Overview

overview

8

Static

static

1

TLauncher-...al.exe

windows10-1703-x64

8

Analysis

  • max time kernel
    110s
  • max time network
    168s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    04-02-2023 22:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.871-Installer-1.0.6-global.exe

  • Size

    23.6MB

  • MD5

    7a4472a78d0651e11d20aa08e43cc045

  • SHA1

    aab1d5f80d7399ae2c1982201733be7681d100b1

  • SHA256

    318df7404e6c4d5538a6d31997b95af52bbb8d40caf5553b3cbd9b1bc4f6db96

  • SHA512

    c152c9d21b0615548173dcc61accb1a1afd5b6f98e6ec21f6a7119536397f07a54ad4087669716c3344dd338ce4f24cecf9989d472f65eaa18c87d496f23c681

  • SSDEEP

    393216:gXQLpnUN/n8IPfs/dQETVlOBbpFEj9GZ1GphRqV56Hpk7IXOzDnKI17fyVS:ggLFUp8aHExiTI3qqHp6zvKcfyVS

Score
8/10
discoveryspywarestealerupx

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 10 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies system certificate store 2 TTPs 10 IoCs
    evasionspywaretrojan
  • Suspicious use of SetWindowsHookEx 24 IoCs
  • Suspicious use of WriteProcessMemory 27 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe" "__IRCT:3" "__IRTSS:24771453" "__IRSID:S-1-5-21-2482096546-1136599444-1359412500-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3692
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1904
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1840872" "__IRSID:S-1-5-21-2482096546-1136599444-1359412500-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4712
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Modifies system certificate store
            PID:1156
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x2fc,0x300,0x304,0x2a8,0x308,0x6ebbe428,0x6ebbe438,0x6ebbe444
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:1808
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:2108
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1156 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230204235328" --session-guid=7969ef48-fc25-4069-8c88-51d34641bd69 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1805000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:3248
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x308,0x30c,0x310,0x2d8,0x314,0x6dfee428,0x6dfee438,0x6dfee444
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of SetWindowsHookEx
                PID:4348
              • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe" --backend --initial-pid=1156 --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281" --session-guid=7969ef48-fc25-4069-8c88-51d34641bd69 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=95.0.4635.25
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates connected drives
                • Suspicious use of SetWindowsHookEx
                • Suspicious use of WriteProcessMemory
                PID:2392
                • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ffebc5ea908,0x7ffebc5ea918,0x7ffebc5ea928
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of SetWindowsHookEx
                  PID:2712
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\_sfx.exe"
              6⤵
              • Suspicious use of SetWindowsHookEx
              PID:2092
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4304
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x2d0,0x242dc0,0x242dd0,0x242ddc
                7⤵
                • Executes dropped EXE
                • Suspicious use of SetWindowsHookEx
                PID:4592
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2356
        • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          4⤵
          • Suspicious use of SetWindowsHookEx
          PID:4296

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
    Filesize

    6.2MB

    MD5

    a33e62d3b0534ee26944f30f501843fe

    SHA1

    806718f157ef9782339efc43957fe504f1e22f79

    SHA256

    b3af95c038e9e2b53ddf0fa747b6866ba433c796f7e6906551969d897b438954

    SHA512

    582450d82a25e3a7e4b2cee9db11658c2219c8b671b365c2e6a76e146cf9cad6d49e4e04c5dd0a11ca1d7be6bed8731eb54df4c11a2f42c7c3c59fb62bf29975

    Download Submit

  • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
    Filesize

    6.2MB

    MD5

    a33e62d3b0534ee26944f30f501843fe

    SHA1

    806718f157ef9782339efc43957fe504f1e22f79

    SHA256

    b3af95c038e9e2b53ddf0fa747b6866ba433c796f7e6906551969d897b438954

    SHA512

    582450d82a25e3a7e4b2cee9db11658c2219c8b671b365c2e6a76e146cf9cad6d49e4e04c5dd0a11ca1d7be6bed8731eb54df4c11a2f42c7c3c59fb62bf29975

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302042353281\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    071c6da94ac0963f238585d0584d3858

    SHA1

    dace7cfbc0d97bb64486195cee46eaaf7af740c3

    SHA256

    0cfe70b547057f8a2e7dba186da833b282968dc6abfc18495ee74e4c57b39219

    SHA512

    d0cbd4f707c74b1ef8dc3495c7e3039595ab206b2cb1516f70afff7d87317d0f0494fe2eb26b3f5dec9a307a81cf149ba3d3641f7a665f7b7d005566afc9e045

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    071c6da94ac0963f238585d0584d3858

    SHA1

    dace7cfbc0d97bb64486195cee46eaaf7af740c3

    SHA256

    0cfe70b547057f8a2e7dba186da833b282968dc6abfc18495ee74e4c57b39219

    SHA512

    d0cbd4f707c74b1ef8dc3495c7e3039595ab206b2cb1516f70afff7d87317d0f0494fe2eb26b3f5dec9a307a81cf149ba3d3641f7a665f7b7d005566afc9e045

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    071c6da94ac0963f238585d0584d3858

    SHA1

    dace7cfbc0d97bb64486195cee46eaaf7af740c3

    SHA256

    0cfe70b547057f8a2e7dba186da833b282968dc6abfc18495ee74e4c57b39219

    SHA512

    d0cbd4f707c74b1ef8dc3495c7e3039595ab206b2cb1516f70afff7d87317d0f0494fe2eb26b3f5dec9a307a81cf149ba3d3641f7a665f7b7d005566afc9e045

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    071c6da94ac0963f238585d0584d3858

    SHA1

    dace7cfbc0d97bb64486195cee46eaaf7af740c3

    SHA256

    0cfe70b547057f8a2e7dba186da833b282968dc6abfc18495ee74e4c57b39219

    SHA512

    d0cbd4f707c74b1ef8dc3495c7e3039595ab206b2cb1516f70afff7d87317d0f0494fe2eb26b3f5dec9a307a81cf149ba3d3641f7a665f7b7d005566afc9e045

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    071c6da94ac0963f238585d0584d3858

    SHA1

    dace7cfbc0d97bb64486195cee46eaaf7af740c3

    SHA256

    0cfe70b547057f8a2e7dba186da833b282968dc6abfc18495ee74e4c57b39219

    SHA512

    d0cbd4f707c74b1ef8dc3495c7e3039595ab206b2cb1516f70afff7d87317d0f0494fe2eb26b3f5dec9a307a81cf149ba3d3641f7a665f7b7d005566afc9e045

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
    Filesize

    648B

    MD5

    71eb121588503d9b6ea3a9e7522fae6a

    SHA1

    31df03ae928b9ee048b10a8c96b6af96eb39e90b

    SHA256

    01dfb4f55671d575cec7c49207a61e138892e5476593215a13b9fd9390b72ba4

    SHA512

    4b7692fcc1acc88523a328f1f9344bb66e8a48f800f82f5f0853c91474b8c71574e7da34b513ac97c28bfc5d47b1389cebc089cfac01fd9bcd5d1513f0e6613b

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    Filesize

    5.2MB

    MD5

    58e22c0ee91280156cdaadacac7acddb

    SHA1

    189c552c94a9b0ae0208763bca77f2801debc224

    SHA256

    765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

    SHA512

    9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    Filesize

    5.2MB

    MD5

    58e22c0ee91280156cdaadacac7acddb

    SHA1

    189c552c94a9b0ae0208763bca77f2801debc224

    SHA256

    765cab48564743844b057e21eab768d5d84194a635b09d02d9d2909f632f5714

    SHA512

    9f510c896d641919b037e201f5ba9de476241e7cab1004d92a85df4b9240ff947737619921b1223cd926c8c5a6e667dc76cad37e818d2a9d144b826836d562c6

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
    Filesize

    4KB

    MD5

    04177054e180d09e3998808efa0401c7

    SHA1

    0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8

    SHA256

    0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08

    SHA512

    3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar
    Filesize

    151KB

    MD5

    75a215b9e921044cd2c88e73f6cb9745

    SHA1

    18cc717b85af0b12ba922abf415c2ff4716f8219

    SHA256

    7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc

    SHA512

    1a44af2f3f8dbfbf38ad5f71ef11b32d5822d734f77af2cdea419fb6af845e894acb60bffbcebb4533068d86b55a22a8b0f74be20b204c2343bdb165d9c787f9

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar
    Filesize

    2.2MB

    MD5

    43bfc49bdc7324f6daaa60c1ee9f3972

    SHA1

    6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9

    SHA256

    58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4

    SHA512

    834f2bf4a5b35edffde0263409649aeaf34ca9a742ba511a06bb9b01626f9e774d2d3c8ba91a7905929dc8cd5e6471de29f7d0ab10260ece2af709b7fdbe4bc3

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar
    Filesize

    41KB

    MD5

    65912196b6e91f2ceb933001c1fb5c94

    SHA1

    af799dd7e23e6fe8c988da12314582072b07edcb

    SHA256

    663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868

    SHA512

    60b15182130ddfd801dd0438058d641dd5ba9122f2d1e081eb63f5e2c12fff0271d9d47c58925be0be8267ed22ae893ea9d1b251faba17dc1d2552b5d93056de

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar
    Filesize

    658KB

    MD5

    41f66d1d4d250efebde3bbf8b2d55dfa

    SHA1

    eeb69005da379a10071aa4948c48d89250febb07

    SHA256

    9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e

    SHA512

    109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar
    Filesize

    307KB

    MD5

    540f330717bca9d29c8762cf6daca443

    SHA1

    eed8a2cbf56cc60d07a189a429ead3067564193c

    SHA256

    52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153

    SHA512

    a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar
    Filesize

    2KB

    MD5

    289075e48b909e9e74e6c915b3631d2e

    SHA1

    6975da39a7040257bd51d21a231b76c915872d38

    SHA256

    91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff

    SHA512

    e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar
    Filesize

    478KB

    MD5

    04a41f0a068986f0f73485cf507c0f40

    SHA1

    5af35056b4d257e4b64b9e8069c0746e8b08629f

    SHA256

    1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9

    SHA512

    3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar
    Filesize

    64KB

    MD5

    39c6476e4de3d4f90ad4ca0ddca48ec2

    SHA1

    ee9e9eaa0a35360dcfeac129ff4923215fd65904

    SHA256

    26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5

    SHA512

    fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar
    Filesize

    424KB

    MD5

    8667a442ee77e509fbe8176b94726eb2

    SHA1

    5fe28b9518e58819180a43a850fbc0dd24b7c050

    SHA256

    734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b

    SHA512

    b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar
    Filesize

    30KB

    MD5

    8f7e4f1a95a870ebee87ddacc425362c

    SHA1

    300bf1846737e34b9ea10faae257ca8fdcd0616f

    SHA256

    f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728

    SHA512

    98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar
    Filesize

    1.7MB

    MD5

    948dda787593340a7af1a18e328b7b7f

    SHA1

    9141212b8507ab50a45525b545b39d224614528b

    SHA256

    ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0

    SHA512

    6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.5\picture-bundle-3.5.jar
    Filesize

    2.1MB

    MD5

    c93265b9d8bbe2b8d07f34893e5945c4

    SHA1

    ad0a3c5e104b95f842998d39c6a50f38b7bf1d03

    SHA256

    7238f234112b746de9dd96d7cafe34436c3f43a9f4ebd5659a38e5ba1b11d277

    SHA512

    0cbc136d1034ea72729cbe70e4459d015a1e4afde087f2abacb0d90603e344f828736a4c9c35e2b29e169e015ba14ddd2073694dfb789b16616275d6b89a6383

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar
    Filesize

    14KB

    MD5

    13a8e72587ac6eacfb0986f75e51eb7c

    SHA1

    6c3daf89705427f73e6106d2d4d9619e99c5ecb5

    SHA256

    1fcffa073f722737431e2699b1f3ea48b92a3b825397d8f0d1464e4d4d15a014

    SHA512

    134735390415f60d0c42ff33a060bda508e273b35fc9aab271c20ff23f331b51cf3fa36443009e0987049f6bfb22c4098a1473e65ea0349e719fbf4b528f344e

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar
    Filesize

    3.2MB

    MD5

    acbc8aa5ba5cdddf5f1e67befe8cc597

    SHA1

    63b4bf89744b532e65c1afa3294743d2b3798f2b

    SHA256

    1f46b3a163012f9729905633b5e5e03ce385066ae43138a564729c942f9ca6b9

    SHA512

    d974a032d9af451c0dd51fbc0d64840f3e03eb502f40e4ab60d6722913b8a48d44a75752fcff60656e4d19089570a894222959745af11bcdf93ea1544192fee3

    Download Submit

  • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar
    Filesize

    97KB

    MD5

    51050e595b308c4aec8ac314f66e18bc

    SHA1

    9c64274b7dbb65288237216e3fae7877fd3f2bee

    SHA256

    86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840

    SHA512

    c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
    Filesize

    40B

    MD5

    0ece2aa156f1862538681b09b26b9a68

    SHA1

    e22d6e4ad90762d2f129368a60b2d4d93e9041b6

    SHA256

    d5489d60ea1f12b71fde6b1598077649975086625a3042d696b2326ff3e58e35

    SHA512

    aa04953b8d7b74a37611305679d61da1a087ab9254a3a2998c626505bee8fae0d90dd75dff1ed188b67c728108c9100851bc36efcde8b4d311e1fc4eb803636c

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
    Filesize

    40B

    MD5

    0ece2aa156f1862538681b09b26b9a68

    SHA1

    e22d6e4ad90762d2f129368a60b2d4d93e9041b6

    SHA256

    d5489d60ea1f12b71fde6b1598077649975086625a3042d696b2326ff3e58e35

    SHA512

    aa04953b8d7b74a37611305679d61da1a087ab9254a3a2998c626505bee8fae0d90dd75dff1ed188b67c728108c9100851bc36efcde8b4d311e1fc4eb803636c

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042353249801808.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042353275892108.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042353302263248.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042353342684348.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042354160122392.dll
    Filesize

    5.5MB

    MD5

    1c7944977fab5254479a6ea6a09ee144

    SHA1

    1351d08d36b3d1ea8bced9041486630b701ea7a0

    SHA256

    2f48658421e22346a005d01a92f63aa32a621e885ac93717c3726818725b7773

    SHA512

    868a0a614c326e4a52b95de26bcde8e99e173158d093a3a3cfb2f59079bf06e41c03c5bf1cc2541673677db03b9abeb150842d12c4665e973b9f5bb2e0894646

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302042354211372712.dll
    Filesize

    5.5MB

    MD5

    1c7944977fab5254479a6ea6a09ee144

    SHA1

    1351d08d36b3d1ea8bced9041486630b701ea7a0

    SHA256

    2f48658421e22346a005d01a92f63aa32a621e885ac93717c3726818725b7773

    SHA512

    868a0a614c326e4a52b95de26bcde8e99e173158d093a3a3cfb2f59079bf06e41c03c5bf1cc2541673677db03b9abeb150842d12c4665e973b9f5bb2e0894646

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
    Filesize

    1.7MB

    MD5

    1bbf5dd0b6ca80e4c7c77495c3f33083

    SHA1

    e0520037e60eb641ec04d1e814394c9da0a6a862

    SHA256

    bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

    SHA512

    97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
    Filesize

    97KB

    MD5

    da1d0cd400e0b6ad6415fd4d90f69666

    SHA1

    de9083d2902906cacf57259cf581b1466400b799

    SHA256

    7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

    SHA512

    f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • memory/1156-478-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1156-459-0x0000000000000000-mapping.dmp

    Download

  • memory/1760-125-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-120-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-153-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-150-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-152-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-155-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-118-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-149-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-154-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-119-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-121-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-123-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-156-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-122-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-124-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-151-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-127-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-148-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-126-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-167-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-128-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-129-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-157-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-117-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-147-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-158-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-146-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-145-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-130-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-144-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-166-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-143-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-131-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-142-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-165-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-141-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-140-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-159-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-139-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-164-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-132-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-163-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-162-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-133-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-138-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-161-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-134-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-137-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-160-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-136-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1760-135-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/1808-730-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1808-482-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1904-302-0x0000000000000000-mapping.dmp

    Download

  • memory/2108-607-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/2356-746-0x0000000000000000-mapping.dmp

    Download

  • memory/2392-997-0x0000000000000000-mapping.dmp

    Download

  • memory/2712-1014-0x0000000000000000-mapping.dmp

    Download

  • memory/3248-733-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/3692-179-0x0000000000850000-0x0000000000C38000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/3692-174-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-171-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-175-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-168-0x0000000000000000-mapping.dmp

    Download

  • memory/3692-178-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-181-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-173-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-176-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-823-0x0000000000850000-0x0000000000C38000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/3692-254-0x00000000050C0000-0x00000000060D0000-memory.dmp

    Filesize

    16.1MB

    Download

  • memory/3692-253-0x0000000000850000-0x0000000000C38000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/3692-251-0x00000000050C0000-0x00000000060D0000-memory.dmp

    Filesize

    16.1MB

    Download

  • memory/3692-246-0x0000000010000000-0x0000000010051000-memory.dmp

    Filesize

    324KB

    Download

  • memory/3692-170-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-172-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-184-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-180-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-183-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/3692-182-0x0000000077850000-0x00000000779DE000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/4296-968-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-939-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1035-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1034-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-990-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-991-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-992-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-993-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-996-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1032-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-967-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-999-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-960-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1004-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1007-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-988-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1012-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1030-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1017-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1029-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1021-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1022-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-1024-0x00000000030C0000-0x00000000040C0000-memory.dmp

    Filesize

    16.0MB

    Download

  • memory/4296-824-0x0000000000000000-mapping.dmp

    Download

  • memory/4348-669-0x0000000000000000-mapping.dmp

    Download

  • memory/4348-734-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/4592-879-0x0000000000000000-mapping.dmp

    Download

  • memory/4712-467-0x0000000000D70000-0x0000000001158000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/4712-407-0x0000000000D70000-0x0000000001158000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/4712-356-0x0000000000000000-mapping.dmp

    Download