Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 05:58
Static task
static1
Behavioral task
behavioral1
Sample
starter-core-1.269-v8-native.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
starter-core-1.269-v8-native.exe
Resource
win11ltsc2024-20260710-en
General
- Target starter-core-1.269-v8-native.exe
- Size 68.8MB
- Sample260910-gpbj8ayhld
- SHA256 c053b982e7ed3ab28eddcc1c74f418bdea7425e1462535a319fde6b2f73197b2
- MD5 6b45d9f1440d683c311a706e67a09b10
- SHA1 5616e4cf1454ac9183a3849536c59b41c4672e4c
- SHA512 3a79411e865a93df920f33b5bea4fecc6532df90b07c5ed844e6705b4804f522aa4bc7eb1ae043c187c7e095d4ab51e457b63a40f80eae19b96818080af96625
- SSDEEP 393216:75eXMT/oQAWNyAPSN+SB0+NxdvPNQbKsmUYrslEiV8Gp3bVZN/fpRQB9p09qwcKM:7GSS4fwUoi8GZzNf5NSXiq9wNehtP
- TLSH T1E6F74B0375CA85FAD09BD17E19E60AB33B32789547216FDB108875738E5BBE05E3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in System32 directory 16 IoCs
description ioc Process File created \??\c:\windows\system32\driverstore\filerepository\input.inf_amd64_6f9a6940085bc1e9\input.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\msmouse.inf_amd64_097bbd709f0c4972\msmouse.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\keyboard.inf_amd64_a1fe82a86eaecabd\keyboard.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_amd64_7c5144127b6ada21\hdaudbus.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_f46cfa9aaf1c025c\mshdc.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\usbport.inf_amd64_7a788f788529d024\usbport.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\netrtl64.inf_amd64_e646b306d9138846\netrtl64.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\hdaudbus.inf_amd64_7c5144127b6ada21\hdaudbus.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\mshdc.inf_amd64_f46cfa9aaf1c025c\mshdc.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_d807fc8146278f4c\machine.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_7a788f788529d024\usbport.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_6f9a6940085bc1e9\input.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_a1fe82a86eaecabd\keyboard.PNF dxdiag.exe File created \??\c:\windows\system32\driverstore\filerepository\machine.inf_amd64_d807fc8146278f4c\machine.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_097bbd709f0c4972\msmouse.PNF dxdiag.exe File created C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_e646b306d9138846\netrtl64.PNF dxdiag.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 1 IoCs
pid Process 2604 java.exe - Loads dropped DLL 64 IoCs
pid Process 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe 2604 java.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 5 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4872 cmd.exe 3472 cmd.exe 3872 cmd.exe 3160 cmd.exe 1012 cmd.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 2604 java.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2604 java.exe - Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs dxdiag.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 dxdiag.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID dxdiag.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs dxdiag.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 dxdiag.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID dxdiag.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision java.exe - Modifies registry class 42 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ java.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\ = "DxDiagClassObject Class" dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CurVer\ = "DxDiag.DxDiagClassObject.1" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B} dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\InprocServer32 dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\InprocServer32\ = "C:\\Windows\\system32\\dxdiagn.dll" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider.1\CLSID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\CurVer dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CLSID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ java.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1 dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1\CLSID dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ = "DxDiagClassObject Class" dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ForceRemove\ = "Programmable" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider.1 dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider.1\ = "DxDiagProvider Class" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ java.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\InprocServer32\ThreadingModel = "Apartment" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7} dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\ProgID dxdiag.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{5B86123A-D477-4795-8A67-F56CB5931722} dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ForceRemove dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\CurVer\ = "DxDiag.DxDiagClassObject.1" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\InprocServer32 dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ java.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\VersionIndependentProgID\ = "DxDiag.DxDiagClassObject" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\VersionIndependentProgID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ java.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\ java.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ java.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1\ = "DxDiagClassObject Class" dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1\CLSID\ = "{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CurVer dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ProgID\ = "DxDiag.DxDiagClassObject.1" dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CLSID\ = "{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}" dxdiag.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\ = "DxDiagProvider Class" dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\CLSID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ProgID dxdiag.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\VersionIndependentProgID dxdiag.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2724 WMIC.exe 2724 WMIC.exe 2724 WMIC.exe 2724 WMIC.exe 4548 dxdiag.exe 4548 dxdiag.exe 1128 WMIC.exe 1128 WMIC.exe 1128 WMIC.exe 1128 WMIC.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 2724 WMIC.exe Token: SeSecurityPrivilege 2724 WMIC.exe Token: SeTakeOwnershipPrivilege 2724 WMIC.exe Token: SeLoadDriverPrivilege 2724 WMIC.exe Token: SeSystemProfilePrivilege 2724 WMIC.exe Token: SeSystemtimePrivilege 2724 WMIC.exe Token: SeProfSingleProcessPrivilege 2724 WMIC.exe Token: SeIncBasePriorityPrivilege 2724 WMIC.exe Token: SeCreatePagefilePrivilege 2724 WMIC.exe Token: SeBackupPrivilege 2724 WMIC.exe Token: SeRestorePrivilege 2724 WMIC.exe Token: SeShutdownPrivilege 2724 WMIC.exe Token: SeDebugPrivilege 2724 WMIC.exe Token: SeSystemEnvironmentPrivilege 2724 WMIC.exe Token: SeRemoteShutdownPrivilege 2724 WMIC.exe Token: SeUndockPrivilege 2724 WMIC.exe Token: SeManageVolumePrivilege 2724 WMIC.exe Token: 33 2724 WMIC.exe Token: 34 2724 WMIC.exe Token: 35 2724 WMIC.exe Token: 36 2724 WMIC.exe Token: SeIncreaseQuotaPrivilege 2724 WMIC.exe Token: SeSecurityPrivilege 2724 WMIC.exe Token: SeTakeOwnershipPrivilege 2724 WMIC.exe Token: SeLoadDriverPrivilege 2724 WMIC.exe Token: SeSystemProfilePrivilege 2724 WMIC.exe Token: SeSystemtimePrivilege 2724 WMIC.exe Token: SeProfSingleProcessPrivilege 2724 WMIC.exe Token: SeIncBasePriorityPrivilege 2724 WMIC.exe Token: SeCreatePagefilePrivilege 2724 WMIC.exe Token: SeBackupPrivilege 2724 WMIC.exe Token: SeRestorePrivilege 2724 WMIC.exe Token: SeShutdownPrivilege 2724 WMIC.exe Token: SeDebugPrivilege 2724 WMIC.exe Token: SeSystemEnvironmentPrivilege 2724 WMIC.exe Token: SeRemoteShutdownPrivilege 2724 WMIC.exe Token: SeUndockPrivilege 2724 WMIC.exe Token: SeManageVolumePrivilege 2724 WMIC.exe Token: 33 2724 WMIC.exe Token: 34 2724 WMIC.exe Token: 35 2724 WMIC.exe Token: 36 2724 WMIC.exe Token: SeIncreaseQuotaPrivilege 1128 WMIC.exe Token: SeSecurityPrivilege 1128 WMIC.exe Token: SeTakeOwnershipPrivilege 1128 WMIC.exe Token: SeLoadDriverPrivilege 1128 WMIC.exe Token: SeSystemProfilePrivilege 1128 WMIC.exe Token: SeSystemtimePrivilege 1128 WMIC.exe Token: SeProfSingleProcessPrivilege 1128 WMIC.exe Token: SeIncBasePriorityPrivilege 1128 WMIC.exe Token: SeCreatePagefilePrivilege 1128 WMIC.exe Token: SeBackupPrivilege 1128 WMIC.exe Token: SeRestorePrivilege 1128 WMIC.exe Token: SeShutdownPrivilege 1128 WMIC.exe Token: SeDebugPrivilege 1128 WMIC.exe Token: SeSystemEnvironmentPrivilege 1128 WMIC.exe Token: SeRemoteShutdownPrivilege 1128 WMIC.exe Token: SeUndockPrivilege 1128 WMIC.exe Token: SeManageVolumePrivilege 1128 WMIC.exe Token: 33 1128 WMIC.exe Token: 34 1128 WMIC.exe Token: 35 1128 WMIC.exe Token: 36 1128 WMIC.exe Token: SeIncreaseQuotaPrivilege 1128 WMIC.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3400 starter-core-1.269-v8-native.exe 2604 java.exe 2604 java.exe 4548 dxdiag.exe - Suspicious use of WriteProcessMemory 13 IoCs
description pid Process procid_target PID 3400 wrote to memory of 2604 3400 starter-core-1.269-v8-native.exe 90 PID 2604 wrote to memory of 1012 2604 java.exe 92 PID 1012 wrote to memory of 3684 1012 cmd.exe 94 PID 1012 wrote to memory of 2724 1012 cmd.exe 95 PID 2604 wrote to memory of 4872 2604 java.exe 97 PID 4872 wrote to memory of 2140 4872 cmd.exe 99 PID 4872 wrote to memory of 3472 4872 cmd.exe 100 PID 2604 wrote to memory of 3872 2604 java.exe 101 PID 3872 wrote to memory of 2164 3872 cmd.exe 103 PID 3872 wrote to memory of 4548 3872 cmd.exe 104 PID 2604 wrote to memory of 3160 2604 java.exe 107 PID 3160 wrote to memory of 1384 3160 cmd.exe 109 PID 3160 wrote to memory of 1128 3160 cmd.exe 110
Processes
-
C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe"C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3400 -
C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exeC:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.283.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9374.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9374 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailabilityV1.json -country=${country} -starterJVM= -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe -starterFileEncoding=UTF-8 -runVersionWithServer=empty2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
- Checks processor information in registry
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2604 -
C:\Windows\SYSTEM32\cmd.execmd.exe /C "chcp 437 & wmic CPU get NAME"3⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:1012 -
C:\Windows\system32\chcp.comchcp 4374⤵PID:3684
-
-
C:\Windows\System32\Wbem\WMIC.exewmic CPU get NAME4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2724
-
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /C "chcp 437 & cmd.exe /c set processor"3⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:4872 -
C:\Windows\system32\chcp.comchcp 4374⤵PID:2140
-
-
C:\Windows\system32\cmd.execmd.exe /c set processor4⤵
- Executes a command shell one-liner
PID:3472
-
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /C "chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt"3⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:3872 -
C:\Windows\system32\chcp.comchcp 4374⤵PID:2164
-
-
C:\Windows\system32\dxdiag.exedxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt4⤵
- Drops file in System32 directory
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4548
-
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /C "chcp 437 & wmic qfe get HotFixID"3⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:3160 -
C:\Windows\system32\chcp.comchcp 4374⤵PID:1384
-
-
C:\Windows\System32\Wbem\WMIC.exewmic qfe get HotFixID4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1128
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 4d4dfe2d571b2fb692a311daea5ad9fad6e7ee22f716691a05539075e63d33c3
- MD5 abae757867b596ce42bea7cb19bb0cf4
- SHA1 f5d3c60389e87a8d22eca0bd70cfa481c33961eb
- SHA512 637c32f249993ad396d244eb543408215c6d448de296cbeeb623f493fa8dde31f7c0fe9706db56ef39737c5a0e3c022ae90f87f797a1735654845badd2bbfdcc
- SSDEEP 3:G9pF/lGlll/l/lXp9ZjrPBY06ll0xe+l1ZP:GLF/0dPBY0Ok
- TLSH T13E5312841192061BC462433008C606403B7412044353485142105130D858B070162194
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 960B
- SHA256 dae63549d23b9f08ebb27d21f1e35b864f600d844bd96873644805f120bb745d
- MD5 6d52438dc0c50ba54aed3c06a2b97cc0
- SHA1 e4ccb3fb895dca552d3b4ce71615a07f6087c576
- SHA512 d6bc69917fbaa158fe43a628cd628244944ae43b02bbb57af65cf40ecda31bd25ae2280dc08d0f4934898642ce5e8eccfc88bab0475cb72700166a810a6e93c6
- TLSH T178118C543BC72DB0E37A78354029A2101212B10248D2D20885C088624E23204E031FA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\+JXF10231897274183640655.tmp
- Size 141KB
- SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
- MD5 54a91b0619ccf9373d525109268219dc
- SHA1 1d1d41fcadc571decb6444211b7993b99ce926e2
- SHA512 7f79ff3b42a672371814f42814aa5646328b1a314691d30ce09ffdc7a322adcb1af66625274f7fac024ca2f22a42b625001735711c430faef6e077e1f1d24887
- SSDEEP 3072:ENAluNu8V5ZftwYlLzEeNgHS2pOpdO4WqLpMaSZFKVet:ENAH8XZuadpZuFw+
- TLSH T150E3E742D282F759CA86B9703D3DC3BF1D39E86A7C99751370E4AF2190C9A458C297BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\+JXF6055333090949164789.tmp
- Size 424KB
- SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
- MD5 4c41e856744eb797e9936359a6509287
- SHA1 0959e6f4dd535eb6fae388b6b9ac179dcf3afd76
- SHA512 07ae284caa316315da74246c960198a7d549acf86f96cec550f41109fcd870a69ccac9818361657fb859e89d2bdc8398c7731c80d274d99a768102022a5f6e8b
- SSDEEP 6144:dgidP7V1Ppmc/SZBUpIXohH41lkBTX+Wg3Zycu0xDzCuzk51kR4E5xG1rN:OsP7DRo2C1mBj+zJx/u1XE501J
- TLSH T1F7943B9BDEFF5E2BE30616BCCDA7871A0AA0F403EB32319C2D41A501DDF66905583D69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\+JXF8678952206365262892.tmp
- Size 477KB
- SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
- MD5 ec5d243a9958b3858b5a71fb9a690da7
- SHA1 d80b02c91addef2ef58136d1a7df0189f453388c
- SHA512 479512c6076249a63a822d307b3d8c65d44d19abfadc597f0293fedf2c4fbac2ba6f60ca98d2c1dbb638ad09f3eb1419b6ef391fb098c7d1b62237bce9d79931
- SSDEEP 12288:zOYfKJCSo48vbNnwWhasGouN/Sm4sYFqzmJv/D1X:zOgKJDBW4oTsqX
- TLSH T19DA408DAEEFB9D2BE36717BC8CB6952B06E0E901EF6535CC2C80D101D7A214066D7D68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\+JXF9141214813913518450.tmp
- Size 132KB
- SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
- MD5 afa7a91dadd77b23634a0fdf18c148f3
- SHA1 6cbb57ba2355cf442e06899898ff5af55867103e
- SHA512 84d123b67505522c256f4ff79c3822eabe2d63036023896e9854298ff39e050bef7894f6320ccf950592015760354683c4dbd19aa203d433a04a5d6bb28e8115
- SSDEEP 3072:N+peczeYnL1aPZroinhTPaM+1ogRte9vd1RNmVLOF:eecd+hXX0a
- TLSH T199D3E542E343B75AC6C3B9747E3DE7FE1D34D8663809651A70D88F219086592AC28FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
- Size 203KB
- SHA256 ee77094763ecb2eac015cd3f2003652cff7a20c4be8a0bf15129e3878f31a69c
- MD5 e799380f930cc138e658f82bbe2d7e48
- SHA1 12b8a92b73efa02f866ac5015a35a475ac386a8f
- SHA512 dc2ba9af7151face69342393a63706e74bffe4eda95fc828419d029f9b511a15fc8c7ef925fd7378e5b04684a51b9cc25b442311eb89ccf694bcc9c0a5061e86
- SSDEEP 1536:eaVEOIz1hbyo6r5HfqZHp84DiKPl91UuC:eaVUzDGoQ/qZJ8qiKNUuC
- TLSH T1DF148D96103D221358D060EA883CBFC84B05D77E9594C65F7B49A9998DAFCF20613AFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.3.json
- Size 5KB
- SHA256 f28291a0974ff31b36aaae3f45decae23abb94180456659c7b77c6029fe789f0
- MD5 da5573b64f59c4b5831581c7c6ac0bd6
- SHA1 b83d4a2cdbaafd3a281075865fe263eaee0737a7
- SHA512 bcb33ead455fc79599ad3fa07c5ee018a8f33a6cc8425503a206317d7171b901bcf795902fc2d551907dcd8d5814756eb3178e4028cbcb50afc08224e5a65f1a
- SSDEEP 96:g9Hs4aH7cweiPgMH+NH+la+Na+lH+la++0+N0+lB+NB+l0+lB+iz0sD/0J7:gLaH7cwdgMHyHfya4H4aL0y0gyB404BY
- TLSH T183C18C96DA7CACC305AE71A542ED190856A450D30D5C7D483BAC928E7FEE03FAC3752E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
- Size 48KB
- SHA256 351a88738501452aef6126f68a3c9415d93fd31714312776389da378c0f6513a
- MD5 3edf52e752b0737b3d405e69c9a398c5
- SHA1 b9b163382bc603d08b9868bd1fa98256ce0e10e5
- SHA512 122252d37c7042e56635ea3c6474035a9cb0d23b6fe8865f7f8156bda1c016f14c11e4d84f089edd702a109c295bee6f3da231a6ca202ff6d392c354f3f9b5b8
- SSDEEP 768:uQh9WxgHmKLBisrGllTwVDUXJCNhXNpJEGNhv6ZMAJWeONoulyF8PH41luZwIdQp:TP7ZUXJCzLXhv6ZMAUeONbZw9m+8VS
- TLSH T11723E89BD78C27FB02520191511C27FAE75A44BDA32182F1F4BF813D3389C5A91BB6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
- Size 377KB
- SHA256 0a37d481b94fe7fb9fc60162c22038690c7d67eab09b0b2bfa3445dd01b23710
- MD5 89956a9483a05ac36e61242eb85361e8
- SHA1 36cce2333cc35ae49703c4646407fd88a0a2c40b
- SHA512 57bc08b3398126cb23087220a804cdcb87ade49ccd3b0de6de2e185d2524fd12d030aac31b2cdc4834e733e81a195f604ae44728328663fe69827f5bf23510bf
- SSDEEP 3072:c0HDND2fyJRMHE950/t7JiX4yNv4s4tSxF5cL9f3Q7khWmh/46h+FfQJewDBu7YM:MgT
- TLSH T1CA84BC54C6A04EE7758ABB6CA13F4017B5A09167C89D3E7C36FC204DDF2DC8D38686A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
- Size 190KB
- SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
- MD5 5cf063de9e84a0fd12febf51275fe0e7
- SHA1 ce6a8f0ee2eda2df06f02778dc16fddb71bb30e3
- SHA512 13934d05cf4fc56e0fd08df4e2fbedecfd11170aad91bc3bcc6d303c5a085b9cfe4a5b8c1ae0ee753719354aa27b45af0b128297a38218bbf51c9aa4eeb1f82a
- SSDEEP 1536:uBW/ltXcCPC+yOaKCg3XMkbCsCZR2F/bk7vhcFp:LdtXcCPCBOPCgMkbCsC7sbk758p
- TLSH T171147B1BC8F4BDDF85B0A271921E0A05F195972B6AC08D4B37BC44ACDF779071886E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
- Size 12KB
- SHA256 e5a04128c61d6c23b527b4914f3cacb711a6691d2eab89813f7f2f5a9d34069f
- MD5 ae69f5a30643bd6d2f515fe1b564ccf5
- SHA1 12caa9c02a4cdb7b9fba9b916a8c13157330be7e
- SHA512 4b71ea898886e34b3881406e45165257b340a4b95e496ce2c115346d02ca6621f7738ad4e0f6f33c2b072c0fd2398a99ad5f5bc7d740c2402d52ffe935a31471
- SSDEEP 384:Rguy3umYgnEPfERgAMcKenrLXG+rItjTj9XbAZF+YWPylP9:RguyemYgnEPfEqAJKenrLXG+rItjTj9c
- TLSH T16C421B13C9B85DE341A022F5551CA7C8CBA9622729C058A27FDDC41D8B9D93C2BBF74B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
- Size 48KB
- SHA256 f39279fac3a1001f213d3bdafcffac010e2cc7bda85abf2415c63955e5b834ee
- MD5 0516197373174a2269cc0f62969da644
- SHA1 eba925a4cf4bf3674a834de094a2f165a7d7e922
- SHA512 6f539332147f6cac588d5bbb70a9d716a9900bcf0f2a28cf489677f2bb082803db4a81df76f470b37c3aaac9a350238add4698ad4c352c3cc801c34b4ec4e72a
- SSDEEP 768:A7LCQxBPmDhjtivlkiDVgIbgGm+VZZfv3PezIv3wJmQ7Yy/+AhJ3VVkvLwgNSD9x:n
- TLSH T10B235D13D8BC6DE341A012F5442CB6C857999227198189E6BFDD885D8B98C3C3BAF74F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
- Size 2KB
- SHA256 04f57153be7374c05f9e83de9b122a4f0b8d85d7d65a59d756b58bd84404e0f1
- MD5 af16691019e8053199aebaa3a5020d86
- SHA1 019608804bb5117c30f87a27637e5ccce7474cd4
- SHA512 f4e24556b00f7a79d01a4a0b8107cd48c72b5e0dbf53c0cdf06529cf1f43bb183e9f6620720689919c0472be7f817cc4d1449319a1a9785108ea4cf83d0c086e
- TLSH T17D517B66EE407CFA90D98264DD7C821AE0204597DC4BB52E771C224DCF4E69F383627E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
- Size 16KB
- SHA256 ae982bc0bfc9ded7954df4c19c05904eeced58047527281bbbad77e89e2097c4
- MD5 d93d6e11355ce23ab7a50b182a5d9344
- SHA1 fad4d32155f5bc806070bb78617609a5f80e6503
- SHA512 a47735a99509618ad6ef7ea251c6b8a8828d9a3ed3da9c89f8b0a6f595728195afb4d3dc8bd2111eb40a1c9dafc08b5001e58e70c04d8f3240f3ebcdde5503c0
- SSDEEP 96:LK29q1oFEyJUru1I3SftehPhQlZVa5DZsGyiNO15UUv4NmzK29q1oFEyJUru1I32:9py50j+9rNmlpy50j+9rU
- TLSH T10D72BB62EB812EA891E4C664DA2CD316DC6044238C8B74AD73CCD78E4F0D26F36BD56D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\dependencies.json
- Size 25KB
- SHA256 76fceb12658369b0d28f14dc35feaae204e36983c6d759c6c7665640547478be
- MD5 f455dcacd2b3ea37e9db6332d4fb9ee5
- SHA1 6dbe109b2ef589f56ea2e651d862330b82bc53b6
- SHA512 71ce99956ec29f808d1d314cafd234126832bed708b560747439b6da79b6f2e45911665d30eb89643e94734abc7995abd0f510f2f8bf72dfa5399335c9a77a72
- SSDEEP 192:KuBy8RG/vlH6fJkHMtpMpcDTIYEpbEpU7MaSWA6rQx+A+0Ujv9ykHHI2pebW4On2:s0gcH25An/nybSYw
- TLSH T1A9C2AB64C5A0AFF24425ADF8CC6F81A35352A94B8C6C3D597B4C004CDF2E58F15B9ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\resources.json
- Size 17KB
- SHA256 9cd7a802791beed588677cc4b578883263333da42660c6f87add35473ce56b96
- MD5 e6f34f6b7ab960de4c3a371ef6e147b0
- SHA1 ce8b11449203d40f1b281a09344158ed5756f06d
- SHA512 02e6aba8ae885a2fc823955821c2f76b4af575bd5c4e9a0a365e59c5a5c1b90dd9f1561cadb7370c5f4c9e851e45b975ce7e5bc68bd9194f3155d75515455651
- SSDEEP 192:icTMUnm/7w9r+h82ppiV3t87YPRjGrORgead64vluxBlEbgnVULdMzyeBKIt8bhN:Un/3qkJMWTLx
- TLSH T14282CB29E1F06D770404A9790C9A4193DA95598B8DB4BE11B32C02CCAF9E91F08F78FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
- Size 4KB
- SHA256 f1098290548cfee07c581d7886882f78ecb511def9d6edb2eeb3f1bc7aa5d033
- MD5 038e4cad284426456ab89b0ceb8c9b9e
- SHA1 91020deb0547704e85c42793bc860a0953c7eb9d
- SHA512 065fa6a0433fbdc4a673835b874913d732732c5ba47063cfb0807af30c8d893b68176c2751f8fa3c0316d1d39e5b261c4cfb200ce949ad20f3282f5b7463f3c1
- SSDEEP 96:DkcQphTOzcC3pjeER8+VSgZWcZo3c7WAcJF12cx:D+phTOzcC3pjeER8++cacNcj12cx
- TLSH T19E91CB7BC1801EE62703139DCCBD896BB9A2411B4D887828BB7D001C7F5F56F2DA459C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
- Size 3KB
- SHA256 4137156413e8ca1b38862aedd342bf6dbf6c2446fd4d86ea6893c0888f260893
- MD5 195c4f5b0df067e259d0188056dbc1d4
- SHA1 81651b6c4b90180b227ded36618de3468af5d77b
- SHA512 c6b483cb244c34692b51ea81fd89806fb06cd761cdc2391850ee1459b3833fe2b3f08a9a3aecade30a674c34a6b66b081df51c72b3ce810ec6b27c9a97c37936
- TLSH T139710B0AD8511FEA250227FDC82D51E7B692404B8DA47C3CB76C610C9F2F2AD79E5ADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar
- Size 28KB
- SHA256 ddb49b2a58155d576952918630cce8cc09ee5df679f7eb96cd673e0e928254cf
- MD5 899aaf88b92974fb4d058685a91759b7
- SHA1 673810b52b20e0470c7064f970e735ec41eff783
- SHA512 3f2dd8960ac231fd53e6e953a3963dadabe078f849a699eb57062c75ce30e2aec79d917dff5f08788098d214bd3d1e238ac33b15b92dd9bde9bcbdc70086deda
- SSDEEP 768:98664AYKC/lCqATOkiDquibfLSLVPmOfBfl4w10Q:98n4AYvk1dfGLDBfaQ
- TLSH T1E5D2AE37A6C834E5F677CC3EE7909807B43A0AE8618B604529E45C1F3239EE99E45F07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar
- Size 12KB
- SHA256 2e20c2933bd53487ed71bd52ff1210d3fbcd4ae6de7f37ecc5f435929acc7bcf
- MD5 c2502dd74af2a70b512f8cde39a44a89
- SHA1 1f71dfee6d926c8189dda332e8d9d375bfb23146
- SHA512 0d2df3b5882cbaef7172f2dae72dbed4fddbd73e1e5b5f6ca59bee7d8b29a1410e92780ea46fd88f5b1b9d9c02b3138b82695c95edae8d1b69cac9e8de38aadc
- SSDEEP 384:k4rciffLg9YM/X0kQOhZdDhAlaP5+U1rTfjtOsNg3TOQ24gZhLFx:kHirg9j/kkQOhZFhAlaP531rTfjtOsNR
- TLSH T182521AF23B805234FE2A7370FB709443743A7DE8F1498BF569E421A2742B5A05B4F986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar
- Size 4KB
- SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
- MD5 04177054e180d09e3998808efa0401c7
- SHA1 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
- SHA512 3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1
- SSDEEP 96:sgAXUQVJuaS2cXIerWlBHv4wYDZIzy2z64uqVu:sggUQV0p24WQrDyNHFM
- TLSH T1079182E2EF63676EEFA3D5B042D293123E29309094CA3548CE90169FD7C94DA5B63B40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar
- Size 15KB
- SHA256 ff80f642bcebfab78ea23ad02051da47f55b1d54c2d755b013db5ded697eecf8
- MD5 76dd5b8e7d17de82ad0471cc6a191546
- SHA1 1ad2303f89f3c5b531d16d303618e6db3bf23541
- SHA512 f6cf9fe3a166c842b81466dc7622f5b518ef3465543f020679c3b23c440753a0147aa49d99334eb8ce0b57b2641c8aa8f5175696c9f92db7bb32b3ea98de4b70
- SSDEEP 384:EzrciffLgtajm62pcjnjPR0CBYLUNk4yv56e:VirgCoCjnjPR0CBYLv6e
- TLSH T194728EB13F5580B9FFF993314B607807711B6DACE09A8BE2A4E932C27B1B644871128C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar
- Size 233KB
- SHA256 a41c54edd9818d408699f4db758e0ae71dccd36acf1a033fd61a0f050194f698
- MD5 4baf006b4388073fade0ff5db6c04d48
- SHA1 63d19e7ed63e357685f720d576915561e76d3fe6
- SHA512 67b6d8379fdd9ffde2eff863b62a4ede88fdb9ecfd66bf85612d7cc47eeda42cdadd0fe15006e69b650fbd306f381dfd16565cd7afc2ef515a577d527fef1ebf
- SSDEEP 6144:nEklvrx+wZrZVCethosYihG/Q+DVtLtIBxqgGGq5o:nE8N+wBZQxtg+Dcqg18o
- TLSH T1D234BFF27EC40235FB7BE6BDFA55C452381D1ED4F58524E2B0E502CAE8A75E1AE281C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar
- Size 187KB
- SHA256 3ff82e9eee040254a0144d3e8ba3686e79b23a8a1b9e0eb80e7cb8b3a6f1c698
- MD5 2a17a9eb1edba4702b0982b203b73e6c
- SHA1 ca44c8e811e94272672ab219889c8bec69dd8eca
- SHA512 58c09be983f4c7b4ca2e79ca554215154e6dcf6aa5d74e24f9139333ccba6613a63633c710ec73dca691a30a53bf6e9cd154943f5b8b0893fced221a4cc89309
- SSDEEP 3072:r6BP9Zwh+NQmtW1vgEA0mAafuSgBldhuZkBl6p1Z/2E4yJ1UXn2/q+Rn/:Gh9Y+N01vnmAa2Syrhuaw5JXgn2/q+R/
- TLSH T13E149FF23FC2413DEB366330FA548466353BDBDCE4457BE674E0075AA8636908A2F265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar
- Size 67KB
- SHA256 2e9ff3baafc3cd30811a4ea1fe950ccc8e2fc4c8b179a39f211db9866471e165
- MD5 d7ae5ef44938da20e939c2edcbec5c0a
- SHA1 4fd063e0e0224ce0251d11f1daca94d2171200a2
- SHA512 e352635860f3ba71307b03438869c0835970b63e1235455cf4a6eadced7ac3883e5d96d0ec358b0181b4647d2182b8c7511508925d0245e7e4ae52dc9025fb57
- SSDEEP 1536:IV1fsRjKWDe2atvLaOTWAJPk/plY98UQTdQZx:GlspVed5jTtBk/iwT4
- TLSH T166636CF77A86023EE776E374DC10E367751E2EC9F8068AB726D0C392346F594862856C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar
- Size 99KB
- SHA256 1887ffd2b41d8787c5847dd4ad89aa8128a281977d62eb2011f7a331136d5af5
- MD5 0f00d2de831a32a0fe24b3b0deaa558a
- SHA1 8db1a45a81f6abd704f34b83b8755fa106007553
- SHA512 f470ab3925e4ee2c9f3ca0e98e6459b7cace5557bbcc28ff4e147f2dc3186d056f9bdf89f24dd7af9f2ebc54690bd18057452707f33baec083f8f3916343d092
- SSDEEP 1536:SedXfSVyCnKnAx6ehRU7nYtets+2VZVUhP757CplCANNDqaGoLp0+rKSa:RdXfSVyf3elZ1VzUhP75k1qnoFTI
- TLSH T1EFA39EA3BE42077FD776BB38A480E766761D2ED5E8419ABB36D0D2477067081CB2934C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar
- Size 203KB
- SHA256 ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb
- MD5 ab1ae0e2f2f63601597a5a96fca8a54f
- SHA1 d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5
- SHA512 ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78
- SSDEEP 1536:cPx0Q6OOKmhpkxW1VuattcLwwxleKp9iDiW9UAmNPnZALgqcGnv1FzhS6VlVrIFV:1Kw1VHttLK4KBW9rkPnaLgVGvfYwVYrH
- TLSH T1F914937EEDFC40A9D03381B0A0834463B8641A4AB781681F3EF067579CFAD859657BDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar
- Size 67KB
- SHA256 c04118aed95ef281c6b3aac16d6b44736c37eb8fa43e6d045369fc71528c3c48
- MD5 9dbe89dba27f6fe9a8d2ce228466fbd0
- SHA1 2de6e5e381421cbc27f4983f3ff42c8ef6c234f0
- SHA512 2976a6f953e700191106eadaacde9bbe200d826e5bea2b8f2f72e58e5676332024370435c86fe04055f71a7ca0c862afb6efbbf67859df348953740e43b5ca09
- SSDEEP 1536:SFYB5tFQ1Gvvc2K4P4AbD/Li2nJ3RzAdNNmX/y:SFGvQ1Gnc9m4Aji2nD2NNm6
- TLSH T1AE63D0F37F95D222DB6D3A3597108827F52F28D8E1951CED95F86392002BAB1CF2B944
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar
- Size 7KB
- SHA256 6a94b2a7cd778ec26576b7461f475e8d0d31d5f7e80960b583130d493f0b58b7
- MD5 2ce4a5a51c65dfb050eae5f406a06ce8
- SHA1 77cce021ac3fb08e6635b680946d7d681eae5e31
- SHA512 38f4a748a2d011b46867b971cf617761fd0c4d5b7d8a81e7dd73d12a47d5b7f19a5e8caef14a519dddc2793897093dd73a27a6a8441a43d0be801a03df5b14a9
- SSDEEP 192:aohr2NA4i8o23fS7NxdRcNg8vqo3Q39ATfQ/Zm:aCrciffLgqHmeZm
- TLSH T12DF129B13B90C134F6BD63309B507A47702A0A8CE2D8CAEDA5DC3686231F8509E16DA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar
- Size 1.0MB
- SHA256 c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787
- MD5 96b88349958aeaa15cdf6e5e877bdced
- SHA1 4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc
- SHA512 e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd
- SSDEEP 24576:AyGxC0UxCeCkZM+B6JXJ6k9h/seK7yMmcoQWqAB:tuCDxCeCSM+AJXJ6kYr7pHopl
- TLSH T1F635CF31FD950852F12385306E66B89E743D6F88E34722C9A6ECB24383A4CE65DDF6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar
- Size 319KB
- SHA256 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
- MD5 3b4b7ccfaeceeac240b804839ee1a1ca
- SHA1 a2503f302b11ebde7ebc3df41daebe0e4eea3689
- SHA512 5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10
- SSDEEP 6144:UrBoCnU0+1j/OjXrf50ynaZ13lybiOmQ+CEEArHs2M1mX2TKYGGh82ajQe+yw:2oCnU0+hnZLOm7CH4Hs5mXmKYGer3
- TLSH T1F264E122F5C90811F733657AB09629AB38BED7C8D55B74DD20ECBA0394E6C054BE37A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar
- Size 424KB
- SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
- MD5 8667a442ee77e509fbe8176b94726eb2
- SHA1 5fe28b9518e58819180a43a850fbc0dd24b7c050
- SHA512 b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d
- SSDEEP 12288:bebS8eN0uH1YQ7GNFBfLSGG+FHfKTL1mg2:bkS1aSWFBfLa+F/KPwN
- TLSH T16594DF64DEC81022E30B803192A37D59353ACEC4D687B4DF2BECB75758A8F564786BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar
- Size 59KB
- SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
- MD5 ed448347fc0104034aa14c8189bf37de
- SHA1 5043bfebc3db072ed80fbd362e7caf00e885d8ae
- SHA512 470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff
- SSDEEP 768:Jirg+Y5XjlrZKpQHBSSfqKeR5r8WuwjK+imOU4MYgArhR0S9mNIHZ8LwyEOuHwIx:EAXjqrSiKm8XrQMr0S9mqH+wyEpQIx
- TLSH T15853D095E599A860FA2D4A312133764BB4374FD6A1A7C1FD23CD337B42DAC681E83570
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar
- Size 43KB
- SHA256 33a4dd47bb4764e4eb3692d86386d17a0d9827f4f4bb0f70121efab6bc03ba35
- MD5 4374238076ab08e60e0d296234480837
- SHA1 7d4cf5231d46c8524f9b9ed75bb2d1c69ab93322
- SHA512 b82197427492c33c602c3c3c363eefb71c509cf2102f4f21daa7f6d5c33f52da1cff66f5d7db98810c49fd96ab29523fe19a13b274a7c40dd9141587debe66c2
- SSDEEP 768:JirgAYt67vQFCweaImimN8vHOjiBn8KhfeyUU8S74uUHnSadJql9:EZV7v7wea2v4U8KHU8GyaTm9
- TLSH T1EA13E0A9F0481820FA1E063A25B73553B03EDFF9A617C6B920CC7EB3919ED549EC3564
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar
- Size 405KB
- SHA256 5af37bc47f6bcce94e740b9793115ff135dda54f9ccf98e057938c2c98765f4d
- MD5 a2cabc6a91a9de9e3d5d460b06d65b45
- SHA1 b5af3b9c96b060d77c68fa5ac9384b402dd58013
- SHA512 8ec9f5646a95ec9d065f36475b722b8c2189cf708d88c298e7dd021607c5c29108e4cb98ec7e4838f91743b9803d60f120e58fb349df3e525d1e4a984609c212
- SSDEEP 12288:YesxPd6dicw4OY+nRzWbNVH1IqkBCoQoMapI:vsxPdsiqOY+nR6b/VIq8HQ0q
- TLSH T1C194BE71E1D45030F7428533ADB228A6BA7E8B94D15720D910DDF6BAE497C0E7ECA3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar
- Size 17KB
- SHA256 25582ba17ad43914e1caccff7563b54a1fe18103ae2015881fd67ec9b9204e61
- MD5 cd4225301ca62e8c5d02a136390c8c83
- SHA1 670d5615d13932508f0fe2bc0f7db9cb65e2ee7f
- SHA512 5fdeb3fd34fd3c9c83e5ff62fb3e10adc8ad5e9b4d3ffe59a78d8e8316761e79bbe14a43af2b762bcc0f76adfcb009262d49d0dae94ade5f33ac28c44f63b5b9
- SSDEEP 384:CrciffLgb8ag+DbI9WlBA2YWs8jLN5oRPSVNdEv:Jirg4uyX/WPj55oRPSVjEv
- TLSH T1EC828F723F800030F77A6370C26099537C368A5DF99966FA7AE415D1B6367CCAA151C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar
- Size 51KB
- SHA256 c52fef0a282804ed2e1df0cd682438748b7b779fb07dfcb8f690f312e0b1a465
- MD5 45597e4540309d64a2866da2281b2caf
- SHA1 7bfefdfc43b5223b16d4bd64a060020c1f63491f
- SHA512 b09a6f28049927bca058e5e0c864276699e5cada2bbc0f2fa63545c0f09b92a5b0b60cd92f9a2781066661e33b03451566d4c821d5a5a6f8c1102174a3df711e
- SSDEEP 768:9ZYSIkfPNCY+kV7fF1Tue1/rkXQIJMW11Y72S3D1XDx1/k8:gSIkH4fk1FVue1/+QIJMW1SaWxDxn
- TLSH T19633D12354D43933F63F3A3AC102C1B761AEE93CB08A2912D0B42D52EEF94E9175769C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar
- Size 307KB
- SHA256 52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153
- MD5 540f330717bca9d29c8762cf6daca443
- SHA1 eed8a2cbf56cc60d07a189a429ead3067564193c
- SHA512 a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b
- SSDEEP 6144:hcPiftFEPMkUYEDEm9Ye0KAshZxDahGnietj0zSpGt5frS+aCA0E/7/5NJjMrr2z:hcPiftCPMkTEDEm9YekshZxDahGietj5
- TLSH T19864E112F54C5FA9EF82223750C3591A340E85E4E2CEB11D16F42BE1EA67E06BE4735E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar
- Size 12KB
- SHA256 7eb52e240f1d92c808d1f616ba07fd86f429043ba4bb1673e438178f60e95173
- MD5 2d414fb38385478a16512b8b99a157c6
- SHA1 035f97c5e4d509470855ccad1b847010f03cbd3f
- SHA512 f1f17969b4cc2758a503646fad6babe74df77a2b7f862376dacc3e4a1744641c203a5bc757832b32b2333fbca056ce15313570234a9eedba4ebce137b48a3821
- SSDEEP 192:eYbhr2NA4i8o23fS7NxdRcNg8vHoj+6s1RI+N+f0O/KIifAXH4D+m3+kHryl1Bzj:hrciffLgHbM3ybIHqHGPdJUxo4CllF
- TLSH T1EA4239F03F516178F7FE6330EB64A987702719B8F2CC82EAA1D8159B311F8855E25A48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar
- Size 15KB
- SHA256 9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae
- MD5 64145d0e7fee5a69ed7b84cf402de998
- SHA1 89b684257096f548fa39a7df9fdaa409d4d4df91
- SHA512 3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7
- SSDEEP 192:ocwfi1M+XSr/XZty+4ue3s0MBPluVVADsLAMY/A3jGECTAwSMkewmO64hk:CfR4Sbe3MBPaVt7Y4SWDhewhk
- TLSH T1B872D7E7B348343BEC1BDC3360A0101AF879EDE4791E3BB6AED4164594A4C4A5F4AB47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar
- Size 29KB
- SHA256 0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822
- MD5 864488626f50477cfd786d1c80e3b39e
- SHA1 6ff8649dffc5190366ada897ba8525a836297784
- SHA512 461c7b63b3d39247af4073608e346b93d32502322136024868be3f7e40e71f348c3bef2450757b5dc8594ffd596f7af03ed69e4a383000bed8ac2a9e3f0cbe5d
- SSDEEP 768:llbMCDIQVf+iBUGbzi214/TdviaO8uJks:88NT3i1R6aWn
- TLSH T10ED2BFB0FAA53270F33F133CA7D9B16B75B905E57445256578DC9AC77942800CA383D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar
- Size 4KB
- SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
- MD5 091883993ef5bfa91da01dcc8fc52236
- SHA1 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
- SHA512 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae
- SSDEEP 96:6nc3+Tkadi8HKcL9CpLPu6+Lh61QyBcajLHtlqekr7ztyldIag4m85Bx:gc3+WTzpMyBcctlqGgZCBx
- TLSH T1989197F32A8DD4EFE64ACDBB06A1D5157530CA9B410EA1073A9570F40FA1DC44B06ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar
- Size 332KB
- SHA256 be6a1d54ebb043495e31e25e72b440f69156a5624cdd7e1c55c47e30d4fae308
- MD5 d91073d6b28e2505e96620709626495f
- SHA1 af6a2dfefef70f1ab2d7a8d1f8173f67e276b3f4
- SHA512 e419df2b6c7d788319c5ed5ddd2a6eec8e92970f031fd5c3f2b998448147b9bbe35537d51a9739bcd0ecb08e86d92ad9eb660447fee6d6aff087d99fa0c0e1bd
- SSDEEP 6144:8kYV9RfDdtYogya8eVODcbJMtLH+56+yvTfIOSFm2dJxZ4h:8PRTqyUUwOLiyL36d7q
- TLSH T14874C022B01C106FFD037276BB2AB016B52E8DF1F007961535A45EBAE6E7E1D7AB0714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar
- Size 283KB
- SHA256 dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0
- MD5 a2c47e14ce5e956105458fe455f5d542
- SHA1 48b8230771e573b54ce6e867a9001e75977fe78e
- SHA512 8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947
- SSDEEP 6144:13o1aBBATxSoICcO4CbsIEecPQzX9zpwa7yWEVqv8CneGYZ:1Y1aUTxDcO4CbOnYb1sT8vZeDZ
- TLSH T1A054BFD7B948899FF98FC47A00008016F8F895E9D58AE21F16B085FB4863DD85F16BED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar
- Size 2.8MB
- SHA256 d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9
- MD5 bb811ca86cba6506cca5d415cd5559a7
- SHA1 119ea2b2bc205b138974d351777b20f02b92704b
- SHA512 c8d8aa38e6fb04c409c37922efcbbe182f65156a853f691d8381d56eea208adf22f7a28873bb7895210e41857dd4411aaf952682a2692051220e281910d0798f
- SSDEEP 49152:NScdDul0hTPa+VB5HtMQjP23PUM69tuTNwHVk4znE34fFPdytK1mXxtpCArZQ17y:EchuGdyANMQGd69Epu64znbN2D
- TLSH T103D5C0977DECD43AFA4BD97380B1E17D3C194B6DD005A81711B416AA08A2C9E1F06BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar
- Size 782KB
- SHA256 de5b0e359bd7b03ca42806b368846efd95484380fe05ae2a4ea71bc338c59c00
- MD5 e3052643d1c4d2acb76bdb7ee3855be6
- SHA1 ccc518677b9367d45f99dfa592c9b039f07687d3
- SHA512 faee33dd9a53bfb961111785635bcabc496ebd227dbf530c9e95a47412cb933609d2389a1c252471714b0051c12d3259545b0496993d9a790a3db0fc86cd4b0e
- SSDEEP 12288:YDw5rtm6IFddAW2DsFR4WOiuIQbqb3Gv+5a7/BfGfxGGh9:YDSr86+GXsB975abBeft
- TLSH T1B505C0A33CEF971EE6E3DD324100842BFC5944E9D87EA957207485A504E3EC95A2F78E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar
- Size 50KB
- SHA256 c07125fff9372bd6562e986bc9f3092694db9649a79761683adc9da6ffeb33e6
- MD5 f39863f3538805aadefc57f6d18f0bf2
- SHA1 d44246b00dec7e08eb35325ee5669f6ed878eee9
- SHA512 a09fa39a9431e8d699140f0fc9d59c98eb8262af0108d1dfb64c4ea2cf33d929753de5900993fff7e49f7ab07500aa7516acb6e266ee0da777d0eb97b6309284
- SSDEEP 768:9irgXEyv/CAw2BrPlvDLJ+1EULe/x1vDjf7QtWAQy5Bqzg3h/xrwPQV+ksL:o8HzXRJSe51DjDgXQy/hh/1mE+ksL
- TLSH T1D533CF733C58D50EFBF2BE72C6038416FE692468A991180231B6C279E0D9FC51F896DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar
- Size 17KB
- SHA256 3a35297fa880d04821d2bf69e4700ddb046057294a67b0cf2d5a78cec164dcc0
- MD5 b77c3241564159e9e049239cdf9a7e89
- SHA1 edf2115998ab20bb4246d964b25672fd00ee304a
- SHA512 6d5c4bb6f2798b79e0c0bf37b5e2e586281ab1596156de0ede764886039a8d349808d4e3296d60d75919a23317da9b8902a0007203d2140512a918f1227bfbe3
- SSDEEP 384:QCrciffLgAkKlG67OCaAvam/oUYDEgFJYSz+:QJirgoG6ZaAvyUYgAGg+
- TLSH T101722CF13B41CA3CF7B56370E1D05097783F2DD8A0D9BAFEF1E426CA218B584A929594
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar
- Size 174KB
- SHA256 d783ad9c7219ed83d4ec754a49d4c22ae0cd6d668a02be880d79ebbe9114bb61
- MD5 7d7435aa45171c6706fd239c3013ad3d
- SHA1 58d73c4c67767aa7e32c808871d35c166e8e2d7c
- SHA512 5db1d1106f8d6efba95e49bc71a6573782325490d4182cf1e7a5bca18a0532a634211d0116522f32996fdb667009b5d65ca951363869d86ccce7da64759633e2
- SSDEEP 3072:FuTwQKBGz6HB2grdBG+DYSXmBdj08Hb8gSNmUFKp4g:kTwQzzPShY8N8HSK4g
- TLSH T1AE04BFF3BE80D27BF77353B0E146459AB82E29C4A0857AF171F011C6D467AC1967D2AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar
- Size 8KB
- SHA256 a05c52b4687b4cb7e1825c09021a407f8d203c8202ccd39af5d7438576fec792
- MD5 a113ea53b0db701fec15956a9fefed86
- SHA1 223b913f08fdc51368424908ceab69b5eaedb426
- SHA512 af4b10d64e23851ba5ffd2019ca661e13d8add7cc66501386a4ba8a51c5df776b7362bff05dc2e27e528920ba799ef523a4a683ec769f51f08b5d6a019771a44
- SSDEEP 192:+2DVzhr2NA4i8o23fS7NxdRcNg8vtdohGJ7yeurv2kAizmTshS:FXrciffLgXHPRkAi5S
- TLSH T1AA0229B0BF80C078F7F8AB74D72055CBF43A59E9A1C8A7E579DC38942A0F5745E19884
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar
- Size 46KB
- SHA256 78cb455310b0d03101115eaad61550ba4c9cfe8c50968dad9279dba9acc258c4
- MD5 6f31b747741ca599fc058a36d7a33813
- SHA1 f8fbb34c1d7784d4b809b14d275e759c5decc316
- SHA512 b8d854896dfd3f153269ad1ce4990a6cac7e1f120ac8e9f481cb53a64303f4f2babe61148eeff6dd39a0c18109b1dc299e3d47687da80b02cb47b1cb6102327f
- SSDEEP 768:UirgggvAnNciIzPaiC5rGmPxJ0E1Faja9SO8BQGxK7VcsgSWQ0VP+9+4QhUslfVF:dLn/IrBET2ja9SOIKpcVzjV/hFfVF
- TLSH T11A233AE376908639E77363B0E1508597B41E1DD8E48D3BB3B5E41287A47B680DA393F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar
- Size 89KB
- SHA256 b6b741c2e8cdf73829e2599b6b922dcffa602ee194054ae0ed2336a68dd0d3e0
- MD5 da30d1d457d409e855bf9a3963e23358
- SHA1 97f00be079c64c67b28159c3a176ca955e976e2a
- SHA512 a69618e1b4438a7eba865b671c2b60b0de6f9c7a9830f93041d74047d46db2a68e2c852ecc42afce29ad561abc874ae52537a417ff36e1474926520aa0c0a964
- SSDEEP 1536:ThFLzr2sPAsiV1G/0dbAz3mk5X41syfcq/IjjRxWUFgtfArGn:TrLf25hdb+dQf0LwF
- TLSH T17D939EF37FC00339EB33B370E56194DAF42E2AD8E0466EA671E442CB96F7584AA35541
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar
- Size 60KB
- SHA256 64c41d283af2e3df78ce441105265470e5b370b2f4b90e006336e3e176806d2b
- MD5 2a0c9ee70a00c11fd941ea542b2babb2
- SHA1 01ddd3819f6b00a49cd2d8c13c801b937b4d30fd
- SHA512 b04da98d567f0ae946d3e7842bbb40c86b0968890ce1ebc89df9331e5ac78a039f8682951a59610243c26694c0a7a52f1282da720b746e8482047473813cd9a4
- SSDEEP 1536:BcN/VpnBm9/HCD95J0VQn5I2xNfNwIbjgb7mdx:m/n+/6TKqJmvPk
- TLSH T10F53D07FE9616B27EB2FA3344219808EE16A415E6887FC1175781C9EF8FEC16B017643
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar
- Size 1.0MB
- SHA256 1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772
- MD5 ab01ab53ec62de3b50ed071dcaba3bfd
- SHA1 b418ba210ace28adf920f1decf64d673953d07cf
- SHA512 2835c56a960c5c926cdd69183d55f9bf84fe3a076247ada8b5849374ac85fafbe39551441eac66f3d7f45652531a9b5beee33dbbd59ae216039d2970d49df772
- SSDEEP 24576:CS7KsrirxdncKrrabuUfFZAyoScOdCduzUkp:R7hrSxnoZXwduzUS
- TLSH T13225C0AAD594A036D6735372F05296B6E87E7088D44BF059F4FC065BAC73089EB1F388
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar
- Size 25KB
- SHA256 0efc80f1dbffd22667a7df5dc30e4646629ef2fd73e36e1f4be9ea61d5c46fda
- MD5 e6e26e33f54a40f6d3b9f505c0b073dc
- SHA1 fa4dfdfc9adba2083db4ee2ea58772ef3f4d8062
- SHA512 559ecf6705da143ad07e8aeb1a5a994fe47431698bd7e745cc724d0f9ba14ac44250dc0c0eb02960816ac5ef4a3fcf4e0e56cc90449de90edde0d8e8409ed405
- SSDEEP 768:akWqXHirgkxB6HzT+CYv+5LledZQ6LGe3VL5ZvWutqRYl3KBVtJyclgcvjXOwLKy:akWqXCHxYHzT+CYgBedWglLuutqRI3Kx
- TLSH T14DC29EB9D1404032C7F51370A6A2AD62BA377459D68FB0E9F5BC722F5C29C48CB1B618
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar
- Size 930KB
- SHA256 cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d
- MD5 584964cc15b7390de975e97e8eb2e6e1
- SHA1 e40011ec0dae056466399f8e414ede4772001621
- SHA512 5d0dc9ea175373a6bbf76e48246bb3f4d3c43a4ca1cc4db0a10970736a30d3fd72996cce5fe07d675eabb0cad4da1e2fd6b3100d31e7d9d4507c617fc1bbe425
- SSDEEP 24576:83Sz30oBI69q5THDAD/RNvfbAWtduHQfN/qg:O+0Z69q5Tc/AcdgQfNyg
- TLSH T11C15B05ED4949027E6A35231B4465BB6EC3E4048D48BB0E9F8FC5BC3E8734D57A0B7A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar
- Size 257KB
- SHA256 2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460
- MD5 a027e88d219ee744ddcdb32ed1e69633
- SHA1 83cdd62ef3140664f46be59c2c2727141d1c5a32
- SHA512 d9fed54460b52b68fc91502b1e7a0723cd97740455574b101929d6c77818f81340077fed7748a2b76a6d95e2dda711717caecf72f0f4d6331736fbad88ae66af
- SSDEEP 6144:dg3ArMbRnDNDpn393P4Zyo1zWnLnq6mAMQcRn3dGW:uAIbRnDNDp3u15lAMQch3R
- TLSH T16444C05AD4545213D6A75230F4A216B2EDBE40C8E48BB0DDDEFC66C3E8338957A0F798
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar
- Size 30KB
- SHA256 688d1991dfd22dc31356cf9016024c6bcccddebaf2dc3782cfc924d27f5236ab
- MD5 03ad7f0aa604e4d7628faf7ab5aad8c8
- SHA1 f59039b58a88c3ae08d2c3a64dc0ffcb988cd434
- SHA512 be0f60894da7bae7653b44811b809fba7a2b7a2184364cce31f2ec08a0512d0f158a93b225199deb74b7702dddcde6b114ede6edf77e279e367a8edb1f80a324
- SSDEEP 768:jirg86MJDoaQqqAFredKIcmLkwqB1J4jQz+V6oq6b:uV6MJV7degr7VB1Wjc+V9q6b
- TLSH T139D25CBB7FD44228E6336330F931D98FB02E1C9AE85546E674E1668B716BAC4CD39184
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar
- Size 8KB
- SHA256 21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
- MD5 5fa4ec4ec0c5aa70af8a7d4922df1931
- SHA1 ba035118bc8bac37d7eff77700720999acd9986d
- SHA512 51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115
- SSDEEP 192:Z6XofCki4/RcMgS+JFEGFDOMHfYqzQzKRosZDrjq:Zuof/cnFFEuOMHfY3eo+q
- TLSH T13C02F9E33504A1AAFE5E4833679506927C3E50D8A1C92330A9792CB27927C5D7F6E48F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.dll
- Size 121KB
- SHA256 f8d0275464e21850da94c71f67ff99bc5b6dbb1b130b7f3a224de339484b513a
- MD5 8ebb51366128b0ceda6c89e3bf0912fd
- SHA1 9d6bd74e795afe5db3dc651c802773ba4f01a235
- SHA512 8cf5d18ff561a867c3650c87fabab866f070997b83310f7d7158cfc3abb76167a1f3c7d51e922c13380dc543ee4942208618f22f62fc3bd8ee63d9ecac9e9f39
- SSDEEP 3072:T55QL1Eo2dCc/dGw9+oMZqYSByNGB6o+ErMi3tKZVk:95QL1AcwUF//G8Vk
- TLSH T19CC35B0BA6A54082F42EB5BCC4134D0EE371B4600295E34F436AD68E9FDF7727D19BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
- Size 53KB
- SHA256 5d0fb7c0461414c668979c4e53bdffb13cc12ec39002fd4a464736bde2caa3a6
- MD5 5f79dd80c3b34ecdc26a18863f6aacfe
- SHA1 e46a31774038e40ee6df68df76a2509010937883
- SHA512 c72aa9e5d78883061aa6ac74ba928549d4f3e99137c27a1a6e5f009b1d1141a6e937311d2961c1ae070bc458793ed364cafccc12d0ae05c7939e6ebca372f89e
- SSDEEP 768:TtZDFBLAuDeGJiqrmehiVSrmaBP39VqL5qYi1VTH5ALKG:vS7qjh3rmKPNUL5q71VU
- TLSH T1503329B2F104A885CA1BC9B3D86EDC3164F33DED99E0464E22F9712959B33D2109AD5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jimage.dll
- Size 33KB
- SHA256 6462ff23406abd07b6989b8c6e967fa719b967592bcd3bff1c229cad1f766c4f
- MD5 bce61351e0b00d08ba09aa6cf9482cd5
- SHA1 9bb5ac45aac8767e31f055dddf5024515a17b91a
- SHA512 dd87f73a1194e05228c0e757e64ad07eafbecfc38dd47cfca6b0cc26f79a36b1837b0a9d6ff77b31aa8828d6f66eaf7320e3ab6710465de9d7abdf274a08fd4b
- SSDEEP 384:56pv8DPrWC5e0pfA+085BltulfEYlZyvhaDQnIYiq1GVMBgiy8RbmL4nNy0x2:opClA+BttulfEYlgvhaMIYi1VWr5AL9
- TLSH T176F28C56A7940859E966D938C86B8B2BD7F2FA514E50C3CF2720825E0F333807F6D766
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jli.dll
- Size 90KB
- SHA256 a037c5d40f86a3e096f7f1761ba19d10d5427b376266877b57078418bf527dcb
- MD5 49ceba863d2e481289fecb3a4efabac1
- SHA1 5b1661cacb2b0366ad753b6b6407c71ea3ae1880
- SHA512 8de7ecbc1b27df3581ef0eb8d0d20c171edd31edfa230191f79613463bb489e4bef72f63de081199fbbf5827de26c79b7b2edd354e0fe1ef4cdf8f456d88dd93
- SSDEEP 1536:VWQqhv62L0Z0Djhz6DVVdI0YWIO9wwT5/K568rtwxGRQ71V1:/qhv90Z0pYVHX9wwT5/K568rqxGRQZV1
- TLSH T1DB939D4A53D011E1DDB699B9DDB1561FD3F2B0862761838F0368819A0F73B223E1DBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\msvcp140.dll
- Size 562KB
- SHA256 b99eb28a471311113f5c4109cb3c463f39cfd9bdb3b07f706204dedddb4516a1
- MD5 7acbc57d268a691247b4a94fecfa42b4
- SHA1 67bd76111b4ab8f4c0692919153dde2e7c8070f1
- SHA512 b08140ce86ea78b481b78644f086359326616a56fb3a3953da16a7fc2bd15a493652f22d4d2fcba3675c668b9832fdb7d5f17a8aa6ccdb74e7b746a79df60b88
- SSDEEP 12288:O9zqgpPAgLqMpP85TAfvULhNaYv0nJxgQEKZm+jWodEEVhEU9:O4wPrALhAYvogQEKZm+jWodEE7p
- TLSH T139C41923B74905E0E195E3B891878306D7F1BC4A8312A3C792EBD69D2F677D1673B290
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\net.dll
- Size 59KB
- SHA256 73fc65cd308ff969a336aada77805836b80e777f17402ad910243594228dd82e
- MD5 be6c1514a1ca4ef134b006e5ba78fd50
- SHA1 4269250a07e8cb9f63ba5851ace35f505ec631fa
- SHA512 7756d84053d34adb368fa9355fa320f0a25fc7c730b46c67f859000a5557f653225136eac8301f559f8850e08fb84d3564293534e7311425bd0f19bb5772a1e6
- SSDEEP 1536:/r9xRTQvuv55er8BsWAcqqX7xYUwG71V52s:zHHezWvNaUwGZV52s
- TLSH T14E435C1297E41480E827C978C953251FDAB1B860629087CF837AC65EAFF37717F19792
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\nio.dll
- Size 79KB
- SHA256 3cd0ee9461d5f2b2b41a597b97f0d72b4d2029b5ad57d00391e1aa680382e3ee
- MD5 1eaf1eed6002e14f3c3a31f135f02847
- SHA1 803d08a9593afb37c6f2a4a95079bc586b05b89e
- SHA512 4b82ce36bdeef8140fee4a1be34561565bb8c96ef7a73b6425d80b62a6a49b4314f356090de9fb955ecf39788636000ccbf464ec4856e8d7b8da4cf45df54e8d
- SSDEEP 1536:5ifr6nnXJvMNZo44m/FMF8qPxRSpi3Mq071Vt:5LxMNiE05RSpi3L0ZVt
- TLSH T10E832AA253B4889BD87A7138865B535BF372BC104510974F53288B69AF2F2733E3D792
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
- Size 12.8MB
- SHA256 47369a9bbcb22b25fd5702f8d0240a46bd108b00d72367d0659595dbfbe63071
- MD5 ae447a42f2d05c5ec9fed6a5515f0d45
- SHA1 0e9153ba07e2702229210c937370ed261145fc15
- SHA512 d3550efc7183c5456967d54140384609b78b9f41344161ad95099cca29cc6f4fc09767eb2eddba8d8e10c954ab051c3688ce92c290b7131045e05b407d4594ae
- SSDEEP 393216:viD5ghFyFLlyHNA/nBbqi0HeSnxQLgl3Z0GBVG5lG6TSTUDwIdZeLf6J+gje2pcj:MIr
- TLSH T172D67C17A3B451D1C12BC179CA678E0BC7F2B4D88735A7CB16A01AAE2F13BE2557E314
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\zip.dll
- Size 87KB
- SHA256 7e6e5f0380b4b6574cf2b22d82c46978d85e0db1be6b8745c562cbb4eac6c042
- MD5 4e0b9a6bdc7251180bc6339b07dcfe1c
- SHA1 02563504a05767cf3ca5163ab776eed8928ec364
- SHA512 618366b2d5871b8ded9a42ce3934d788c5782126dd1b082e621a949864a46e3f67885bef9b665c07bab0fec38f191ee8ef085da36948c5bbe45197c1e5b4cb09
- SSDEEP 1536:dxItaFqFqcetjKhFnIOQIOhWQ4btX5e71V0:dxIsYFqFjgPGhWQQd5eZV0
- TLSH T1C5939C5199A01295DAFB96B0C9F74A3ED3B5B0421690578BA35C83992F933613F0C3FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
- Size 35B
- SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
- MD5 4586c3797f538d41b7b2e30e8afebbc9
- SHA1 3419ebac878fa53a9f0ff1617045ddaafb43dce0
- SHA512 f2c722ae80d2c0dcdb30a6993864eb90b85be5311261012d4585c6595579582d1b37323613f5417d189adcd096fa948e0378c1e6c59761bf94d65c0a5c2f2fd3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
- Size 33B
- SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
- MD5 16989bab922811e28b64ac30449a5d05
- SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
- SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
- Size 51B
- SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
- MD5 494903d6add168a732e73d7b0ba059a0
- SHA1 f85c0fd9f8b04c4de25d85de56d4db11881e08ca
- SHA512 b6e0968c9fd9464623bfa595bf47faf8f6bc1c55b09a415724c709ef8a3bcf8a954079cce1e0e6c91d34c607da2cecc2a6454d08c370a618fb9a4d7d9a078b24
- TLSH T11F90021DE52145811A54853159204DA4542081F68716582AE17D2141514094B64AECA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
- Size 46B
- SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
- MD5 c62a00c3520dc7970a526025a5977c34
- SHA1 f81a2bcb42ccbf898d92f59a4dc4b63fef6c2848
- SHA512 60907d1910b6999b8210b450c6695b7cc35a0c50c25d6569cf8bb975a5967ca4e53f0985bee474b20379df88bb0891068347ecf3e9c42900ed19a1dcbc2d56ec
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
- Size 35B
- SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
- MD5 f815ea85f3b4676874e42320d4b8cfd7
- SHA1 3a2ddf103552fefe391f67263b393509eee3e807
- SHA512 ddf09f482536966ac17313179552a5efc1b230fa5f270ebde5df6adebf07ee911b9ef433dfbfcb4e5236922da390f44e355709ecaf390c741648dd2a17084950
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\lib\jvm.cfg
- Size 29B
- SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
- MD5 7ce21bdcfa333c231d74a77394206302
- SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
- SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
- MD5 SHA1 SHA512