542
SHA1 48b8230771e573b54ce6e867a9001e75977fe78e
SHA512 8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947
SSDEEP 6144:13o1aBBATxSoICcO4CbsIEecPQzX9zpwa7yWEVqv8CneGYZ:1Y1aUTxDcO4CbOnYb1sT8vZeDZ
TLSH
T1A054BFD7B948899FF98FC47A00008016F8F895E9D58AE21F16B085FB4863DD85F16BED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher2990154161044669308.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher2990154161044669308.tmp
Size 10KB
SHA256 f1efe0edf8db5798a10d310b99a2db84579be01be9f7b46c37fb03c121a88ca7
MD5 542aa26e97b383d14497f082b3a8b05b
SHA1 b150b85c13b86d49b1d5d0ecf27ee03dbf58d3fe
SHA512 6b7dada71fff98daaeee5ef531b07157c9e78dd031e6c2feafc076666b5ede1a29642eebbd53061c08373755f7663c7cd55fa379d304a1dc30f8fba2eac57ef1
SSDEEP 192:cYSdV/F3/1pAFfP5U72r0rjqNNySS3rTgYjUoKne2U5v2Sb2S:cYgdFPvM5+g0rMNurTgYIUZv/5
TLSH
T1CB223C7F46B848E5F332C372CBC56223BA6E4CDC158F7523789C466A88AF5097B12562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher4395111523568355058.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher4395111523568355058.tmp
Size 991KB
SHA256 9403c2537ac0dd425e556dfc3434e5d9f9a9547312472f4c27b7ab2673e9e862
MD5 9fa963c4cdd34fe896161f3e1bcd41d4
SHA1 7657e8b1233add643562ba17f403e95af187634c
SHA512 6db576f76a0331aefaf58de904aad939e066bc245ffe50f74e2db7306cf78abe8a079e786525541c965de1378e836ba6966cbeaa85482155cea3414105ccc08f
SSDEEP 24576:7QpQcrXBj/GNBrTuVFWjMpN7kfmIXsO/EWG:EmcFGSDeMP7kfmIcYG
TLSH
T16C25F134F1EE88A5E2B3CA32D5C37533381E01CFAA93712DA2E04986DA764BB5705757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher4933624573046221483.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher4933624573046221483.tmp
Size 1.3MB
SHA256 b7e3d46c87bad2eb409b0e704916bcd81206168e357312dfddd0e253679cd9e0
MD5 e0ae0c295de31af32a3800e56a5263be
SHA1 a4934c44d25a9d8c2ddf4203affd20330cb3426f
SHA512 a063a0059d80e44c0bdd780a85e0ede610445ce3f3c57d9b88b7686b2cdf47b357c96e994f67ad35d34160d2cbb25a29172a8b1beb74a226dc0c51aa9185f042
SSDEEP 24576:5KaS2ooPmik2Oiv+BUlPUZzPWNgnp8UZxzD5sE4oAA+pXQljn35kGbA5iWcF7I3:5zUiJlPUp+cp8StD5p4oz+CzOGbA5CFW
TLSH
T147558D3399EBD834DE7B0DB3A5C25251243F96A8AC0B917C12E06DC29B7191B4BF1B74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher67308518000221912.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher67308518000221912.tmp
Size 66KB
SHA256 360a7321fdd080c13ca6b2150a27da8e55ea7521401a5d00322b70189e12b398
MD5 99c86358b12a05fd4b109445fd61eea7
SHA1 0c331b64e5ca8642d293254d346d4312565d32d6
SHA512 be7122312a18ec0abb923ad1fdbb249a3193f4235acd88d463bc033bade9cebeebd63e6629fcbb01369bcc857bbaf88301abb1dddbbebe87e8fcad7d159230aa
SSDEEP 1536:4tt2CTlJ4XWaYVHwQ3JpSlXiMqc6Jt+j/NY7s:4f2clfP3T4XAc6Sgs
TLSH
T1F6637D3226F8A5B1F3274339C1095133EDB60C8D220EA563B9F84655EE7F84DAF831A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tlauncher7124363953021676770.tmp

Path C:\Users\Admin\AppData\Local\Temp\tlauncher7124363953021676770.tmp
Size 10.5MB
SHA256 09ba7517c8a9b30780ff9a6de230b8905247835ae0da914d66991e2b3b4b6c4e
MD5 c64a7dd22eb340b5d0f2465dd3888a80
SHA1 452f7ce35996138cb0725e73be6535c7ff8e9336
SHA512 64c1b49daf053ac911c0110853053263e0054376a2849afaafc99720e29bd7e3bbd64bdf9610906d1e83b91f7297e19544bb80795872b7117db9b1fd3e4aef6d
SSDEEP 196608:wdF9zPJXT+BZFk69kP3JiLd+2ShT4WegDtAh2ErqdHAOV:wF9zPJXT+C6C3sc2WvDqh2EqdHAOV
TLSH
T1A0B60133EED9C025F637467395C26253743F0AC9E50B64AE12F86983DA75C4A0F53BA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LL.exe

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\LL.exe
Size 2.2MB
SHA256 53c51cfd7ae8efa1c5a56d4c6ad19065b33cdf69ac40167447d5fb003770371e
MD5 468ab0c65021224b974e186580d7094c
SHA1 dc39063da0c2f2b6b9a12c966a4e63a97080ec7b
SHA512 2eaf358bf98ebd280fc2920fcb89a108af2dc4523bc928bc553e0529da7e47eb20752c659a4e0acef312d596b2a15189a132e9bb5d1bbaf605b54203f9b8e5d6
SSDEEP 24576:RWyjveYJZKL9MXUfCa7lfo7QDRVjAexEhp27cp:dve8a9MC7unv7p
TLSH
T189B52921A6515019F9F73AF64AFD207CA92CAEA01B1894D781F439DD9231AE7FC3061F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

awt.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\awt.dll
Size 1.4MB
SHA256 3cb9348a9c52fd61142f527dce9a737677cc39455d9d08ad799ca5631285e97d
MD5 b3dce1370656a226ee3f2c24b93712fe
SHA1 40e966b958ec7f48a2ffc17adca0654ecaf511ab
SHA512 7c7a2774b25da7e6b3dfbde65b9d9dd40ffa9097aa350e192d4d6bf48ab9781765fd3071ee1608f95892dd81952809e4cc3892701fd1ed152bd7e6e9538e9597
SSDEEP 24576:MZ2BN/1TqSAWlMJnULucWQTM46/OQVQTN9bE2cDNOvOIDTQ1zX/I41RMZDy:AS/1TqklMvmcGQip9bE2cDNOvOI3QJvp
TLSH
T13E656B07E3950194E4EB80B8C54B9A1FE7B1741A134097FB67A58B2EFF67BD0623A305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontmanager.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\fontmanager.dll
Size 891KB
SHA256 46ed2ee74e7322be3c067204b177bf33cd5341541d635abab0d37fbdbb8c4e8e
MD5 9a0b1452a3165b17a625f51565948431
SHA1 1215c8798505f646984ded5c7201cf4540ae2c89
SHA512 4ed1fa33f569d9dc180a8f3937e10e86270e58bdad04a9588ea191f59ff7c05e42a5bdff82021d5b540dd1e4d0ad427676f24417d13f5ce38c5431f710536a21
SSDEEP 24576:iTrF5Tx7srzanSr1vUrcEGX6zYeKB/jCiai6nX7fJxKPKvrBVJSuHOOR5oReOebP:iTrerOmvUrcEGX6LR54Jc
TLSH
T144159C09F28719F5DE3F90359AA28407E7F1B44513099EEB65B49A45FB27BF02A7E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

freetype.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\freetype.dll
Size 536KB
SHA256 1ca697fc75fffc0280d48cd5e5d0232638ec12c88f8a291469c24903c2e00d5d
MD5 31eeccc5e772a998eec2b3b21957cd38
SHA1 f020a90427ef9148c5e431c525cb3a1d9bc0e858
SHA512 c2ad0217cab2906b4bee34f361c82233f588b4e7fdda5de678fa051cd6d0c63ea55b51dd5c79f2c92fd729c9e024f2bc36a75b4799ae07dd4e01043f8c541bce
SSDEEP 12288:ZMRNG2/22EA4o5E87YBrBRrx2K3eMX5UhJimkfEWmv+v:ZMoA4o5E8KrBL2K3NXhKZW
TLSH
T1ACC49D82F3A41BE8C667C2388717870BE7B5744513119BDB27A04B6B6F13FE16A39325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.dll
Size 118KB
SHA256 2687613e5181a497209ff691ac99e35fee5f714bed27fbc466453594ab17dac9
MD5 a8a8bb668274c29582e67a05a9dbcc65
SHA1 7b7428b789d3bb81913c7c0748265af6674acbaa
SHA512 032574fb2c3118993f4b578bd5d5e882020a07667296ed9866a9e6ad0838a7e0aa4bda2a79db624d553f5fc4d4f13467d50fb531bbd5c1601215b3d851f7e7dd
SSDEEP 3072:mhYUmdR9kZYBZUV/2eXouyNG3lARlr9IqQi:mlmdRIpkKDvy
TLSH
T1EFC35A5BE3254097F47AB1BC811B854BC37274B21145E30E83A9CAAEDF9FB613D0A791
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.exe

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\java.exe
Size 48KB
SHA256 049426d0ed110e4c79348e1300f21479c90215d2c8267c20eee80b6f712617a2
MD5 cef0718a12b01db836afbeb6ff983960
SHA1 6243f9e0b975d7d98b342ce3d4a8e761d6e4a5b6
SHA512 b39e9ddf5e899d0740126a7a87ced64079dcb09d29d3c135eff4faeeb0f89dfc39478ceae274c25e8823bd576f9c53f9fbdb19cc5e8c28cfa0d06c285572b645
SSDEEP 768:gSCKO7FEM5R2TyJ5R3s8D/bkt5Ruz3Vb3815uYiCLAMxkE+RiF:rCtKM5RdJ5R3sozkt5RA3815u7CrxKgF
TLSH
T151236D47AA182C81F41F84F15497392A55B4BD032BD063FA7ECAF20E4D71391A9276EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\javaw.exe
Size 48KB
SHA256 82c1146511bb20968c7b54bf710390a1ece90b88e56d956c34471539997a23ef
MD5 bdc61959ded2f24abb943b23f3d9d857
SHA1 53e1fd1b5e28dd860e44b435eab1111263273ac5
SHA512 7b59ef9a6b48176ddfa6c701b2e0cf3d89b2a8cf6a3903e387da8f3154b852501195cc580bd05116cc133e1a3c35b3a09b78906310bbadb215c61e5f3be051da
SSDEEP 768:dt92JM5R2TyJ5R3s8D/bkt5Ruz3Vb3Ll5IBYi3AMxkEX:dtMM5RdJ5R3sozkt5RA3Ll5+73xj
TLSH
T1A9236D87AA183C81F01FC4F15497756A45B4BD032BD1A2EA7EC6F21E4D31391A8276EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jawt.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\jawt.dll
Size 20KB
SHA256 e8cb4c8c8afd0e7f5e925f5a66bf611d292ac290b720fda4f7cf61df519c19e5
MD5 cd0b42a54ffd713a6de3be5d18ccb172
SHA1 886ebe427ee012456f35f32ef23ab310f5d8bed4
SHA512 cef60ea0232e8322a25684f910068330b2b8c3ad218a76a8aeb981b471cf48b3b3e70db5b2704b6de276ebedc389ab56cc7152d6369703496d6e1470a7021c56
SSDEEP 384:0akIsHceTGxRqPNIYidvjm0AM+o/8E9VF0Nyo7xrW:0akhHchCaYirAMxkEuZW
TLSH
T1C7928D8BDA650C54EE0BCA70B5D94E2BD574BB434B80A3CB5358C1244F917827BBA3F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\jimage.dll
Size 32KB
SHA256 872d3fc032be7c21e3dcf8500d76cedf705cf5c2d7332c531eb6a8c72af54745
MD5 50a7ab75a7b7ce8988116f29a992d8c0
SHA1 b9164d9f62cf9764b200fdc4663b68828a94720c
SHA512 a8b72933e4c0d93d958fa9e7e0a9f5dc7727553f03df1d15197f8d14aff60e1154feb3a48efa3c6d637f4eb4644f646a598042ddafbbe05c6dedb3edc0364c4f
SSDEEP 384:oY8zPLIe55BmA+JhBr8C8i9S0sT021iDyv5wM5NSHIYidvjGmAM+o/8E9VF0Nyaz:o9rfoA+dvd91sQ2Euv5wwSoYiXAMxkE+
TLSH
T176E26B96E7544C65E92BD538D4CB9A2BD6B1F9429F90C3CB2721825A0F333803B797B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\jli.dll
Size 87KB
SHA256 5fe5a6bd6422fad416512dd4cc91a22cfbf8d778841fe38159217737010ab12f
MD5 54b731ea7fe1002ac212b036ea096969
SHA1 f143dd06cb050687dabda672f28a44b22e4100c6
SHA512 53ed547eec829c0088e1f3db83372d9e341fa650a497cde662186ecb29d446d9cbff19fd70e0154c4b694fa6cb548dce801075222bf8ad522df2f8883d7d525f
SSDEEP 1536:hr6AV0B453ScTeuapE0l1qpWIOG9mI7tS+HYUp7Lxtq:hr/mobKPpZl8p0G9mgAqpDq
TLSH
T1D9938D9643E021E0DEB6C4B9DAB55A0BD7F2B0522750838F03A8C5D60F63B617E1CBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\jsvml.dll
Size 849KB
SHA256 42f92f2db5cc5ddcb330041ead7b788fc60e14d7187298e28bd6eb9d70bec51c
MD5 aca6bc01cc919b7c6ca322225e934d95
SHA1 d22275087fea2c14348d2fb1910fd260cee71fb9
SHA512 94523f20a282f146e53f4859ee467702a9c7f316f87063a6a1fe45466c125ae1f0425e6673e7433c2c8bb0759c25a1a8bafcfd960743ac76f9aece0e12b29945
SSDEEP 12288:7RybOUKnvJNeCs5wHu3Yh/V71AVNV+Ssc3q:7obO7JN3qwH+YhN7wj+9Oq
TLSH
T19D05AF82F81284CDC03534B024FFBD95A92A1CE941BC0E732772AE9D2AFD7467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\msvcp140.dll
Size 558KB
SHA256 a88b8c1c8f27bf90fe960e0e8bd56984ad48167071af92d96ec1051f89f827fb
MD5 bf78c15068d6671693dfcdfa5770d705
SHA1 4418c03c3161706a4349dfe3f97278e7a5d8962a
SHA512 5b6b0ab4e82cc979eaa619d387c6995198fd19aa0c455bef44bd37a765685575d57448b3b4accd70d3bd20a6cd408b1f518eda0f6dae5aa106f225bee8291372
SSDEEP 12288:CZ+jZpQfIwKnkdmZJUbi7I0QfxK+pdd+cOj6LbndDrUw2K1fQEKZm+jWodEEVJaP:CEtmrdcK1fQEKZm+jWodEEb
TLSH
T1FCC40927B74D02A0E195A3B861C34305D7F1BC4A8312A3C752FAD66E2F6B7D5673B290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\net.dll
Size 58KB
SHA256 57ce82e948ea60284ae8e939e54dca2cba2d771e521e780dcf76dcca5e98e890
MD5 cbc9e3f5a54f32e8540e48dc1ada3507
SHA1 1e03dc39028be9141d347e964e26701f02182489
SHA512 51ed0d1e4f419351f7da42b511c2b7caefd6096410154d135d60d056564e095756eb844ffedc3f974e4139cb1191817b4ec9185157c70cf443e598e212c64576
SSDEEP 1536:0poFOTPgBptW8b7nfyYELifxGJWtj7b6xx:+Ad/6YtgWtjk
TLSH
T1C6436D45979554C0F817CA7882934E1ACBB2F9A1731087DF03B9C5AE6FE77A23B25780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\nio.dll
Size 78KB
SHA256 c2976cf68536b8105ff9516f75f1bbefb5807994c655490071a4c411275f444a
MD5 6a42ea79566301766ea28ddddfd48f2f
SHA1 2da316de03546b854e7c4854049ae5b1f00b9f5b
SHA512 368107b9254b1f4d286efdbfce75a10a9b812d14f91edf3b42d1f98e14f9ab62d97a28d1331485f8fa07b53191f70ffd7e56da4779ef45ee6714be6456260248
SSDEEP 768:JEo9BfKcOy+yB9OmiSuAbKcNFWkDzvuKmsfN08Bak31s8YKOrB2wbDp6ZBkKLR8O:2aUq5iSnGAjdrU3QwuR8DmVjjG728xS
TLSH
T1B57339A35364489BE86A7538428A074BE732FC114500A75F5368CB659F6F3B23E3E7D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\server\classes.jsa
Size 12.4MB
SHA256 9a514aa116b46ec0a39c1f0974ecc5d3973f4fbbac140b17025704f089eda62a
MD5 5003189c223d3d4d257ada9a6bd5b169
SHA1 7e013e45b83f1b67a9fab0e25104241911723148
SHA512 6eb627b9f52a0509908dd3c00e503b4852e67f54a16310682903abed6ca3ea8e1c67fea48d54dfb99c77a7f661607297b4919410d045667e16d572c85bb67803
SSDEEP 49152:VytsEbqx1kFaEsl26edBg8dUGqWXKdnXLcTUzLO2U7pxQqsofjXpf1eqK0rNh:AaEy1kFgl292g/KdJUrN
TLSH
T1D9D6E65BF58186A7E13DE6358CD603907332A864BB079B032694A37EDDC39918F379C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\server\jvm.dll
Size 13.2MB
SHA256 bd4309a6f8acc7b1f717d681103492f5aa5751c047620b5fff430b186a226e45
MD5 8bd85c3c1b7fb853748b88b8c5a2420c
SHA1 bf6a44a409972a7aaf06baa8e9a39d9f28ff6964
SHA512 c8878193b80dd341ea8bef90d2133486cccd94cfed0c1a80f2dc7fd7adf2ff508a1b38f674d1ef7c181d21bf9b9273cfc31caeaad97b14168f3f69365e4c2ec6
SSDEEP 393216:GgL+/32N5azJDjoVSwdU6FhTT2bRbc5i7pT0qdLWKEYzZKcfQZ48BKe3Nw8eNcJt:G4YetjOk
TLSH
T138D66C17B7A500D5D06BC1788A679A0BC7F1B9944334B7DB61A016AD6F23BE25A3F330
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\vcruntime140.dll
Size 95KB
SHA256 475ab98b7722e965bd38c8fa6ed23502309582ccf294ff1061cb290c7988f0d1
MD5 7415c1cc63a0c46983e2a32581daefee
SHA1 5f8534d79c84ac45ad09b5a702c8c5c288eae240
SHA512 3d4b24061f72c0e957c7b04a0c4098c94c8f1afb4a7e159850b9939c7210d73398be6f27b5ab85073b4e8c999816e7804fef0f6115c39cd061f4aaeb4dcda8cf
SSDEEP 1536:M4h79voUUUCaisMiQFJp0hYSKnMNFYNa86ecb63UNU:M8WvicJpwYVMNFYNB6ecb63U6
TLSH
T174936C4677A542B7D06AD278C2E35A06F770B844877063CF03B64AA94F23BE19E3E355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\vcruntime140_1.dll
Size 36KB
SHA256 0579d460ea1f7e8a815fa55a8821a5ff489c8097f051765e9beaf25d8d0f27d6
MD5 fcda37abd3d9e9d8170cd1cd15bf9d3f
SHA1 b23ff3e9aa2287b9c1249a008c0ae06dc8b6fdf2
SHA512 de8be61499aaa1504dde8c19666844550c2ea7ef774ecbe26900834b252887da31d4cf4fb51338b16b6a4416de733e519ebf8c375eb03eb425232a6349da2257
SSDEEP 384:1JfphjEpTUUtKldl3864/vc5fqiu85mIlRWNQQbz6Yf7ZJA/U3qJrWr2KW8KLHR9:Phh4pTUUtmUwqiu8oSRjez6S7fqHwAb
TLSH
T16EF24B9467B88446D06B86B0C4D3AE57BE3CF9655750938F0BA4C29D1F23BD0AB3D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\bin\zip.dll
Size 87KB
SHA256 2d414932f2199d8be7ef856f768d64f24a143afd4f8ec4fc3cbe866a979f2cbb
MD5 4e8c1ec153462719021aa3e59313dc4f
SHA1 f50bd5f32e17cb9bc2bb3975f9c03a4e7730acbb
SHA512 869f61c6c662708445ca599d3edb3e8f2215e625d48553b17fa4f5335a739228a378aa87de2d1052f85230a946c476ed0c1173fdb28fb8d888d5d440bb2d8097
SSDEEP 1536:U/72+ZWpuEybbDkMzwGWKIaIOQIO6WxeuH74xA:U/72+ZUutb7FWboG6WxeuHl
TLSH
T19F939E958A705561CEBA85B0C9F24A2ED3BAB01652D0578B534CC39A2F437A13F5C3FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.security

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\conf\security\java.security
Size 64KB
SHA256 16fd39e6000518fd967a14ae45e2d2fa6e16bff9bfe202397907b71677101ec6
MD5 a6048bd6dfeb95221be99eabbedb057d
SHA1 e3363bfe282b9809bfce129b1378696c64329cca
SHA512 816e385b9fb7dff4b59a72299f925f6cf6fa4c07a6ae2a92ef8b79b44fecf59d587371c464e012f386c33051db9104dd668f8faa2ca017c92e349aa3dc8c0731
SSDEEP 1536:r+My8Si8MRjtWp5/jTNHu1UoQ2k/gl0ugzYKpNndOck:v8MHWD/jTNO1UoQDcK3ndOck
TLSH
T19653C422BB897B7206F211A363ADF1E9F76DA12A26321154748D420C7326F71C3776E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-10FAM.tmp

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\legal\java.compiler\is-10FAM.tmp
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

is-472P6.tmp

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\legal\java.compiler\is-472P6.tmp
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

is-LSG2D.tmp

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\legal\java.compiler\is-LSG2D.tmp
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

fontconfig.bfc

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\lib\fontconfig.bfc
Size 4KB
SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
MD5 9e80af78b019e2e52287108b50f6cfbf
SHA1 a297f3d435fab11aa3f0fd21eb2666a3ba1340ec
SHA512 b920a3e25e24a9c20d671e8a8520db2e783a5e18c695e46f7ff3851d7931711a73b97deef27c14a766ae6ed5a5519070421e5834da6200fcb6e7371b90b50e6c
SSDEEP 96:oI1KH1oTSNolnCBj7BFBBOPi+XdaWzbssHyad7pm:11Eo+gK5bBEi+xzosxi
TLSH
T1A0A1D040E9FB5308F2F3FB7696B5445A8D63BC56B7B7CA5C1010412E1B626404E12F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

cacerts

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\lib\security\cacerts
Size 192KB
SHA256 b47e74bc755a776398b2ca115bc4a08ae157c3c8b0a6c00ba522c47653cf1e91
MD5 98406554d516e70ec2d67e5737a046f5
SHA1 7fb36bfb1eb07971ab24db9807c9644935e36df0
SHA512 33f349f849acb6ba6f09540eb66b0e2372b9acd14be16856ff3399960ec3f70dc9ec791e2ab414a52f1d2f596f9e990412820b6c92b0cab8290fc2bc3c644763
SSDEEP 3072:l7W/0cnopPrPXMvYr1uZaJfly8Jg96EfaDVgFeJ2JO6eveaKUmBTNl:ltpP02ucJl4PaDVHJ2U6eveaKUOTNl
TLSH
T19B145A4F4F7D7405BFE1DE48A688DB27BD76F3E42D969927202180E51E91BA03C8D12E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzdb.dat

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\lib\tzdb.dat
Size 101KB
SHA256 b7dba25abdfee317daa042c89b01e5711f5781d020dd733ba411760b72addb93
MD5 2fd920c56de68f65493ba6962fd079e1
SHA1 1e79bff02711d3dab3c75e90d4bb08f8086c9626
SHA512 958f835407e4a10a268bf76bc2ef0196ecd5fa92e139de4c3760544dbdf76f95e67865bac22406aef8ac5ae7508fe63cd1a688c8328e46b73a5867efa4f18d47
SSDEEP 1536:d0E5MEBHNpdrY2L/rijAGKVjTLg/////PSaNUcLdmLTLMXjbF35a2y7:djMYHNpdrtDhVjTMSaNU/TLw42i
TLSH
T188A3A2B57F7150B7B2CF4221262B5B93097DAC816FC3080679B5BD4E8A76AD6603331E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzmappings

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\jre\x64\lib\tzmappings
Size 21KB
SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
MD5 4c30d7867505379a18a27d0e8f03198c
SHA1 0cc871d5bd91e061d676a861749af68bbc0ca9c6
SHA512 873d329682ce67267f438b88eee0fc25cecbbcc1f7d694118417ad12756ec2b6ae7502ec4eea0cc9b4ae8b9e68f5f8877762fa13dea89c4a6dcd54fd8bf82c56
SSDEEP 192:3nqW46ARn1+RQ7wbNQQSaapvQZglEcCDqvOCJqGic3yzA6bbAdOFmYXKhJmBW:3nqW46ARnGQqN2KhcQ+qAa9W
TLSH
T1CDA25386B06662D4C073EC0D7B527AD3F886F3C899C69A4D2943C366BD019B767E1837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bootstrap.jar

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\bootstrap.jar
Size 10.3MB
SHA256 95f4c43d91060e184435ddcca41307c0f1fbe48b1239f62f21ead7ea68675a73
MD5 41c9a865c9da61aceb3abc331ab4fc85
SHA1 15e811fde2f71e8222e63c0226c0c8128bf133af
SHA512 13544ea14f78109e892e98b802439baeb0ccb29fac797f1745d1de6e69f1cccd1b52f51ec4faa27f30d3b0787b9e256e60a5a943e08542281b67de88d60b96f0
SSDEEP 196608:mF9zPJXT+4ZFL5O/i/mynEdE1stAh2Erq522e7:mF9zPJXT+kAByiqh2Eq522e7
TLSH
T11BB60233AED9C465F63786B391C26643B83F05CCE54B64AE02E86582DE75C4A4B43FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

launcher.jar

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\launcher\launcher.jar
Size 5.1MB
SHA256 4daf386e90313bad68ce90f00ac348d0ab338edc50d667ac53c8c939ac44ca19
MD5 4644f242b8cb410eb23e7bbfbd1ce064
SHA1 809452de476345909e72a9d4b8d84b33af4793a9
SHA512 95b47787af797e650c4ad6efa5dcf2a7119b5659bf676363dc80555772a306e2c72b6308ef5d8e238c193c2d94c11ca71e538ac0fbf2b7b9ca181060cb8beff6
SSDEEP 98304:5Q96pueNiiFYgRI/02gzh0zFqZffZoSbZffZoSBeH:5BfbYgqs7huFqZpvbZpvBeH
TLSH
T10936123360BD95E1E233837B81490623EC9E595DD84EB067B0B8449A9DBF54DAF873B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stubLauncher.args

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\stubLauncher.args
Size 77B
SHA256 a88d6851999c9bac5dec26f23f694f684147530e5977c0d3ab19908dd10a236b
MD5 eebce4b8d45188fe50b926311937a8ac
SHA1 10a0b362ca71b2392a816a55b4ee34f7feceb48b
SHA512 0ba0429d0c430cfe88b13f046b900c72c40b81e045e648d7f091156d825c609a51b55c4c5e63677167f0f58650046d24d76ae8074ce7c8851886a2710a5627b3
TLSH
T1F0A001A4A2A109C88C065B09B89C17A612DA059411A0313A1A3A77820C1D0EABD33AA6
MD5 SHA1 SHA512 TLSH

Submit Download

tl.args

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\tl.args
Size 125B
SHA256 05fa49f9ffe7a22d1e3443fd8cc993e62b7f20a976162ce69d306ff9581f1d87
MD5 ced792b61824f55e8e70a22214b55d19
SHA1 5270aea99be95b59c339450c451e1b2148b88599
SHA512 9c9bd55f7a63bbae85c4c662ff2e2480d094c5f00ee3ca50c5c0d80cac5e7692aed35c1d90e6d4f5d88e537728773acf8aedb3db3747374418bb748939a354bb
TLSH
T1ABB092A282200499C1E19F44ADCC2B3F4244A0A89832323438308386050F1AE2EA1D82
MD5 SHA1 SHA512 TLSH

Submit Download

tl.properties

Path C:\Users\Admin\AppData\Roaming\.tlauncher\legacy\Minecraft\tl.properties
Size 216B
SHA256 693b916f8f75c010581295065fe42667875f53d5b4c7188eec3d71b94daf572b
MD5 60925c29f4fb68c824d9fab0cef4b19d
SHA1 ee13b2ff5a3437d8cf46caed30936a4550cadebf
SHA512 862f9030a4b44758deb78b6c4f0326d1540e201703dc28563794f864f0a0f55c9ca2624904e85ac9653949405c78b79362a08a4a73b857a8e75873b18fcb1d4b
TLSH
T1DAD0A738E287FFACFC1B541AB1B4272691A001162CDC106C9A3079C43A94594A913501
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1672-8-0x00000000012C1000-0x00000000012C3000-memory.dmp

Download

memory/1672-14-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/1672-12-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/1672-9-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/1672-952-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/1672-60-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/1672-1010-0x0000000000FD0000-0x00000000013A2000-memory.dmp

Download

memory/2472-1426-0x000001E7698F0000-0x000001E769F70000-memory.dmp

Download

memory/4104-0-0x00000000007DA000-0x00000000007DB000-memory.dmp

Download

memory/4104-11-0x0000000000720000-0x000000000085E000-memory.dmp

Download

memory/4104-1011-0x0000000000720000-0x000000000085E000-memory.dmp

Download

memory/4104-1-0x0000000000720000-0x000000000085E000-memory.dmp

Download

memory/4324-989-0x0000000000BB0000-0x0000000000E9D000-memory.dmp

Download

memory/4324-1049-0x0000000000BB0000-0x0000000000E9D000-memory.dmp

Download

memory/5916-1228-0x0000000000BB0000-0x0000000000E9D000-memory.dmp

Download

memory/5916-1207-0x0000000000BB0000-0x0000000000E9D000-memory.dmp

Download