Overview

overview

8

Static

static

8

TLauncher-....1.exe

windows10-2004-x64

8

TLauncher-....1.exe

windows11-ltsc_2024-x64

8

Resubmissions

05/09/2026, 08:22

260905-j9la9szgpb8

05/09/2026, 08:09

260905-j2cddscg438

Analysis

  • user interaction
    yes
  • max time kernel
    165s
  • max time network
    169s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/09/2026, 08:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TLauncher-Installer-1.9.5.1.exe
  • Size 25.5MB
  • Sample260905-j2cddscg43
  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bootkitdiscoverypersistenceupx

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Network Service Discovery 1 TTPs 5 IoCs

    Attempt to gather information on host's network.

    discovery
  • Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • UPX packed file 12 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 18 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3564
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:464
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1968
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
          4⤵
          • Downloads MZ/PE file
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:848
          • C:\Users\Admin\AppData\Local\Temp\360-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\360-installer-bro.exe" /s
            5⤵
            • Downloads MZ/PE file
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes to the Master Boot Record (MBR)
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:5200
            • C:\Users\Admin\AppData\Local\Temp\360TS_Setup.exe
              "C:\Users\Admin\AppData\Local\Temp\360TS_Setup.exe" /c:WW.TLauncher.CPI202307 /pmode:2 /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo= /s
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Drops file in Program Files directory
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4528
              • C:\Program Files (x86)\1788595881_0\360TS_Setup.exe
                "C:\Program Files (x86)\1788595881_0\360TS_Setup.exe" /c:WW.TLauncher.CPI202307 /pmode:2 /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo= /s /TSinstall
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Writes to the Master Boot Record (MBR)
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                PID:5832
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4684
        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          4⤵
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:792
          • C:\Program Files\Java\jre-1.8\bin\javaw.exe
            "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
            5⤵
            • Suspicious use of SetWindowsHookEx
            PID:5892
            • C:\Program Files\Java\jre-1.8\bin\javaw.exe
              "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
              6⤵
                PID:2828
                • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                  C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.283.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9374.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9374 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • System Time Discovery
                  PID:2412
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:2468
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
        • Network Service Discovery
        PID:5448
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:5160
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Drops desktop.ini file(s)
        • Checks processor information in registry
        • Modifies registry class
        PID:996
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
        • Network Service Discovery
        PID:4268
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:556
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Checks processor information in registry
        • Modifies registry class
        PID:2728
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
        • Network Service Discovery
        PID:4880
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:4584
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
        1⤵
        • Checks processor information in registry
        • Modifies data under HKEY_USERS
        PID:2316
      • C:\Windows\System32\GameBarPresenceWriter.exe
        "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
        1⤵
        • Network Service Discovery
        PID:4428
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
          PID:4140
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
          1⤵
            PID:1964
          • C:\Windows\System32\GameBarPresenceWriter.exe
            "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
            1⤵
            • Network Service Discovery
            PID:4304
          • C:\Windows\system32\OpenWith.exe
            C:\Windows\system32\OpenWith.exe -Embedding
            1⤵
              PID:6008

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  config.ini
                  • Path C:\Program Files (x86)\360\Total Security\config.ini
                  • Size 184B
                  • SHA256 7a1e181fd848dfc09b73754a2a8a93167a06f037251dfd0d4fa2fa18df36e0ed
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  i18n.ini
                  • Path C:\Program Files (x86)\360\Total Security\i18n\i18n.ini
                  • Size 246B
                  • SHA256 f421332fd132d8405cad34871425c9922e4a1b172d74f86b9e4e7ee750205919
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  3903daac9bc4a3b7.timestamp
                  • Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
                  • Size 46B
                  • SHA256 8951c223d3ac4e8af69f2edecc865c0f768e63ffb9a5b0132bb53997e457558a
                  • MD5 SHA1 SHA512
                  Submit Download

                  3903daac9bc4a3b7.timestamp
                  • Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
                  • Size 46B
                  • SHA256 4ed6c37d7d7047aba65cd4af217ee918515d8cb136d0b3a8cbbf04cf498620bb
                  • MD5 SHA1 SHA512
                  Submit Download

                  07CEF2F654E3ED6050FFC9B6EB844250_44F84527B9D1A5107012929AC9B9BF7F
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_44F84527B9D1A5107012929AC9B9BF7F
                  • Size 2KB
                  • SHA256 633e1d2e8ceae15447615462a99c491f2828e542c830beacbff510d8cea04d62
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  07CEF2F654E3ED6050FFC9B6EB844250_44F84527B9D1A5107012929AC9B9BF7F
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_44F84527B9D1A5107012929AC9B9BF7F
                  • Size 484B
                  • SHA256 32a63c2d97e2a15f576f68c87ebfa64baac1bcc157b37af38882bb2dc840ea74
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  setup.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini
                  • Size 830B
                  • SHA256 07979df136c03e251c0094645d306a3818fee6f2aa9e8c1e987a784b0ee04e3d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  360base.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\1788595880_00000000_base\360base.dll
                  • Size 1.0MB
                  • SHA256 58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360-installer-bro.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360-installer-bro.exe
                  • Size 1.4MB
                  • SHA256 9fabb34981411d9afdabd532c733abbab6a348c050318b3a24ad4f09a5032d81
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  7z.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\7z.dll
                  • Size 1.1MB
                  • SHA256 898bf5db34d9997b3d90b87091f34ae4e3e9cf34b6f2ae7fb8fd86e8a1bb684e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360Base64.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360Base64.dll
                  • Size 320KB
                  • SHA256 a25ff063da67666aa210d80db05af125ef71a9ea16cbc6664b3d6d6ebb45ce83
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360DeskAna.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360DeskAna.exe
                  • Size 223KB
                  • SHA256 f78eee64134aa2fca1d6eecaa8ad2c3bf9e54c232554525ac4783768daa677e1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360DeskAna64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360DeskAna64.exe
                  • Size 217KB
                  • SHA256 48b9596b3c7b1af2c0c5cd62a815f7e43deac03ae3e91da26e8dec2891c915be
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360NetBase.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360NetBase.dll
                  • Size 112KB
                  • SHA256 61a61e2c90b4d898f79682b9444f02657efe8f7a5942d4ab83ae8015ad98f211
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360NetBase64.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360NetBase64.dll
                  • Size 64KB
                  • SHA256 1307b32865973dce4a5300a9b9b2b56a258381bf3163f0696e8082437613aa5f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360TSCommon.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\360TSCommon.dll
                  • Size 14KB
                  • SHA256 b61d15f16a1bd5068f7624f4077e1a84775e29703f141ed5fe59852f854c1fc1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DumpUper.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\DumpUper.ini
                  • Size 255B
                  • SHA256 4e3cf28ef3ce5b806c632f99482560a5246de9f86aafb7a47cdc78e5b4b019a5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Dumpuper.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Dumpuper.exe
                  • Size 1.4MB
                  • SHA256 5f21575642ecf7d38be30aef50be623f74dc3644603e0cb48d1b297ae2066614
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360desktoplite_config.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\360desktoplite_config.xml
                  • Size 2KB
                  • SHA256 e4bc20cb89a35695f6a154adf9f2da9b9e6e548c49dd08cbc858995235f2503b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  DesktopPlus.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\DesktopPlus.exe
                  • Size 3.0MB
                  • SHA256 b48d941178a82c3738f8365254123f4a95ad8794bfcab17d91961616795617b9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DesktopPlus64.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\DesktopPlus64.exe
                  • Size 3.7MB
                  • SHA256 6af68447c5373307af410bd15975126f76dc40fc9815efbb0843b99a38b75baa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360ScreenCapture.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\Utils\360ScreenCapture.exe
                  • Size 668KB
                  • SHA256 234184ee1c37f28ef75a950501e91d6b55c829f66b96696a1a8e83a09bdbe883
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360searchlite.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\Utils\360searchlite.exe
                  • Size 915KB
                  • SHA256 81399a7379aebbbfbce8d8cbc2d482ca04c38ddc91919ae5c6ee3a0f8fb3ea9b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  search_file_type.json
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\Utils\search_file_type.json
                  • Size 1KB
                  • SHA256 d1b7bc9a125cf0ffc0996bdedec5e1fa724212fab340103ceb5bc1be3c25e686
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  bell.wav
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\Utils\DesktopPlus\bell.wav
                  • Size 156KB
                  • SHA256 effc1ca8846a39001e410b2d8351b76be093342d139b332aa6260db01ac820d3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  SysSweeper.ui.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\lang\de\SysSweeper.ui.dat
                  • Size 102KB
                  • SHA256 794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360searchlite_theme.ui
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\360searchlite\360searchlite_theme.ui
                  • Size 146KB
                  • SHA256 d83d1bf6aa9a21b4c57973548450b3b2da43bdbcb2e1af04e3aeabdf9d3f5f92
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360searchlite_theme.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\360searchlite_theme.xml
                  • Size 24KB
                  • SHA256 8e5583274cbaca5d557bd095cf739a5b5f8786337a575d5c1d5df67545befacc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DesktopPlus_theme.ui
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\DesktopPlus\DesktopPlus_theme.ui
                  • Size 2.6MB
                  • SHA256 073e7f18c004460bddf066d6a14fd53321893356c3873680cc9cf35aa191ade5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  default_theme.ui
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\default_theme.ui
                  • Size 1.2MB
                  • SHA256 f0cdf49da353e99c69308cc654dcfbf2d9ca6090dbb97c58664be9ea26efb485
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  desktopplus_theme.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\desktopplus_theme.xml
                  • Size 73KB
                  • SHA256 0940f591cb25b4d8da7bb0651e66ea8ddc52810041bc91dd2da5723fc4367f38
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  theme.xml
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\config\newui\themes\default\theme.xml
                  • Size 275KB
                  • SHA256 ba6f5a1ac81fe49c14902481eb2640103abbf914efba2bc41fcd70d7b9477998
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  AntiAdwa.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\AntiAdwa.dll.locale
                  • Size 126KB
                  • SHA256 309d475fcbe0c3c24bfe3d22b4b3c41b1022ddb4eb8fe6e1ea38671f83573e70
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Dumpuper.exe.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\Dumpuper.exe.locale
                  • Size 1KB
                  • SHA256 87c1dc55f5cd035c6d880d14158e0dbcd193d69cc331001ec456b5b8dfc1753f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  LibSDI.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\LibSDI.dat
                  • Size 113KB
                  • SHA256 f511a0eea52cb982c60ec2a8758007a8d83f8a36bb4b23b27e320cd9441862f2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  dsconz.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\deepscan\dsconz.dat
                  • Size 18KB
                  • SHA256 7bdae07465d701ab2ae76fffcfcc56fb0836bdefddc7efa51011d548065245e5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  appd.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\ipc\appd.dll.locale
                  • Size 19KB
                  • SHA256 cde2a0834cb8b6e4fabda07f611567a392b2e4dc23f2fc7921f8b13e774da940
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  filemgr.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\ipc\filemgr.dll.locale
                  • Size 18KB
                  • SHA256 3ebfed2b2a10b33af330aff197905437ef3970e8c944b7970c097ac0cbb99671
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  yhregd.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\ipc\yhregd.dll.locale
                  • Size 16KB
                  • SHA256 285b8717038589756ed43bbefec8d010fdfda1b9726606332c1e3601cf6e43ff
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  libaw.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\libaw.dat
                  • Size 1.0MB
                  • SHA256 3d1b69b19a8510d6176ceb011b71d79859c13d4c61541ec7174f344d3a77bb24
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  libvi.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\libvi.dat
                  • Size 790KB
                  • SHA256 e00a185464266fdd988edb2f4bd130b4ebdce7e064fedb45806f577f1bb19291
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  pic_01.jpg
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg
                  • Size 109KB
                  • SHA256 a66eb91ed6129682ad3b3a57f10a8abf45000062038abca73a78db34c6d66cae
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  UDiskScanEngine.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\safemon\UDiskScanEngine.dll.locale
                  • Size 17KB
                  • SHA256 649ca00ba71a5f725ce94baaa4996a8c202103b1821a3529e84c20a8d882d35f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  udisk.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\safemon\udisk.locale
                  • Size 444B
                  • SHA256 254161d567ed1ae96756809932715790f4bcc5851eba123bfa6942b2b2d1eb1f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wd.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\safemon\wd.ini
                  • Size 8KB
                  • SHA256 b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  wdk.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\en\safemon\wdk.ini
                  • Size 2KB
                  • SHA256 a7883c05518f9d1d2af9773f19f470b25ea94a865fb4d43b9e16518c3434424b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  dsurls.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\deepscan\dsurls.dat
                  • Size 1KB
                  • SHA256 b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  360ipc.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\ipc\360ipc.dat
                  • Size 1KB
                  • SHA256 0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  360netd.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\ipc\360netd.dat
                  • Size 43KB
                  • SHA256 3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360netr.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\ipc\360netr.dat
                  • Size 1KB
                  • SHA256 912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  libdefa.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\libdefa.dat
                  • Size 319KB
                  • SHA256 19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  drvmon.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\es\safemon\drvmon.dat
                  • Size 5KB
                  • SHA256 5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  art.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\fr\deepscan\art.dat
                  • Size 38KB
                  • SHA256 81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  dsr.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\fr\deepscan\dsr.dat
                  • Size 58KB
                  • SHA256 4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  bp.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\fr\safemon\bp.dat
                  • Size 2KB
                  • SHA256 d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  DsRes64.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\deepscan\DsRes64.dll
                  • Size 66KB
                  • SHA256 41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ssr.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\deepscan\ssr.dat
                  • Size 47KB
                  • SHA256 656c1ec3308eec42f541e0bf1b719dab057b11b3f549060cb059ca70d525274a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  NetDefender.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\ipc\NetDefender.dll.locale
                  • Size 24KB
                  • SHA256 4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Sxin.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\ipc\Sxin.dll.locale
                  • Size 48KB
                  • SHA256 7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Sxin64.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\ipc\Sxin64.dll.locale
                  • Size 46KB
                  • SHA256 ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360SPTool.exe.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\360SPTool.exe.locale
                  • Size 31KB
                  • SHA256 15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360procmon.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\360procmon.dll.locale
                  • Size 106KB
                  • SHA256 51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Safemon64.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\Safemon64.dll.locale
                  • Size 52KB
                  • SHA256 129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  SelfProtectAPI2.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale
                  • Size 21KB
                  • SHA256 a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  safemon.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\safemon.dll.locale
                  • Size 53KB
                  • SHA256 110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  spsafe.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\spsafe.dll.locale
                  • Size 9KB
                  • SHA256 61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  spsafe64.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\spsafe64.dll.locale
                  • Size 9KB
                  • SHA256 9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  nptswp.dll.locale
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pl\safemon\webprotection_firefox\plugins\nptswp.dll.locale
                  • Size 10KB
                  • SHA256 09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  appmon.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pt\ipc\appmon.dat
                  • Size 30KB
                  • SHA256 c308ee41e48cc498c396a2ccbc57b7d29d058dd145f9867887544cb74112d63f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  filemon.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pt\ipc\filemon.dat
                  • Size 17KB
                  • SHA256 a3cfc3c8f95f0ed56306d28ac87408f10875c43bca7778c6e1cc18c7a3441183
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  regmon.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pt\ipc\regmon.dat
                  • Size 32KB
                  • SHA256 dab50e3c2787808beeb0b377ad7c3de2c518578b9f7a4ec4ac29063d59c00b3d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  wd.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\i18n\pt\safemon\wd.ini
                  • Size 8KB
                  • SHA256 de1d0fa92911957aeb41a68403b53e96d2b8294a4bc6c3daca4cc2876fac1d8b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MultiTip.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\softmgr\MultiTip.exe
                  • Size 1.9MB
                  • SHA256 ae601527a00fc5b72aeebde2305aec93eac9b9a0706393c763577ff510542d2a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  360FastFind.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\360_install_20260905091127_240826375\temp_files\sweeper\360FastFind.dll
                  • Size 192KB
                  • SHA256 4cc835ea81620d6579fbf76d3af6cfc5bc0488c733fd6d5bf56a3a5399c6d9a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  200.ico
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                  • Size 116KB
                  • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  BrowserInstaller.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                  • Size 3.7MB
                  • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG1.BMP
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                  • Size 12KB
                  • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG1.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
                  • Size 45KB
                  • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG10.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
                  • Size 206B
                  • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  IRIMG11.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG11.PNG
                  • Size 25KB
                  • SHA256 4b9893db13905698bda38bf78fa0660026f7a311c8f89fba9bfc042ebaba30e5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG13.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG13.PNG
                  • Size 41KB
                  • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG14.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                  • Size 43KB
                  • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG15.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                  • Size 644B
                  • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  IRIMG17.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                  • Size 40KB
                  • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG2.BMP
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                  • Size 12KB
                  • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG3.BMP
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                  • Size 12KB
                  • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG3.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                  • Size 475B
                  • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  IRIMG4.BMP
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.BMP
                  • Size 451KB
                  • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG4.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
                  • Size 368B
                  • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  IRIMG45.BMP
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG45.BMP
                  • Size 451KB
                  • SHA256 b4f43d08629236cd31224d7f1f8d3724c540db219a75eb0c6a4890cd0c691ea6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG7.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG7.PNG
                  • Size 15KB
                  • SHA256 f592120493d57f7a474894c022db4110521ebf5b61edb7f0fa376fbe9fff4474
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG8.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG8.PNG
                  • Size 13KB
                  • SHA256 38b5b1d3c302dc44a832260e23d2019991f971298c46a35d6f37544ea9ba853c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  IRIMG9.PNG
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                  • Size 438B
                  • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  IRZip.lmd
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                  • Size 400KB
                  • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Wow64.lmd
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                  • Size 252KB
                  • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  irsetup.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                  • Size 1.8MB
                  • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  lua5.3.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                  • Size 395KB
                  • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  irsetup.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                  • Size 1.7MB
                  • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  lua5.3.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                  • Size 395KB
                  • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  imageio1882764392940292272.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\imageio1882764392940292272.tmp
                  • Size 239B
                  • SHA256 7e20b79a691e10fcd0d78f70723384a4a8d574310adc507d6babbe87ee4f9af5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  imageio3357765875976305698.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\imageio3357765875976305698.tmp
                  • Size 231B
                  • SHA256 3aa536e4a0eaf52249c31ad4c033cf59af476d71682d0a14656059220f6fd217
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  imageio8640816886564869196.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\imageio8640816886564869196.tmp
                  • Size 5KB
                  • SHA256 ab54464948dec30d9d13e624bd5e5d0d59ef641b9efdab4eb869fb255a54e357
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  setuparguments.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                  • Size 759B
                  • SHA256 c42387d4e11b175100d425942e8ab94d1eaf07da571251e84dd47d1afa1f90eb
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  360P2SP.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\{5F91A1A6-85F1-464a-9E0F-12C6899B1672}.tmp\360P2SP.dll
                  • Size 824KB
                  • SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  TLauncher.exe
                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                  • Size 9.2MB
                  • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  uninstall.xml
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                  • Size 21KB
                  • SHA256 15cdca6a11c95f616290e91bbc1e381e1d6675fcd5e4ea8a2549d82da813028d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  uninstall.xml
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                  • Size 4KB
                  • SHA256 81fb67603da783f99272ce829a9b4299ba6c0fd823a254a905ba6c3b8c67630e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  log.2026-09-05_09.log
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\logs\starter\log.2026-09-05_09.log
                  • Size 2KB
                  • SHA256 9428046d57462ba651ffcc90dfd325c22114b8db9ef77359f89dec73b71f53c3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  log.2026-09-05_09.log
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\logs\starter\log.2026-09-05_09.log
                  • Size 5KB
                  • SHA256 819ba39881807c66faf75ce4b95eedab59b2128d1462bede35094d836f254f3c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  dependencies.json
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\dependencies.json
                  • Size 25KB
                  • SHA256 76fceb12658369b0d28f14dc35feaae204e36983c6d759c6c7665640547478be
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  resources.json
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\resources.json
                  • Size 17KB
                  • SHA256 9cd7a802791beed588677cc4b578883263333da42660c6f87add35473ce56b96
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  appConfig.json
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                  • Size 4KB
                  • SHA256 f1098290548cfee07c581d7886882f78ecb511def9d6edb2eeb3f1bc7aa5d033
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  javaConfig21.json
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                  • Size 3KB
                  • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  starter-core-1.268-v6.exe
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v6.exe
                  • Size 9.2MB
                  • SHA256 f0cb809918c2bf85a8eef2bcbd35218e75426b4e5698ca1cca50acf3e5a714ce
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  starter-core-1.268-v8.exe
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v8.exe
                  • Size 9.2MB
                  • SHA256 f7c5bfeceb3032f03d48b9cfd4dae64b9f41c9d78d9638df03dcf9483806075a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  VCRUNTIME140.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\VCRUNTIME140.dll
                  • Size 117KB
                  • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  java.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.dll
                  • Size 121KB
                  • SHA256 f8d0275464e21850da94c71f67ff99bc5b6dbb1b130b7f3a224de339484b513a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  java.exe
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                  • Size 53KB
                  • SHA256 5d0fb7c0461414c668979c4e53bdffb13cc12ec39002fd4a464736bde2caa3a6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  jimage.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jimage.dll
                  • Size 33KB
                  • SHA256 6462ff23406abd07b6989b8c6e967fa719b967592bcd3bff1c229cad1f766c4f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  jli.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jli.dll
                  • Size 90KB
                  • SHA256 a037c5d40f86a3e096f7f1761ba19d10d5427b376266877b57078418bf527dcb
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  msvcp140.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\msvcp140.dll
                  • Size 562KB
                  • SHA256 b99eb28a471311113f5c4109cb3c463f39cfd9bdb3b07f706204dedddb4516a1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  jvm.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
                  • Size 7.6MB
                  • SHA256 9cc44d43a1f2ebe4681fa20cf0f478fbfe85c2584c8bba9aa8d5ef5ec4e57b63
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  jvm.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
                  • Size 5.4MB
                  • SHA256 1340a9bae921e55686ad81581c15dd1a455c78c5574d4b669021d29ba5dd9ae3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcruntime140_1.dll
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140_1.dll
                  • Size 48KB
                  • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  COPYRIGHT
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                  • Size 35B
                  • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                  • MD5 SHA1 SHA512
                  Submit Download

                  LICENSE
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                  • Size 33B
                  • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                  • MD5 SHA1 SHA512
                  Submit Download

                  ADDITIONAL_LICENSE_INFO
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                  • Size 51B
                  • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  ASSEMBLY_EXCEPTION
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                  • Size 46B
                  • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                  • MD5 SHA1 SHA512
                  Submit Download

                  LICENSE
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                  • Size 35B
                  • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                  • MD5 SHA1 SHA512
                  Submit Download

                  jvm.cfg
                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\lib\jvm.cfg
                  • Size 29B
                  • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                  • MD5 SHA1 SHA512
                  Submit Download

                  83aa4cc77f591dfc2374580bbd95f6ba_332724ed-3c1a-4b0f-bd9b-045e18507ba6
                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-552508041-2681165170-3229858294-1000\83aa4cc77f591dfc2374580bbd95f6ba_332724ed-3c1a-4b0f-bd9b-045e18507ba6
                  • Size 45B
                  • SHA256 11e6aca8e682c046c83b721eeb5c72c5ef03cb5936c60df6f4993511ddc61238
                  • MD5 SHA1 SHA512
                  Submit Download

                  desktop.ini
                  • Path C:\Users\Admin\Videos\Captures\desktop.ini
                  • Size 190B
                  • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TLauncher.lnk
                  • Path C:\Users\Public\Desktop\TLauncher.lnk
                  • Size 1KB
                  • SHA256 83b9369727ca7a9adf58de5202e1a0b94280ffd11955f309a9b5c7dd37b74967
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  memory/464-1332-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/464-11-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/464-605-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/464-594-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/464-1350-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/464-567-0x0000000000210000-0x0000000000811000-memory.dmp
                  Download

                  memory/792-1406-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1491-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-3713-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-3712-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1503-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1420-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1422-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-3721-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-3695-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1417-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1537-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1428-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1522-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1357-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-3714-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1426-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1470-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1488-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1498-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1433-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/792-1432-0x000002179C830000-0x000002179C831000-memory.dmp
                  Download

                  memory/848-1606-0x0000000000A80000-0x0000000001077000-memory.dmp
                  Download

                  memory/848-1462-0x0000000000A80000-0x0000000001077000-memory.dmp
                  Download

                  memory/848-638-0x0000000000A80000-0x0000000001077000-memory.dmp
                  Download

                  memory/848-1400-0x0000000000A80000-0x0000000001077000-memory.dmp
                  Download

                  memory/2828-5332-0x000002262AF30000-0x000002262AF31000-memory.dmp
                  Download

                  memory/2828-5370-0x000002262AF30000-0x000002262AF31000-memory.dmp
                  Download

                  memory/2828-5382-0x000002262AF30000-0x000002262AF31000-memory.dmp
                  Download

                  memory/4684-1345-0x0000000000400000-0x0000000000420000-memory.dmp
                  Download

                  memory/5832-1622-0x00000000116E0000-0x00000000117F4000-memory.dmp
                  Download

                  memory/5892-5028-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4644-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4784-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4826-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4852-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4857-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4866-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4908-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4913-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4921-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4914-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4909-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4887-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4897-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4898-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4895-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4946-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5295-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4984-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-4962-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5082-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5217-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5227-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-3891-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5228-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5322-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5318-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5317-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5308-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download

                  memory/5892-5235-0x000001ABCBF50000-0x000001ABCBF51000-memory.dmp
                  Download