Analysis

  • user interaction
    yes
  • max time kernel
    87s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/07/2026, 07:42

General

  • Target
    SKlauncher-3.2.18_Setup.exe
  • Size 3.6MB
  • Sample260728-jjm26sdr21
  • SHA256 5d7f6d20b4de8c600f81d64b4608bb65bccf92bfc72a727831c8785a63b68997
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Users\Admin\AppData\Local\Temp\is-IR7X2G49EQ.tmp\SKlauncher-3.2.18_Setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-IR7X2G49EQ.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$A005C,2154364,841216,C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:840
      • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
        "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:1076
  • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3804
    • C:\Windows\SYSTEM32\reg.exe
      reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
      2⤵
        PID:2512

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          +JXF13923774287638589653.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\+JXF13923774287638589653.tmp
          • Size 405KB
          • SHA256 0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          +JXF16667008571633889771.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\+JXF16667008571633889771.tmp
          • Size 397KB
          • SHA256 64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123
          • MD5 SHA1 SHA512 SSDEEP TLSH

          +JXF2858518469650133671.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\+JXF2858518469650133671.tmp
          • Size 398KB
          • SHA256 1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          flatlaf-windows-x86_64-5780172916600.dll

          • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-5780172916600.dll
          • Size 33KB
          • SHA256 390ed515d10c94bb91e30012d4ef5545f9ebf5fc20c5c5c9c28b8ea16bf4af60
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SKlauncher-3.2.18_Setup.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-IR7X2G49EQ.tmp\SKlauncher-3.2.18_Setup.tmp
          • Size 3.5MB
          • SHA256 942c7f45e3ee02dae9acc679d028a7a0322d28107dbd06750e803a9e35a019dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _is7z.dll

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\_isetup\_is7z.dll
          • Size 971KB
          • SHA256 f97cda058bfe97a7e9ced5cde7018bbc26e35155c3c7405c6146808f8d06806d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _isdecmp.dll

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\_isetup\_isdecmp.dll
          • Size 28KB
          • SHA256 8287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-0.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-0.jar.sha1
          • Size 40B
          • SHA256 a1f58b506c61eb64f9d38183fa7002a7fd5f7dbecb1f3bd16d1c5a7f181df050
          • MD5 SHA1 SHA512

          javafx-1.jar

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-1.jar
          • Size 5.7MB
          • SHA256 6f8dde0282b96c215f1d1b7638c78031ddfd970e6e7f8d6834a723ebf85be6ae
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-1.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-1.jar.sha1
          • Size 40B
          • SHA256 d8e035498ba5918acb7899067177fdefb3300d7690419ec6b564e49902ab0160
          • MD5 SHA1 SHA512

          javafx-2.jar

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-2.jar
          • Size 2.5MB
          • SHA256 0ab89fa8531f5d6f1a15b6c76cf5a7d44e60e273932ad282b29b8dd324e725ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-2.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-2.jar.sha1
          • Size 40B
          • SHA256 d147881dc89769b2b4c524d01a1e498aa228eca808f18755a5f1ea1742b00546
          • MD5 SHA1 SHA512

          javafx-3.jar

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-3.jar
          • Size 1.1MB
          • SHA256 6828f4fd83ac7caeb7e25c21e4050606d384baebb18bc3b1f35cd866020757cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-3.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-3.jar.sha1
          • Size 40B
          • SHA256 16309d1718c54dc502e50a4918fdfd0b24ddfaba28ba35bca30c89d42fab437c
          • MD5 SHA1 SHA512

          javafx-4.jar

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-4.jar
          • Size 88KB
          • SHA256 0dc9f29e41cf9be601990c270f84b2f6655e4d95ebb27ccc9cb0953be50d1229
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-4.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-4.jar.sha1
          • Size 40B
          • SHA256 c3473edda477b297e19bdbbdfe306c1475d93addb21b80f923ddce3fe822556b
          • MD5 SHA1 SHA512

          javafx-5.jar

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-5.jar
          • Size 30.5MB
          • SHA256 5f3fb26455c8d8d61f6b1080483234cf8b2cc1b8e44f5e9e50ecc176d2a064e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javafx-5.jar.sha1

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\javafx-5.jar.sha1
          • Size 40B
          • SHA256 b52f2348ae1c287ea01956214bf5b74a0ae4aa1d96fd5992e35848194b85aaf0
          • MD5 SHA1 SHA512

          jre.zip

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\jre.zip
          • Size 47.2MB
          • SHA256 a72b61a7902ea2baf940fca8e89913e2347b98c294943632a4f9621c0226e684
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is-WPRDS76D8Z.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\conf\security\policy\unlimited\is-WPRDS76D8Z.tmp
          • Size 146B
          • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
          • MD5 SHA1 SHA512 TLSH

          is-6AN590IGQE.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-6AN590IGQE.tmp
          • Size 49B
          • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
          • MD5 SHA1 SHA512

          is-W0E1HRNYOH.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-W0E1HRNYOH.tmp
          • Size 44B
          • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
          • MD5 SHA1 SHA512

          is-ZGUEU3QBCP.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\is-PCESJT6S9N.tmp\zulu21.46.19-ca-jre21.0.9-win_x64\legal\com.azul.tooling\is-ZGUEU3QBCP.tmp
          • Size 33B
          • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
          • MD5 SHA1 SHA512

          jna18169353137604919601.dll

          • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna18169353137604919601.dll
          • Size 267KB
          • SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
          • MD5 SHA1 SHA512 SSDEEP TLSH

          launcher_profiles.json

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
          • Size 530B
          • SHA256 108055b3dde57df2cff49daf7f2cff1f2e828975714845e12f46cf084a41ec2f
          • MD5 SHA1 SHA512 TLSH

          launcher_profiles.json

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json
          • Size 530B
          • SHA256 8898c18649201254b6794bdaf126169fd816763e1758d4a7f8976d1c3c50adf0
          • MD5 SHA1 SHA512 TLSH

          launcher_profiles.json.tmp.1785224614279

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\launcher_profiles.json.tmp.1785224614279
          • Size 530B
          • SHA256 dbd22653681a9bab643efea5a0a6ce2f4f8bf02daf028e896a19b8b5a760f758
          • MD5 SHA1 SHA512 TLSH

          jmxremote.access

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\management\jmxremote.access
          • Size 3KB
          • SHA256 0c25d26ee212ca1e8c33f67c3c460d43fe849c3a1d23dbe341148517602b280c
          • MD5 SHA1 SHA512 TLSH

          jmxremote.password.template

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\management\jmxremote.password.template
          • Size 5KB
          • SHA256 0273b6a6b9e20e6ce54c5aee70164028e0395063b2b7d39060a40b6495543dbf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net.properties

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\net.properties
          • Size 7KB
          • SHA256 594bc40230a0bd7c441fe069989d66e534a6bae2ee5910f9f4bf64e59b583256
          • MD5 SHA1 SHA512 SSDEEP TLSH

          README.txt

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\security\policy\README.txt
          • Size 2KB
          • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
          • MD5 SHA1 SHA512 TLSH

          default_local.policy

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\security\policy\limited\default_local.policy
          • Size 647B
          • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
          • MD5 SHA1 SHA512 TLSH

          exempt_local.policy

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\security\policy\limited\exempt_local.policy
          • Size 566B
          • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
          • MD5 SHA1 SHA512 TLSH

          sound.properties

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\conf\sound.properties
          • Size 1KB
          • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
          • MD5 SHA1 SHA512 TLSH

          ADDITIONAL_LICENSE_INFO

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\ADDITIONAL_LICENSE_INFO
          • Size 2KB
          • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
          • MD5 SHA1 SHA512 TLSH

          ASSEMBLY_EXCEPTION

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\ASSEMBLY_EXCEPTION
          • Size 1KB
          • SHA256 75292f03bf23d3db7c985aecc191029b93883200721ed23ed34a2e601463df33
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\LICENSE
          • Size 18KB
          • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
          • MD5 SHA1 SHA512 SSDEEP TLSH

          aes.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\aes.md
          • Size 1KB
          • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
          • MD5 SHA1 SHA512 TLSH

          c-libutl.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\c-libutl.md
          • Size 1KB
          • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
          • MD5 SHA1 SHA512 TLSH

          siphash.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\siphash.md
          • Size 8KB
          • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
          • MD5 SHA1 SHA512 SSDEEP TLSH

          wepoll.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\wepoll.md
          • Size 1KB
          • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
          • MD5 SHA1 SHA512 TLSH

          zlib.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.base\zlib.md
          • Size 1010B
          • SHA256 809b62ba648e02302f7d9ea6b6886c10d5253ac86ad528038a50c73eada5fce2
          • MD5 SHA1 SHA512 TLSH

          freetype.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.desktop\freetype.md
          • Size 29KB
          • SHA256 65ee85395dc7a1521da39be7672e8902f1cf3411fd32ed1560d0e5dac11580f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          harfbuzz.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.desktop\harfbuzz.md
          • Size 3KB
          • SHA256 b3f327a8b36d56beb152b3fd1bb5a7f245362cbea123ebbc68f8907f741b552a
          • MD5 SHA1 SHA512 TLSH

          jpeg.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.desktop\jpeg.md
          • Size 3KB
          • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
          • MD5 SHA1 SHA512 TLSH

          libpng.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.desktop\libpng.md
          • Size 7KB
          • SHA256 4e4c0ecd9795b9181538ea94fa63e6817e6e1f4b51481d720adaee0fde409c20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mesa3d.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.desktop\mesa3d.md
          • Size 5KB
          • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ADDITIONAL_LICENSE_INFO

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.rmi\ADDITIONAL_LICENSE_INFO
          • Size 48B
          • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
          • MD5 SHA1 SHA512

          santuario.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.xml.crypto\santuario.md
          • Size 11KB
          • SHA256 d08690d25f660f145c73365d260ed522cd0aace8a0e1396706551b7a1ae8c9a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bcel.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.xml\bcel.md
          • Size 10KB
          • SHA256 853a1e7ce397bb10de0e2b3bde0844bcc651f17d983decd07d2d003c0304c311
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dom.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.xml\dom.md
          • Size 3KB
          • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
          • MD5 SHA1 SHA512 TLSH

          jcup.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.xml\jcup.md
          • Size 1KB
          • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
          • MD5 SHA1 SHA512 TLSH

          xerces.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.xml\xerces.md
          • Size 11KB
          • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pkcs11cryptotoken.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11cryptotoken.md
          • Size 3KB
          • SHA256 1f36ff1342a581142c858f90064e20633d43529ac82adb85345bd902a14e18b2
          • MD5 SHA1 SHA512 TLSH

          pkcs11wrapper.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
          • Size 2KB
          • SHA256 371974b1fca3744a3892c7ee1fcc593b8b4281fc218f4cafd2f709e9df5fd81d
          • MD5 SHA1 SHA512 TLSH

          dynalink.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.dynalink\dynalink.md
          • Size 1KB
          • SHA256 17312591cabee3ef6c34ed8897d92e4e361ba9cea41ec00dcd61a322a8fc2cdb
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.graal.compiler.management\LICENSE
          • Size 32B
          • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
          • MD5 SHA1 SHA512

          ASSEMBLY_EXCEPTION

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.localedata\ASSEMBLY_EXCEPTION
          • Size 43B
          • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
          • MD5 SHA1 SHA512

          thaidict.md

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\jdk.localedata\thaidict.md
          • Size 1KB
          • SHA256 c326144a2351c9608fa708b5d7d3c5a3da03e82b66479b128e9db4969539824a
          • MD5 SHA1 SHA512 TLSH

          fontconfig.properties.src

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\lib\fontconfig.properties.src
          • Size 12KB
          • SHA256 74e6c464ae1e63983ada241869fdc66ef8c28cef403ee2301e0a90db9555b00c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          psfont.properties.ja

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\lib\psfont.properties.ja
          • Size 3KB
          • SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
          • MD5 SHA1 SHA512 TLSH

          accounts.bin

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\accounts.bin
          • Size 47B
          • SHA256 e489c79e8ce8aee1de754ebb11ad4c44dd9c641ea0de1b23ef16eea2210c46da
          • MD5 SHA1 SHA512

          javafx-base-22.0.2-win.jar

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\javafx\javafx-base-22.0.2-win.jar
          • Size 739KB
          • SHA256 17154354881d15014510b55361999931240f03e247023409171b83286d605776
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sklauncher-fx.jar.xz

          • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\sklauncher-fx.jar.xz
          • Size 15.2MB
          • SHA256 868f6b5b0499975dc46aefa8b25599debc245557babd6e3befde56c584620c56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SKlauncher.jar

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar
          • Size 1.3MB
          • SHA256 25a73e3770a1d8d14bce53e8920e2e893aacc3c715d0fb22f878ef2090d03863
          • MD5 SHA1 SHA512 SSDEEP TLSH

          awt.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\awt.dll
          • Size 1.5MB
          • SHA256 bb338d549c0a83441b876f776b46ee1028309d63314e6ec672d896c07e2dd262
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fontmanager.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\fontmanager.dll
          • Size 956KB
          • SHA256 a30c3feee9d5942800f54671c2863af2f9e610ccc17a29bcf562c8ac60dc216c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          freetype.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\freetype.dll
          • Size 542KB
          • SHA256 07f0707ea6eeac8c941c9eeff83073da2c9f3070358b13a2f5211eb44c58242d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          java.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\java.dll
          • Size 126KB
          • SHA256 30be3e831787caaae87922a1a611e0ca51811e1552031f3c3ed045eddafcb102
          • MD5 SHA1 SHA512 SSDEEP TLSH

          javaw.exe

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
          • Size 49KB
          • SHA256 a3a771996ffc7fd62fdba27b3bca8be51ffe6da50e4f9dd21bcee329a76ea358
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jimage.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jimage.dll
          • Size 33KB
          • SHA256 e3829acbb109a1c79cfb21189f544f7d3df759489c6488637a14a30d739f726e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jli.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jli.dll
          • Size 92KB
          • SHA256 8934a508aef04ea6aa9dbe1972618f1f525abf6720511ae04f4f9e14534f2bca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jsvml.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jsvml.dll
          • Size 850KB
          • SHA256 66a8d2b7a85deebc98f6acffd8a73bb4a22a5acf62d16d2d8e83583a80a1454e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\msvcp140.dll
          • Size 561KB
          • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\net.dll
          • Size 60KB
          • SHA256 a6cc6548685840ae4fac0da5aa2a871ec650958b3078311ab1bdd3b838ca6c4b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nio.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\nio.dll
          • Size 81KB
          • SHA256 259aa47a3aac56ef4d2eec9480e548358f70b9b29cb7e8cc887e97f702e8cc3f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          classes.jsa

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\classes.jsa
          • Size 12.2MB
          • SHA256 3465e58c9ef81802f0bbecdf3265cf927b9e8a9defb11dd3d4523e9932b4ae2d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jvm.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\jvm.dll
          • Size 13.5MB
          • SHA256 2b9a1b32004851eed285193c031e241821ada16d6c5658a99ab4e43e6981a137
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140.dll
          • Size 117KB
          • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140_1.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140_1.dll
          • Size 48KB
          • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zip.dll

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\zip.dll
          • Size 88KB
          • SHA256 fd7d99732f5ba371964bbc35b67d07cfdf2ddf8d175e6f420f24d1b1f508ed37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          java.security

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\java.security
          • Size 65KB
          • SHA256 c34c3504e41af63639661aedf8d0864d8157df0980dc4c22d014a7170c5897e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          default_local.policy

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\policy\unlimited\default_local.policy
          • Size 193B
          • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
          • MD5 SHA1 SHA512 TLSH

          fontconfig.bfc

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\fontconfig.bfc
          • Size 4KB
          • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jvm.cfg

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\jvm.cfg
          • Size 29B
          • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
          • MD5 SHA1 SHA512

          cacerts

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\security\cacerts
          • Size 129KB
          • SHA256 707312d3e8018928f53d108e4534f628cbbfad18196df1a2e72884300be1a69f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tzdb.dat

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzdb.dat
          • Size 100KB
          • SHA256 7be2a3adf10ff841579629f7725b15f0db41e8856527ec72847b5477073a3d29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tzmappings

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzmappings
          • Size 21KB
          • SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          release

          • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\release
          • Size 1KB
          • SHA256 e7ec64455bb89ac4d09831b6fadbb453a8566499d9819f190f5d86f5915ee795
          • MD5 SHA1 SHA512 TLSH

          memory/840-35-0x00000000005E0000-0x0000000000978000-memory.dmp

          memory/840-1461-0x00000000005E0000-0x0000000000978000-memory.dmp

          memory/840-1367-0x00000000005E0000-0x0000000000978000-memory.dmp

          memory/840-22-0x00000000005E0000-0x0000000000978000-memory.dmp

          memory/840-8-0x00000000005E0000-0x0000000000978000-memory.dmp

          memory/840-7-0x000000000090D000-0x000000000090F000-memory.dmp

          memory/1076-1448-0x000001756AE20000-0x000001756B090000-memory.dmp

          memory/1076-2139-0x00000175728E0000-0x0000017572B50000-memory.dmp

          memory/1076-1436-0x0000017572350000-0x00000175725C0000-memory.dmp

          memory/1076-1456-0x00000175728E0000-0x0000017572B50000-memory.dmp

          memory/1076-1616-0x0000017572350000-0x00000175725C0000-memory.dmp

          memory/1076-1648-0x00000175728E0000-0x0000017572B50000-memory.dmp

          memory/1076-1647-0x000001756AE20000-0x000001756B090000-memory.dmp

          memory/1076-2137-0x0000017572350000-0x00000175725C0000-memory.dmp

          memory/1076-2138-0x000001756AE20000-0x000001756B090000-memory.dmp

          memory/2580-1-0x00000000004C0000-0x000000000059D000-memory.dmp

          memory/2580-21-0x00000000004C0000-0x000000000059D000-memory.dmp

          memory/2580-0-0x000000000057D000-0x000000000057E000-memory.dmp

          memory/2580-1467-0x00000000004C0000-0x000000000059D000-memory.dmp

          memory/3804-2744-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2753-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2425-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2445-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2333-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2542-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2490-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2299-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2431-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2447-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2453-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2444-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2668-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2645-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2349-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2419-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2317-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2318-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2290-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2319-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2320-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2321-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2296-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2287-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2326-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2454-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2341-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2368-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2293-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2357-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-3180-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2288-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2291-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2369-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2374-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2394-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2405-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-3350-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-3572-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2412-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2417-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2408-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2294-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2381-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2378-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-2295-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-4278-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-4675-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-4910-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-5207-0x0000019F5D060000-0x0000019F5E060000-memory.dmp

          memory/3804-6013-0x0000019F5D060000-0x0000019F5E060000-memory.dmp