Analysis

  • user interaction
    yes
  • max time kernel
    57s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 05:58

General

  • Target
    starter-core-1.269-v8-native.exe
  • Size 68.8MB
  • Sample260910-gpbj8ayhld
  • SHA256 c053b982e7ed3ab28eddcc1c74f418bdea7425e1462535a319fde6b2f73197b2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 15 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 37 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe
    "C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3760
    • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
      C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.283.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9374.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9374 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailabilityV1.json -country=${country} -starterJVM= -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe -starterFileEncoding=UTF-8 -runVersionWithServer=empty
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Network Configuration Discovery: Internet Connection Discovery
      • System Time Discovery
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3792
      • C:\Windows\SYSTEM32\cmd.exe
        cmd.exe /C "chcp 437 & wmic CPU get NAME"
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:972
        • C:\Windows\system32\chcp.com
          chcp 437
          4⤵
            PID:400
          • C:\Windows\System32\Wbem\WMIC.exe
            wmic CPU get NAME
            4⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:4276
        • C:\Windows\SYSTEM32\cmd.exe
          cmd.exe /C "chcp 437 & cmd.exe /c set processor"
          3⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4076
          • C:\Windows\system32\chcp.com
            chcp 437
            4⤵
              PID:2400
            • C:\Windows\system32\cmd.exe
              cmd.exe /c set processor
              4⤵
              • Executes a command shell one-liner
              PID:672
          • C:\Windows\SYSTEM32\cmd.exe
            cmd.exe /C "chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt"
            3⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:716
            • C:\Windows\system32\chcp.com
              chcp 437
              4⤵
                PID:3536
              • C:\Windows\system32\dxdiag.exe
                dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                4⤵
                • Drops file in System32 directory
                • Checks SCSI registry key(s)
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of SetWindowsHookEx
                PID:2812
            • C:\Windows\SYSTEM32\cmd.exe
              cmd.exe /C "chcp 437 & wmic qfe get HotFixID"
              3⤵
              • Executes a command shell one-liner
              PID:1760
              • C:\Windows\system32\chcp.com
                chcp 437
                4⤵
                  PID:4500
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic qfe get HotFixID
                  4⤵
                    PID:1996

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  +JXF11975487848867454744.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\+JXF11975487848867454744.tmp
                  • Size 477KB
                  • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  +JXF13510067301893469873.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\+JXF13510067301893469873.tmp
                  • Size 132KB
                  • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  +JXF6172940831649023406.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\+JXF6172940831649023406.tmp
                  • Size 141KB
                  • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  +JXF9141766446519102198.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\+JXF9141766446519102198.tmp
                  • Size 424KB
                  • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  net.properties

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\net.properties
                  • Size 7KB
                  • SHA256 594bc40230a0bd7c441fe069989d66e534a6bae2ee5910f9f4bf64e59b583256
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  README.txt

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\README.txt
                  • Size 2KB
                  • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                  • MD5 SHA1 SHA512 TLSH

                  default_US_export.policy.tlauncherdownload

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\default_US_export.policy.tlauncherdownload
                  • Size 146B
                  • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                  • MD5 SHA1 SHA512 TLSH

                  default_local.policy

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\default_local.policy
                  • Size 647B
                  • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                  • MD5 SHA1 SHA512 TLSH

                  exempt_local.policy

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\limited\exempt_local.policy
                  • Size 566B
                  • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                  • MD5 SHA1 SHA512 TLSH

                  default_local.policy

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\security\policy\unlimited\default_local.policy
                  • Size 193B
                  • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                  • MD5 SHA1 SHA512 TLSH

                  sound.properties

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\conf\sound.properties
                  • Size 1KB
                  • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                  • MD5 SHA1 SHA512 TLSH

                  ADDITIONAL_LICENSE_INFO

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\ADDITIONAL_LICENSE_INFO
                  • Size 2KB
                  • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                  • MD5 SHA1 SHA512 TLSH

                  LICENSE

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\LICENSE
                  • Size 18KB
                  • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  aes.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\aes.md
                  • Size 1KB
                  • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                  • MD5 SHA1 SHA512 TLSH

                  c-libutl.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\c-libutl.md
                  • Size 1KB
                  • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                  • MD5 SHA1 SHA512 TLSH

                  siphash.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\siphash.md
                  • Size 8KB
                  • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  wepoll.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\wepoll.md
                  • Size 1KB
                  • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
                  • MD5 SHA1 SHA512 TLSH

                  zlib.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.base\zlib.md
                  • Size 1010B
                  • SHA256 809b62ba648e02302f7d9ea6b6886c10d5253ac86ad528038a50c73eada5fce2
                  • MD5 SHA1 SHA512 TLSH

                  ASSEMBLY_EXCEPTION.tlauncherdownload

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\ASSEMBLY_EXCEPTION.tlauncherdownload
                  • Size 43B
                  • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
                  • MD5 SHA1 SHA512

                  LICENSE.tlauncherdownload

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\LICENSE.tlauncherdownload
                  • Size 32B
                  • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
                  • MD5 SHA1 SHA512

                  colorimaging.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\colorimaging.md
                  • Size 167B
                  • SHA256 04d61e3e8e71dd452ebe52008af5378d9f6640d14578aeb515dc5375973b0189
                  • MD5 SHA1 SHA512 TLSH

                  harfbuzz.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\harfbuzz.md
                  • Size 3KB
                  • SHA256 b3f327a8b36d56beb152b3fd1bb5a7f245362cbea123ebbc68f8907f741b552a
                  • MD5 SHA1 SHA512 TLSH

                  jpeg.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\jpeg.md
                  • Size 3KB
                  • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
                  • MD5 SHA1 SHA512 TLSH

                  mesa3d.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.desktop\mesa3d.md
                  • Size 5KB
                  • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  ADDITIONAL_LICENSE_INFO.tlauncherdownload

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.logging\ADDITIONAL_LICENSE_INFO.tlauncherdownload
                  • Size 48B
                  • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
                  • MD5 SHA1 SHA512

                  santuario.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml.crypto\santuario.md
                  • Size 11KB
                  • SHA256 d08690d25f660f145c73365d260ed522cd0aace8a0e1396706551b7a1ae8c9a3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  dom.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\dom.md
                  • Size 3KB
                  • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
                  • MD5 SHA1 SHA512 TLSH

                  jcup.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\jcup.md
                  • Size 1KB
                  • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
                  • MD5 SHA1 SHA512 TLSH

                  xalan.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\xalan.md
                  • Size 13KB
                  • SHA256 02bd013fc3f438dbb8fa41fa57888177e015efa6431d37fce6e794c6f353a6a1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  xerces.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\java.xml\xerces.md
                  • Size 11KB
                  • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  pkcs11cryptotoken.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11cryptotoken.md
                  • Size 3KB
                  • SHA256 1f36ff1342a581142c858f90064e20633d43529ac82adb85345bd902a14e18b2
                  • MD5 SHA1 SHA512 TLSH

                  pkcs11wrapper.md

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
                  • Size 2KB
                  • SHA256 371974b1fca3744a3892c7ee1fcc593b8b4281fc218f4cafd2f709e9df5fd81d
                  • MD5 SHA1 SHA512 TLSH

                  fontconfig.bfc

                  • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\java-runtime-epsilon\windows\java-runtime-epsilon\lib\fontconfig.bfc
                  • Size 4KB
                  • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  version_manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                  • Size 203KB
                  • SHA256 ee77094763ecb2eac015cd3f2003652cff7a20c4be8a0bf15129e3878f31a69c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  26.2.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\2ee1d19a4f344bcc84c0499ba332b98f6441e6ff\26.2.json
                  • Size 50KB
                  • SHA256 8488e23d802a80856cf5758a114868879284aa67c9e1447236064ee6ac1486a9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\b374544c680d965fb5535977d7cb04c6befe1930\manifest.json
                  • Size 149KB
                  • SHA256 fcac80eeabd7f68b10136286493f633d043e5804ff4fa1692e654edd129c5853
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  32.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\e6ac246e2a151ff254110f4ddb1a944ed184d140\32.json
                  • Size 572KB
                  • SHA256 bcf5eb96fb25ebcdc97784bf8ab3bc3eb85e6739bc744f9f97a5ba8de3c1d87b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  inner_servers-1.3.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.3.json
                  • Size 5KB
                  • SHA256 f28291a0974ff31b36aaae3f45decae23abb94180456659c7b77c6029fe789f0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  index_en.html

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
                  • Size 48KB
                  • SHA256 351a88738501452aef6126f68a3c9415d93fd31714312776389da378c0f6513a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  libraries-1.7.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                  • Size 377KB
                  • SHA256 0a37d481b94fe7fb9fc60162c22038690c7d67eab09b0b2bfa3445dd01b23710
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  additional_assets-1.1.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                  • Size 190KB
                  • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  version_manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                  • Size 12KB
                  • SHA256 e5a04128c61d6c23b527b4914f3cacb711a6691d2eab89813f7f2f5a9d34069f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  version_manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                  • Size 48KB
                  • SHA256 f39279fac3a1001f213d3bdafcffac010e2cc7bda85abf2415c63955e5b834ee
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  additional_hot_servers-1.0.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                  • Size 2KB
                  • SHA256 04f57153be7374c05f9e83de9b122a4f0b8d85d7d65a59d756b58bd84404e0f1
                  • MD5 SHA1 SHA512 TLSH

                  hot_servers-1.0.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                  • Size 16KB
                  • SHA256 ae982bc0bfc9ded7954df4c19c05904eeced58047527281bbbad77e89e2097c4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  java_configuration.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_rescl.tl.vg\b\jvm\java_configuration.json
                  • Size 13KB
                  • SHA256 b490908c9bda7f4ed5220145dee8dd1ee9ad92a210080adec3c183b0f0a50a8b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  dependencies.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\dependencies.json
                  • Size 25KB
                  • SHA256 76fceb12658369b0d28f14dc35feaae204e36983c6d759c6c7665640547478be
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  resources.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\resources.json
                  • Size 17KB
                  • SHA256 9cd7a802791beed588677cc4b578883263333da42660c6f87add35473ce56b96
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  appConfig.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                  • Size 4KB
                  • SHA256 f1098290548cfee07c581d7886882f78ecb511def9d6edb2eeb3f1bc7aa5d033
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  javaConfig21.json

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                  • Size 3KB
                  • SHA256 4137156413e8ca1b38862aedd342bf6dbf6c2446fd4d86ea6893c0888f260893
                  • MD5 SHA1 SHA512 TLSH

                  DiscordIPC-0.5.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar
                  • Size 28KB
                  • SHA256 ddb49b2a58155d576952918630cce8cc09ee5df679f7eb96cd673e0e928254cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  annotations-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar
                  • Size 12KB
                  • SHA256 2e20c2933bd53487ed71bd52ff1210d3fbcd4ae6de7f37ecc5f435929acc7bcf
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  aopalliance-1.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar
                  • Size 4KB
                  • SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  arns-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar
                  • Size 15KB
                  • SHA256 ff80f642bcebfab78ea23ad02051da47f55b1d54c2d755b013db5ded697eecf8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  auth-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar
                  • Size 233KB
                  • SHA256 a41c54edd9818d408699f4db758e0ae71dccd36acf1a033fd61a0f050194f698
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  aws-core-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar
                  • Size 187KB
                  • SHA256 3ff82e9eee040254a0144d3e8ba3686e79b23a8a1b9e0eb80e7cb8b3a6f1c698
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  aws-query-protocol-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar
                  • Size 67KB
                  • SHA256 2e9ff3baafc3cd30811a4ea1fe950ccc8e2fc4c8b179a39f211db9866471e165
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  aws-xml-protocol-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar
                  • Size 99KB
                  • SHA256 1887ffd2b41d8787c5847dd4ad89aa8128a281977d62eb2011f7a331136d5af5
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  checker-qual-3.12.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar
                  • Size 203KB
                  • SHA256 ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  checksums-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar
                  • Size 67KB
                  • SHA256 c04118aed95ef281c6b3aac16d6b44736c37eb8fa43e6d045369fc71528c3c48
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  checksums-spi-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar
                  • Size 7KB
                  • SHA256 6a94b2a7cd778ec26576b7461f475e8d0d31d5f7e80960b583130d493f0b58b7
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-compress-1.23.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar
                  • Size 1.0MB
                  • SHA256 c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-io-2.11.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar
                  • Size 319KB
                  • SHA256 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-lang3-3.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar
                  • Size 424KB
                  • SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-logging-1.1.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar
                  • Size 59KB
                  • SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-logging-api-1.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar
                  • Size 43KB
                  • SHA256 33a4dd47bb4764e4eb3692d86386d17a0d9827f4f4bb0f70121efab6bc03ba35
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  commons-vfs2-2.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar
                  • Size 405KB
                  • SHA256 5af37bc47f6bcce94e740b9793115ff135dda54f9ccf98e057938c2c98765f4d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  crt-core-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar
                  • Size 17KB
                  • SHA256 25582ba17ad43914e1caccff7563b54a1fe18103ae2015881fd67ec9b9204e61
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  desktop-common-util-1.269-java21.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar
                  • Size 51KB
                  • SHA256 c52fef0a282804ed2e1df0cd682438748b7b779fb07dfcb8f690f312e0b1a465
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  dnsjava-2.1.8.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar
                  • Size 307KB
                  • SHA256 52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  endpoints-spi-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar
                  • Size 12KB
                  • SHA256 7eb52e240f1d92c808d1f616ba07fd86f429043ba4bb1673e438178f60e95173
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  error_prone_annotations-2.18.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar
                  • Size 15KB
                  • SHA256 9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  eventstream-1.0.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar
                  • Size 29KB
                  • SHA256 0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  failureaccess-1.0.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar
                  • Size 4KB
                  • SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  filters-2.0.235.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar
                  • Size 332KB
                  • SHA256 be6a1d54ebb043495e31e25e72b440f69156a5624cdd7e1c55c47e30d4fae308
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gson-2.13.2.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar
                  • Size 283KB
                  • SHA256 dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  guava-31.0.1-jre.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar
                  • Size 2.8MB
                  • SHA256 d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  guice-7.0.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar
                  • Size 782KB
                  • SHA256 de5b0e359bd7b03ca42806b368846efd95484380fe05ae2a4ea71bc338c59c00
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  guice-assistedinject-7.0.0.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar
                  • Size 50KB
                  • SHA256 c07125fff9372bd6562e986bc9f3092694db9649a79761683adc9da6ffeb33e6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-auth-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar
                  • Size 17KB
                  • SHA256 3a35297fa880d04821d2bf69e4700ddb046057294a67b0cf2d5a78cec164dcc0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-auth-aws-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar
                  • Size 174KB
                  • SHA256 d783ad9c7219ed83d4ec754a49d4c22ae0cd6d668a02be880d79ebbe9114bb61
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-auth-aws-eventstream-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar
                  • Size 8KB
                  • SHA256 a05c52b4687b4cb7e1825c09021a407f8d203c8202ccd39af5d7438576fec792
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-auth-spi-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar
                  • Size 46KB
                  • SHA256 78cb455310b0d03101115eaad61550ba4c9cfe8c50968dad9279dba9acc258c4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-client-spi-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar
                  • Size 89KB
                  • SHA256 b6b741c2e8cdf73829e2599b6b922dcffa602ee194054ae0ed2336a68dd0d3e0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  http-download-1.269-java21.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar
                  • Size 60KB
                  • SHA256 64c41d283af2e3df78ce441105265470e5b370b2f4b90e006336e3e176806d2b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  httpclient5-5.6.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar
                  • Size 1.0MB
                  • SHA256 1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  httpclient5-fluent-5.6.1.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar
                  • Size 25KB
                  • SHA256 0efc80f1dbffd22667a7df5dc30e4646629ef2fd73e36e1f4be9ea61d5c46fda
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  httpcore5-5.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar
                  • Size 930KB
                  • SHA256 cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  httpcore5-h2-5.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar
                  • Size 257KB
                  • SHA256 2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  identity-spi-2.40.4.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar
                  • Size 30KB
                  • SHA256 688d1991dfd22dc31356cf9016024c6bcccddebaf2dc3782cfc924d27f5236ab
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  j2objc-annotations-1.3.jar

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar
                  • Size 8KB
                  • SHA256 21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  java.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.dll
                  • Size 121KB
                  • SHA256 f8d0275464e21850da94c71f67ff99bc5b6dbb1b130b7f3a224de339484b513a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  java.exe

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                  • Size 53KB
                  • SHA256 5d0fb7c0461414c668979c4e53bdffb13cc12ec39002fd4a464736bde2caa3a6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  jimage.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jimage.dll
                  • Size 33KB
                  • SHA256 6462ff23406abd07b6989b8c6e967fa719b967592bcd3bff1c229cad1f766c4f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  jli.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jli.dll
                  • Size 90KB
                  • SHA256 a037c5d40f86a3e096f7f1761ba19d10d5427b376266877b57078418bf527dcb
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  msvcp140.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\msvcp140.dll
                  • Size 562KB
                  • SHA256 b99eb28a471311113f5c4109cb3c463f39cfd9bdb3b07f706204dedddb4516a1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  net.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\net.dll
                  • Size 59KB
                  • SHA256 73fc65cd308ff969a336aada77805836b80e777f17402ad910243594228dd82e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nio.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\nio.dll
                  • Size 79KB
                  • SHA256 3cd0ee9461d5f2b2b41a597b97f0d72b4d2029b5ad57d00391e1aa680382e3ee
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  jvm.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
                  • Size 12.8MB
                  • SHA256 47369a9bbcb22b25fd5702f8d0240a46bd108b00d72367d0659595dbfbe63071
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  vcruntime140.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140.dll
                  • Size 117KB
                  • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  vcruntime140_1.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140_1.dll
                  • Size 48KB
                  • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  zip.dll

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\zip.dll
                  • Size 87KB
                  • SHA256 7e6e5f0380b4b6574cf2b22d82c46978d85e0db1be6b8745c562cbb4eac6c042
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  COPYRIGHT

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                  • Size 35B
                  • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                  • MD5 SHA1 SHA512

                  LICENSE

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                  • Size 33B
                  • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                  • MD5 SHA1 SHA512

                  ADDITIONAL_LICENSE_INFO

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                  • Size 51B
                  • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                  • MD5 SHA1 SHA512 TLSH

                  ASSEMBLY_EXCEPTION

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                  • Size 46B
                  • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                  • MD5 SHA1 SHA512

                  LICENSE

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                  • Size 35B
                  • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                  • MD5 SHA1 SHA512

                  jvm.cfg

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\lib\jvm.cfg
                  • Size 29B
                  • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                  • MD5 SHA1 SHA512

                  tlauncher-2.0.properties

                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties
                  • Size 1KB
                  • SHA256 7d59b03a9fcf65525718bf4e6d443262e32634e0092f236726f1f09abd31cddd
                  • MD5 SHA1 SHA512 TLSH

                  memory/2812-1599-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1600-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1601-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1602-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1603-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1604-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1598-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1594-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1593-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/2812-1592-0x000001C3A10C0000-0x000001C3A10C1000-memory.dmp

                  memory/3792-1679-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1680-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1873-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1990-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2003-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2017-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2013-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2048-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1939-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1915-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2084-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2103-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1889-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1860-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2122-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1841-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1813-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1794-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1772-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1735-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1722-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1712-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1702-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2186-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1692-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1691-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1685-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1964-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1688-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1686-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1684-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1968-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2077-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1683-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2073-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2259-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1681-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2338-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1665-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1664-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1670-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2375-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2401-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2409-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1667-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1666-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2452-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1672-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2488-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2535-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-2534-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1671-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1669-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp

                  memory/3792-1668-0x0000022ED34F0000-0x0000022ED44F0000-memory.dmp