Overview

overview

8

Static

static

TLauncher-....1.exe

windows7-x64

8

TLauncher-....1.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    151s
  • max time network
    204s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    28/12/2022, 22:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.86-Installer-1.0.1.exe

  • Size

    21.7MB

  • MD5

    f643be370cc9763a17f7746b1b6a0243

  • SHA1

    c65391f59a6e1421d783eaf43eb9661cfd476f82

  • SHA256

    5ab5f39d143b6ff77df2fd5026ac8e4788edfd3de27a4e1fa4b420a7d2f61d38

  • SHA512

    5ce377dc1a4a59723cf2b969c0cadb3197e5bf61d0064e2e8c94a0be9d4fd1cd9b33e05078a17e89f54b763e180be32ce14b46949a58ff47e5df18183291142f

  • SSDEEP

    393216:WXYwVCtYto0fs/dQETVlOBbpFEj9GZdqV56HpkbGCST7yuk9sLx:WowVCWTHExiTTqqHpMsV

Score
8/10
discoveryspywarestealerupx

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 15 IoCs
  • UPX packed file 21 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 9 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies system certificate store 2 TTPs 10 IoCs
    evasionspywaretrojan
  • Suspicious use of SetWindowsHookEx 30 IoCs
  • Suspicious use of WriteProcessMemory 46 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:4904
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1908426 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe" "__IRCT:3" "__IRTSS:22693301" "__IRSID:S-1-5-21-2386679933-1492765628-3466841596-1000"
      2⤵
      • Executes dropped EXE
      • Checks computer location settings
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1736
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Checks computer location settings
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4344
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1814730 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1839152" "__IRSID:S-1-5-21-2386679933-1492765628-3466841596-1000"
          4⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1260
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Modifies system certificate store
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:2148
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x340,0x344,0x348,0x31c,0x34c,0x6f358658,0x6f358668,0x6f358674
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:3420
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:4004
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2148 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20221228232115" --session-guid=8053491b-47ba-4bcb-aa6a-e9b24cf32f45 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=AC05000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:3060
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x34c,0x350,0x354,0x31c,0x358,0x6e898658,0x6e898668,0x6e898674
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of SetWindowsHookEx
                PID:2136
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\_sfx.exe"
              6⤵
              • Executes dropped EXE
              • Suspicious use of SetWindowsHookEx
              PID:3144
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:1264
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x2f4,0x2f8,0x2fc,0x2d0,0x300,0x2b2dc0,0x2b2dd0,0x2b2ddc
                7⤵
                • Executes dropped EXE
                • Suspicious use of SetWindowsHookEx
                PID:2636
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2508
        • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          4⤵
          • Suspicious use of SetWindowsHookEx
          PID:1400
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:2492
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:3824
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:5012
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1392
      • C:\Windows\SYSTEM32\cmd.exe
        cmd.exe /C chcp 437 & wmic qfe get HotFixID
        3⤵
          PID:2160
    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      1⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4656
      • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
        "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        2⤵
        • Suspicious use of SetWindowsHookEx
        PID:4576
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:1836
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
          PID:4928

        Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\.oracle_jre_usage\90737d32e3aba4b.timestamp
          Filesize

          50B

          MD5

          440a74f009c5096da12b3a469b5b1bd2

          SHA1

          d5d00638af9369952201ae81e8b22a57f6a707c6

          SHA256

          689c9f2974a9c7d4b8c144f3229a8583771e261f785d592b9d34bf936fe47835

          SHA512

          6e98cd69c42dbc00b594417052d96f1d3d9116cb6f3300b9ba598fe40225fa733852a8b444958f014b64283f1f6236a5a6c235d40aa8935b53621cdc155b1b36

          Download Submit

        • C:\Users\Admin\.oracle_jre_usage\90737d32e3aba4b.timestamp
          Filesize

          50B

          MD5

          00f279df219a6f6865c5fc6edee7a3cb

          SHA1

          2fede1d0ab0b4f61a1762da00fc4d05cc9cc3268

          SHA256

          5700d99bcb1a2f53d8cfdd045c4749a55127c8576a227fe1486244a646112184

          SHA512

          beff1a1c1502e825cad8c03285bbc248f157cb42d47a39d3c65a5aae1ad936b60c35afcfbafab5c9d68b1cedebbfbdee46f2921e19c314f43bae33a77737dfdb

          Download Submit

        • C:\Users\Admin\.oracle_jre_usage\90737d32e3aba4b.timestamp
          Filesize

          50B

          MD5

          904aa87559a70694a2f3cf59b8bcfc3c

          SHA1

          5340e2c1f206585a0e7c9e28dfce92a492a9d3c6

          SHA256

          4f413fcf346b3c23d9746b1a61e02773bbe9d02278bacef0f87cd6bdf909603d

          SHA512

          a88b4085404bf9faad65eef39f5ba9bb1dc1ac6c68b26e1511173ee88ef4ac5eb40e22af6b0077ffc6659a2cc54e90ebb0c648cde5b2e79d7b7b727df47bc1f6

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
          Filesize

          471B

          MD5

          d47cfba50573f0e552b6e6d387f57b70

          SHA1

          457cb7eba451f945d21f8ade42f09635012e8131

          SHA256

          fe757b0a9e8995ed45accbe1cb3c1d83239a2fd626ca5bb256f483caf1112e3a

          SHA512

          5a868be1557dc848e47a52b8d0b6f305a85ce9197de3bc1829a97a78c956f445ca358c15b1c5898f88dea1cc77353768f4e356880f0913c41f1eb27e4012cb45

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
          Filesize

          434B

          MD5

          7d84c7edfb3d883339466fe10d06bbfc

          SHA1

          e6a33913fa005561b7e0fdaa8d1254deae62d29b

          SHA256

          dda28750c13edf737521f9e46e00cba9ee502771cdb7eb7c68f5f423cafe99d0

          SHA512

          d5877601130b5799ffbf6a24de5558946822824fd6b92ae833d1c243e94f323bfafed1c3cf94e286b51be401f1beab576a676ad8617ac48a151b7103db35d79d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\_sfx.exe
          Filesize

          1.7MB

          MD5

          0238df215bf6943892daf85de8ad433a

          SHA1

          3d905e4e2c0e9170df61b7a199321847691f945e

          SHA256

          a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

          SHA512

          fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\_sfx.exe
          Filesize

          1.7MB

          MD5

          0238df215bf6943892daf85de8ad433a

          SHA1

          3d905e4e2c0e9170df61b7a199321847691f945e

          SHA256

          a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

          SHA512

          fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe
          Filesize

          2.1MB

          MD5

          9df6e2fbb7e38964f35016bf91ef7424

          SHA1

          d0c1266dc46814bc6165cf6a69e90581228989a7

          SHA256

          3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

          SHA512

          b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe
          Filesize

          2.1MB

          MD5

          9df6e2fbb7e38964f35016bf91ef7424

          SHA1

          d0c1266dc46814bc6165cf6a69e90581228989a7

          SHA256

          3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

          SHA512

          b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\assistant\assistant_installer.exe
          Filesize

          2.1MB

          MD5

          9df6e2fbb7e38964f35016bf91ef7424

          SHA1

          d0c1266dc46814bc6165cf6a69e90581228989a7

          SHA256

          3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

          SHA512

          b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202212282321151\opera_package
          Filesize

          86.7MB

          MD5

          31a143013d5b31bf0a19c39ebb26fd93

          SHA1

          8a9a106585b4de6587c2e5dca51c3e390764d0c4

          SHA256

          4a38cc4fb9f71279e966d17c64d3d8bf03d61922241d9bd69edf52baac7fad66

          SHA512

          c06ae3db4711eecc177c8eabf7c91c585224387f301c092558e1efad94dd1f42b80adb04e5b5c4280e9df512ab90e755afd16b9a6f6804834a492dea9b29a41d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2212282321132802148.dll
          Filesize

          4.3MB

          MD5

          09ce9fd443ba9fb4c7ac6cf5c2b1ae53

          SHA1

          029a9ab9c36da0756441d8346cbfece76e3820d5

          SHA256

          ceeb8dd897035807425e9d24d0d2b71d65dccf7d8f834b777a587ba697655581

          SHA512

          a3aafe2e6cf719b086759989229011ccc078c46bc456fb5a50c3b701cc5f4f8b16a4984b7dca6e51688d31a3ff40443cc80cce10a90a27c9eb5a40799900a893

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2212282321140623420.dll
          Filesize

          4.3MB

          MD5

          09ce9fd443ba9fb4c7ac6cf5c2b1ae53

          SHA1

          029a9ab9c36da0756441d8346cbfece76e3820d5

          SHA256

          ceeb8dd897035807425e9d24d0d2b71d65dccf7d8f834b777a587ba697655581

          SHA512

          a3aafe2e6cf719b086759989229011ccc078c46bc456fb5a50c3b701cc5f4f8b16a4984b7dca6e51688d31a3ff40443cc80cce10a90a27c9eb5a40799900a893

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2212282321155154004.dll
          Filesize

          4.3MB

          MD5

          09ce9fd443ba9fb4c7ac6cf5c2b1ae53

          SHA1

          029a9ab9c36da0756441d8346cbfece76e3820d5

          SHA256

          ceeb8dd897035807425e9d24d0d2b71d65dccf7d8f834b777a587ba697655581

          SHA512

          a3aafe2e6cf719b086759989229011ccc078c46bc456fb5a50c3b701cc5f4f8b16a4984b7dca6e51688d31a3ff40443cc80cce10a90a27c9eb5a40799900a893

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2212282321159683060.dll
          Filesize

          4.3MB

          MD5

          09ce9fd443ba9fb4c7ac6cf5c2b1ae53

          SHA1

          029a9ab9c36da0756441d8346cbfece76e3820d5

          SHA256

          ceeb8dd897035807425e9d24d0d2b71d65dccf7d8f834b777a587ba697655581

          SHA512

          a3aafe2e6cf719b086759989229011ccc078c46bc456fb5a50c3b701cc5f4f8b16a4984b7dca6e51688d31a3ff40443cc80cce10a90a27c9eb5a40799900a893

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2212282321162802136.dll
          Filesize

          4.3MB

          MD5

          09ce9fd443ba9fb4c7ac6cf5c2b1ae53

          SHA1

          029a9ab9c36da0756441d8346cbfece76e3820d5

          SHA256

          ceeb8dd897035807425e9d24d0d2b71d65dccf7d8f834b777a587ba697655581

          SHA512

          a3aafe2e6cf719b086759989229011ccc078c46bc456fb5a50c3b701cc5f4f8b16a4984b7dca6e51688d31a3ff40443cc80cce10a90a27c9eb5a40799900a893

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
          Filesize

          1.8MB

          MD5

          f8996d2158a69a12b4bc99edd28100bc

          SHA1

          892887691df881fe432e09b618e90f50447340e6

          SHA256

          866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

          SHA512

          d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
          Filesize

          1.8MB

          MD5

          f8996d2158a69a12b4bc99edd28100bc

          SHA1

          892887691df881fe432e09b618e90f50447340e6

          SHA256

          866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

          SHA512

          d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
          Filesize

          1.7MB

          MD5

          1bbf5dd0b6ca80e4c7c77495c3f33083

          SHA1

          e0520037e60eb641ec04d1e814394c9da0a6a862

          SHA256

          bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

          SHA512

          97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
          Filesize

          97KB

          MD5

          da1d0cd400e0b6ad6415fd4d90f69666

          SHA1

          de9083d2902906cacf57259cf581b1466400b799

          SHA256

          7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

          SHA512

          f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
          Filesize

          1.3MB

          MD5

          1313bb5df6c6e0d5c358735044fbebef

          SHA1

          cac3e2e3ed63dc147318e18f202a9da849830a91

          SHA256

          7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

          SHA512

          596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
          Filesize

          1.3MB

          MD5

          1313bb5df6c6e0d5c358735044fbebef

          SHA1

          cac3e2e3ed63dc147318e18f202a9da849830a91

          SHA256

          7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

          SHA512

          596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
          Filesize

          326KB

          MD5

          80d93d38badecdd2b134fe4699721223

          SHA1

          e829e58091bae93bc64e0c6f9f0bac999cfda23d

          SHA256

          c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

          SHA512

          9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
          Filesize

          326KB

          MD5

          80d93d38badecdd2b134fe4699721223

          SHA1

          e829e58091bae93bc64e0c6f9f0bac999cfda23d

          SHA256

          c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

          SHA512

          9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          Filesize

          1.3MB

          MD5

          e7bbc7b426cee4b8027a00b11f06ef34

          SHA1

          926fad387ede328d3cfd9da80d0b303a865cca98

          SHA256

          e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

          SHA512

          f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          Filesize

          1.3MB

          MD5

          e7bbc7b426cee4b8027a00b11f06ef34

          SHA1

          926fad387ede328d3cfd9da80d0b303a865cca98

          SHA256

          e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

          SHA512

          f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
          Filesize

          326KB

          MD5

          80d93d38badecdd2b134fe4699721223

          SHA1

          e829e58091bae93bc64e0c6f9f0bac999cfda23d

          SHA256

          c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

          SHA512

          9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
          Filesize

          326KB

          MD5

          80d93d38badecdd2b134fe4699721223

          SHA1

          e829e58091bae93bc64e0c6f9f0bac999cfda23d

          SHA256

          c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

          SHA512

          9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
          Filesize

          2.7MB

          MD5

          a558f544b11ac1476653dd9221da5dde

          SHA1

          f6da99c3a7e2df19f99a71c2f924a700122e1780

          SHA256

          7a12b1758a13db90a0ff4f32811c1b7be2b1235e2ac619b245a6683431cc4d18

          SHA512

          4988ee8d6496907b86f83c2984ee73782d39c276ee23974aee96e2d62688f5bd27b175bdb6355fe874ee3232ad3c755e07ae15c8dda5dc804f7f6ea584b88917

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
          Filesize

          645B

          MD5

          c7278ce7b949f0247c8126ffeff390c9

          SHA1

          61c415c806c4649ad365f3d57cd84c24e5c68606

          SHA256

          ee0cb2b2eed7415bceb10f34c98190145a057929a29e73105fa83c18450ceae1

          SHA512

          d3f9ac6fea4dc8f20ab37cb1aaf1a1854b3be22d7e6c2392e5b8c2561472dfa6554dc306a0cbe06ff40577b4e735b4ce6e59351d3c019975869efcf4f225635c

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          Filesize

          5.2MB

          MD5

          58e22c0ee91280156cdaadacac7acddb

          SHA1

          189c552c94a9b0ae0208763bca77f2801debc224

          SHA256

          765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

          SHA512

          9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          Filesize

          5.2MB

          MD5

          58e22c0ee91280156cdaadacac7acddb

          SHA1

          189c552c94a9b0ae0208763bca77f2801debc224

          SHA256

          765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

          SHA512

          9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          Filesize

          5.2MB

          MD5

          58e22c0ee91280156cdaadacac7acddb

          SHA1

          189c552c94a9b0ae0208763bca77f2801debc224

          SHA256

          765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

          SHA512

          9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          Filesize

          5.2MB

          MD5

          58e22c0ee91280156cdaadacac7acddb

          SHA1

          189c552c94a9b0ae0208763bca77f2801debc224

          SHA256

          765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

          SHA512

          9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          Filesize

          5.2MB

          MD5

          58e22c0ee91280156cdaadacac7acddb

          SHA1

          189c552c94a9b0ae0208763bca77f2801debc224

          SHA256

          765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

          SHA512

          9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
          Filesize

          4KB

          MD5

          04177054e180d09e3998808efa0401c7

          SHA1

          0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8

          SHA256

          0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08

          SHA512

          3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar
          Filesize

          151KB

          MD5

          75a215b9e921044cd2c88e73f6cb9745

          SHA1

          18cc717b85af0b12ba922abf415c2ff4716f8219

          SHA256

          7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc

          SHA512

          1a44af2f3f8dbfbf38ad5f71ef11b32d5822d734f77af2cdea419fb6af845e894acb60bffbcebb4533068d86b55a22a8b0f74be20b204c2343bdb165d9c787f9

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar
          Filesize

          2.2MB

          MD5

          43bfc49bdc7324f6daaa60c1ee9f3972

          SHA1

          6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9

          SHA256

          58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4

          SHA512

          834f2bf4a5b35edffde0263409649aeaf34ca9a742ba511a06bb9b01626f9e774d2d3c8ba91a7905929dc8cd5e6471de29f7d0ab10260ece2af709b7fdbe4bc3

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar
          Filesize

          41KB

          MD5

          65912196b6e91f2ceb933001c1fb5c94

          SHA1

          af799dd7e23e6fe8c988da12314582072b07edcb

          SHA256

          663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868

          SHA512

          60b15182130ddfd801dd0438058d641dd5ba9122f2d1e081eb63f5e2c12fff0271d9d47c58925be0be8267ed22ae893ea9d1b251faba17dc1d2552b5d93056de

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar
          Filesize

          658KB

          MD5

          41f66d1d4d250efebde3bbf8b2d55dfa

          SHA1

          eeb69005da379a10071aa4948c48d89250febb07

          SHA256

          9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e

          SHA512

          109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar
          Filesize

          307KB

          MD5

          540f330717bca9d29c8762cf6daca443

          SHA1

          eed8a2cbf56cc60d07a189a429ead3067564193c

          SHA256

          52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153

          SHA512

          a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar
          Filesize

          2KB

          MD5

          289075e48b909e9e74e6c915b3631d2e

          SHA1

          6975da39a7040257bd51d21a231b76c915872d38

          SHA256

          91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff

          SHA512

          e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar
          Filesize

          478KB

          MD5

          04a41f0a068986f0f73485cf507c0f40

          SHA1

          5af35056b4d257e4b64b9e8069c0746e8b08629f

          SHA256

          1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9

          SHA512

          3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar
          Filesize

          64KB

          MD5

          39c6476e4de3d4f90ad4ca0ddca48ec2

          SHA1

          ee9e9eaa0a35360dcfeac129ff4923215fd65904

          SHA256

          26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5

          SHA512

          fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar
          Filesize

          424KB

          MD5

          8667a442ee77e509fbe8176b94726eb2

          SHA1

          5fe28b9518e58819180a43a850fbc0dd24b7c050

          SHA256

          734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b

          SHA512

          b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar
          Filesize

          30KB

          MD5

          8f7e4f1a95a870ebee87ddacc425362c

          SHA1

          300bf1846737e34b9ea10faae257ca8fdcd0616f

          SHA256

          f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728

          SHA512

          98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar
          Filesize

          1.7MB

          MD5

          948dda787593340a7af1a18e328b7b7f

          SHA1

          9141212b8507ab50a45525b545b39d224614528b

          SHA256

          ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0

          SHA512

          6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.5\picture-bundle-3.5.jar
          Filesize

          2.1MB

          MD5

          c93265b9d8bbe2b8d07f34893e5945c4

          SHA1

          ad0a3c5e104b95f842998d39c6a50f38b7bf1d03

          SHA256

          7238f234112b746de9dd96d7cafe34436c3f43a9f4ebd5659a38e5ba1b11d277

          SHA512

          0cbc136d1034ea72729cbe70e4459d015a1e4afde087f2abacb0d90603e344f828736a4c9c35e2b29e169e015ba14ddd2073694dfb789b16616275d6b89a6383

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar
          Filesize

          14KB

          MD5

          13a8e72587ac6eacfb0986f75e51eb7c

          SHA1

          6c3daf89705427f73e6106d2d4d9619e99c5ecb5

          SHA256

          1fcffa073f722737431e2699b1f3ea48b92a3b825397d8f0d1464e4d4d15a014

          SHA512

          134735390415f60d0c42ff33a060bda508e273b35fc9aab271c20ff23f331b51cf3fa36443009e0987049f6bfb22c4098a1473e65ea0349e719fbf4b528f344e

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar
          Filesize

          3.2MB

          MD5

          acbc8aa5ba5cdddf5f1e67befe8cc597

          SHA1

          63b4bf89744b532e65c1afa3294743d2b3798f2b

          SHA256

          1f46b3a163012f9729905633b5e5e03ce385066ae43138a564729c942f9ca6b9

          SHA512

          d974a032d9af451c0dd51fbc0d64840f3e03eb502f40e4ab60d6722913b8a48d44a75752fcff60656e4d19089570a894222959745af11bcdf93ea1544192fee3

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar
          Filesize

          97KB

          MD5

          51050e595b308c4aec8ac314f66e18bc

          SHA1

          9c64274b7dbb65288237216e3fae7877fd3f2bee

          SHA256

          86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840

          SHA512

          c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.tlauncher\doubleRunningProtection.txt
          Filesize

          13B

          MD5

          8eec07b8bb3f8f3dcdaf00a209c14d8e

          SHA1

          e17c6c3bff390047bd5dc6dab61962c1d5a6cde1

          SHA256

          2914283194403d056174fbc15d2163b0ef90c53bba91b05042e67b1da38ad45e

          SHA512

          447e9abbd297bbac87de95399c7502370252f927c293aad98e5213f1cd87f55d28e8dc1b16f9e06509bfe8ab9d173c8e5faef8683e127cf851cf281d2b12275c

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.tlauncher\doubleRunningProtection.txt
          Filesize

          13B

          MD5

          b64dd7e7c9554a5813e7301ed792a1de

          SHA1

          39a7982b94dd9dd2d9796b93263b17bcc5a56319

          SHA256

          250b3e8cc23221dd8055252b7dd9566598718d3cedfd6237d24e826bd1ee0245

          SHA512

          a42649d26bb872e05d1e8108e6b4404fe4900ded97fdf695bd0e1d980bf5b0c69377c0c71f8afd0a366688c48c22dbc40943286089e69de56e8f3d6de154a0f2

          Download Submit

        • C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties
          Filesize

          51B

          MD5

          e1f4809bfad9978f1b56b80ff3a18298

          SHA1

          37cd5b920efa7c2f92eb2846f1714da6b7e2c1bf

          SHA256

          8f9acb11fd059270a709724ad9b2a5e71d0e62528c991f6bab36690c89146096

          SHA512

          73a0c446d05dac461f001d3e0c841d4f324f77adcdb2f89b1e727d10ecb59ba371b0f7e084e49180edb8f467bfec4202488cc695dfa24f36d4f2ddbfc5fd71a3

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2386679933-1492765628-3466841596-1000\83aa4cc77f591dfc2374580bbd95f6ba_8329e3af-909b-464f-88cb-23d8b2c5eadf
          Filesize

          45B

          MD5

          c8366ae350e7019aefc9d1e6e6a498c6

          SHA1

          5731d8a3e6568a5f2dfbbc87e3db9637df280b61

          SHA256

          11e6aca8e682c046c83b721eeb5c72c5ef03cb5936c60df6f4993511ddc61238

          SHA512

          33c980d5a638bfc791de291ebf4b6d263b384247ab27f261a54025108f2f85374b579a026e545f81395736dd40fa4696f2163ca17640dd47f1c42bc9971b18cd

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
          Filesize

          40B

          MD5

          7ed71892e8957fde2ff86fc180a89b4d

          SHA1

          1a8a1fd07ac7383be7226161eaca33800cf1df84

          SHA256

          7ff5ebd82c8eb144526a07edef95fe0e80f22e663dbed7012592b3cac53df24f

          SHA512

          54fc8c166c7520fbc5539b5a7624312e2529f504b6bc04e8848fa019ddcf8c2cf41902b1d05962ad0bd42ccd446dd3ff9940def4bd2b66a1431a38ab3ea14b18

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
          Filesize

          40B

          MD5

          7ed71892e8957fde2ff86fc180a89b4d

          SHA1

          1a8a1fd07ac7383be7226161eaca33800cf1df84

          SHA256

          7ff5ebd82c8eb144526a07edef95fe0e80f22e663dbed7012592b3cac53df24f

          SHA512

          54fc8c166c7520fbc5539b5a7624312e2529f504b6bc04e8848fa019ddcf8c2cf41902b1d05962ad0bd42ccd446dd3ff9940def4bd2b66a1431a38ab3ea14b18

          Download Submit

        • memory/1260-152-0x0000000000B90000-0x0000000000F78000-memory.dmp

          Filesize

          3.9MB

          Download

        • memory/1260-163-0x0000000000B90000-0x0000000000F78000-memory.dmp

          Filesize

          3.9MB

          Download

        • memory/1400-258-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-233-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-302-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-298-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-199-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-291-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-296-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1400-215-0x0000000002DB0000-0x0000000003DB0000-memory.dmp

          Filesize

          16.0MB

          Download

        • memory/1736-195-0x0000000000120000-0x0000000000508000-memory.dmp

          Filesize

          3.9MB

          Download

        • memory/1736-142-0x0000000000120000-0x0000000000508000-memory.dmp

          Filesize

          3.9MB

          Download

        • memory/1736-139-0x0000000010000000-0x0000000010051000-memory.dmp

          Filesize

          324KB

          Download

        • memory/1736-137-0x0000000000120000-0x0000000000508000-memory.dmp

          Filesize

          3.9MB

          Download

        • memory/1736-140-0x0000000006630000-0x0000000006633000-memory.dmp

          Filesize

          12KB

          Download

        • memory/2136-178-0x0000000000400000-0x000000000090C000-memory.dmp

          Filesize

          5.0MB

          Download

        • memory/2148-159-0x0000000000400000-0x000000000090C000-memory.dmp

          Filesize

          5.0MB

          Download

        • memory/3060-174-0x0000000000400000-0x000000000090C000-memory.dmp

          Filesize

          5.0MB

          Download

        • memory/3420-162-0x0000000000400000-0x000000000090C000-memory.dmp

          Filesize

          5.0MB

          Download

        • memory/4004-167-0x0000000000400000-0x000000000090C000-memory.dmp

          Filesize

          5.0MB

          Download