Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

TLauncher-....1.exe

windows7-x64

8

TLauncher-....1.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20221111-es
  • resource tags

    arch:x64arch:x86image:win7-20221111-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    31/12/2022, 19:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.86-Installer-1.0.1.exe

  • Size

    21.7MB

  • MD5

    f643be370cc9763a17f7746b1b6a0243

  • SHA1

    c65391f59a6e1421d783eaf43eb9661cfd476f82

  • SHA256

    5ab5f39d143b6ff77df2fd5026ac8e4788edfd3de27a4e1fa4b420a7d2f61d38

  • SHA512

    5ce377dc1a4a59723cf2b969c0cadb3197e5bf61d0064e2e8c94a0be9d4fd1cd9b33e05078a17e89f54b763e180be32ce14b46949a58ff47e5df18183291142f

  • SSDEEP

    393216:WXYwVCtYto0fs/dQETVlOBbpFEj9GZdqV56HpkbGCST7yuk9sLx:WowVCWTHExiTTqqHpMsV

Score
8/10
adwarediscoverypersistencestealerupx

Malware Config

Signatures

  • Blocklisted process makes network request 3 IoCs
  • Downloads MZ/PE file
  • Executes dropped EXE 18 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
    evasionspywaretrojan
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1176
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1908426 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe" "__IRCT:3" "__IRTSS:22693301" "__IRSID:S-1-5-21-3406023954-474543476-3319432036-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies system certificate store
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1972
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1592
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1814730 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1839152" "__IRSID:S-1-5-21-3406023954-474543476-3319432036-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1812
      • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
        "C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1
        3⤵
        • Executes dropped EXE
        • Modifies system certificate store
        • Suspicious use of AdjustPrivilegeToken
        PID:1396
  • C:\Windows\system32\rundll32.exe
    "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Desktop\SyncAdd.asp
    1⤵
      PID:768
    • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
      "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\Desktop\EnableMerge.xml"
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:1424
      • C:\Program Files (x86)\Internet Explorer\iexplore.exe
        "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:1544
        • C:\Program Files\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
          3⤵
          • Modifies Internet Explorer settings
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1800
          • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
            "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1800 CREDAT:275457 /prefetch:2
            4⤵
            • Modifies Internet Explorer settings
            • Suspicious use of SetWindowsHookEx
            PID:1952
    • C:\Windows\system32\msiexec.exe
      C:\Windows\system32\msiexec.exe /V
      1⤵
      • Blocklisted process makes network request
      • Loads dropped DLL
      • Enumerates connected drives
      • Drops file in Windows directory
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1592
      • C:\Program Files\Java\jre1.8.0_51\installer.exe
        "C:\Program Files\Java\jre1.8.0_51\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_51\\" STATIC=1 REPAIRMODE=0
        2⤵
        • Executes dropped EXE
        • Registers COM server for autorun
        • Loads dropped DLL
        • Installs/modifies Browser Helper Object
        • Drops file in Program Files directory
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:1680
        • C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
          "bspatch.exe" baseimagefam8 newimage diff
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1500
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\deploy.pack" "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1812
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\javaws.pack" "C:\Program Files\Java\jre1.8.0_51\lib\javaws.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1056
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack" "C:\Program Files\Java\jre1.8.0_51\lib\plugin.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1764
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\rt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\rt.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2028
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack" "C:\Program Files\Java\jre1.8.0_51\lib\charsets.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:240
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\jsse.pack" "C:\Program Files\Java\jre1.8.0_51\lib\jsse.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in Program Files directory
          PID:1184
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1880
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.jar"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1812
        • C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -Xshare:dump
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:112
        • C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe" -wait -fix -permissions -silent
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1376
          • C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
            "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -classpath "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar" com.sun.deploy.panel.JreLocator
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1192
    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      1⤵
      • Executes dropped EXE
      PID:2008
      • C:\Program Files\Internet Explorer\iexplore.exe
        "C:\Program Files\Internet Explorer\iexplore.exe" http://java-for-minecraft.com/
        2⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:692
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:692 CREDAT:275457 /prefetch:2
          3⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:1712

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\Java\jre1.8.0_51\bin\MSVCR100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\installer.exe
      Filesize

      89.1MB

      MD5

      de052a3a782280dfe0d333bfb894c7d3

      SHA1

      c6a2c5150e1a6f7d5fccf5927aef1c5b2a94ea74

      SHA256

      cacefac05b6719d7ec1bd4945de0e58e9233e54d2ba94d68103bcd2bb04cdde3

      SHA512

      dfd8bfea673f0c1a37199cd76ceb9f7731eb3c502f02b8e81fd72dc6f4d9cec866fb3133b45ff93127a459be75580d1488609ecf2ab337a685a91fe609245935

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack
      Filesize

      1.0MB

      MD5

      45288142b863dc4761b634f9de75e5e5

      SHA1

      9d07fca553e08c47e38dd48a9c7824e376e4ce80

      SHA256

      91517ff5c74438654956aae554f2951bf508f561b288661433894e517960c2ac

      SHA512

      f331cd93f82d2751734eb1a51cb4401969fb6e479b2e19be609e13829454ec27cec864c57bdc116bf029317c98d551e9feafc44386b899a94c242bc0464556d8

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\lib\javaws.pack
      Filesize

      211KB

      MD5

      5a83bc9b3e4a7e960fd757f3ad7cd263

      SHA1

      f5f308aec7e93accb5d6714c178b8bf0840fb38d

      SHA256

      0a95ab97c85e534b72a369b3ee75200f8075cb14e6f226196b18fd43e6ba42f5

      SHA512

      b8e554bbf036d0500686e878597ffdefa8bcd091ab6533eae76fa04eda310cec7cac89b71911f1f81012f499c7bec890ac9032685945f7e5e6b68f7ad3f7430c

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack
      Filesize

      482KB

      MD5

      538777ddaa33641aa2c17b8f71eed307

      SHA1

      ac7b5fdba952ce65b5a85578f2a81b37daed0948

      SHA256

      9948b1c18d71a790e7b5a82d773fea95d25ab67109843a3f3888f3f0ac9d1135

      SHA512

      7a5877e0eaef6424ea473a203184fedb902cd9d47df5d95d6f617ca4efa1162f0ffd418e9bc6b7492f938cb33fc6384907237487d6ad4f6d0d2d962402529d8b

      Download Submit

    • C:\Program Files\Java\jre1.8.0_51\lib\rt.pack
      Filesize

      13.1MB

      MD5

      f0177701b36068c9a2bb4924dd409fa5

      SHA1

      71e4b32c95e20dd565a6603d3de3819eb4f19d33

      SHA256

      93c1e08034b68e12d78005c2950145595327477c17c1f716248d3e16313b4eec

      SHA512

      8e198bf60dbb95f38bf5eca67c9b7cd4fe9920890ba3d569e08de59b38c1b00830a0a37168fd74c874df86b7ff0915c8b69adb1591432b42b5ff35e5885e6641

      Download Submit

    • C:\ProgramData\Oracle\Java\installcache_x64\baseimagefam8
      Filesize

      78.7MB

      MD5

      22646919b87d1a6dfc371464405b373b

      SHA1

      2296c69b12c3e0244fc59586f794457a4735e692

      SHA256

      0a01e1f33b0dd6af5d71fd26261b97eda1f9da77553704afd0a9d176de733c11

      SHA512

      b5cfe6640c3755f3094e248dcd852ade852f904e80bc7d8dfef5772620ef75eac788f503c3df4baa712e73dafcca51c4ef0c73659ae55c1e0afd59b73f90d3a0

      Download Submit

    • C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
      Filesize

      34KB

      MD5

      2e7543a4deec9620c101771ca9b45d85

      SHA1

      fa33f3098c511a1192111f0b29a09064a7568029

      SHA256

      32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

      SHA512

      8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

      Download Submit

    • C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
      Filesize

      34KB

      MD5

      2e7543a4deec9620c101771ca9b45d85

      SHA1

      fa33f3098c511a1192111f0b29a09064a7568029

      SHA256

      32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

      SHA512

      8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

      Download Submit

    • C:\ProgramData\Oracle\Java\installcache_x64\diff
      Filesize

      9.1MB

      MD5

      d417682702b140d7131851bae877f046

      SHA1

      aa78da727e8a62c839a9bb6f7a93b48d3a04be70

      SHA256

      3b3657c83e4f588f0e759cd46e99309cece2ebb54af2c377f9dc087ec764fda8

      SHA512

      9e107b7f61e42410807aa1e6761ac7adce412846f69ae8e2e21b147e39d1a95d41367e21624381750eb11c77322206c4d869a477e5442e8323405c85854c03cd

      Download Submit

    • C:\ProgramData\Oracle\Java\installcache_x64\newimage
      Filesize

      79.9MB

      MD5

      ba85f8b5a9bf9b6320a6dae439e0f536

      SHA1

      fc8dc72b58ed72e910ec605537bd35069db324ee

      SHA256

      caafa9c10903317fc968b8807c23057173859ab6cc8aae89b77220a9d4ee6777

      SHA512

      75b000b3e21e4f8f4c57032f4dd4d5c526a7bd3fb65da77356a7911f7281289b5512cc90d48cc43b0897b46e40f1ad8de8d1af30ab427ae16625f6007cf4c149

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
      Filesize

      61KB

      MD5

      fc4666cbca561e864e7fdf883a9e6661

      SHA1

      2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

      SHA256

      10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

      SHA512

      c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      7d9ea92b816ef25c22d5455e4470fc73

      SHA1

      de01fad46319e3566c79f5875b2a13dd6286fdd7

      SHA256

      ce51d67f0850f6b28f5cd23c60008b07f4e9460f88968801fa59ab0960e0d7be

      SHA512

      48c0869820fac9a92daf1baf90a8ce2b2d154ce7b0d6332775e6e12916ed3d1636b21e4d084b32f7401d970d83acd0400f0f51b8b2acdd7335a37189618c1f78

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      5992ef42c4828bcab60697e8c291cb89

      SHA1

      d76b14a5ee72a686687016a47075abf2fa000dcd

      SHA256

      308f6c6bcd4a2bb6c6fffb88292952b86868ef79a5010a81f5e1a058ca08793d

      SHA512

      4122c2fce40bdff65de502e406ae0f07e18e165a1ad848c65400450a12add9bba5495a8fa59e5bed06e6ba5c394a01cdc87ed51515c400be59283d5bd50e0726

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      d028c704dd516401a02eeea2ce7ba81d

      SHA1

      41604b70ef790e44982f1942fe034460264bae1d

      SHA256

      00984c054d4c7806f776482cff9ebf1ea86e43e40aeca5d45a4005b83349bb5a

      SHA512

      6a503cd3bc2da57698df32fcd8e14c98c619c75eaf7b4af2e25b87b2f3903b3a45bfe6890f1038bede2f9436e315cfe8b54fe7ec7943b50b875e80d5684059dd

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      d50a51b896923338baa63325354b7dab

      SHA1

      ca5e83a50924ac55a3c3e72d0e211b98b60a223d

      SHA256

      4c6acaa6cdfbae2c5f4ebcdf23405ee1ff20928d4fc47e3cc866e7426a23ef8f

      SHA512

      f707af697352bff2c5bfe1d62164f33b0061b702c01db0409c745a36dae4254638739f107b3b11b7d122d361c5401bec0f2d2b02cf77064c1caed735f6db0e5c

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Sun\Java\jre1.8.0_51_x64\jre1.8.0_51.msi
      Filesize

      38.7MB

      MD5

      1ef598379ff589e452e9fc7f93563740

      SHA1

      82ad65425fa627176592ed5e55c0093e685bfeef

      SHA256

      d4bdc230eaebefe5a9aa3d9127d12ac09d050bf51771f0c78a6a9d79a1f9dbf2

      SHA512

      673f4b08fc25e09e582f5f7e01b2369e361f6a5b480f0aa2f1d5991f10076ba8a9d6b1f2227979b514acc458b4fdc254fc3c14173db7e38b50793174d4697f23

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
      Filesize

      41.2MB

      MD5

      b9919195f61824f980f4a088d7447a11

      SHA1

      447fd1f59219282ec5d2f7a179ac12cc072171c3

      SHA256

      3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01

      SHA512

      d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\jusched.log
      Filesize

      18KB

      MD5

      74463ff57456e773542a5dcfb04c10c8

      SHA1

      508f767cf8c5f36fbce55d3690cfe7b8e7ab57e4

      SHA256

      b67617ca01308a250fa78edd93e4d87efaf8e563758126788740581368bb5f8a

      SHA512

      4df6b0424579c52e7492322c5dcdcb12cb85d5d9872f0f3412d9d7fda1e5995ad1843f01adc714409a3cd8c2e24181490be85cf5037989c89de1f64c4a6e2cce

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      5.2MB

      MD5

      58e22c0ee91280156cdaadacac7acddb

      SHA1

      189c552c94a9b0ae0208763bca77f2801debc224

      SHA256

      765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

      SHA512

      9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      5.2MB

      MD5

      58e22c0ee91280156cdaadacac7acddb

      SHA1

      189c552c94a9b0ae0208763bca77f2801debc224

      SHA256

      765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

      SHA512

      9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\msvcr100.dll
      Filesize

      809KB

      MD5

      df3ca8d16bded6a54977b30e66864d33

      SHA1

      b7b9349b33230c5b80886f5c1f0a42848661c883

      SHA256

      1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36

      SHA512

      951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0

      Download Submit

    • \Program Files\Java\jre1.8.0_51\bin\unpack200.exe
      Filesize

      192KB

      MD5

      5b071854133d3eb6848a301a2a75c9b2

      SHA1

      ffa1045c55b039760aa2632a227012bb359d764f

      SHA256

      cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf

      SHA512

      f9858ec0a1bfb7540512ede3756653d094ff9fe258d13a8431599280db945e8d9ea94c57595c6a21aa4fbfcd733eea9b887bfcf87e84279a7e632db55380920c

      Download Submit

    • \Program Files\Java\jre1.8.0_51\installer.exe
      Filesize

      89.1MB

      MD5

      de052a3a782280dfe0d333bfb894c7d3

      SHA1

      c6a2c5150e1a6f7d5fccf5927aef1c5b2a94ea74

      SHA256

      cacefac05b6719d7ec1bd4945de0e58e9233e54d2ba94d68103bcd2bb04cdde3

      SHA512

      dfd8bfea673f0c1a37199cd76ceb9f7731eb3c502f02b8e81fd72dc6f4d9cec866fb3133b45ff93127a459be75580d1488609ecf2ab337a685a91fe609245935

      Download Submit

    • \ProgramData\Oracle\Java\installcache_x64\bspatch.exe
      Filesize

      34KB

      MD5

      2e7543a4deec9620c101771ca9b45d85

      SHA1

      fa33f3098c511a1192111f0b29a09064a7568029

      SHA256

      32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

      SHA512

      8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

      Download Submit

    • \ProgramData\Oracle\Java\installcache_x64\bspatch.exe
      Filesize

      34KB

      MD5

      2e7543a4deec9620c101771ca9b45d85

      SHA1

      fa33f3098c511a1192111f0b29a09064a7568029

      SHA256

      32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

      SHA512

      8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

      Download Submit

    • \ProgramData\Oracle\Java\installcache_x64\bspatch.exe
      Filesize

      34KB

      MD5

      2e7543a4deec9620c101771ca9b45d85

      SHA1

      fa33f3098c511a1192111f0b29a09064a7568029

      SHA256

      32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

      SHA512

      8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
      Filesize

      1.7MB

      MD5

      1bbf5dd0b6ca80e4c7c77495c3f33083

      SHA1

      e0520037e60eb641ec04d1e814394c9da0a6a862

      SHA256

      bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

      SHA512

      97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
      Filesize

      97KB

      MD5

      da1d0cd400e0b6ad6415fd4d90f69666

      SHA1

      de9083d2902906cacf57259cf581b1466400b799

      SHA256

      7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

      SHA512

      f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      1313bb5df6c6e0d5c358735044fbebef

      SHA1

      cac3e2e3ed63dc147318e18f202a9da849830a91

      SHA256

      7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

      SHA512

      596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • \Users\Admin\AppData\Local\Temp\jre-windows.exe
      Filesize

      41.2MB

      MD5

      b9919195f61824f980f4a088d7447a11

      SHA1

      447fd1f59219282ec5d2f7a179ac12cc072171c3

      SHA256

      3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01

      SHA512

      d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6

      Download Submit

    • \Users\Admin\AppData\Local\Temp\jre-windows.exe
      Filesize

      41.2MB

      MD5

      b9919195f61824f980f4a088d7447a11

      SHA1

      447fd1f59219282ec5d2f7a179ac12cc072171c3

      SHA256

      3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01

      SHA512

      d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6

      Download Submit

    • memory/768-72-0x000007FEFB551000-0x000007FEFB553000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1176-61-0x0000000002E90000-0x0000000003278000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1176-54-0x0000000075161000-0x0000000075163000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1176-74-0x0000000002E90000-0x0000000003278000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1176-60-0x0000000002E90000-0x0000000003278000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1176-75-0x0000000002E90000-0x0000000003278000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1192-177-0x00000000022F0000-0x00000000032F0000-memory.dmp

      Filesize

      16.0MB

      Download

    • memory/1500-122-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1500-131-0x0000000000230000-0x0000000000247000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1500-129-0x0000000000230000-0x0000000000247000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1500-132-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1500-130-0x0000000000230000-0x0000000000247000-memory.dmp

      Filesize

      92KB

      Download

    • memory/1592-98-0x0000000003050000-0x0000000003438000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1592-99-0x0000000003050000-0x0000000003438000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1592-95-0x0000000003050000-0x0000000003438000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1592-96-0x0000000003050000-0x0000000003438000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1812-103-0x0000000000C20000-0x0000000001008000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1812-102-0x0000000000C20000-0x0000000001008000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1972-93-0x0000000002EF0000-0x0000000002F00000-memory.dmp

      Filesize

      64KB

      Download

    • memory/1972-76-0x0000000000EF0000-0x00000000012D8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/1972-104-0x0000000002EF0000-0x0000000002F00000-memory.dmp

      Filesize

      64KB

      Download

    • memory/1972-71-0x0000000000610000-0x0000000000613000-memory.dmp

      Filesize

      12KB

      Download

    • memory/1972-70-0x0000000010000000-0x0000000010051000-memory.dmp

      Filesize

      324KB

      Download

    • memory/1972-67-0x0000000000EF0000-0x00000000012D8000-memory.dmp

      Filesize

      3.9MB

      Download