Overview

overview

8

Static

static

8

TLauncher-....1.exe

windows10-2004-x64

7

TLauncher-....1.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    143s
  • max time network
    186s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/08/2026, 04:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TLauncher-Installer-1.9.5.1.exe
  • Size 25.5MB
  • Sample260814-epsgmacl7v
  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionupx

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Network Service Discovery 1 TTPs 3 IoCs

    Attempt to gather information on host's network.

    discovery
  • UPX packed file 10 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 24 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of SetWindowsHookEx 18 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:864
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2020
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3156
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:1156
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1208
        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          4⤵
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3788
          • C:\Program Files\Java\jre-1.8\bin\javaw.exe
            "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
            5⤵
            • Modifies registry class
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1900
            • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
              C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.283.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9373.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9373 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • System Time Discovery
              • Checks processor information in registry
              • Modifies registry class
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4604
              • C:\Windows\SYSTEM32\cmd.exe
                cmd.exe /C "chcp 437 & wmic CPU get NAME"
                7⤵
                • Executes a command shell one-liner
                • Suspicious use of WriteProcessMemory
                PID:2528
                • C:\Windows\system32\chcp.com
                  chcp 437
                  8⤵
                    PID:1784
                  • C:\Windows\System32\Wbem\WMIC.exe
                    wmic CPU get NAME
                    8⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:5228
                • C:\Windows\SYSTEM32\cmd.exe
                  cmd.exe /C "chcp 437 & cmd.exe /c set processor"
                  7⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:3028
                  • C:\Windows\system32\chcp.com
                    chcp 437
                    8⤵
                      PID:4792
                    • C:\Windows\system32\cmd.exe
                      cmd.exe /c set processor
                      8⤵
                      • Executes a command shell one-liner
                      PID:2188
                  • C:\Windows\SYSTEM32\cmd.exe
                    cmd.exe /C "chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt"
                    7⤵
                    • Executes a command shell one-liner
                    • Suspicious use of WriteProcessMemory
                    PID:1504
                    • C:\Windows\system32\chcp.com
                      chcp 437
                      8⤵
                        PID:3420
                      • C:\Windows\system32\dxdiag.exe
                        dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                        8⤵
                          PID:3500
                      • C:\Windows\SYSTEM32\cmd.exe
                        cmd.exe /C "chcp 437 & wmic qfe get HotFixID"
                        7⤵
                        • Executes a command shell one-liner
                        PID:5336
                        • C:\Windows\system32\chcp.com
                          chcp 437
                          8⤵
                            PID:2856
                          • C:\Windows\System32\Wbem\WMIC.exe
                            wmic qfe get HotFixID
                            8⤵
                              PID:5824
              • C:\Windows\System32\GameBarPresenceWriter.exe
                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                1⤵
                • Network Service Discovery
                PID:4864
              • C:\Windows\system32\OpenWith.exe
                C:\Windows\system32\OpenWith.exe -Embedding
                1⤵
                • Suspicious use of SetWindowsHookEx
                PID:1952
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                1⤵
                • Drops desktop.ini file(s)
                • Checks processor information in registry
                • Modifies registry class
                PID:5656
              • C:\Windows\System32\GameBarPresenceWriter.exe
                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                1⤵
                • Network Service Discovery
                PID:3420
              • C:\Windows\system32\OpenWith.exe
                C:\Windows\system32\OpenWith.exe -Embedding
                1⤵
                • Suspicious use of SetWindowsHookEx
                PID:2636
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                1⤵
                • Checks processor information in registry
                • Modifies registry class
                PID:2280
              • C:\Windows\System32\GameBarPresenceWriter.exe
                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                1⤵
                • Network Service Discovery
                PID:2484
              • C:\Windows\system32\OpenWith.exe
                C:\Windows\system32\OpenWith.exe -Embedding
                1⤵
                • Suspicious use of SetWindowsHookEx
                PID:2128
              • C:\Windows\System32\svchost.exe
                C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                1⤵
                • Checks processor information in registry
                • Modifies data under HKEY_USERS
                PID:4608
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                1⤵
                  PID:1104

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      3903daac9bc4a3b7.timestamp
                      • Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
                      • Size 46B
                      • SHA256 03f28a88168eadf23b69df26616392f357b58fae59d41cbf9e2ddd81928c998b
                      • MD5 SHA1 SHA512
                      Submit Download

                      F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                      • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                      • Size 64KB
                      • SHA256 4d4dfe2d571b2fb692a311daea5ad9fad6e7ee22f716691a05539075e63d33c3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                      • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                      • Size 4B
                      • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                      • MD5 SHA1 SHA512
                      Submit Download

                      F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                      • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                      • Size 960B
                      • SHA256 dae63549d23b9f08ebb27d21f1e35b864f600d844bd96873644805f120bb745d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      +JXF313858837965730685.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\+JXF313858837965730685.tmp
                      • Size 132KB
                      • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      +JXF4669806466509078217.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\+JXF4669806466509078217.tmp
                      • Size 477KB
                      • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      +JXF6966795601544317110.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\+JXF6966795601544317110.tmp
                      • Size 424KB
                      • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      +JXF7360345327597116260.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\+JXF7360345327597116260.tmp
                      • Size 141KB
                      • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      200.ico
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                      • Size 116KB
                      • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      BrowserInstaller.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                      • Size 3.7MB
                      • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG1.BMP
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                      • Size 12KB
                      • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG1.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
                      • Size 45KB
                      • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG10.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
                      • Size 206B
                      • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      IRIMG13.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG13.PNG
                      • Size 41KB
                      • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG14.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                      • Size 43KB
                      • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG15.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                      • Size 644B
                      • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      IRIMG17.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                      • Size 40KB
                      • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG2.BMP
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                      • Size 12KB
                      • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG3.BMP
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                      • Size 12KB
                      • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG3.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                      • Size 475B
                      • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      IRIMG4.BMP
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.BMP
                      • Size 451KB
                      • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      IRIMG4.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
                      • Size 368B
                      • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      IRIMG9.PNG
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                      • Size 438B
                      • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      IRZip.lmd
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                      • Size 400KB
                      • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Wow64.lmd
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                      • Size 252KB
                      • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      irsetup.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                      • Size 1.8MB
                      • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      lua5.3.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                      • Size 395KB
                      • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      irsetup.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                      • Size 1.7MB
                      • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      lua5.3.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                      • Size 395KB
                      • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      setuparguments.ini
                      • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                      • Size 765B
                      • SHA256 fb2b553dfc267f1fc902c99d9023d48c2fc3662d266af516863c32aa70cbd497
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      TLauncher.exe
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                      • Size 9.2MB
                      • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      jaxp.properties
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\jaxp.properties
                      • Size 7KB
                      • SHA256 7d95c49465d0c836d608d02856d3b097934dfb5dc4bd2279affaf337d045b708
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      logging.properties
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\logging.properties
                      • Size 2KB
                      • SHA256 b62d2733ab99556b108a1951d894c5a8d76b1ac7a00c02c388f9eb9be046c56f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      net.properties
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\net.properties
                      • Size 7KB
                      • SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      java.policy
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\java.policy
                      • Size 2KB
                      • SHA256 d51bcab7ed301caeff3779a5e777e6019864cecee5e2abc102ef991b0de77af2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      java.security
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\java.security
                      • Size 64KB
                      • SHA256 30aa2a4064ba35256ef319cc332f96a6e8e53327619d722f460fa2a77ebcc2ac
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      README.txt
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\README.txt
                      • Size 2KB
                      • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      default_US_export.policy.tlauncherdownload
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\limited\default_US_export.policy.tlauncherdownload
                      • Size 146B
                      • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      default_local.policy
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\limited\default_local.policy
                      • Size 647B
                      • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      exempt_local.policy
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\limited\exempt_local.policy
                      • Size 566B
                      • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      default_local.policy
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\security\policy\unlimited\default_local.policy
                      • Size 193B
                      • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      sound.properties
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\conf\sound.properties
                      • Size 1KB
                      • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ADDITIONAL_LICENSE_INFO.tlauncherdownload
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\ADDITIONAL_LICENSE_INFO.tlauncherdownload
                      • Size 2KB
                      • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      LICENSE
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\LICENSE
                      • Size 18KB
                      • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      aes.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\aes.md
                      • Size 1KB
                      • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      asm.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\asm.md
                      • Size 1KB
                      • SHA256 683be15695bd248272d60f5b7fbe5e126a935ea6bf231a624a9aa164733e1d1d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      c-libutl.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\c-libutl.md
                      • Size 1KB
                      • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      cldr.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\cldr.md
                      • Size 9KB
                      • SHA256 19515e14a240e022640e95b61b5095127fa9690755950b4a2b0a02e783e08163
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      icu.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\icu.md
                      • Size 29KB
                      • SHA256 1bf28459c6e0af9f3429f4f8becd1668d6544055f8df240277456bc4b3d8a752
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      public_suffix.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\public_suffix.md
                      • Size 17KB
                      • SHA256 d7818e02ebfc4e5cd82613e003e7ba6be2e9d5949ea4aa0ba88d4d2f7ca69999
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      siphash.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\siphash.md
                      • Size 8KB
                      • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      unicode.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\unicode.md
                      • Size 8KB
                      • SHA256 6f72f10d166b2c2e8a395e03e734c5afc852b59aeca73ced124f6b9c96268d53
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      wepoll.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\wepoll.md
                      • Size 1KB
                      • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      zlib.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.base\zlib.md
                      • Size 1010B
                      • SHA256 809b62ba648e02302f7d9ea6b6886c10d5253ac86ad528038a50c73eada5fce2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ASSEMBLY_EXCEPTION.tlauncherdownload
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.compiler\ASSEMBLY_EXCEPTION.tlauncherdownload
                      • Size 43B
                      • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
                      • MD5 SHA1 SHA512
                      Submit Download

                      LICENSE.tlauncherdownload
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.compiler\LICENSE.tlauncherdownload
                      • Size 32B
                      • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
                      • MD5 SHA1 SHA512
                      Submit Download

                      colorimaging.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\colorimaging.md
                      • Size 167B
                      • SHA256 04d61e3e8e71dd452ebe52008af5378d9f6640d14578aeb515dc5375973b0189
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      giflib.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\giflib.md
                      • Size 1KB
                      • SHA256 6cd971730d3047ea57f6865b7bdca2509a9876ae24d5c0ed0c4e32def5f9107e
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      jpeg.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\jpeg.md
                      • Size 3KB
                      • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      mesa3d.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.desktop\mesa3d.md
                      • Size 5KB
                      • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      ADDITIONAL_LICENSE_INFO.tlauncherdownload
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.instrument\ADDITIONAL_LICENSE_INFO.tlauncherdownload
                      • Size 48B
                      • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
                      • MD5 SHA1 SHA512
                      Submit Download

                      dom.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.xml\dom.md
                      • Size 3KB
                      • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      jcup.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.xml\jcup.md
                      • Size 1KB
                      • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      xerces.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\java.xml\xerces.md
                      • Size 11KB
                      • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      pkcs11cryptotoken.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\jdk.crypto.cryptoki\pkcs11cryptotoken.md
                      • Size 3KB
                      • SHA256 1f36ff1342a581142c858f90064e20633d43529ac82adb85345bd902a14e18b2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      pkcs11wrapper.md
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
                      • Size 2KB
                      • SHA256 371974b1fca3744a3892c7ee1fcc593b8b4281fc218f4cafd2f709e9df5fd81d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      fontconfig.bfc
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\lib\fontconfig.bfc
                      • Size 4KB
                      • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      blocked.certs
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\lib\security\blocked.certs
                      • Size 2KB
                      • SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      default.policy
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\lib\security\default.policy
                      • Size 11KB
                      • SHA256 69790a79bb9d4bef6b544c1878410bfa0c6a92171834c188772a0ba1ca8c0d95
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      public_suffix_list.dat
                      • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\lib\security\public_suffix_list.dat
                      • Size 224KB
                      • SHA256 3a2e10e573625dab5489812711b874c05a115ac2471bf90776e45561e8f52e8a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      uninstall.xml
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                      • Size 21KB
                      • SHA256 15cdca6a11c95f616290e91bbc1e381e1d6675fcd5e4ea8a2549d82da813028d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      uninstall.xml
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                      • Size 2KB
                      • SHA256 e9bb8b87b52b221ac438d889865cb6365fdfcce986a47284906babfe7cf9e01f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      uninstall.xml
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                      • Size 4KB
                      • SHA256 a9bf205c6855ad4c89c1962647932302c7f74376fdd35710325a21e5edb91d55
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      uninstall.xml
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                      • Size 5KB
                      • SHA256 68fbae25608a28bbe1c091565eff75b0ea0e58857e6b3e624b6686eceedc2db4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      uninstall.xml
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                      • Size 4KB
                      • SHA256 39a49d13f505f8814d8bc80d7155a7be7e39b0c22e240c48d1840381f10d0800
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      version_manifest.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                      • Size 201KB
                      • SHA256 5a42e3d17f9a0d72ccfc6931d59d71aaf69d261626e47e6461417e613e7eb10c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      29.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\34c7bef563edad4d5e3ae8157e904690afb1fa50\29.json
                      • Size 517KB
                      • SHA256 a17e4f79c680868d4622f556e0d79bf2a2a6ca53619119c5f92d2afb8cf5f338
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      1.21.11.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\4b5fd518c8f06ea3f9fdef2895f729c204f0bf5e\1.21.11.json
                      • Size 41KB
                      • SHA256 f6ce577abd648a59766f2236dcaa76b5a3817a8122fc704713976f5cc6895962
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      manifest.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\cb4394a27089d19f65d5baa6cf0482c27c3c7865\manifest.json
                      • Size 145KB
                      • SHA256 d2810cd0a87baf3980bbe256758de3ac4358801cc7b42fc3e74b7155ab5a67ff
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      inner_servers-1.3.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.3.json
                      • Size 7KB
                      • SHA256 531ff22cb9414feb0201e706d1ef009f0e57624568fb016ddc562611a284124b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      index_en.html
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
                      • Size 48KB
                      • SHA256 351a88738501452aef6126f68a3c9415d93fd31714312776389da378c0f6513a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      libraries-1.7.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                      • Size 377KB
                      • SHA256 0a37d481b94fe7fb9fc60162c22038690c7d67eab09b0b2bfa3445dd01b23710
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      additional_assets-1.1.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                      • Size 190KB
                      • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      version_manifest.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                      • Size 12KB
                      • SHA256 e5a04128c61d6c23b527b4914f3cacb711a6691d2eab89813f7f2f5a9d34069f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      version_manifest.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                      • Size 48KB
                      • SHA256 f39279fac3a1001f213d3bdafcffac010e2cc7bda85abf2415c63955e5b834ee
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      additional_hot_servers-1.0.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                      • Size 2KB
                      • SHA256 04f57153be7374c05f9e83de9b122a4f0b8d85d7d65a59d756b58bd84404e0f1
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      hot_servers-1.0.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                      • Size 9KB
                      • SHA256 a042ce259606edd27e933fc3c00fc44e7080fce961e2ea58099bb8ae855ff332
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      OptiFine%201.21.11.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tlauncher.org\update\downloads\versions\new5\OptiFine%201.21.11.json
                      • Size 1KB
                      • SHA256 755a7f169f4e2f6107abf308539768edec68b115c50e77933e08f14951f46cc7
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      java_configuration.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_rescl.tl.vg\b\jvm\java_configuration.json
                      • Size 13KB
                      • SHA256 b490908c9bda7f4ed5220145dee8dd1ee9ad92a210080adec3c183b0f0a50a8b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      log.2026-08-14_05.log
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\logs\starter\log.2026-08-14_05.log
                      • Size 2KB
                      • SHA256 ef4e34febf5ef2bc6fce2f194e3336330beeac1e4ba35ec50bab6c62450ed404
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      dependencies.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9373\dependencies.json
                      • Size 25KB
                      • SHA256 d2a764013d99988f34a2b994e8ea0a04dc5870a4131d6a83c562e61da7db010d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      resources.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9373\resources.json
                      • Size 17KB
                      • SHA256 60c396f03a5cdedc4dbf160d1a59e9312916c12d9909df482f6936ce412c15af
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      appConfig.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                      • Size 4KB
                      • SHA256 398212dcab9cb3078dbedb2ba01aecb0be42ffed33e5c5a1d48092d55c230dfa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      javaConfig21.json
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                      • Size 3KB
                      • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      starter-core-1.268-v6.exe
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v6.exe
                      • Size 9.2MB
                      • SHA256 f0cb809918c2bf85a8eef2bcbd35218e75426b4e5698ca1cca50acf3e5a714ce
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      DiscordIPC-0.5.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar
                      • Size 28KB
                      • SHA256 ddb49b2a58155d576952918630cce8cc09ee5df679f7eb96cd673e0e928254cf
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      annotations-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar
                      • Size 12KB
                      • SHA256 2e20c2933bd53487ed71bd52ff1210d3fbcd4ae6de7f37ecc5f435929acc7bcf
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      aopalliance-1.0.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar
                      • Size 4KB
                      • SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      arns-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar
                      • Size 15KB
                      • SHA256 ff80f642bcebfab78ea23ad02051da47f55b1d54c2d755b013db5ded697eecf8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      auth-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar
                      • Size 233KB
                      • SHA256 a41c54edd9818d408699f4db758e0ae71dccd36acf1a033fd61a0f050194f698
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      aws-core-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar
                      • Size 187KB
                      • SHA256 3ff82e9eee040254a0144d3e8ba3686e79b23a8a1b9e0eb80e7cb8b3a6f1c698
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      aws-query-protocol-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar
                      • Size 67KB
                      • SHA256 2e9ff3baafc3cd30811a4ea1fe950ccc8e2fc4c8b179a39f211db9866471e165
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      aws-xml-protocol-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar
                      • Size 99KB
                      • SHA256 1887ffd2b41d8787c5847dd4ad89aa8128a281977d62eb2011f7a331136d5af5
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      checker-qual-3.12.0.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar
                      • Size 203KB
                      • SHA256 ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      checksums-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar
                      • Size 67KB
                      • SHA256 c04118aed95ef281c6b3aac16d6b44736c37eb8fa43e6d045369fc71528c3c48
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      checksums-spi-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar
                      • Size 7KB
                      • SHA256 6a94b2a7cd778ec26576b7461f475e8d0d31d5f7e80960b583130d493f0b58b7
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-compress-1.23.0.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar
                      • Size 1.0MB
                      • SHA256 c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-io-2.11.0.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar
                      • Size 319KB
                      • SHA256 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-lang3-3.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar
                      • Size 424KB
                      • SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-logging-1.1.1.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar
                      • Size 59KB
                      • SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-logging-api-1.1.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar
                      • Size 43KB
                      • SHA256 33a4dd47bb4764e4eb3692d86386d17a0d9827f4f4bb0f70121efab6bc03ba35
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      commons-vfs2-2.0.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar
                      • Size 405KB
                      • SHA256 5af37bc47f6bcce94e740b9793115ff135dda54f9ccf98e057938c2c98765f4d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      crt-core-2.40.4.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar
                      • Size 17KB
                      • SHA256 25582ba17ad43914e1caccff7563b54a1fe18103ae2015881fd67ec9b9204e61
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      desktop-common-util-1.269-java21.jar
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar
                      • Size 51KB
                      • SHA256 c52fef0a282804ed2e1df0cd682438748b7b779fb07dfcb8f690f312e0b1a465
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      VCRUNTIME140.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\VCRUNTIME140.dll
                      • Size 117KB
                      • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      java.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.dll
                      • Size 121KB
                      • SHA256 f8d0275464e21850da94c71f67ff99bc5b6dbb1b130b7f3a224de339484b513a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      java.exe
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                      • Size 53KB
                      • SHA256 5d0fb7c0461414c668979c4e53bdffb13cc12ec39002fd4a464736bde2caa3a6
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      jimage.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jimage.dll
                      • Size 33KB
                      • SHA256 6462ff23406abd07b6989b8c6e967fa719b967592bcd3bff1c229cad1f766c4f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      jli.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jli.dll
                      • Size 90KB
                      • SHA256 a037c5d40f86a3e096f7f1761ba19d10d5427b376266877b57078418bf527dcb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      msvcp140.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\msvcp140.dll
                      • Size 562KB
                      • SHA256 b99eb28a471311113f5c4109cb3c463f39cfd9bdb3b07f706204dedddb4516a1
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      net.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\net.dll
                      • Size 59KB
                      • SHA256 73fc65cd308ff969a336aada77805836b80e777f17402ad910243594228dd82e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nio.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\nio.dll
                      • Size 79KB
                      • SHA256 3cd0ee9461d5f2b2b41a597b97f0d72b4d2029b5ad57d00391e1aa680382e3ee
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      jvm.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
                      • Size 12.8MB
                      • SHA256 47369a9bbcb22b25fd5702f8d0240a46bd108b00d72367d0659595dbfbe63071
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      vcruntime140_1.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140_1.dll
                      • Size 48KB
                      • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      zip.dll
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\zip.dll
                      • Size 87KB
                      • SHA256 7e6e5f0380b4b6574cf2b22d82c46978d85e0db1be6b8745c562cbb4eac6c042
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      COPYRIGHT
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                      • Size 35B
                      • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                      • MD5 SHA1 SHA512
                      Submit Download

                      LICENSE
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                      • Size 33B
                      • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                      • MD5 SHA1 SHA512
                      Submit Download

                      ADDITIONAL_LICENSE_INFO
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                      • Size 51B
                      • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ASSEMBLY_EXCEPTION
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                      • Size 46B
                      • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                      • MD5 SHA1 SHA512
                      Submit Download

                      LICENSE
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                      • Size 35B
                      • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                      • MD5 SHA1 SHA512
                      Submit Download

                      jvm.cfg
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\lib\jvm.cfg
                      • Size 29B
                      • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                      • MD5 SHA1 SHA512
                      Submit Download

                      tlauncher-2.0.properties
                      • Path C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties
                      • Size 1KB
                      • SHA256 2cd4502fb74bd42346efef4cb62a54eca96a0049b55008df1a8d817662d02175
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      83aa4cc77f591dfc2374580bbd95f6ba_332724ed-3c1a-4b0f-bd9b-045e18507ba6
                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-552508041-2681165170-3229858294-1000\83aa4cc77f591dfc2374580bbd95f6ba_332724ed-3c1a-4b0f-bd9b-045e18507ba6
                      • Size 45B
                      • SHA256 11e6aca8e682c046c83b721eeb5c72c5ef03cb5936c60df6f4993511ddc61238
                      • MD5 SHA1 SHA512
                      Submit Download

                      desktop.ini
                      • Path C:\Users\Admin\Videos\Captures\desktop.ini
                      • Size 190B
                      • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      TLauncher.lnk
                      • Path C:\Users\Public\Desktop\TLauncher.lnk
                      • Size 1KB
                      • SHA256 693a11a85ea7f1c34090ab06178d362f8cd338e779beac5a772741dfd5e65475
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      memory/1156-613-0x0000000000DF0000-0x00000000013E7000-memory.dmp
                      Download

                      memory/1156-1295-0x0000000000DF0000-0x00000000013E7000-memory.dmp
                      Download

                      memory/1156-1585-0x0000000000DF0000-0x00000000013E7000-memory.dmp
                      Download

                      memory/1208-1280-0x0000000000400000-0x0000000000420000-memory.dmp
                      Download

                      memory/1900-1982-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1732-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-2009-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1989-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1985-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1986-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1977-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1950-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1948-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1944-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1945-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1940-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1923-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1919-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1916-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1914-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1910-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1891-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1889-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1861-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1841-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1839-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1810-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1817-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1823-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1816-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1791-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1799-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1796-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1789-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-1779-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/1900-2027-0x000001B5EB860000-0x000001B5EB861000-memory.dmp
                      Download

                      memory/2020-1284-0x0000000000A80000-0x0000000001081000-memory.dmp
                      Download

                      memory/2020-1267-0x0000000000A80000-0x0000000001081000-memory.dmp
                      Download

                      memory/2020-578-0x0000000000A80000-0x0000000001081000-memory.dmp
                      Download

                      memory/2020-577-0x0000000000A80000-0x0000000001081000-memory.dmp
                      Download

                      memory/2020-12-0x0000000000A80000-0x0000000001081000-memory.dmp
                      Download

                      memory/3788-1456-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1425-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1708-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1697-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1669-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1653-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1625-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1612-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1587-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1537-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1500-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1717-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1446-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1716-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1423-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1403-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1384-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1370-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1372-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1365-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1362-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1719-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1359-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1355-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1341-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/3788-1293-0x0000021C199A0000-0x0000021C199A1000-memory.dmp
                      Download

                      memory/5656-1677-0x000001F489550000-0x000001F489BD0000-memory.dmp
                      Download