Analysis

  • max time kernel
    150s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 05:58

General

  • Target
    starter-core-1.269-v8-native.exe
  • Size 68.8MB
  • Sample260910-gpbj8ayhld
  • SHA256 c053b982e7ed3ab28eddcc1c74f418bdea7425e1462535a319fde6b2f73197b2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Drops file in System32 directory 16 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 42 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe
    "C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3400
    • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
      C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.283.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9374.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9374 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailabilityV1.json -country=${country} -starterJVM= -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Local\Temp\starter-core-1.269-v8-native.exe -starterFileEncoding=UTF-8 -runVersionWithServer=empty
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Network Configuration Discovery: Internet Connection Discovery
      • System Time Discovery
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2604
      • C:\Windows\SYSTEM32\cmd.exe
        cmd.exe /C "chcp 437 & wmic CPU get NAME"
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:1012
        • C:\Windows\system32\chcp.com
          chcp 437
          4⤵
            PID:3684
          • C:\Windows\System32\Wbem\WMIC.exe
            wmic CPU get NAME
            4⤵
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2724
        • C:\Windows\SYSTEM32\cmd.exe
          cmd.exe /C "chcp 437 & cmd.exe /c set processor"
          3⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4872
          • C:\Windows\system32\chcp.com
            chcp 437
            4⤵
              PID:2140
            • C:\Windows\system32\cmd.exe
              cmd.exe /c set processor
              4⤵
              • Executes a command shell one-liner
              PID:3472
          • C:\Windows\SYSTEM32\cmd.exe
            cmd.exe /C "chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt"
            3⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:3872
            • C:\Windows\system32\chcp.com
              chcp 437
              4⤵
                PID:2164
              • C:\Windows\system32\dxdiag.exe
                dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                4⤵
                • Drops file in System32 directory
                • Checks SCSI registry key(s)
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of SetWindowsHookEx
                PID:4548
            • C:\Windows\SYSTEM32\cmd.exe
              cmd.exe /C "chcp 437 & wmic qfe get HotFixID"
              3⤵
              • Executes a command shell one-liner
              • Suspicious use of WriteProcessMemory
              PID:3160
              • C:\Windows\system32\chcp.com
                chcp 437
                4⤵
                  PID:1384
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic qfe get HotFixID
                  4⤵
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  PID:1128

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                • Size 64KB
                • SHA256 4d4dfe2d571b2fb692a311daea5ad9fad6e7ee22f716691a05539075e63d33c3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                • Size 4B
                • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                • MD5 SHA1 SHA512

                F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                • Path C:\Users\Admin\AppData\Local\D3DSCache\ce5d9c084124bc90\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                • Size 960B
                • SHA256 dae63549d23b9f08ebb27d21f1e35b864f600d844bd96873644805f120bb745d
                • MD5 SHA1 SHA512 TLSH

                +JXF10231897274183640655.tmp

                • Path C:\Users\Admin\AppData\Local\Temp\+JXF10231897274183640655.tmp
                • Size 141KB
                • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                +JXF6055333090949164789.tmp

                • Path C:\Users\Admin\AppData\Local\Temp\+JXF6055333090949164789.tmp
                • Size 424KB
                • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                +JXF8678952206365262892.tmp

                • Path C:\Users\Admin\AppData\Local\Temp\+JXF8678952206365262892.tmp
                • Size 477KB
                • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                +JXF9141214813913518450.tmp

                • Path C:\Users\Admin\AppData\Local\Temp\+JXF9141214813913518450.tmp
                • Size 132KB
                • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                • MD5 SHA1 SHA512 SSDEEP TLSH

                version_manifest.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                • Size 203KB
                • SHA256 ee77094763ecb2eac015cd3f2003652cff7a20c4be8a0bf15129e3878f31a69c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                inner_servers-1.3.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.3.json
                • Size 5KB
                • SHA256 f28291a0974ff31b36aaae3f45decae23abb94180456659c7b77c6029fe789f0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                index_en.html

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
                • Size 48KB
                • SHA256 351a88738501452aef6126f68a3c9415d93fd31714312776389da378c0f6513a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libraries-1.7.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                • Size 377KB
                • SHA256 0a37d481b94fe7fb9fc60162c22038690c7d67eab09b0b2bfa3445dd01b23710
                • MD5 SHA1 SHA512 SSDEEP TLSH

                additional_assets-1.1.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                • Size 190KB
                • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                version_manifest.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                • Size 12KB
                • SHA256 e5a04128c61d6c23b527b4914f3cacb711a6691d2eab89813f7f2f5a9d34069f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                version_manifest.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                • Size 48KB
                • SHA256 f39279fac3a1001f213d3bdafcffac010e2cc7bda85abf2415c63955e5b834ee
                • MD5 SHA1 SHA512 SSDEEP TLSH

                additional_hot_servers-1.0.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                • Size 2KB
                • SHA256 04f57153be7374c05f9e83de9b122a4f0b8d85d7d65a59d756b58bd84404e0f1
                • MD5 SHA1 SHA512 TLSH

                hot_servers-1.0.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                • Size 16KB
                • SHA256 ae982bc0bfc9ded7954df4c19c05904eeced58047527281bbbad77e89e2097c4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dependencies.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\dependencies.json
                • Size 25KB
                • SHA256 76fceb12658369b0d28f14dc35feaae204e36983c6d759c6c7665640547478be
                • MD5 SHA1 SHA512 SSDEEP TLSH

                resources.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9374\resources.json
                • Size 17KB
                • SHA256 9cd7a802791beed588677cc4b578883263333da42660c6f87add35473ce56b96
                • MD5 SHA1 SHA512 SSDEEP TLSH

                appConfig.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                • Size 4KB
                • SHA256 f1098290548cfee07c581d7886882f78ecb511def9d6edb2eeb3f1bc7aa5d033
                • MD5 SHA1 SHA512 SSDEEP TLSH

                javaConfig21.json

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                • Size 3KB
                • SHA256 4137156413e8ca1b38862aedd342bf6dbf6c2446fd4d86ea6893c0888f260893
                • MD5 SHA1 SHA512 TLSH

                DiscordIPC-0.5.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar
                • Size 28KB
                • SHA256 ddb49b2a58155d576952918630cce8cc09ee5df679f7eb96cd673e0e928254cf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                annotations-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar
                • Size 12KB
                • SHA256 2e20c2933bd53487ed71bd52ff1210d3fbcd4ae6de7f37ecc5f435929acc7bcf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                aopalliance-1.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar
                • Size 4KB
                • SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
                • MD5 SHA1 SHA512 SSDEEP TLSH

                arns-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar
                • Size 15KB
                • SHA256 ff80f642bcebfab78ea23ad02051da47f55b1d54c2d755b013db5ded697eecf8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                auth-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar
                • Size 233KB
                • SHA256 a41c54edd9818d408699f4db758e0ae71dccd36acf1a033fd61a0f050194f698
                • MD5 SHA1 SHA512 SSDEEP TLSH

                aws-core-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar
                • Size 187KB
                • SHA256 3ff82e9eee040254a0144d3e8ba3686e79b23a8a1b9e0eb80e7cb8b3a6f1c698
                • MD5 SHA1 SHA512 SSDEEP TLSH

                aws-query-protocol-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar
                • Size 67KB
                • SHA256 2e9ff3baafc3cd30811a4ea1fe950ccc8e2fc4c8b179a39f211db9866471e165
                • MD5 SHA1 SHA512 SSDEEP TLSH

                aws-xml-protocol-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar
                • Size 99KB
                • SHA256 1887ffd2b41d8787c5847dd4ad89aa8128a281977d62eb2011f7a331136d5af5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                checker-qual-3.12.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar
                • Size 203KB
                • SHA256 ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                checksums-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar
                • Size 67KB
                • SHA256 c04118aed95ef281c6b3aac16d6b44736c37eb8fa43e6d045369fc71528c3c48
                • MD5 SHA1 SHA512 SSDEEP TLSH

                checksums-spi-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar
                • Size 7KB
                • SHA256 6a94b2a7cd778ec26576b7461f475e8d0d31d5f7e80960b583130d493f0b58b7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-compress-1.23.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar
                • Size 1.0MB
                • SHA256 c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-io-2.11.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar
                • Size 319KB
                • SHA256 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-lang3-3.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar
                • Size 424KB
                • SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-logging-1.1.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar
                • Size 59KB
                • SHA256 ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-logging-api-1.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar
                • Size 43KB
                • SHA256 33a4dd47bb4764e4eb3692d86386d17a0d9827f4f4bb0f70121efab6bc03ba35
                • MD5 SHA1 SHA512 SSDEEP TLSH

                commons-vfs2-2.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar
                • Size 405KB
                • SHA256 5af37bc47f6bcce94e740b9793115ff135dda54f9ccf98e057938c2c98765f4d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                crt-core-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar
                • Size 17KB
                • SHA256 25582ba17ad43914e1caccff7563b54a1fe18103ae2015881fd67ec9b9204e61
                • MD5 SHA1 SHA512 SSDEEP TLSH

                desktop-common-util-1.269-java21.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.269-java21.jar
                • Size 51KB
                • SHA256 c52fef0a282804ed2e1df0cd682438748b7b779fb07dfcb8f690f312e0b1a465
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dnsjava-2.1.8.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar
                • Size 307KB
                • SHA256 52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153
                • MD5 SHA1 SHA512 SSDEEP TLSH

                endpoints-spi-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar
                • Size 12KB
                • SHA256 7eb52e240f1d92c808d1f616ba07fd86f429043ba4bb1673e438178f60e95173
                • MD5 SHA1 SHA512 SSDEEP TLSH

                error_prone_annotations-2.18.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar
                • Size 15KB
                • SHA256 9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae
                • MD5 SHA1 SHA512 SSDEEP TLSH

                eventstream-1.0.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar
                • Size 29KB
                • SHA256 0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822
                • MD5 SHA1 SHA512 SSDEEP TLSH

                failureaccess-1.0.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar
                • Size 4KB
                • SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
                • MD5 SHA1 SHA512 SSDEEP TLSH

                filters-2.0.235.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar
                • Size 332KB
                • SHA256 be6a1d54ebb043495e31e25e72b440f69156a5624cdd7e1c55c47e30d4fae308
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gson-2.13.2.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar
                • Size 283KB
                • SHA256 dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                guava-31.0.1-jre.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar
                • Size 2.8MB
                • SHA256 d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                guice-7.0.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar
                • Size 782KB
                • SHA256 de5b0e359bd7b03ca42806b368846efd95484380fe05ae2a4ea71bc338c59c00
                • MD5 SHA1 SHA512 SSDEEP TLSH

                guice-assistedinject-7.0.0.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar
                • Size 50KB
                • SHA256 c07125fff9372bd6562e986bc9f3092694db9649a79761683adc9da6ffeb33e6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-auth-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar
                • Size 17KB
                • SHA256 3a35297fa880d04821d2bf69e4700ddb046057294a67b0cf2d5a78cec164dcc0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-auth-aws-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar
                • Size 174KB
                • SHA256 d783ad9c7219ed83d4ec754a49d4c22ae0cd6d668a02be880d79ebbe9114bb61
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-auth-aws-eventstream-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar
                • Size 8KB
                • SHA256 a05c52b4687b4cb7e1825c09021a407f8d203c8202ccd39af5d7438576fec792
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-auth-spi-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar
                • Size 46KB
                • SHA256 78cb455310b0d03101115eaad61550ba4c9cfe8c50968dad9279dba9acc258c4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-client-spi-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar
                • Size 89KB
                • SHA256 b6b741c2e8cdf73829e2599b6b922dcffa602ee194054ae0ed2336a68dd0d3e0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                http-download-1.269-java21.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.269-java21.jar
                • Size 60KB
                • SHA256 64c41d283af2e3df78ce441105265470e5b370b2f4b90e006336e3e176806d2b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                httpclient5-5.6.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar
                • Size 1.0MB
                • SHA256 1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772
                • MD5 SHA1 SHA512 SSDEEP TLSH

                httpclient5-fluent-5.6.1.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar
                • Size 25KB
                • SHA256 0efc80f1dbffd22667a7df5dc30e4646629ef2fd73e36e1f4be9ea61d5c46fda
                • MD5 SHA1 SHA512 SSDEEP TLSH

                httpcore5-5.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar
                • Size 930KB
                • SHA256 cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                httpcore5-h2-5.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar
                • Size 257KB
                • SHA256 2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460
                • MD5 SHA1 SHA512 SSDEEP TLSH

                identity-spi-2.40.4.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar
                • Size 30KB
                • SHA256 688d1991dfd22dc31356cf9016024c6bcccddebaf2dc3782cfc924d27f5236ab
                • MD5 SHA1 SHA512 SSDEEP TLSH

                j2objc-annotations-1.3.jar

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar
                • Size 8KB
                • SHA256 21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                VCRUNTIME140.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\VCRUNTIME140.dll
                • Size 117KB
                • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                java.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.dll
                • Size 121KB
                • SHA256 f8d0275464e21850da94c71f67ff99bc5b6dbb1b130b7f3a224de339484b513a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                java.exe

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                • Size 53KB
                • SHA256 5d0fb7c0461414c668979c4e53bdffb13cc12ec39002fd4a464736bde2caa3a6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                jimage.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jimage.dll
                • Size 33KB
                • SHA256 6462ff23406abd07b6989b8c6e967fa719b967592bcd3bff1c229cad1f766c4f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                jli.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\jli.dll
                • Size 90KB
                • SHA256 a037c5d40f86a3e096f7f1761ba19d10d5427b376266877b57078418bf527dcb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                msvcp140.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\msvcp140.dll
                • Size 562KB
                • SHA256 b99eb28a471311113f5c4109cb3c463f39cfd9bdb3b07f706204dedddb4516a1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                net.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\net.dll
                • Size 59KB
                • SHA256 73fc65cd308ff969a336aada77805836b80e777f17402ad910243594228dd82e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nio.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\nio.dll
                • Size 79KB
                • SHA256 3cd0ee9461d5f2b2b41a597b97f0d72b4d2029b5ad57d00391e1aa680382e3ee
                • MD5 SHA1 SHA512 SSDEEP TLSH

                jvm.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\server\jvm.dll
                • Size 12.8MB
                • SHA256 47369a9bbcb22b25fd5702f8d0240a46bd108b00d72367d0659595dbfbe63071
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vcruntime140_1.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\vcruntime140_1.dll
                • Size 48KB
                • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                zip.dll

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\zip.dll
                • Size 87KB
                • SHA256 7e6e5f0380b4b6574cf2b22d82c46978d85e0db1be6b8745c562cbb4eac6c042
                • MD5 SHA1 SHA512 SSDEEP TLSH

                COPYRIGHT

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                • Size 35B
                • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                • MD5 SHA1 SHA512

                LICENSE

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                • Size 33B
                • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                • MD5 SHA1 SHA512

                ADDITIONAL_LICENSE_INFO

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                • Size 51B
                • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                • MD5 SHA1 SHA512 TLSH

                ASSEMBLY_EXCEPTION

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                • Size 46B
                • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                • MD5 SHA1 SHA512

                LICENSE

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                • Size 35B
                • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                • MD5 SHA1 SHA512

                jvm.cfg

                • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\lib\jvm.cfg
                • Size 29B
                • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                • MD5 SHA1 SHA512

                memory/2604-1734-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1730-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1747-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1746-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1745-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1744-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1743-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1742-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1721-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1722-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1723-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1724-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1725-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1726-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1727-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1728-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1729-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1741-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1731-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1732-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1733-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1740-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1736-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1737-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1738-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/2604-1739-0x000001B2DFA10000-0x000001B2E0A10000-memory.dmp

                memory/4548-1607-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1614-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1609-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1618-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1616-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1615-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1617-0x000001EADA110000-0x000001EADA111000-memory.dmp

                memory/4548-1613-0x000001EADA110000-0x000001EADA111000-memory.dmp