Malware Analysis Report

2024-09-22 06:27

Sample ID 230323-f1dchsdf76
Target TLauncher-2.876-Installer-1.0.7-global.exe
SHA256 78d84068b47cf28b76c88ba4474c7c187510f4e4e967d079d3761dcab7851655
Tags
bazarbackdoor adware backdoor discovery persistence stealer upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

78d84068b47cf28b76c88ba4474c7c187510f4e4e967d079d3761dcab7851655

Threat Level: Known bad

The file TLauncher-2.876-Installer-1.0.7-global.exe was found to be: Known bad.

Malicious Activity Summary

bazarbackdoor adware backdoor discovery persistence stealer upx

BazarBackdoor

Bazar/Team9 Backdoor payload

Downloads MZ/PE file

Blocklisted process makes network request

Checks computer location settings

Modifies file permissions

Registers COM server for autorun

Executes dropped EXE

Loads dropped DLL

UPX packed file

Enumerates connected drives

Installs/modifies Browser Helper Object

Drops desktop.ini file(s)

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Checks SCSI registry key(s)

Modifies system certificate store

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

MITRE ATT&CK Matrix V6

Analysis: static1

Detonation Overview

Reported

2023-03-23 05:20

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-03-23 05:19

Reported

2023-03-23 05:30

Platform

win7-20230220-en

Max time kernel

598s

Max time network

573s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe"

Signatures

BazarBackdoor

backdoor bazarbackdoor

Bazar/Team9 Backdoor payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Downloads MZ/PE file

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0113-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0090-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0266-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0316-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0105-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0181-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0261-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0308-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0072-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0016-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0276-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0190-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0056-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0127-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0140-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0251-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0177-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0348-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0081-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0140-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA}\InProcServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\dtplugin\\deployJava1.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0108-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0335-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0199-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0264-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0175-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0208-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0146-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0137-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0279-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0351-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0058-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0106-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0026-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0044-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0157-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0097-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0109-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0219-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0094-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0072-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0090-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0100-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0274-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0114-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\NoExplorer = "1" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\NoExplorer = "1" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435B-BC74-9C25C1C588A9} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\WindowsAccessBridge-64.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Java\jre1.8.0_351\bin\splashscreen.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\calendars.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\jce.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\management-agent.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-profile-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\dt_shmem.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\dt_socket.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\eula.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\javafx_iio.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\messages_sv.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fonts\LucidaBrightDemiBold.ttf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\jfr\profile.jfc C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\Welcome.html C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-memory-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\policy\unlimited\US_export_policy.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\jsse.pack C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-file-l2-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\j2pcsc.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\orbd.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\amd64\jvm.cfg C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy.pack C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-rtlsupport-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\JavaAccessBridge-64.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\policytool.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\cldrdata.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fonts\LucidaBrightItalic.ttf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\tzmappings C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-math-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jsound.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\policy\limited\local_policy.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_7334995\javaw.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\freebxml.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\content-types.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\vcruntime140.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\hijrah-config-umalqura.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\rt.jar C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\awt.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jsoundds.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\jopt-simple.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\cmm\LINEAR_RGB.pf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\dnsns.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-synch-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\javafx\libxslt.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\j2pkcs11.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\ecc.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\jcup.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-string-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\deployJava1.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\management\jmxremote.access C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\release C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\verify.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\WindowsAccessBridge-64.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\joni.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\sunec.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\sunjce_provider.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_7334995\java.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-multibyte-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\JAWTAccessBridge-64.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\javafx_font.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\santuario.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\6ef1bf.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC76.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6ef1c1.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF93.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6ef1c3.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\6ef1c1.ipi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6ef1bf.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI106E.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI114A.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF4B7.tmp C:\Windows\system32\msiexec.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\msiexec.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\msiexec.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\AlternateCLSID = "{CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA}" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000\Software\Microsoft\Internet Explorer\Main C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\AppPath = "C:\\Program Files\\Java\\jre1.8.0_351\\bin" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\Policy = "3" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\AppName = "jp2launcher.exe" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\AppPath = "C:\\Program Files\\Java\\jre1.8.0_351\\bin" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000\Software\Microsoft\Internet Explorer\Main C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}\AppName = "ssvagent.exe" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\Compatibility Flags = "1024" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppName = "javaws.exe" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\Policy = "0" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4b5f-9EE6-34795C46E7E7}\Policy = "3" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppPath = "C:\\Program Files\\Java\\jre1.8.0_351\\bin" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44D1B085-E495-4B5F-9EE6-34795C46E7E7} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0203-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0102-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0221-ABCDEFFEDCBA}\ = "Java Plug-in 1.7.0_221" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0191-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0076-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0153-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0181-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0113-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0159-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0126-ABCDEFFEDCBC}\ = "Java Plug-in 1.8.0_126" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0077-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0238-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0278-ABCDEFFEDCBA}\ = "Java Plug-in 1.8.0_278" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0089-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0132-ABCDEFFEDCBA}\ = "Java Plug-in 1.6.0_132" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0255-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0354-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0040-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0318-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0104-ABCDEFFEDCBC}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0091-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0099-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0259-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0091-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}\ = "Java Plug-in 1.6.0_65" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0214-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0150-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0056-ABCDEFFEDCBA}\ = "Java Plug-in 1.8.0_56" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0223-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0296-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}\ = "Java Plug-in 1.5.0_22" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0098-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0117-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0174-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0200-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0156-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0263-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0101-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0253-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0087-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}\ = "Java Plug-in 1.5.0_60" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0068-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0250-ABCDEFFEDCBA}\ = "Java Plug-in 1.7.0_250" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0121-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0179-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0193-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0262-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0205-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0211-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0206-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0269-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_269" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0160-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0072-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0353-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0349-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}\ = "Java Plug-in 1.3.1_93" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0190-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0242-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0203-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}\ = "Java Plug-in 1.5.0_52" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0095-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}\ = "Java Plug-in 1.6.0_45" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0214-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0302-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0198-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0303-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0322-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0133-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0232-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0016-0000-0088-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0280-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0351-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_351" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0074-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0347-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\ = "Java Plug-in 1.4.0_04" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}\ = "Java Plug-in 1.7.0_17" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0117-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0121-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\ = "Java Plug-in 1.3.1_27" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0253-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0007-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0246-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0278-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0053-ABCDEFFEDCBA}\ = "Java Plug-in 1.8.0_53" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0018-0000-0173-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0077-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}\ = "Java Plug-in 1.3.1_83" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0018-0000-0290-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0319-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\JavaPlugin.113512\CLSID\ = "{5852F5ED-8BF4-11D4-A245-0080C6F74284}" C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBA}\ = "Java Plug-in 1.4.2_71" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBA}\ = "Java Plug-in 1.5.0_72" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0155-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0353-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000_CLASSES\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeTcbPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeSystemtimePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeAuditPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeUndockPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2000 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1956 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1764 wrote to memory of 1552 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1956 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
PID 1956 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
PID 1956 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
PID 1956 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
PID 748 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe
PID 748 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe
PID 748 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe
PID 1168 wrote to memory of 528 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 1168 wrote to memory of 528 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 1168 wrote to memory of 528 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 1168 wrote to memory of 528 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 1168 wrote to memory of 528 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 1168 wrote to memory of 1872 N/A C:\Windows\system32\msiexec.exe C:\Program Files\Java\jre1.8.0_351\installer.exe
PID 1168 wrote to memory of 1872 N/A C:\Windows\system32\msiexec.exe C:\Program Files\Java\jre1.8.0_351\installer.exe
PID 1168 wrote to memory of 1872 N/A C:\Windows\system32\msiexec.exe C:\Program Files\Java\jre1.8.0_351\installer.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1568 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1920 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1920 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1920 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1708 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1708 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1708 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 296 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 296 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 296 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1444 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1484 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1484 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
PID 1872 wrote to memory of 1484 N/A C:\Program Files\Java\jre1.8.0_351\installer.exe C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe"

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe" "__IRCT:3" "__IRTSS:23645635" "__IRSID:S-1-5-21-3430344531-3702557399-3004411149-1000"

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816338 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1840798" "__IRSID:S-1-5-21-3430344531-3702557399-3004411149-1000"

C:\Users\Admin\AppData\Local\Temp\jre-windows.exe

"C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1

C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

"C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe" "STATIC=1"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\MsiExec.exe

C:\Windows\system32\MsiExec.exe -Embedding 347DDCC18631C971A8A799A3BB5146DF

C:\Program Files\Java\jre1.8.0_351\installer.exe

"C:\Program Files\Java\jre1.8.0_351\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_351\\" STATIC=1 INSTALL_SILENT=1 REPAIRMODE=0 ProductCode={26A24AE4-039D-4CA4-87B4-2F64180351F0}

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

"bspatch.exe" baseimagefam8 newimage diff

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/plugin.pack" "C:\Program Files\Java\jre1.8.0_351\lib/plugin.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/javaws.pack" "C:\Program Files\Java\jre1.8.0_351\lib/javaws.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/deploy.pack" "C:\Program Files\Java\jre1.8.0_351\lib/deploy.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/rt.pack" "C:\Program Files\Java\jre1.8.0_351\lib/rt.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/jsse.pack" "C:\Program Files\Java\jre1.8.0_351\lib/jsse.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/charsets.pack" "C:\Program Files\Java\jre1.8.0_351\lib/charsets.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.pack" "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.jar"

C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe" -Xshare:dump -Djdk.disableLastUsageTracking

C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe

"C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe" -doHKCUSSVSetup

C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe

"C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe" -wait -fix -permissions -silent

C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe

"C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_351" -vma 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 -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==

C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe

"C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe" -wait -fix -shortcut -silent

C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe

"C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_351" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxkZXBsb3kuamFyAC1EamF2YS5zZWN1cml0eS5wb2xpY3k9ZmlsZTpDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxzZWN1cml0eVxqYXZhd3MucG9saWN5AC1EdHJ1c3RQcm94eT10cnVlAC1YdmVyaWZ5OnJlbW90ZQAtRGpubHB4LmhvbWU9QzpcUHJvZ3JhbSBGaWxlc1xKYXZhXGpyZTEuOC4wXzM1MVxiaW4ALURqYXZhLnNlY3VyaXR5Lm1hbmFnZXIALURzdW4uYXd0Lndhcm11cD10cnVlAC1YYm9vdGNsYXNzcGF0aC9hOkM6XFByb2dyYW0gRmlsZXNcSmF2YVxqcmUxLjguMF8zNTFcbGliXGphdmF3cy5qYXI7QzpcUHJvZ3JhbSBGaWxlc1xKYXZhXGpyZTEuOC4wXzM1MVxsaWJcZGVwbG95LmphcjtDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxwbHVnaW4uamFyAC1EamF2YS5hd3QuaGVhZGxlc3M9dHJ1ZQAtRGpubHB4Lmp2bT1DOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGJpblxqYXZhdy5leGU= -ma LXdhaXQALWZpeAAtc2hvcnRjdXQALXNpbGVudAAtbm90V2ViSmF2YQ==

C:\Windows\system32\MsiExec.exe

C:\Windows\system32\MsiExec.exe -Embedding 7DF6035FCDB754CE4D228DD032A7F359 M Global\MSI0000

C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe

-Djdk.disableLastUsageTracking -cp "C:\Program Files\Java\jre1.8.0_351\bin\..\lib\deploy.jar" com.sun.deploy.panel.ControlPanel -getUserWebJavaStatus

C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe

-Djdk.disableLastUsageTracking -cp "C:\Program Files\Java\jre1.8.0_351\bin\..\lib\deploy.jar" com.sun.deploy.panel.ControlPanel -getUserPreviousDecisionsExist 30

Network

Country Destination Domain Proto
US 8.8.8.8:53 dl2.tlauncher.org udp
US 104.20.235.70:443 dl2.tlauncher.org tcp
US 8.8.8.8:53 tlauncher.org udp
US 104.20.234.70:443 tlauncher.org tcp
US 8.8.8.8:53 javadl.oracle.com udp
NL 104.98.135.185:80 javadl.oracle.com tcp
NL 104.98.135.185:443 javadl.oracle.com tcp
US 8.8.8.8:53 sdlc-esd.oracle.com udp
NL 173.223.112.78:443 sdlc-esd.oracle.com tcp
US 8.8.8.8:53 javadl-esd-secure.oracle.com udp
NL 104.98.135.185:443 javadl-esd-secure.oracle.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 rps-svcs.oracle.com udp
NL 104.98.135.185:443 rps-svcs.oracle.com tcp
US 8.8.8.8:53 www.java.com udp
NL 95.101.74.137:443 www.java.com tcp
NL 104.98.135.185:80 rps-svcs.oracle.com tcp
NL 104.98.135.185:443 rps-svcs.oracle.com tcp
NL 173.223.112.78:443 sdlc-esd.oracle.com tcp

Files

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

memory/2000-69-0x0000000002CE0000-0x00000000030C8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

memory/2000-71-0x0000000002CE0000-0x00000000030C8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

memory/1956-232-0x0000000000EC0000-0x00000000012A8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico

MD5 e043a9cb014d641a56f50f9d9ac9a1b9
SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

memory/1956-365-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1956-366-0x0000000000280000-0x0000000000283000-memory.dmp

memory/1956-367-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-368-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1956-383-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-385-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1956-387-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1956-394-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-395-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG

MD5 05d7bba3d6ac92766c4495b8928202a6
SHA1 50b65a8ba5ed2633e43929ee4bd58c95a91a3363
SHA256 4804f3c4fae714657fdb85e98244828acc6ac938505c2da1ed694ae7b58f2949
SHA512 1544d5cd6f85aaeeacd26f2deb9da9eb510226b41079ee78c4dede14386e5ea3446efdfd475bfbfa3a6846fa2ff23d64f4dad3a4ddd304e32de80e4d7bcbc600

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG

MD5 5a7901f7df307fba45b1c377f2c94ccc
SHA1 d6630cf733033cdfbda7af3213d49b32f5b06919
SHA256 d8471d5a5b4792c4b49e80b5cb22ef1e938dc3069b210646704f658548d7a9f8
SHA512 fc0036a7ed4b53edd72b91c4824919e6e8a82b5be1e82cdc134e267ef4792424124fb6ba5d7c86cf686910da0baba8453d7a6c12b39a5b4c0cb70658580f3bc9

memory/1956-429-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-430-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1956-433-0x0000000000EC0000-0x00000000012A8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG46.PNG

MD5 d8a095202e08fa1ac2578982e9a486db
SHA1 397ffc8af43ac18466b8df245b4faa6b278659e6
SHA256 28fed2b9a3cbde34da4b6b5d1af2d2844437d21f6dec85b3ca2faa5cd3b512e5
SHA512 ac751386a0004e335f4e5f4ea24bf6a474478c8a7ca54d018734e7cd44b8e9a0eb262b00fe1219b1c62c96b018b08ba6b1056d3a13e64b55c7e70d748a6ae9c6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

memory/1956-478-0x0000000002EE0000-0x0000000002EF0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG

MD5 bbdf2e8c0262e7e606d41ddbe5a3cd12
SHA1 acbb25f729af14b692ec9c8187a23b1a696f8e47
SHA256 d7c76896d206d977739556ad2d5811f7cf3117252afcd439a5aa0f2b645f6949
SHA512 0334fae3682889adbc18594b7917d8c93252a86bc04d08efc6860d5714ba4eb8aabc39c51e532c4aee57a938021540d2f2899781d9cd1de311036e1850a65067

memory/1764-487-0x0000000002B70000-0x0000000002F58000-memory.dmp

memory/1764-488-0x0000000002B70000-0x0000000002F58000-memory.dmp

memory/1764-489-0x0000000002B70000-0x0000000002F58000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/1764-491-0x0000000002B70000-0x0000000002F58000-memory.dmp

memory/1552-492-0x0000000000F70000-0x0000000001358000-memory.dmp

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

MD5 0423710fe0432150a06d45a72cbacb8c
SHA1 ba5d55b92b36a1b4d797c271edb603ef3eba98c2
SHA256 7d89b56dc99cba6141f082f9dc1dd090dbd723db70c1344b1b32201a30df78dc
SHA512 7a71dffe6e942e36b612b168e0845d9157389a78941308b35d24d2359d49464eb9d4687f7af79d383fee0d71ca15b9f41864beaf0721758bff182d1759b4152e

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat

MD5 aec508468d53ab8d55f5b4beb82c347d
SHA1 477d1ffb28834243f5811a4a2a54b4f0ca240120
SHA256 ebee84e34e221ad822486432333bad9e6357af2fb0d9651cc61c7fab8ec9b5bf
SHA512 26a0278af2a9e75ef966bc3f7f40d7669204c2004a043adaad102ef440caa6282e69372ca0c3c7d39a8450691d528c2dc77a4386bfb0c6e5a2a76c3fef900fbe

memory/1552-513-0x0000000000F70000-0x0000000001358000-memory.dmp

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 f08d9bbc61cff8e8c3504524c3220bef
SHA1 b4268c667469620bb528c04eaa819d508159b398
SHA256 2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512 a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 4f7be9736242579cb8afa1af86980dfe
SHA1 1c486393847996db4f6b78532dd7bd9a0a924549
SHA256 9cecc28716f392d2394829f4cc3f307d08f5aecaf3e2124bdaaa0d6d9c3400b4
SHA512 4c55bc2698d8934713e791c015480248198e22efa66dd5ca79ea834b9835c9e85ca8c2869c9b40dc394ae7e27da039f79c392f88472dedc1adfa83dd1e94f1c9

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG

MD5 2799f9daca46770a871ce1b5eed32e7c
SHA1 a2792f571210a7f38cdbe49391017300ee7b1ce4
SHA256 fc22676f5b6cdae17b78ddfd16bb070687516fbc827a7edd0541f3a32d85c9e9
SHA512 c41f2e4c4ca59d6f9d11fac11296ab87f1b508b5d64e5db7762f2f6dd387aa96206b2b0fa127f17c0b8c24a0b56e81af12d5937474a450222d9c4416c1acb16a

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG

MD5 3094925a8de871bcc72ae50882d2a6f7
SHA1 9f7894bc4b2a498ad20b14b2b3cac175bf4d7a9f
SHA256 523e7230db0c47a436abbc442db93e41b6f549b32da6c2a10db7a18228491216
SHA512 bf2349354321397652d834507aae4c32885273209d1409b796170292e37ebf35878e2934d3f53545e66724561e646cc660f952e0bb5006cd7a262a790b64e39e

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG22.PNG

MD5 46a65321aa1fce57d465c26e8b6eb392
SHA1 9efb9a3acd5b32556ea66398c74b014f91087559
SHA256 61df7a1f0367209668d4f0f6a285b8baff864d1341d382ebbc7fd4e71036b666
SHA512 094d69016f066ae835c71d7a950217b9ad09e8cd4d74131787203cae950e572c18213dc1ded139b1fa46c7f803cc15bf4f596c9d51aefe0d43850ae2865f3707

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG

MD5 fa8aa84ef4bf0de505f6e3447d4b55b3
SHA1 b99654dfa5f6c56857b4f4102af2d27503bcdc74
SHA256 f3b7e85e8e5e41496fb563816fbf79e6640feb1591bd5e0c0b876d80053ad913
SHA512 b3a7d0d5abe554301b8745bd738662d80e439fba8df6f984cc05151ec8c081a61f0538765653e8587b431cdc97d384ee35d17ab3324c06a2ca40a069e1525ba6

memory/1956-754-0x0000000000EC0000-0x00000000012A8000-memory.dmp

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG

MD5 ce17d7ce06488f394ce124f17d5acafc
SHA1 8a5dceae9ea369b686123c8f940bb0ea07870ffa
SHA256 c4b04568930f03979d71f48a57b9ad06b4cdf687272f6753ff662006e8e6237f
SHA512 c33f1370213cabd1b84c936f1ac14f9bcc83bc03a633bbe25efe1e906bcee515d0e615c86b7ee3b34404dd1d95ce74d1a00908de8cdacbf9961de3f1ceb8362b

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP

MD5 0b445ace8798426e7185f52b7b7b6d1e
SHA1 7a77b46e0848cc9b32283ccb3f91a18c0934c079
SHA256 2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6
SHA512 51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG45.PNG

MD5 09229c3bfb801177839a7c2e22e33a1b
SHA1 f679c05c4c7b2f3722069420c6d6481fc856e7aa
SHA256 cbf81d779b469942613297a3ca6c09d885e3b1d4aa952dc1994a7175fbfc7e3f
SHA512 503bfa063b29dda95f15da303f707e5b78a6bdb74662c222d8a8b7e3a33264016a66acdd9de44aea932e7cde80a43c2406ea6f0250d3df8e182217bc4a0a7ed7

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG

MD5 1f5c8939031a7f93762862cfc88a8e56
SHA1 6dc4df87344db0ddf09c777e7a80d1b5661559b8
SHA256 14be26e969eb15ef7e76e0ad02d8aa0516c5391e8b09dba0a9a6c5f57ae24aba
SHA512 de45d700c86329c704777917863fd1ddeca90d2bed67a72794164882bf15725ce83c7733f664ee0a2af7df54a6be2def729d19237fb2c434115396ac126ff47f

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG

MD5 59d6f22fdc11d6b116b38193ed5f4b97
SHA1 cddc7eb2110b3179dd6d1e32b4b37f3568a22ebf
SHA256 782cafea76d24d76885d88ee1302e5f78d75a4e335529dc20ad476fdb9e34744
SHA512 5b0fab5139736d30a69c98ea88d95a5c70f59aab1b82394c58b33617b824447b861a6e6067b62dd1ca1812a4989937e06ad473c6c94376af957871e9e63553fa

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG

MD5 5eecdc666e6dc0b8e5e8d2fc3b9cc1b2
SHA1 72a16d461bd2410d5749c6bf939a127683d83a95
SHA256 052f0289886f9cc0931d7026dfe1f5253ad39123479627e37afa5c430e8f8ff1
SHA512 5d465d2c61d97ec2a52db3aeee8d42ececdef08930692842f9c6a41b0611cb774015d369e4fe5186079e97839acc78e8403ea6a6c33ee54a7aef3eea41c3d7db

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG

MD5 1557c08e187b7783083e0b80051fd321
SHA1 2c6ee47799d713e88fd589609b81912a4522044e
SHA256 0c0e74dd07c45833a5dd7ba931e5d528eb16334defdd06171df2f632d6e47842
SHA512 485f69b3878b2bd7fdf52ad020dde2cbc34dd1970aaa4e5eb8f8618f6091b5b827b428447859499c3d61ea9cde2edcbb97c8fb0560cd0aaff50027c0f97ee6f3

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG109.PNG

MD5 03b1d78771eb279766efb2d9f2fa8463
SHA1 8f10e304fd65e58136ccd6ab012ffc594e6fb707
SHA256 eec16d2cb57e38b485b6a269e9c2554c1dfc3b70dec9f7bbddc2b62526b3d832
SHA512 ca51cbaf20e6f62eb6ec69555d259ef61828d3166d09106bcd335dd417ed30660af71e7fd8db6bd22bf134cc530e1a55ecdd2c307e64e8edb28af95299d66f5a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 23ab96644cb4ee20c7cce84ac3c354e2
SHA1 d433d070373a4bd45b19331d28d7e652a9c876af
SHA256 dd9f6620a3d77fe08fa3814eca83fa1bac9e37e404ae19e169087b2d042fa6f0
SHA512 5c9c8f0f59f1e6ea98999c424198b77fa7b2151e0dbbd16e7b2a3e6ff2eb61422bd79d2b5d28ef442cce2ba9c9f37e079963701bd38e84b82fc1cdfe753a5840

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG

MD5 5bc85d12eb492baa3be9230f1fbdc342
SHA1 456fe4284fa916ad3817e7c3d419c13f4c949737
SHA256 9a27f240758513aa1cc05500171fe22fdb3a485781cba4798cefc29f6944373c
SHA512 3d55c597ac29d7f810980dfd89404d3ecbd2e652ae1bc5e6710668ad5386a0caecf3149289df13f6dabed6b2e4305a26684ab3bd21b255b37f8a596fe8d641b9

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG

MD5 667b0b54ee5ba0d1cb66190226596e46
SHA1 b8658b35e7cf44b24053e4d01d3b51233d6526f6
SHA256 3a9ab8c3640f1b40b33553d7d3dd3d15bd6e702ef510ec0b66a2f14aa744bf83
SHA512 9ccc773214a0074634be66801d81d7a593ab154351fdbd1b93f56ffa80cf824ee31ff2e13f26536d5f3096e90df43fa223080b4dc55340614b076c08ef976dcb

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG

MD5 38c12e1a54f8fd216ed3f13b36798cc6
SHA1 ccf1fe585d3374ebce4c1ec025e2d8ec39968a7c
SHA256 608924ba294590b5b706658d9aaa71b480ad9aa1b6797bbc5cf1632ac6c616b1
SHA512 0918af63f006d7fa04a3faeeb813e61c060316a126c4742a948a30f5b6ea368c3b8592011319dad3dbf8427dfcc095aa72f7b651d6fc31061f861f070447331b

memory/1956-1339-0x0000000002EE0000-0x0000000002EF0000-memory.dmp

memory/1956-1340-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-1341-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 f0bcf079cd0e5d5ba24f41679f99c580
SHA1 f20c7908e4b5ab74e01c8bfce2e5af263eae9780
SHA256 aee3b33813dd4ad0b36d65613cabd8e9d7851516a49cd68faba98d3fb3e0f9eb
SHA512 693a551b360cb49c6a041f19617c657f051255ec91be59ec5e3a4dd12949c926c05ae73fec6d1b3c51d7a9c8d41203da5aa278b644ccd92aa4af8d126b9809d8

C:\Users\Admin\AppData\Local\Temp\Cab1604.tmp

MD5 fc4666cbca561e864e7fdf883a9e6661
SHA1 2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5
SHA256 10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b
SHA512 c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

memory/1956-1359-0x0000000000EC0000-0x00000000012A8000-memory.dmp

memory/1956-1360-0x0000000010000000-0x0000000010051000-memory.dmp

\Users\Admin\AppData\Local\Temp\jre-windows.exe

MD5 7542ec421a2f6e90751e8b64c22e0542
SHA1 d207d221a28ede5c2c8415f82c555989aa7068ba
SHA256 188ca8ecc44de1b7f602e883c3054dc392792c3631bf362b1bc4f3e1dba323e6
SHA512 8987bf8aa1b401815fa9850e56954db6015bdd06ce78b65ba435724582ffa615dee4e1452fa237c53257dca8ee97b469d01c27757a5f070ce6f807a4f81094bc

C:\Users\Admin\AppData\Local\Temp\jre-windows.exe

MD5 7542ec421a2f6e90751e8b64c22e0542
SHA1 d207d221a28ede5c2c8415f82c555989aa7068ba
SHA256 188ca8ecc44de1b7f602e883c3054dc392792c3631bf362b1bc4f3e1dba323e6
SHA512 8987bf8aa1b401815fa9850e56954db6015bdd06ce78b65ba435724582ffa615dee4e1452fa237c53257dca8ee97b469d01c27757a5f070ce6f807a4f81094bc

memory/1956-1369-0x0000000000EC0000-0x00000000012A8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

MD5 dfcfc788d67437530a50177164db42b0
SHA1 2d9ed0dc5671a358186dcf83abb74bfe39c40e9f
SHA256 a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1
SHA512 dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

MD5 dfcfc788d67437530a50177164db42b0
SHA1 2d9ed0dc5671a358186dcf83abb74bfe39c40e9f
SHA256 a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1
SHA512 dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 225789da2fdfdbdda29290e7660f8a8b
SHA1 09896ba337459d76cbedd9d3114bb31632d8ea30
SHA256 a30cbe6a7087495454ae59f7c88d9f49e6afb1789752f0da8dad9c0e59adca9e
SHA512 3aad82901f4ef1b96e1a80031455334570055b0f7167e01a3625bbc07ba293112ced77f23015121f835f9983011428b01fbd8e695ccc7158d9f88f6800fe358e

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 225789da2fdfdbdda29290e7660f8a8b
SHA1 09896ba337459d76cbedd9d3114bb31632d8ea30
SHA256 a30cbe6a7087495454ae59f7c88d9f49e6afb1789752f0da8dad9c0e59adca9e
SHA512 3aad82901f4ef1b96e1a80031455334570055b0f7167e01a3625bbc07ba293112ced77f23015121f835f9983011428b01fbd8e695ccc7158d9f88f6800fe358e

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 0a834378d912aeaf70b97faded86295b
SHA1 78591bfd14302829266aa291f2489de357f4c9d1
SHA256 deaee456d690ad4b99c99a93956bef6d53c5313e67a0fc541ecc37a4f51638ba
SHA512 900308b9a0c82cc3566d5344af58c8694d52797bbad7f77c15caf6645330b04cc4214ce30a8eab581e24abba4f1d3bfd442a1d119085adebe6b1576b533bd967

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\92OIEI3R.txt

MD5 7df356141347ae630235a01458df59eb
SHA1 f070dd8d725e45056801e12d17b1f977b327ae81
SHA256 6a9e1098b7b64312416de3af0dd5869f16d48a4d39f498798bb2d8b1d6c708d7
SHA512 5163586e38d39d5ba22fe45bc24941451e35d9d2a7b6efab7bc477eb6420a1e425b4dd13d59c0b0bae92625ffb75487da375f17d6e74610fd13bfc00b5943633

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

MD5 fc86f01497ada4ccc8b95dd40d2dc843
SHA1 fea0a3d162932e02412baade936b736b931d4911
SHA256 dfe3f58b62981b55fbdf7fb43276e8e6bc9ef290d4799753d720ba4adf0f9d97
SHA512 dd7ce9b4fd184002d3104dfd6d637f62381cc816eee4b345d68251db53c4c8d63a0731a59c11bd52fbe3537ef6f6f8770505070522513d9f8470686bf9c1ca76

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

MD5 7c3388a3249682ac83d73fbf0d429238
SHA1 84142f26c70f226ea3992e100d864980bc3eff1f
SHA256 f21470331c4ce41e59e54498b293bb6bcb81abcc6b179782e3a592a0304972e2
SHA512 4e8a0e73eef782d6cd8453d34b8187661ebc07d70591e372b548b93560940c824fe5731372e78bc3aa5d6806a9fcc2c8fe38c83fe0cbc40f2f6fc2feeda2b4c4

C:\Users\Admin\AppData\Local\Temp\Tar7532.tmp

MD5 73b4b714b42fc9a6aaefd0ae59adb009
SHA1 efdaffd5b0ad21913d22001d91bf6c19ecb4ac41
SHA256 c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd
SHA512 73af3c51b15f89237552b1718bef21fd80788fa416bab2cb2e7fb3a60d56249a716eda0d2dd68ab643752272640e7eaaaf57ce64bcb38373ddc3d035fb8d57cd

C:\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

MD5 dfcfc788d67437530a50177164db42b0
SHA1 2d9ed0dc5671a358186dcf83abb74bfe39c40e9f
SHA256 a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1
SHA512 dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

MD5 dfcfc788d67437530a50177164db42b0
SHA1 2d9ed0dc5671a358186dcf83abb74bfe39c40e9f
SHA256 a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1
SHA512 dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

\Users\Admin\AppData\Local\Temp\jds7225077.tmp\jre-windows.exe

MD5 dfcfc788d67437530a50177164db42b0
SHA1 2d9ed0dc5671a358186dcf83abb74bfe39c40e9f
SHA256 a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1
SHA512 dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_351_x64\jre1.8.0_35164.msi

MD5 1794aaa17d114a315a95473c9780fc8b
SHA1 7f250c022b916b88e22254985e7552bc3ac8db04
SHA256 7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4
SHA512 fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a266bb7dcc38a562631361bbf61dd11b
SHA1 3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 e79193c212f564027654a5a4c30be45b
SHA1 1cecb54b75418faeaf65996624ee925c74deb92c
SHA256 1efd9ba689b347072476a8697f4054e02a7f738f54a50dac47a72a4695bed339
SHA512 f7fa6b428bab6b91e4c1fb44a78383d36eb43d8eacfdb4a3d7d9abe69d54b85bee6c2cee3e7764ea6ed9291aa14aebc29d574f96ee6d461db867926587d1d16c

memory/1956-1584-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Windows\Installer\MSIC76.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

\Windows\Installer\MSIC76.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 2dcd326447e95e519b8308e9fad6998f
SHA1 8a519f07864886cfe36d5b9e5ee73d93aca093bc
SHA256 7ad385827fb52a1927fc296cfeb6285e791c21e03dcfe67c988e6209f7b6b3d4
SHA512 35001627dedf06bb040a69dc9f97c0cc6404b14310217e0f373f3bdeed80ebcbec56740bdb5df102bc6a023394e95dc1b7cb0e91a4bc52d59d08133f6e432098

C:\Windows\Installer\MSIF93.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

\Windows\Installer\MSIF93.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

C:\Windows\Installer\MSI114A.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

C:\Windows\Installer\MSI114A.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

\Windows\Installer\MSI114A.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

C:\Windows\Installer\6ef1bf.msi

MD5 1794aaa17d114a315a95473c9780fc8b
SHA1 7f250c022b916b88e22254985e7552bc3ac8db04
SHA256 7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4
SHA512 fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

\Program Files\Java\jre1.8.0_351\installer.exe

MD5 1b7d3a2eb4a3893ea7fec68dbcc09a81
SHA1 5abe3f871f41d9226f6b330e0d76f4aeb4987891
SHA256 75fe10b94b9570bff04d8440340bead917ce46fc20f0a9795bca73053c3aa5d5
SHA512 b834ec60c4fba13e1065d248bede905f386e92207d91a2e1c7465eddc9767a5b0d27f49b19cdf64b241dcb7664ef5976f9367c90b10ff2ea7adb281e6aaf7953

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 72e2143b243fe73f64c14970ec97162b
SHA1 c944441413f82def44180859954b9dc537ae4e84
SHA256 fd9bcfc637e3a4094a335d74882113f9c606cce9c7dd78818e7a8cc1488e0825
SHA512 fd0bad72d0f96675ba897b433a2ce3a80818ec6b007178fa3458057b84a31c4092123c9ed9bbc1751e88ded7b617140d3d9027059c0fd9245f79cc620b4f5e16

C:\Program Files\Java\jre1.8.0_351\installer.exe

MD5 1b7d3a2eb4a3893ea7fec68dbcc09a81
SHA1 5abe3f871f41d9226f6b330e0d76f4aeb4987891
SHA256 75fe10b94b9570bff04d8440340bead917ce46fc20f0a9795bca73053c3aa5d5
SHA512 b834ec60c4fba13e1065d248bede905f386e92207d91a2e1c7465eddc9767a5b0d27f49b19cdf64b241dcb7664ef5976f9367c90b10ff2ea7adb281e6aaf7953

C:\Windows\Installer\6ef1c3.msi

MD5 1794aaa17d114a315a95473c9780fc8b
SHA1 7f250c022b916b88e22254985e7552bc3ac8db04
SHA256 7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4
SHA512 fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

memory/1568-1749-0x0000000000400000-0x0000000000417000-memory.dmp

\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\bspatch.exe

MD5 2e7543a4deec9620c101771ca9b45d85
SHA1 fa33f3098c511a1192111f0b29a09064a7568029
SHA256 32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1
SHA512 8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\diff

MD5 926bc57fb311cc95bcefa1e1ad0ce459
SHA1 8c43b4d7aa223eaf9c73c789072545da0b2c55df
SHA256 9ccf1e30069b4781362f85c4a30993d86da99f211c2aaad4447ad051cc61600a
SHA512 216cb6483598960f5aea83beeb37fa700d047352d0b3c6c2405a7ee668554e0ab15358c178a6a2fc8c067f4177a0452cde93783797c15fccf224e640715f0743

memory/1568-1754-0x0000000000230000-0x0000000000247000-memory.dmp

memory/1568-1755-0x0000000000230000-0x0000000000247000-memory.dmp

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\baseimagefam8

MD5 22646919b87d1a6dfc371464405b373b
SHA1 2296c69b12c3e0244fc59586f794457a4735e692
SHA256 0a01e1f33b0dd6af5d71fd26261b97eda1f9da77553704afd0a9d176de733c11
SHA512 b5cfe6640c3755f3094e248dcd852ade852f904e80bc7d8dfef5772620ef75eac788f503c3df4baa712e73dafcca51c4ef0c73659ae55c1e0afd59b73f90d3a0

memory/1568-1757-0x0000000000230000-0x0000000000247000-memory.dmp

memory/1568-1760-0x0000000000400000-0x0000000000417000-memory.dmp

memory/1568-1764-0x0000000000400000-0x0000000000417000-memory.dmp

memory/1568-1765-0x0000000000230000-0x0000000000247000-memory.dmp

memory/1568-1766-0x0000000000230000-0x0000000000247000-memory.dmp

memory/1568-1767-0x0000000000400000-0x0000000000417000-memory.dmp

memory/1568-1768-0x0000000000230000-0x0000000000247000-memory.dmp

memory/1568-1770-0x0000000000400000-0x0000000000417000-memory.dmp

C:\ProgramData\Oracle\Java\installcache_x64\7286978.tmp\newimage

MD5 42f911bd9577dba41abfec153b50afdc
SHA1 e75303e84e59c81105db4aeb0e09ba92c0edfaa5
SHA256 a81763f447f212a42eddeecc63c58e580f1e4fb695480d24fba0bc43aa8c17e0
SHA512 40e22192db53eb84a117fbf729f83cbc79ff168509149b2281357295b72770816f260c9320cb7c5559f2242d7f7362dd7af4fa80d99a5db327cb2b690c9b6c59

\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

MD5 691f68efcd902bfdfb60b556a3e11c2c
SHA1 c279fa09293185bddfd73d1170b6a73bd266cf07
SHA256 471d70ebf91bdc762dcacbea9f6ca883f97921938e83269fef911dbf83598a70
SHA512 a4816ae0654f41bd130d56e44839d9f29ab48bd2f99c3d6db38ce3358ac46c1cef09da09184c6291dd378018a49f9e56173c35d780d3eaefcce459592c75de3f

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

MD5 691f68efcd902bfdfb60b556a3e11c2c
SHA1 c279fa09293185bddfd73d1170b6a73bd266cf07
SHA256 471d70ebf91bdc762dcacbea9f6ca883f97921938e83269fef911dbf83598a70
SHA512 a4816ae0654f41bd130d56e44839d9f29ab48bd2f99c3d6db38ce3358ac46c1cef09da09184c6291dd378018a49f9e56173c35d780d3eaefcce459592c75de3f

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

MD5 691f68efcd902bfdfb60b556a3e11c2c
SHA1 c279fa09293185bddfd73d1170b6a73bd266cf07
SHA256 471d70ebf91bdc762dcacbea9f6ca883f97921938e83269fef911dbf83598a70
SHA512 a4816ae0654f41bd130d56e44839d9f29ab48bd2f99c3d6db38ce3358ac46c1cef09da09184c6291dd378018a49f9e56173c35d780d3eaefcce459592c75de3f

memory/988-2126-0x0000000000110000-0x0000000000111000-memory.dmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.url

MD5 7fadb9e200dbbd992058cefa41212796
SHA1 e2525d7ba66bb07bc1cd5ba93f88c54e7e2042b4
SHA256 b05abacd15117b1ffcd2a288308f50c0542214d264b852eddfa9025307ac401b
SHA512 94b7bf1f1f5cea2a74f8c326113dd25652cb14e5fa356ac83d16b6ac5a5cac26c9d2b20259f5c2cf8ebc1e022490511e2996335a5d8dd7f5b64dce429fb6dfb1

C:\Program Files\Java\jre1.8.0_351\bin\javacpl.exe

MD5 7a9d69862a2021508931a197cd6501ec
SHA1 a0f7d313a874552f4972784d15042b564e4067fc
SHA256 51ff63cbac78bd133333e98d91b02b652c88cd57cedd0052519051a17be77856
SHA512 5c331e6deefc8256ea203d63770484f6b485d4c3832a60ecf4a540dff3cb75a76dbde37980fe1763ca487401b68126f58f8d1a4c72ee610f5144c624c4736850

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Reference Documentation.lnk

MD5 b5e1de7d05841796c6d96dfe5b8b338c
SHA1 c7c64e5b35d0cca1a5c98a1c68e1e5d4c8b72547
SHA256 062cb9dec2b2ce02c633fc442d1a23e910e602548a54a54c8310b0dde9ae074d
SHA512 963a89b04f34bc00fea5b8e0f9648596c428beac2db30d8b0932974b15c0eb90b7c801ba6fa1082ea9d133258f393ae27e61f27fd3b3951f5c2e4b8c6a212c2d

C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe

MD5 24ccb37646e1f52ce4f47164cccf2b91
SHA1 bc265e26417026286d6ed951904305086c4f693c
SHA256 adf2d659c2b2a4afff1ca58f3a742d27d767d27eabeca6a8b6ee243e9c913a39
SHA512 cb174e7a219f6ffae3715e37beb428979bc1462202729c05a25fa7b8da90e2dd6faa92c03cd9ca21567d354dce7acc1852669f4071298e953d6a286243794e32

memory/1956-2317-0x0000000000EC0000-0x00000000012A8000-memory.dmp

C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\npdeployJava1.dll

MD5 ff91ac355dc6b1df63795886125bccf8
SHA1 90979fc6ea3a89031598d2146bf5cdbbb6db6b77
SHA256 14b30467cfea0071dffc658dd31b8a25b7b4e79608933f171911c2cba6aa9a0a
SHA512 77aa8c7930730004bdb8d49a82712e1042db978102f6eca0d38317b6fd98ef03e52279130eadc7a0da1148e759db6589f7f8334d4c2eccfb2613e8f19542e197

memory/2328-2377-0x0000000000220000-0x0000000000221000-memory.dmp

memory/2328-2384-0x0000000000220000-0x0000000000221000-memory.dmp

memory/2328-2389-0x0000000000220000-0x0000000000221000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\deployment.properties

MD5 5f52d9a04b07fe2267b9e6ba66c32f70
SHA1 274e9bbf88218e419fb4c8072d3b3b14d8dcc879
SHA256 139de988a6365699b5db97ce1962b17a81c3f5c90712274ae8c29b6410f943bc
SHA512 2d71ba796453a6ead99c53ac634db704af742c21bf18dca555fa270ed15e87552a293cfd90f59bd9d236a4d0451fee03554a74c4f6920fdcc3954ed4e09db4b7

C:\Config.Msi\6ef1c2.rbs

MD5 061467577211ceee593522b94f8bb6cf
SHA1 2153fc622c736c9a25bb655fd707b116740ef275
SHA256 2deee9049d141c843a82ac3db44b166ed76b945ea4b3f244a3e4f9987e6e77c1
SHA512 7db86e9681206b1c164fcaf02a3d5e910b7907d810aa631b6fcf8d7a7519145014c1015980c58eff153a80af59f0e4891672761f0a76a3de740364e6c338ddf1

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG106.PNG

MD5 0f414e91b67121d55587e7c004f35cb2
SHA1 6d63b4c6fa858f8cfd4b257600037e9c370355a8
SHA256 015dd2b2df51cd90438286d28b5719cbdf9a2e7bebf326b99c6c091ad98e4cc1
SHA512 1b7d8bbb97f6acb4984cd93578b5045cd4ce0813645a28d3b778489b646194e68b2a931f26a9c6a7026f98de29719132972eb983d771affdfe42c42622b786e9

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG

MD5 98abbfa2908f51f4eda33f465ccacc03
SHA1 1bd17c0835b1c8196d0a8166b4818b3138f65a28
SHA256 10438b49eeac103534a5fd867888437b761f346cec8714daeb95fdd246cc540a
SHA512 9eaa76ab654a786f5af84e9a20e7d0efb22ee00977e662ab5a057da1aff1a7552150bba0253704f00e60115347bfb4fe1784a703ad3846e221dbee41ea7a1470

Analysis: behavioral2

Detonation Overview

Submitted

2023-03-23 05:19

Reported

2023-03-23 05:30

Platform

win10v2004-20230220-en

Max time kernel

597s

Max time network

509s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe"

Signatures

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\icacls.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2275444769-3691835758-4097679484-1000\{18D40F51-80B4-4CD5-B49B-8DA81206C5BB} C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2275444769-3691835758-4097679484-1000\{F72843EC-5A4E-4930-8FA4-F171B657888E} C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2275444769-3691835758-4097679484-1000\{08C86D5E-C46E-4BCC-99F2-DCCFED65BC15} C:\Windows\system32\svchost.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3764 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 3764 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 3764 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1528 wrote to memory of 1496 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1528 wrote to memory of 1496 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1528 wrote to memory of 1496 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1496 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1496 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1496 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1528 wrote to memory of 2456 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 1528 wrote to memory of 2456 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 1528 wrote to memory of 2456 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 2456 wrote to memory of 4032 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
PID 2456 wrote to memory of 4032 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
PID 4032 wrote to memory of 5000 N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
PID 4032 wrote to memory of 5000 N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
PID 5000 wrote to memory of 3764 N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe C:\Windows\system32\icacls.exe
PID 5000 wrote to memory of 3764 N/A C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe C:\Windows\system32\icacls.exe
PID 3876 wrote to memory of 956 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
PID 3876 wrote to memory of 956 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
PID 956 wrote to memory of 4544 N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
PID 956 wrote to memory of 4544 N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe"

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.876-Installer-1.0.7-global.exe" "__IRCT:3" "__IRTSS:23645635" "__IRSID:S-1-5-21-2275444769-3691835758-4097679484-1000"

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816338 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1840798" "__IRSID:S-1-5-21-2275444769-3691835758-4097679484-1000"

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe -Xmx1024m -Dfile.encoding=UTF8 -cp C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar; org.tlauncher.tlauncher.rmo.TLauncher

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\system32\icacls.exe

C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe -Xmx1024m -Dfile.encoding=UTF8 -cp C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar; org.tlauncher.tlauncher.rmo.TLauncher

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 126.133.241.8.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 185.130.69.20.in-addr.arpa udp
US 8.8.8.8:53 97.97.242.52.in-addr.arpa udp
US 8.8.8.8:53 dl2.tlauncher.org udp
US 104.20.234.70:443 dl2.tlauncher.org tcp
US 8.8.8.8:53 64.45.164.69.in-addr.arpa udp
US 8.8.8.8:53 70.234.20.104.in-addr.arpa udp
US 8.8.8.8:53 tlauncher.org udp
US 104.20.234.70:443 tlauncher.org tcp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
NL 13.69.109.130:443 tcp
US 8.8.8.8:53 76.188.69.20.in-addr.arpa udp
US 8.8.8.8:53 58.104.205.20.in-addr.arpa udp
US 8.8.8.8:53 202.74.101.95.in-addr.arpa udp
US 8.8.8.8:53 64.13.109.52.in-addr.arpa udp
NL 8.238.22.254:80 tcp
NL 8.238.22.254:80 tcp
NL 8.238.22.254:80 tcp
US 8.8.8.8:53 res.tlauncher.org udp
DE 78.46.66.120:80 res.tlauncher.org tcp
NL 173.223.113.164:443 tcp
US 8.8.8.8:53 120.66.46.78.in-addr.arpa udp
US 8.8.8.8:53 cl1-res.tlauncher.org udp
US 104.20.234.70:443 cl1-res.tlauncher.org tcp
DE 78.46.66.120:80 res.tlauncher.org tcp
US 8.8.8.8:53 cdn4-res.tlauncher.org udp
DE 78.46.83.184:80 cdn4-res.tlauncher.org tcp
US 8.8.8.8:53 184.83.46.78.in-addr.arpa udp
US 8.8.8.8:53 66.112.168.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 111dddf2f308abc2a8f7555d5f642751
SHA1 11e6cdccbf29a71a97011b9444cf20c83ad8b57b
SHA256 c65af78739ffcd7bb6673f167624522ac8172516a1d3783e5171f9eabd625be0
SHA512 11662a0f5cd850578d2799217393f979f0dc029450f4fbf17780eae69494fb3f4de5a617d31f3fbf5b3a7179eea7bf9ded2555fb61703baeb74885d6bf0421c4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/1528-146-0x0000000000340000-0x0000000000728000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico

MD5 e043a9cb014d641a56f50f9d9ac9a1b9
SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

memory/1528-440-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1528-441-0x0000000002F50000-0x0000000002F53000-memory.dmp

memory/1528-456-0x0000000000340000-0x0000000000728000-memory.dmp

memory/1528-457-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG

MD5 05d7bba3d6ac92766c4495b8928202a6
SHA1 50b65a8ba5ed2633e43929ee4bd58c95a91a3363
SHA256 4804f3c4fae714657fdb85e98244828acc6ac938505c2da1ed694ae7b58f2949
SHA512 1544d5cd6f85aaeeacd26f2deb9da9eb510226b41079ee78c4dede14386e5ea3446efdfd475bfbfa3a6846fa2ff23d64f4dad3a4ddd304e32de80e4d7bcbc600

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG

MD5 5a7901f7df307fba45b1c377f2c94ccc
SHA1 d6630cf733033cdfbda7af3213d49b32f5b06919
SHA256 d8471d5a5b4792c4b49e80b5cb22ef1e938dc3069b210646704f658548d7a9f8
SHA512 fc0036a7ed4b53edd72b91c4824919e6e8a82b5be1e82cdc134e267ef4792424124fb6ba5d7c86cf686910da0baba8453d7a6c12b39a5b4c0cb70658580f3bc9

memory/1528-480-0x0000000000340000-0x0000000000728000-memory.dmp

memory/1528-481-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 52e46b1adf9cd40428b41755df527bd4
SHA1 5f0bb9c9c14208851beb5c93d9268c16ab39dc07
SHA256 a2794481de60c7dd95b148cd5197db8f8b6a549c74e9ba7ac54da7590f89cf13
SHA512 813186667e3c63ee624482642609901d2210a8f99fb134e5fc58e5d1e603055ed2903eadf62c6419c16f00a3a41ed6580bc7693cfed1957d077f53a96b577669

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG46.PNG

MD5 d8a095202e08fa1ac2578982e9a486db
SHA1 397ffc8af43ac18466b8df245b4faa6b278659e6
SHA256 28fed2b9a3cbde34da4b6b5d1af2d2844437d21f6dec85b3ca2faa5cd3b512e5
SHA512 ac751386a0004e335f4e5f4ea24bf6a474478c8a7ca54d018734e7cd44b8e9a0eb262b00fe1219b1c62c96b018b08ba6b1056d3a13e64b55c7e70d748a6ae9c6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG

MD5 bbdf2e8c0262e7e606d41ddbe5a3cd12
SHA1 acbb25f729af14b692ec9c8187a23b1a696f8e47
SHA256 d7c76896d206d977739556ad2d5811f7cf3117252afcd439a5aa0f2b645f6949
SHA512 0334fae3682889adbc18594b7917d8c93252a86bc04d08efc6860d5714ba4eb8aabc39c51e532c4aee57a938021540d2f2899781d9cd1de311036e1850a65067

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 5027f3112ac2d6f764769102a9145c8e
SHA1 a369a0e1d4ace1a8d66908aa43543bea03c76f5b
SHA256 d61d2469b6058ac40def94cea42045a6f53e39694645add82949e0a011d5b36c
SHA512 181a00ac87820a08f73ffe7c3d26dfec56d3440a40d9ea67ab9b242b4653b712461a201118c9d0f747502a06e689d3badcc0986667814bb0a19c8f00d47d491f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/4796-527-0x0000000000450000-0x0000000000838000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat

MD5 aec508468d53ab8d55f5b4beb82c347d
SHA1 477d1ffb28834243f5811a4a2a54b4f0ca240120
SHA256 ebee84e34e221ad822486432333bad9e6357af2fb0d9651cc61c7fab8ec9b5bf
SHA512 26a0278af2a9e75ef966bc3f7f40d7669204c2004a043adaad102ef440caa6282e69372ca0c3c7d39a8450691d528c2dc77a4386bfb0c6e5a2a76c3fef900fbe

C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

MD5 e8a575cb54a86d3c3b52885d001f7e16
SHA1 760ac09a6a5497c8ad447bdb645ff6dd48934bac
SHA256 98730cfab49eb72b944a30e40d64a69cf48bf8ee43e3e3b6037cee141a2dc150
SHA512 e8d7ba0c4aed41ac7faa1c09dde3145a482dd9b5776330b820d56053eb080887d240297cb3e79764ef06f883707f7d0326cddade45490d7345afa7de14161e3b

memory/4796-536-0x0000000000450000-0x0000000000838000-memory.dmp

memory/1528-537-0x0000000000340000-0x0000000000728000-memory.dmp

memory/1528-538-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1528-584-0x0000000000340000-0x0000000000728000-memory.dmp

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 4f7be9736242579cb8afa1af86980dfe
SHA1 1c486393847996db4f6b78532dd7bd9a0a924549
SHA256 9cecc28716f392d2394829f4cc3f307d08f5aecaf3e2124bdaaa0d6d9c3400b4
SHA512 4c55bc2698d8934713e791c015480248198e22efa66dd5ca79ea834b9835c9e85ca8c2869c9b40dc394ae7e27da039f79c392f88472dedc1adfa83dd1e94f1c9

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG

MD5 3094925a8de871bcc72ae50882d2a6f7
SHA1 9f7894bc4b2a498ad20b14b2b3cac175bf4d7a9f
SHA256 523e7230db0c47a436abbc442db93e41b6f549b32da6c2a10db7a18228491216
SHA512 bf2349354321397652d834507aae4c32885273209d1409b796170292e37ebf35878e2934d3f53545e66724561e646cc660f952e0bb5006cd7a262a790b64e39e

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG

MD5 2799f9daca46770a871ce1b5eed32e7c
SHA1 a2792f571210a7f38cdbe49391017300ee7b1ce4
SHA256 fc22676f5b6cdae17b78ddfd16bb070687516fbc827a7edd0541f3a32d85c9e9
SHA512 c41f2e4c4ca59d6f9d11fac11296ab87f1b508b5d64e5db7762f2f6dd387aa96206b2b0fa127f17c0b8c24a0b56e81af12d5937474a450222d9c4416c1acb16a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG19.PNG

MD5 46a65321aa1fce57d465c26e8b6eb392
SHA1 9efb9a3acd5b32556ea66398c74b014f91087559
SHA256 61df7a1f0367209668d4f0f6a285b8baff864d1341d382ebbc7fd4e71036b666
SHA512 094d69016f066ae835c71d7a950217b9ad09e8cd4d74131787203cae950e572c18213dc1ded139b1fa46c7f803cc15bf4f596c9d51aefe0d43850ae2865f3707

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG

MD5 fa8aa84ef4bf0de505f6e3447d4b55b3
SHA1 b99654dfa5f6c56857b4f4102af2d27503bcdc74
SHA256 f3b7e85e8e5e41496fb563816fbf79e6640feb1591bd5e0c0b876d80053ad913
SHA512 b3a7d0d5abe554301b8745bd738662d80e439fba8df6f984cc05151ec8c081a61f0538765653e8587b431cdc97d384ee35d17ab3324c06a2ca40a069e1525ba6

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG

MD5 ce17d7ce06488f394ce124f17d5acafc
SHA1 8a5dceae9ea369b686123c8f940bb0ea07870ffa
SHA256 c4b04568930f03979d71f48a57b9ad06b4cdf687272f6753ff662006e8e6237f
SHA512 c33f1370213cabd1b84c936f1ac14f9bcc83bc03a633bbe25efe1e906bcee515d0e615c86b7ee3b34404dd1d95ce74d1a00908de8cdacbf9961de3f1ceb8362b

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG

MD5 1f5c8939031a7f93762862cfc88a8e56
SHA1 6dc4df87344db0ddf09c777e7a80d1b5661559b8
SHA256 14be26e969eb15ef7e76e0ad02d8aa0516c5391e8b09dba0a9a6c5f57ae24aba
SHA512 de45d700c86329c704777917863fd1ddeca90d2bed67a72794164882bf15725ce83c7733f664ee0a2af7df54a6be2def729d19237fb2c434115396ac126ff47f

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG45.PNG

MD5 09229c3bfb801177839a7c2e22e33a1b
SHA1 f679c05c4c7b2f3722069420c6d6481fc856e7aa
SHA256 cbf81d779b469942613297a3ca6c09d885e3b1d4aa952dc1994a7175fbfc7e3f
SHA512 503bfa063b29dda95f15da303f707e5b78a6bdb74662c222d8a8b7e3a33264016a66acdd9de44aea932e7cde80a43c2406ea6f0250d3df8e182217bc4a0a7ed7

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP

MD5 0b445ace8798426e7185f52b7b7b6d1e
SHA1 7a77b46e0848cc9b32283ccb3f91a18c0934c079
SHA256 2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6
SHA512 51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG

MD5 59d6f22fdc11d6b116b38193ed5f4b97
SHA1 cddc7eb2110b3179dd6d1e32b4b37f3568a22ebf
SHA256 782cafea76d24d76885d88ee1302e5f78d75a4e335529dc20ad476fdb9e34744
SHA512 5b0fab5139736d30a69c98ea88d95a5c70f59aab1b82394c58b33617b824447b861a6e6067b62dd1ca1812a4989937e06ad473c6c94376af957871e9e63553fa

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG

MD5 5eecdc666e6dc0b8e5e8d2fc3b9cc1b2
SHA1 72a16d461bd2410d5749c6bf939a127683d83a95
SHA256 052f0289886f9cc0931d7026dfe1f5253ad39123479627e37afa5c430e8f8ff1
SHA512 5d465d2c61d97ec2a52db3aeee8d42ececdef08930692842f9c6a41b0611cb774015d369e4fe5186079e97839acc78e8403ea6a6c33ee54a7aef3eea41c3d7db

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG

MD5 1557c08e187b7783083e0b80051fd321
SHA1 2c6ee47799d713e88fd589609b81912a4522044e
SHA256 0c0e74dd07c45833a5dd7ba931e5d528eb16334defdd06171df2f632d6e47842
SHA512 485f69b3878b2bd7fdf52ad020dde2cbc34dd1970aaa4e5eb8f8618f6091b5b827b428447859499c3d61ea9cde2edcbb97c8fb0560cd0aaff50027c0f97ee6f3

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG108.PNG

MD5 03b1d78771eb279766efb2d9f2fa8463
SHA1 8f10e304fd65e58136ccd6ab012ffc594e6fb707
SHA256 eec16d2cb57e38b485b6a269e9c2554c1dfc3b70dec9f7bbddc2b62526b3d832
SHA512 ca51cbaf20e6f62eb6ec69555d259ef61828d3166d09106bcd335dd417ed30660af71e7fd8db6bd22bf134cc530e1a55ecdd2c307e64e8edb28af95299d66f5a

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 f10b9a94ea39206c71d6fcdac035a6ae
SHA1 3fa5155b3b353eca7fa0110670d16150252ab034
SHA256 04a77b62afa5da3cec226ed6287a4c96959f58f13d837e5c5496dfeb8113d78b
SHA512 6e38de842cfabcc6272e790ad9a91ecf8ab881a9e1f2079157e5667710c748ef141fed651a2c640a9c8a7f9d5129913295d8050328647d2a897f0e8fd1633b65

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG

MD5 5bc85d12eb492baa3be9230f1fbdc342
SHA1 456fe4284fa916ad3817e7c3d419c13f4c949737
SHA256 9a27f240758513aa1cc05500171fe22fdb3a485781cba4798cefc29f6944373c
SHA512 3d55c597ac29d7f810980dfd89404d3ecbd2e652ae1bc5e6710668ad5386a0caecf3149289df13f6dabed6b2e4305a26684ab3bd21b255b37f8a596fe8d641b9

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG

MD5 38c12e1a54f8fd216ed3f13b36798cc6
SHA1 ccf1fe585d3374ebce4c1ec025e2d8ec39968a7c
SHA256 608924ba294590b5b706658d9aaa71b480ad9aa1b6797bbc5cf1632ac6c616b1
SHA512 0918af63f006d7fa04a3faeeb813e61c060316a126c4742a948a30f5b6ea368c3b8592011319dad3dbf8427dfcc095aa72f7b651d6fc31061f861f070447331b

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG

MD5 667b0b54ee5ba0d1cb66190226596e46
SHA1 b8658b35e7cf44b24053e4d01d3b51233d6526f6
SHA256 3a9ab8c3640f1b40b33553d7d3dd3d15bd6e702ef510ec0b66a2f14aa744bf83
SHA512 9ccc773214a0074634be66801d81d7a593ab154351fdbd1b93f56ffa80cf824ee31ff2e13f26536d5f3096e90df43fa223080b4dc55340614b076c08ef976dcb

memory/1528-1525-0x0000000000340000-0x0000000000728000-memory.dmp

memory/1528-1526-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 f08d9bbc61cff8e8c3504524c3220bef
SHA1 b4268c667469620bb528c04eaa819d508159b398
SHA256 2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512 a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG106.PNG

MD5 0f414e91b67121d55587e7c004f35cb2
SHA1 6d63b4c6fa858f8cfd4b257600037e9c370355a8
SHA256 015dd2b2df51cd90438286d28b5719cbdf9a2e7bebf326b99c6c091ad98e4cc1
SHA512 1b7d8bbb97f6acb4984cd93578b5045cd4ce0813645a28d3b778489b646194e68b2a931f26a9c6a7026f98de29719132972eb983d771affdfe42c42622b786e9

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG

MD5 98abbfa2908f51f4eda33f465ccacc03
SHA1 1bd17c0835b1c8196d0a8166b4818b3138f65a28
SHA256 10438b49eeac103534a5fd867888437b761f346cec8714daeb95fdd246cc540a
SHA512 9eaa76ab654a786f5af84e9a20e7d0efb22ee00977e662ab5a057da1aff1a7552150bba0253704f00e60115347bfb4fe1784a703ad3846e221dbee41ea7a1470

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 f08d9bbc61cff8e8c3504524c3220bef
SHA1 b4268c667469620bb528c04eaa819d508159b398
SHA256 2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512 a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 f08d9bbc61cff8e8c3504524c3220bef
SHA1 b4268c667469620bb528c04eaa819d508159b398
SHA256 2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb
SHA512 a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

memory/1528-1827-0x0000000000340000-0x0000000000728000-memory.dmp

memory/2456-1829-0x0000000000400000-0x0000000000417000-memory.dmp

memory/4032-1840-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1847-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1865-0x0000000000530000-0x0000000000531000-memory.dmp

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar

MD5 41f66d1d4d250efebde3bbf8b2d55dfa
SHA1 eeb69005da379a10071aa4948c48d89250febb07
SHA256 9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e
SHA512 109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar

MD5 65912196b6e91f2ceb933001c1fb5c94
SHA1 af799dd7e23e6fe8c988da12314582072b07edcb
SHA256 663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868
SHA512 60b15182130ddfd801dd0438058d641dd5ba9122f2d1e081eb63f5e2c12fff0271d9d47c58925be0be8267ed22ae893ea9d1b251faba17dc1d2552b5d93056de

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar

MD5 43bfc49bdc7324f6daaa60c1ee9f3972
SHA1 6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9
SHA256 58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4
SHA512 834f2bf4a5b35edffde0263409649aeaf34ca9a742ba511a06bb9b01626f9e774d2d3c8ba91a7905929dc8cd5e6471de29f7d0ab10260ece2af709b7fdbe4bc3

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar

MD5 04177054e180d09e3998808efa0401c7
SHA1 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
SHA512 3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar

MD5 289075e48b909e9e74e6c915b3631d2e
SHA1 6975da39a7040257bd51d21a231b76c915872d38
SHA256 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
SHA512 e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar

MD5 acbc8aa5ba5cdddf5f1e67befe8cc597
SHA1 63b4bf89744b532e65c1afa3294743d2b3798f2b
SHA256 1f46b3a163012f9729905633b5e5e03ce385066ae43138a564729c942f9ca6b9
SHA512 d974a032d9af451c0dd51fbc0d64840f3e03eb502f40e4ab60d6722913b8a48d44a75752fcff60656e4d19089570a894222959745af11bcdf93ea1544192fee3

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar

MD5 948dda787593340a7af1a18e328b7b7f
SHA1 9141212b8507ab50a45525b545b39d224614528b
SHA256 ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0
SHA512 6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar

MD5 8f7e4f1a95a870ebee87ddacc425362c
SHA1 300bf1846737e34b9ea10faae257ca8fdcd0616f
SHA256 f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728
SHA512 98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar

MD5 540f330717bca9d29c8762cf6daca443
SHA1 eed8a2cbf56cc60d07a189a429ead3067564193c
SHA256 52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153
SHA512 a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar

MD5 75a215b9e921044cd2c88e73f6cb9745
SHA1 18cc717b85af0b12ba922abf415c2ff4716f8219
SHA256 7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc
SHA512 1a44af2f3f8dbfbf38ad5f71ef11b32d5822d734f77af2cdea419fb6af845e894acb60bffbcebb4533068d86b55a22a8b0f74be20b204c2343bdb165d9c787f9

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar

MD5 904094a40b7d81b12936f43b49952922
SHA1 5ccf048dd51a7d0cdd59a1ea6ce2e3b167feacf3
SHA256 0cd5746118a3a38b7e6126770bc53c0f7c4641fab786e3d6004a4caace4fc536
SHA512 36e2bc67d73319b8f10a572ee3ca6f541aa51ca16c1efea9430111f3a058c9c922a43865b064811117f1c3892e39aee3bc79d7fc5ce20ccd75a13d447ca68911

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar

MD5 13a8e72587ac6eacfb0986f75e51eb7c
SHA1 6c3daf89705427f73e6106d2d4d9619e99c5ecb5
SHA256 1fcffa073f722737431e2699b1f3ea48b92a3b825397d8f0d1464e4d4d15a014
SHA512 134735390415f60d0c42ff33a060bda508e273b35fc9aab271c20ff23f331b51cf3fa36443009e0987049f6bfb22c4098a1473e65ea0349e719fbf4b528f344e

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar

MD5 51050e595b308c4aec8ac314f66e18bc
SHA1 9c64274b7dbb65288237216e3fae7877fd3f2bee
SHA256 86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840
SHA512 c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar

MD5 04a41f0a068986f0f73485cf507c0f40
SHA1 5af35056b4d257e4b64b9e8069c0746e8b08629f
SHA256 1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9
SHA512 3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar

MD5 39c6476e4de3d4f90ad4ca0ddca48ec2
SHA1 ee9e9eaa0a35360dcfeac129ff4923215fd65904
SHA256 26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5
SHA512 fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar

MD5 8667a442ee77e509fbe8176b94726eb2
SHA1 5fe28b9518e58819180a43a850fbc0dd24b7c050
SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
SHA512 b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d

memory/4032-1893-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1907-0x0000000000530000-0x0000000000531000-memory.dmp

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

memory/4032-1933-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1935-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1960-0x0000000000530000-0x0000000000531000-memory.dmp

memory/4032-1961-0x0000000000530000-0x0000000000531000-memory.dmp

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre-8u281-windows-x64.tar.gz

MD5 5c482185ed6ae3dc5ee0bce647dbd997
SHA1 c77455fb17472ba547db49e146d3047c81519fce
SHA256 e7e76bd683b832dec6c9badf62d9cb44e669b67d0d9715be3496aadb10089f6a
SHA512 561a7c40576e3bd1482e194bc66bd9ab0391ca9b1c6573cf78abf0242cc4eff5c8eab4da52dade0958996c775a08bf0639903126ead3e961ad0f169dfa534c3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\api-ms-win-core-console-l1-1-0.dll

MD5 919e653868a3d9f0c9865941573025df
SHA1 eff2d4ff97e2b8d7ed0e456cb53b74199118a2e2
SHA256 2afbfa1d77969d0f4cee4547870355498d5c1da81d241e09556d0bd1d6230f8c
SHA512 6aec9d7767eb82ebc893ebd97d499debff8da130817b6bb4bcb5eb5de1b074898f87db4f6c48b50052d4f8a027b3a707cad9d7ed5837a6dd9b53642b8a168932

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-console-l1-2-0.dll

MD5 7676560d0e9bc1ee9502d2f920d2892f
SHA1 4a7a7a99900e41ff8a359ca85949acd828ddb068
SHA256 00942431c2d3193061c7f4dc340e8446bfdbf792a7489f60349299dff689c2f9
SHA512 f1e8db9ad44cd1aa991b9ed0e000c58978eb60b3b7d9908b6eb78e8146e9e12590b0014fc4a97bc490ffe378c0bf59a6e02109bfd8a01c3b6d0d653a5b612d15

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-datetime-l1-1-0.dll

MD5 ac51e3459e8fce2a646a6ad4a2e220b9
SHA1 60cf810b7ad8f460d0b8783ce5e5bbcd61c82f1a
SHA256 77577f35d3a61217ea70f21398e178f8749455689db52a2b35a85f9b54c79638
SHA512 6239240d4f4fa64fc771370fb25a16269f91a59a81a99a6a021b8f57ca93d6bb3b3fcecc8dede0ef7914652a2c85d84d774f13a4143536a3f986487a776a2eae

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l1-2-0.dll

MD5 35bc1f1c6fbccec7eb8819178ef67664
SHA1 bbcad0148ff008e984a75937aaddf1ef6fda5e0c
SHA256 7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7
SHA512 9ab9b5b12215e57af5b3c588ed5003d978071dc591ed18c78c4563381a132edb7b2c508a8b75b4f1ed8823118d23c88eda453cd4b42b9020463416f8f6832a3d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-handle-l1-1-0.dll

MD5 bbafa10627af6dfae5ed6e4aeae57b2a
SHA1 3094832b393416f212db9107add80a6e93a37947
SHA256 c78a1217f8dcb157d1a66b80348da48ebdbbedcea1d487fc393191c05aad476d
SHA512 d5fcba2314ffe7ff6e8b350d65a2cdd99ca95ea36b71b861733bc1ed6b6bb4d85d4b1c4c4de2769fbf90d4100b343c250347d9ed1425f4a6c3fe6a20aed01f17

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l2-1-0.dll

MD5 3bf4406de02aa148f460e5d709f4f67d
SHA1 89b28107c39bb216da00507ffd8adb7838d883f6
SHA256 349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e
SHA512 5ff6e8ad602d9e31ac88e06a6fbb54303c57d011c388f46d957aee8cd3b7d7cced8b6bfa821ff347ade62f7359acb1fba9ee181527f349c03d295bdb74efbace

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l1-1-0.dll

MD5 580d9ea2308fc2d2d2054a79ea63227c
SHA1 04b3f21cbba6d59a61cd839ae3192ea111856f65
SHA256 7cb0396229c3da434482a5ef929d3a2c392791712242c9693f06baa78948ef66
SHA512 97c1d3f4f9add03f21c6b3517e1d88d1bf9a8733d7bdca1aecba9e238d58ff35780c4d865461cc7cd29e9480b3b3b60864abb664dcdc6f691383d0b281c33369

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 94788729c9e7b9c888f4e323a27ab548
SHA1 b0ba0c4cf1d8b2b94532aa1880310f28e87756ec
SHA256 accdd7455fb6d02fe298b987ad412e00d0b8e6f5fb10b52826367e7358ae1187
SHA512 ab65495b1d0dd261f2669e04dc18a8da8f837b9ac622fc69fde271ff5e6aa958b1544edd8988f017d3dd83454756812c927a7702b1ed71247e506530a11f21c6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-debug-l1-1-0.dll

MD5 b0e0678ddc403effc7cdc69ae6d641fb
SHA1 c1a4ce4ded47740d3518cd1ff9e9ce277d959335
SHA256 45e48320abe6e3c6079f3f6b84636920a367989a88f9ba6847f88c210d972cf1
SHA512 2badf761a0614d09a60d0abb6289ebcbfa3bf69425640eb8494571afd569c8695ae20130aac0e1025e8739d76a9bff2efc9b4358b49efe162b2773be9c3e2ad4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-heap-l1-1-0.dll

MD5 3a4b6b36470bad66621542f6d0d153ab
SHA1 5005454ba8e13bac64189c7a8416ecc1e3834dc6
SHA256 2e981ee04f35c0e0b7c58282b70dcc9fc0318f20f900607dae7a0d40b36e80af
SHA512 84b00167abe67f6b58341045012723ef4839c1dfc0d8f7242370c4ad9fabbe4feefe73f9c6f7953eae30422e0e743dc62503a0e8f7449e11c5820f2dfca89294

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 d75144fcb3897425a855a270331e38c9
SHA1 132c9ade61d574aa318e835eb78c4cccddefdea2
SHA256 08484ed55e43584068c337281e2c577cf984bb504871b3156de11c7cc1eec38f
SHA512 295a6699529d6b173f686c9bbb412f38d646c66aab329eac4c36713fdd32a3728b9c929f9dcadde562f625fb80bc79026a52772141ad2080a0c9797305adff2e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-interlocked-l1-1-0.dll

MD5 a038716d7bbd490378b26642c0c18e94
SHA1 29cd67219b65339b637a1716a78221915ceb4370
SHA256 b02324c49dd039fa889b4647331aa9ac65e5adc0cc06b26f9f086e2654ff9f08
SHA512 43cb12d715dda4dcdb131d99127417a71a16e4491bc2d5723f63a1c6dfabe578553bc9dc8cf8effae4a6be3e65422ec82079396e9a4d766bf91681bdbd7837b1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-memory-l1-1-0.dll

MD5 808f1cb8f155e871a33d85510a360e9e
SHA1 c6251abff887789f1f4fc6b9d85705788379d149
SHA256 dadbd2204b015e81f94c537ac7a36cd39f82d7c366c193062210c7288baa19e3
SHA512 441f36ca196e1c773fadf17a0f64c2bbdc6af22b8756a4a576e6b8469b4267e942571a0ae81f4b2230b8de55702f2e1260e8d0afd5447f2ea52f467f4caa9bc6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-localization-l1-2-0.dll

MD5 8acb83d102dabd9a5017a94239a2b0c6
SHA1 9b43a40a7b498e02f96107e1524fe2f4112d36ae
SHA256 059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413
SHA512 b7ecf60e20098ea509b76b1cc308a954a6ede8d836bf709790ce7d4bd1b85b84cf5f3aedf55af225d2d21fbd3065d01aa201dae6c131b8e1e3aa80ed6fc910a4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 cff476bb11cc50c41d8d3bf5183d07ec
SHA1 71e0036364fd49e3e535093e665f15e05a3bde8f
SHA256 b57e70798af248f91c8c46a3f3b2952effae92ca8ef9640c952467bc6726f363
SHA512 7a87e4ee08169e9390d0dfe607e9a220dc7963f9b4c2cdc2f8c33d706e90dc405fbee00ddc4943794fb502d9882b21faae3486bc66b97348121ae665ae58b01c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 f43286b695326fc0c20704f0eebfdea6
SHA1 3e0189d2a1968d7f54e721b1c8949487ef11b871
SHA256 aa415db99828f30a396cbd4e53c94096db89756c88a19d8564f0eed0674add43
SHA512 6ead35348477a08f48a9deb94d26da5f4e4683e36f0a46117b078311235c8b9b40c17259c2671a90d1a210f73bf94c9c063404280ac5dd5c7f9971470beaf8b7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processthreads-l1-1-0.dll

MD5 e173f3ab46096482c4361378f6dcb261
SHA1 7922932d87d3e32ce708f071c02fb86d33562530
SHA256 c9a686030e073975009f993485d362cc31c7f79b683def713e667d13e9605a14
SHA512 3aafefd8a9d7b0c869d0c49e0c23086115fd550b7dc5c75a5b8a8620ad37f36a4c24d2bf269043d81a7448c351ff56cb518ec4e151960d4f6bd655c38aff547f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-profile-l1-1-0.dll

MD5 0233f97324aaaa048f705d999244bc71
SHA1 5427d57d0354a103d4bb8b655c31e3189192fc6a
SHA256 42f4e84073cf876bbab9dd42fd87124a4ba10bb0b59d2c3031cb2b2da7140594
SHA512 8339f3c0d824204b541aecbd5ad0d72b35eaf6717c3f547e0fd945656bcb2d52e9bd645e14893b3f599ed8f2de6d3bcbebf3b23ed43203599af7afa5a4000311

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processthreads-l1-1-1.dll

MD5 9c9b50b204fcb84265810ef1f3c5d70a
SHA1 0913ab720bd692abcdb18a2609df6a7f85d96db3
SHA256 25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40
SHA512 ea2d22234e587ad9fa255d9f57907cc14327ead917fdede8b0a38516e7c7a08c4172349c8a7479ec55d1976a37e520628006f5c362f6a3ec76ec87978c4469cd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 e1ba66696901cf9b456559861f92786e
SHA1 d28266c7ede971dc875360eb1f5ea8571693603e
SHA256 02d987eba4a65509a2df8ed5dd0b1a0578966e624fcf5806614ece88a817499f
SHA512 08638a0dd0fb6125f4ab56e35d707655f48ae1aa609004329a0e25c13d2e71cb3edb319726f10b8f6d70a99f1e0848b229a37a9ab5427bfee69cd890edfb89d2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-synch-l1-1-0.dll

MD5 6c3fcd71a6a1a39eab3e5c2fd72172cd
SHA1 15b55097e54028d1466e46febca1dbb8dbefea4f
SHA256 a31a15bed26232a178ba7ecb8c8aa9487c3287bb7909952fc06ed0d2c795db26
SHA512 ef1c14965e5974754cc6a9b94a4fa5107e89966cb2e584ce71bbbdd2d9dc0c0536ccc9d488c06fa828d3627206e7d9cc8065c45c6fb0c9121962ccbecb063d4f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-string-l1-1-0.dll

MD5 7a15b909b6b11a3be6458604b2ff6f5e
SHA1 0feb824d22b6beeb97bce58225688cb84ac809c7
SHA256 9447218cc4ab1a2c012629aaae8d1c8a428a99184b011bcc766792af5891e234
SHA512 d01dd566ff906aad2379a46516e6d060855558c3027ce3b991056244a8edd09ce29eacec5ee70ceea326ded7fc2683ae04c87f0e189eba0e1d38c06685b743c9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 9d43b5e3c7c529425edf1183511c29e4
SHA1 07ce4b878c25b2d9d1c48c462f1623ae3821fcef
SHA256 19c78ef5ba470c5b295dddee9244cbd07d0368c5743b02a16d375bfb494d3328
SHA512 c8a1c581c3e465efbc3ff06f4636a749b99358ca899e362ea04b3706ead021c69ae9ea0efc1115eae6bbd9cf6723e22518e9bec21f27ddaafa3cf18b3a0034a7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-environment-l1-1-0.dll

MD5 5cce7a5ed4c2ebaf9243b324f6618c0e
SHA1 fdb5954ee91583a5a4cbb0054fb8b3bf6235eed3
SHA256 aa3e3e99964d7f9b89f288dbe30ff18cbc960ee5add533ec1b8326fe63787aa3
SHA512 fc85a3be23621145b8dc067290bd66416b6b1566001a799975bf99f0f526935e41a2c8861625e7cfb8539ca0621ed9f46343c04b6c41db812f58412be9c8a0de

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-heap-l1-1-0.dll

MD5 212d58cefb2347bd694b214a27828c83
SHA1 f0e98e2d594054e8a836bd9c6f68c3fe5048f870
SHA256 8166321f14d5804ce76f172f290a6f39ce81373257887d9897a6cf3925d47989
SHA512 637c215ed3e781f824ae93a0e04a7b6c0a6b1694d489e9058203630dcfc0b8152f2eb452177ea9fd2872a8a1f29c539f85a2f2824cf50b1d7496fa3febe27dfe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-private-l1-1-0.dll

MD5 5c2004daf398620211f0ad9781ff4ec2
SHA1 e43dd814e90330880ee75259809eee7b91b4ffa6
SHA256 55bc91a549d22b160ae4704485e19dee955c7c2534e7447afb84801ee629639b
SHA512 11edbbc662584bb1dea37d1b23c56426b970d127f290f3be21cd1ba0a80d1f202047abb80d8460d17a7cacf095de90b78a54f7c7ec395043d54b49ffe688df51

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 a5b920f24aea5c2528fe539cd7d20105
SHA1 3fae25b81dc65923c1911649ed19f193adc7bdde
SHA256 5b3e29116383ba48a2f46594402246264b4cb001023237ebbf28e7e9292cdb92
SHA512 f77f83c7fad442a9a915abcbc2af36198a56a1bc93d1423fc22e6016d5cc53e47de712e07c118dd85e72d4750ca450d90fdb6f9544d097afc170aeecc5863158

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-math-l1-1-0.dll

MD5 fb79420ec05aa715fe76d9b89111f3e2
SHA1 15c6d65837c9979af7ec143e034923884c3b0dbd
SHA256 f6a93fe6b57a54aac46229f2ed14a0a979bf60416adb2b2cfc672386ccb2b42e
SHA512 c40884c80f7921addced37b1bf282bb5cb47608e53d4f4127ef1c6ce7e6bb9a4adc7401389bc8504bf24751c402342693b11cef8d06862677a63159a04da544e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-locale-l1-1-0.dll

MD5 242829c7be4190564becee51c7a43a7e
SHA1 663154c1437acf66480518068fbc756f5cabb72f
SHA256 edc1699e9995f98826df06d2c45beb9e02aa7817bae3e61373096ae7f6fa06e0
SHA512 3529fde428affc3663c5c69baee60367a083841b49583080f0c4c7e72eaa63cabbf8b9da8ccfc473b3c552a0453405a4a68fcd7888d143529d53e5eec9a91a34

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 41fbbb054af69f0141e8fc7480d7f122
SHA1 3613a572b462845d6478a92a94769885da0843af
SHA256 974af1f1a38c02869073b4e7ec4b2a47a6ce8339fa62c549da6b20668de6798c
SHA512 97fb0a19227887d55905c2d622fbf5451921567f145be7855f72909eb3027f48a57d8c4d76e98305121b1b0cc1f5f2667ef6109c59a83ea1b3e266934b2eb33c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-convert-l1-1-0.dll

MD5 285dcd72d73559678cfd3ed39f81ddad
SHA1 df22928e43ea6a9a41c1b2b5bfcab5ba58d2a83a
SHA256 6c008be766c44bf968c9e91cddc5b472110beffee3106a99532e68c605c78d44
SHA512 84ef0a843798fd6bd6246e1d40924be42550d3ef239dab6db4d423b142fa8f691c6f0603687901f1c52898554bf4f48d18d3aebd47de935560cde4906798c39a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-conio-l1-1-0.dll

MD5 031dc390780ac08f498e82a5604ef1eb
SHA1 cf23d59674286d3dc7a3b10cd8689490f583f15f
SHA256 b119adad588ebca7f9c88628010d47d68bf6e7dc6050b7e4b787559f131f5ede
SHA512 1468ad9e313e184b5c88ffd79a17c7d458d5603722620b500dba06e5b831037cd1dd198c8ce2721c3260ab376582f5791958763910e77aa718449b6622d023c7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-util-l1-1-0.dll

MD5 735636096b86b761da49ef26a1c7f779
SHA1 e51ffbddbf63dde1b216dccc753ad810e91abc58
SHA256 5eb724c51eecba9ac7b8a53861a1d029bf2e6c62251d00f61ac7e2a5f813aaa3
SHA512 3d5110f0e5244a58f426fbb72e17444d571141515611e65330ecfeabdcc57ad3a89a1a8b2dc573da6192212fb65c478d335a86678a883a1a1b68ff88ed624659

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-timezone-l1-1-0.dll

MD5 43e1ae2e432eb99aa4427bb68f8826bb
SHA1 eee1747b3ade5a9b985467512215caf7e0d4cb9b
SHA256 3d798b9c345a507e142e8dacd7fb6c17528cc1453abfef2ffa9710d2fa9e032c
SHA512 40ec0482f668bde71aeb4520a0709d3e84f093062bfbd05285e2cc09b19b7492cb96cdd6056281c213ab0560f87bd485ee4d2aeefa0b285d2d005634c1f3af0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-synch-l1-2-0.dll

MD5 d175430eff058838cee2e334951f6c9c
SHA1 7f17fbdcef12042d215828c1d6675e483a4c62b1
SHA256 1c72ac404781a9986d8edeb0ee5dd39d2c27ce505683ca3324c0eccd6193610a
SHA512 6076086082e3e824309ba2c178e95570a34ece6f2339be500b8b0a51f0f316b39a4c8d70898c4d50f89f3f43d65c5ebbec3094a47d91677399802f327287d43b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-process-l1-1-0.dll

MD5 dd899c6ffecce1dca3e1c3b9ba2c8da2
SHA1 2914b84226f5996161eb3646e62973b1e6c9e596
SHA256 191f53988c7f02dd888c4fbf7c1d3351570f3b641146fae6d60acdae544771ae
SHA512 2db47faa025c797d8b9b82de4254ee80e499203de8c6738bd17ddf6a77149020857f95d0b145128681a3084b95c7d14eb678c0a607c58b76137403c80fe8f856

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-runtime-l1-1-0.dll

MD5 883120f9c25633b6c688577d024efd12
SHA1 e4fa6254623a2b4cdea61712cdfa9c91aa905f18
SHA256 4390c389bbbf9ec7215d12d22723efd77beb4cd83311c75ffe215725ecfd55dc
SHA512 f17d3b667cc8002f4b6e6b96b630913fa1cb4083d855db5b7269518f6ff6eebf835544fa3b737f4fc0eb46ccb368778c4ae8b11ebcf9274ce1e5a0ba331a0e2f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-stdio-l1-1-0.dll

MD5 29680d7b1105171116a137450c8bb452
SHA1 492bb8c231aae9d5f5af565abb208a706fb2b130
SHA256 6f6f6e857b347f70ecc669b4df73c32e42199b834fe009641d7b41a0b1c210af
SHA512 87dcf131e21041b06ed84c3a510fe360048de46f1975155b4b12e4bbf120f2dd0cb74ccd2e8691a39eee0da7f82ad39bc65c81f530fc0572a726f0a6661524f5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-string-l1-1-0.dll

MD5 f816666e3fc087cd24828943cb15f260
SHA1 eae814c9c41e3d333f43890ed7dafa3575e4c50e
SHA256 45e0835b1d3b446fe2c347bd87922c53cfb6dd826499e19a1d977bf4c11b0e4a
SHA512 6860abe8ab5220efb88f68b80e6c6e95fe35b4029f46b59bc467e3850fe671bda1c7c1c7b035b287bdfed5daeac879ee481d35330b153ea7ef2532970f62c581

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-time-l1-1-0.dll

MD5 143a735134cd8c889ec7d7b85298705b
SHA1 906ac1f3a933dd57798ae826bbefa3096c20d424
SHA256 b48310b0837027f756d62c37ea91af988baa403cbcbd01cb26b6fdae21ea96a2
SHA512 c9abe209508afae2d1776391f73b658c9a25628876724344023e0fc8a790ecb7dbce75fddae267158d08a8237f83336b1d2bd5b5ce0a8eed7dd41cbe0c031d48

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-utility-l1-1-0.dll

MD5 6f1a1dfb2761228ccc7d07b8b190054c
SHA1 117d66360c84a0088626e22d8b3b4b685cb70d56
SHA256 c81c4bba4e5f205359ad145963f6fbd074879047c66569f52b6d66711108e1ed
SHA512 480b4f9179d5da56010fa90e1937fe3a232f2f8682596c16eeaed08f57cf8cffeaa506060429501764f695cb6c5b3e56b0037de948c4d0e3933f022a0b4103d2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\awt.dll

MD5 d490a92ad643cdaa908acc6c523331ec
SHA1 685485b7cfd294c23a49a67951c082b76472631c
SHA256 3dabdf89394fb5b3c87a7a148b53b6869698eb656d1edf6a88059f3fc8bee08f
SHA512 2d5addcee9308362187839925e27e16b36f458fa64eb45a50157c5d19b93ecdcb98d2c4d43433f009c509adce89da6130a70f92b259217704ed9c06bc1258b07

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dcpr.dll

MD5 f6d39ff988711a4ccd27c661e995e56e
SHA1 bc8312b511e45338522314644cfe879d7e868efb
SHA256 3b2e8a2045363c6dc21afa5c11ab68b0288ece7b7dc439abeac425578cf406c3
SHA512 ebcce9d61b4d2a56edefcd69c98992bfb973bf4df6961ac2aaf7b37032751026854d9cad83b1bc9dfadb57b189f15696a6bf60601e25a0e80a70a3fd954b968b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\bci.dll

MD5 8e57838d8353c27b6829acd776dff101
SHA1 079218bb58f2256148a0aa04a7adf10a1849cd50
SHA256 37c897cb22573c16ddfbc1d7f227d8081f449136b22e418d3b0fc78fcdd47081
SHA512 992e0093c451d35b6b8251cb5128d1ffc2d62cef2742fd3b1aaf7d16783922ab5b80cc1ac65097a071862657b51612acfd093534e266c64711cc2b56c108e920

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\decora_sse.dll

MD5 44fd71d6208e200a8531d1aaecfec0e0
SHA1 3aaf7431274da063441854b12b2eee9327714d7f
SHA256 49c665210084dd50379f5c83418896eb86d1d6700d94bbbaef8f9394c598e9af
SHA512 9d10601b56c7f1cf4de0288224e23897da9ddb5f0f6beb26acce6486a20a25046ac4bc60ff5179123d4a0fd8fcab7872a36426c09f0775a428c09a3fc52afb2d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dtplugin\npdeployJava1.dll

MD5 c6705167c7d1ecc1ffda84501d327349
SHA1 13bc19a74199e1b065791481ef566517d60b79d5
SHA256 9e8ca7fc15b88b5c1c46d9373e29023247dab6f2cb756de35ba1f999ffc0a1b2
SHA512 440c6097a9dce104ce02749ec98cdf469db08985903b577e2595dfff2dd92fe6c50620c3a16e1b8781ac17b0da50694c4f1c451571e076f9229619dbe6ffac1d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dtplugin\deployJava1.dll

MD5 5466b1d563c7eee2abe0869b1026782c
SHA1 cd2b2a0f6bc6c770778b8d0795f9dd1be692b0a5
SHA256 e3b3f41eb00a2605c50fcb9c01be50fcf4bf6d16b06ee9f0d791b7a763ed9ec3
SHA512 2450e03945e0fc708a0f6dfc259e23a197d3e7c1a244d88b2e0115aa74cfd4f32aefb9705e69c83388c163ab51b929f93c0b083cf980f414684acc483f02cee8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\deploy.dll

MD5 c5b2c293650ecea377b5c586ccb035cc
SHA1 21855c9a5ac053143a6953a953bccb2556536362
SHA256 8f57325b5149713806d427f365083328837209aa26961f5b274b828f2718776d
SHA512 0b68f5c495e3238bb5b81d3d8f213208ec48f528629c4632801822a299e0747cab49f001bcd1c055e75c314703383052b2ac7605080643202e14ffbe233a1cfb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\fxplugins.dll

MD5 2cb0aba2aaeccee0e64b48c7dc5e0c13
SHA1 13fa9458be298dde5573e83f0eaa099d88c4fe59
SHA256 d255ee9c855ebafc48f05f0844bb2eb1a7b5ae82842fff8484aa2e09616e9e3f
SHA512 b2dedbaf417e0851eff71c17467348a3fe52072afe2a97a73001ad40f8a2aa5fb7af8cc8722ba135dbf5b8db0682994c69236c089e612025004b9d75d7e076a5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\fontmanager.dll

MD5 87b86cda1d6df190d8471ed546256428
SHA1 a36169d7b8fa248a6647571c0319c7ac54e815a8
SHA256 8a96e6e5aac86ca14b4014773309beda90cc281eae2253dda3b4a0e469a3ce46
SHA512 201034c28707382c0bcc397ce1a2bfa81567723e29d3e484733a4fc5d4dcef84d099f96fc963e442e8823fdf1a4305231321c9603a7c166e3432f6fd88ed3151

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\eula.dll

MD5 e89aa9d7c55f98d339a49ce2f7fa1621
SHA1 d52aa48e73bf59cd790ba4c2f5cda631822e4a04
SHA256 7c6714f9fa1e4d6b8c87b99090def9bc06a3d7f11bab42864dc4349f2401f1f5
SHA512 f1a09013a1eafc5ff86d1890e90a7add5ba4d410787d2de986811053755f42942a8b9a467b49fae4558b4b053651e8f2935a038bf4a0e63a4bc3be099dbab759

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dt_socket.dll

MD5 410247c1e2d6fe985495a743f3470585
SHA1 af3b172ed825dbffc86b6bac3db15c4313e9ac08
SHA256 ff8007c358fb0a8e72c436b96bcc0cdc07641628bcc1162d85ba99f20268c4ec
SHA512 ec5d74edf21a16fd0ebfed506cecbd0e1e53e18363850322c0a7368ca1d745d7170bf8c6c5cbcd01947727aec747d567f86a0601856bf3a9fb033e487804a8ca

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dt_shmem.dll

MD5 4c4736ec42f9fe5a625e1075d5a4ba76
SHA1 f801d4f4683216f397a4a7de068093ef9d721689
SHA256 65d7a60a309697026ce202a19c9efb475f48a860be3b5e3bb87d985ab7235a57
SHA512 e75fe34fa5745f5014aa2c45b713f0498d621ebf04dd364541f2d34e79a048e51fb34784fa9c399d316f20b38f7b42cbad565bb053bebc98414e9df9d17b1a40

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\j2pcsc.dll

MD5 3122ed91712925c702c8485eda5d973f
SHA1 0fb2a7e7f93c77cb7c73b705376b5d9e25c02975
SHA256 45d59e544a4ce244ebe2259f339d2f8c9a0d5c08fec58e23e9eada3f6a97be42
SHA512 e7f6c27f333fe64d5ff1791fea5fce178bc7e5a4870ab2e875b387b8adf1143c2ba52311231daf28eab5dc8a79d63b53d6d59ceee283e2f482705b41e55c4b5c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\j2pkcs11.dll

MD5 d8e9609228a58f6ee0f2c65f0951da50
SHA1 88110286f8ccb34e590f2810d052b92063a29354
SHA256 1194b079a5f6722e643bf8dc7034515bb1428038172369203dd7c7f01535ce39
SHA512 6a8b8ba2f707dec2e1e8767b8319452e48bb722c832f1d7f4e0bc75a8217c5ab0a8a50d2f3ac61aa265085fd5ac7cfb7f6c9bb9ac4e06ed6c55706db293048e0

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java.dll

MD5 949fc2c63994ec317abcccfc1452ef22
SHA1 41d496159e826e894988ad1dcca7918d10e793e5
SHA256 6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8
SHA512 26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfr.dll

MD5 74d62b779bdbd5ff541a8eccbc2eead5
SHA1 752365939c5f4a1f378ab136e6474bbdda1af19a
SHA256 f7fda38c0d1aca4a3a912408094dbee0404b3cc2ef1e460b891f3e50b805b3a6
SHA512 1c82a082baa740b3de562d26a6add39b70223d4e77923480ced56871dc1134358cead2ca792a704bf77014f1cc983231e158169794142806dd4b95819eb0bdea

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfxmedia.dll

MD5 2d146e5a772b59b798faf9424968e7cd
SHA1 d22fc56f02558b3ca051e07bb88f4e8712223ac9
SHA256 10da28d64cb67a7bf3ad157db48c9bfbbbc839efbd57b66bda2cf51e6973bb48
SHA512 d41b9024bfb692d8dadb1ff5ee4db0e24e39ed593a6792816ff0448e09cd263ab3c7061017b0ca42361c80748b9fc9bd8b413c520fd85b9566281f8952132a72

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2ssv.dll

MD5 8a2f0ef26e972724690f000879164a6d
SHA1 5557293b3bf1aa8357617d3ea331c85a9d44bb24
SHA256 b0af9e8a496afc6fdd5633e3c30ce5ecddf4cab8947e0efb9fc4644707f4a53d
SHA512 a968aed422bc35891f6b140fa153aa95133ccfbd42daf2a96a8d809f51f499ced55f06b54b4aabf8ef89c56ab0101fb4f5b1b5cd1642aa7b12c1eb97669f01a6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\pack200.exe

MD5 b255aa86da28dcfce8ea84530250233d
SHA1 ee11b16a659df2ba905e8e913cafa603598c0e47
SHA256 7f134048aa7ba1aac76cbc6410fc243969656b6cb545fb9a675052ac0d0079ce
SHA512 6fd01476cbe31cb5a9fc0cc0dffe0cb4032c7ac17fa74891631484789fba108ec53d3d1a8bc596fb25a24fdcef4f9886a8493c2bbec3b5df2a878f3d303d1d5d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\tnameserv.exe

MD5 f51da6fdf63a1d723b566f06b7111e69
SHA1 aa2dfeae2d584994a2411c9c61e70b73c3c4e88d
SHA256 6eb6cda8c2881765cbd0ed458e4c946082dd3dd7f74760f75c9a4af84c9fe4b2
SHA512 75d0057daf2c6f93f8958d0b3acf0e092e5532282958b58ebb273156919a742509805a261f56aad9565eea349c2ce6455dd772c887538cb1ba4eb6f0669a2a1f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\unpack200.exe

MD5 9bc8abeedf17b7e6bf826dd8ddeec12b
SHA1 5bdf9e3f1ccd272c20e85dc3782065ce2cda4285
SHA256 3122e3a84aaa39a52962e1f134408ea609ac4916c7461db96c10d7cf0d4d1ef1
SHA512 425cef99302f1bdb8359c5f18a3ab74b37432958767677102dbbd5bfe727304605440142163450de59d6297053d67bfe46cdb486b889d8502fcd547b2f3a8d4f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\unpack.dll

MD5 816b15aea405cc9c0c8549445cef3b99
SHA1 1de48dc27b1684d5ef5c4a925f4aec1590d1ec47
SHA256 11c146a6f7bfdc0b76f763dc50aff00d680fbfe4568410ceb19e28fc0789c5fd
SHA512 94e0a065d6f83f6276d1f239a2119da978ae35bec73787ec112f20efb855e4be9d63f5478984d31aad4d5fc31f13d90630715440d3e26f9d4882065019904571

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ucrtbase.dll

MD5 61eb0ad4c285b60732353a0cb5c9b2ab
SHA1 21a1bea01f6ca7e9828a522c696853706d0a457b
SHA256 10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd
SHA512 44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\t2k.dll

MD5 e0f0791f583a14d2d66782fb39d48714
SHA1 de29cbbd23a98bcf7bb5aef750cac42b8172e567
SHA256 49ccf53650d5eecc7e8a38cd393e8c00d935e768a595a4d29cd94dde4f2de8c3
SHA512 1c680c02297f73e3eab741129cb14803825f037073ec18ba7203b05164eb64c8207a9bf0acc4700b223c0b1aa09379ef37af7c645c4096979aff93847f4637a5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\sunmscapi.dll

MD5 b813162906a8a8fb6d11d8efde9c18fb
SHA1 999219efc3178cd9c23dadfb5c63dbc7052cb755
SHA256 7089d5113d90ca6b139e9b729623babf56ee2963defa6288769aafce0175172b
SHA512 bb6efe9df797b95c5451eba0844990ce2bf7499256f03b87a4aaedc34fd63ec165a375f9b20e5c5e29b7ba48edd379188109f26665baba3a6ff24e7f1917d6c9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\sunec.dll

MD5 5ea0d610e366e3e1548bd3659990d90f
SHA1 b7674cd5b71527691cc1108ed76a3a05a83d1a1b
SHA256 1783b234e032f92b5b5e725bb8b5bdb7a362dae7885c65038be786fe28f870e6
SHA512 d146aa497e92066a5c98ba86e46c2af04bc24e5d750580f26afca4986ca1a2bf79b4a36e481a722982a0f19a22ab4a255bd4afda0c7b8bbfd0c1ff10ad7ef383

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ssvagent.exe

MD5 843eaf8326525beff0c67fae73d89c65
SHA1 8f847a4ca5b1ae13a6c8ae966d1b16c569a3a17f
SHA256 760ef2f3214e49a8f34919a5f507f8270ecbca5a147249463c8003d94a72b56a
SHA512 c46170fc09534c4138a0b9bc0910d9e365bc3ff9854e6a656412153f7d4da9523dc7d2d5789f91a3a14a8bc0a94a26a72232b20f58d2951e7ab055d146694f3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ssv.dll

MD5 24ef123370127d3bc375339b23175982
SHA1 e0cdc9d87c7b8b25a47828db6ffc965ae2e44def
SHA256 1e9d524e610ea76fd3155d2c06b38720bcd3c05b86698cb10d0f398e12a26803
SHA512 95bf6fe4a5e575626a775f810b30d49a7eaace8c5df351f6b8e5e660e7b53e601764c3a79dcd423d39ab05d8fb022cb70d4794d804398fdced9d7a859a65722b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\splashscreen.dll

MD5 c1ee29cfcd480a26e936cde8ab01f6f5
SHA1 c09ac014155a9c6a7153817e1abf07193703a375
SHA256 0fab9860f9968ea50a40332448ab7e91ce5314ae77600c94b41cb633c4a23e6d
SHA512 5092e2c00b81085134437e9aac01865e152e12fa2a6fcd89f3877a150f3b6fa423800f46c1d4a50a0785152d962e14a03925e87fd11fea7ae6a14b18d85bc852

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\servertool.exe

MD5 fcef40876a2b1677acd13c1e0c881a8d
SHA1 34f0db8efc41a14e57b5d03410400709cf8d3141
SHA256 2cc1af0d83f7a33383cbc27fe372df472622217182550fb0c89e2141ae851b71
SHA512 b5aa97aecc1915f11b37a0f020bc5fc14f63fd28cdfd96f49753afd1b158022a0156bfba6f2a64e186445718d52f7fbe7cff75da6da6d9c8bfe6722c2753ef0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\server\Xusage.txt

MD5 b3174769a9e9e654812315468ae9c5fa
SHA1 238b369dfc7eb8f0dc6a85cdd080ed4b78388ca8
SHA256 37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08
SHA512 0815ca93c8cf762468de668ad7f0eb0bdd3802dcaa42d55f2fb57a4ae23d9b9e2fe148898a28fe22c846a4fcdf1ee5190e74bcdabf206f73da2de644ea62a5d3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\rmiregistry.exe

MD5 1845868936406a4b04bc0041b82466a5
SHA1 5899265b5197108e482479bb73607b529b7b6803
SHA256 4ac831ae074760e3517cc5c5ad800c325049dbf3d98ce9d6a45555887e501d01
SHA512 a5dd10fde76f95b0d06da916e0f1e0c74ac95b41dd4b38e752ab8f304e0726d8ca652b247303f3e94daa1cb74e9a08528d8be01ac1e9ec92f69b4e33498bce9e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\rmid.exe

MD5 abfa48731cde27264da847fd29aa2cf0
SHA1 554891d7f158d51c5b2d801804740569cc632c54
SHA256 52c61766c164db9453917c2ecd083b53fe4056832c9dedbd96644d22f0e26eb0
SHA512 77264b73bf396871bfe5df92b13946e0653488c4f31a947b85f006ae23b66b6caf431a66d5244d2087e8015b35eaaa1aae1c6050c70c4cb13ce50ef49831aa87

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\resource.dll

MD5 663c721d2dce7157c388aeab4b8758cd
SHA1 284112dccf35913b93a175840e4baaacdc39aaec
SHA256 c76a1d56ee567e53a3ad1af153e6e28869a49fc054ba43f441f19a241b15a3bb
SHA512 ff74a340146fddf0314a61c309c4cba87ce88c6213e84d56627ab19da7991ea9b42c5cad2b1559bbd349f654ace219cc6d17bc27e04865326d6835a68e14c7bc

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_sw.dll

MD5 331369b9b339fbe10ec6052bd4086671
SHA1 f3cb3ee4635df14b99525f1ec1bf287bcef4e722
SHA256 d699246f105d05b9441a58bbc8a631ce74f7281f88a78dc6c4930b538bfa6d60
SHA512 0aa635c8a1cf0174af82c82774a22d37dceeeb334b4bbd13203aeb4c4399f2e52cd850db376aa07ce6945516d8aa96a6f046b2771bd15c41d2af3021b98af607

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_d3d.dll

MD5 c95f0ea3edcec247791942098ad738af
SHA1 38db711db8f27276eb5c96156289b1d323333663
SHA256 700c6dfdbddc4cc1ebfdd02835c7942e424fe6b694579a67b793406a11f7afd9
SHA512 c4093309441110cc70bef9ef8c02cf1d579068442692715b7b71d5bc40c4ffc0c1148de2195e16ac946b2479bf75986a3c9feace1cbd22b63af87f11b94d07af

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_common.dll

MD5 93dabde1ac41ba0107239faddfb52865
SHA1 4b2a0c6e36429687ad4d4b8b647e71f82b487254
SHA256 c23b3bf4beffab1c9f132656084615d7a90f181bcceabc9ad6626a47bc7f797c
SHA512 92d7299929f3b9eb661616129a70d42f7088a253cd7c3cf8c8fa1f744b0657adb65be6aaad095d119d181e1f5813cad613fdfb4dd3ba0796954953fc4bef743b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\policytool.exe

MD5 1fcd594ea6cc06b9a7f85dfe0883c0f6
SHA1 23f7adb866001d83c4471d09256a1b97d2c33e09
SHA256 af823b3838552ff3c43a01b36ebe112ae8bc652c7ba64a48b573bbc32b73aac2
SHA512 57eca05b6d48c5d1af3b9fbc1515f177cfd49bbf6ae06ffaabeaf56d06095abc1c36b6265b26ac87c001eaa0e2dfe3bc05da061377a29fdbfd2b0d3b1f3e9804

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\plugin2\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\plugin2\npjp2.dll

MD5 668d24d0ec961ba522bc84ce096246d6
SHA1 fe20ec142c126ac9ac851bd64bb6cba84ffbc678
SHA256 36aff0f80162041a2efc94ec3d8a49854c2bca1656cd3b6912ed32387f50442b
SHA512 2925234b43833c8a4f1781a1b5a061b07b827bc872b4573e52203d5033051626826ffcc38358c1925d74d7972209a849e2ace029694121b256666cc67467e99a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\orbd.exe

MD5 7c922106597b57fbafc27ad0dca05920
SHA1 bff3b1c05c72de725eae5396d63043454965d72c
SHA256 eb7e4d9cb4b3c41ba8618f935ba7af4a09d01f65bed6a98177345565965ace11
SHA512 d97125b073ea2eb5b986f1470f7a352d9c3058155faaa29c8cb77e70a8a5564070756df8e19cb7807e2de498aaabe0957d57126e197035bfcd5244667af8315d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\npt.dll

MD5 e62346482352eae1a37e7149617ba94d
SHA1 e5158f961a27a3d7e93f03a6b78dd13696bff1ff
SHA256 4e6a9dd7869a0a6b4edafb7b83642c862d0023098889e361a659ee9bdb787655
SHA512 62a18dd0091a65bfdcc8ad4cfecf7beee4c49f09d047583a35f99e9971774ebdb118734485f9bc889158871c901b094c595bd0cb644632f7a1387f8910d61ce7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\nio.dll

MD5 a0bf549a97dd4752c34bd7d502f8d778
SHA1 1197c9c31eb06bcf81d265c33d11c6db016c7378
SHA256 7a2cd76fa640ec6154ebfac5ef46d472f08d5d1c00247049ac67896b6aefb156
SHA512 87c8f7201dc8c50403c990b84400b71a710243969f590a187604bb1bb1678582e95e28521ca0aad0565c32d26d7c4799c1f7f161cf344e5f6fa627641720b3c1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\net.dll

MD5 1f06a0a450a470a60370089408237e36
SHA1 ab488bc6dd912a4107ee6753d760fa2a0c9ca2f0
SHA256 69ae7599e82c5c25906faf7f845421405caad07acdbb5f1021aa56e170c5152b
SHA512 1d41781c4b86ff2fe62650f8db32ba6df3cc029d0faf9d4f21a3fdace2f3bd7ab667e70a0055cf7b84b54762ee35dcdd032ccb41bf02787b3e28bb7230ad0ea9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\mlib_image.dll

MD5 c03abac4822b06ca7f4bfa9d1ace3d44
SHA1 da8749639fb4e7bfc2020342a2aff26d622bc4a8
SHA256 ad565b5bf3c0f0bc18411fd9a7bf8ce7aa556444e8aa0ca38a66d5cec6fab05a
SHA512 021cd0bd6e326d5386abd483ac755bc5fa716486d97cc43cd17243984768c71450022499f05e6b79c2cd3770771c0fab13d332b5c4cd276b5239e083be5e7550

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\management.dll

MD5 37b0569971b26876e53c6de81a1b3f92
SHA1 b11cd13b385201dcfc0c0a493c4590975159b902
SHA256 24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b
SHA512 d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\lcms.dll

MD5 e5db8a41229567f4e690ddb742ca7629
SHA1 e814b3f0cc61bbc1345c111235a38473fc88b214
SHA256 b86e4fcf2c53bd7eb46c017d53a194c6b2224dfbed72bcfaa8a8825e4adb02e4
SHA512 f457e8111dc856422793af5068718fe078b1dcee3418c0bc4c7e965ac91e094241eb65bd4f1dca0cc7477c33146b2e32690deb99fda0f84d18ccafc5eee734bd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ktab.exe

MD5 68815b6c76ed327d7bcbadfde57e16a6
SHA1 22cb9005419bf2af52fd50823ce16791dbaf740d
SHA256 a98dde45ac6ec2a9190d156a0d282908a08c08738878c1c87b863c3bb0561892
SHA512 de1cae42d5db8b9efcd1a53a187543f96dd9d4c77e1d9ac8ef6f67a7a518c139edf11b9df091c9817e31e4eb3288cf62bf0610357af930c4bd0e64fd49607708

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\klist.exe

MD5 6d5cde989983d225bd16397b342f93bd
SHA1 170904855f49308efeef76abcbecb1c70c9f38b2
SHA256 73a17f1679865cff81f3e049c21ce97f83c19ce208526c8b8aa08ba50a5b7ca1
SHA512 6103ab6c8f5596002ac52eabccaa578ec7af115d784592a10a7d520075aa71891ac793edd4b8c8d96f8744858e70441e02211cbc7a17d588734c7aa761c6fed6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\kinit.exe

MD5 e71812ce5d00ae92154553a95932f412
SHA1 956ac5a6127622b99dcf8e6e1256b0d7ec0d5a34
SHA256 bcc997dce7f72bf2a6b2be5d7fbec5c8de198cb0190d8389c2bd138495554c74
SHA512 a6308c24b13e3b41d587d00fd1e47cc69ceea2d733c1e9240051eea7b4f5e66d3c126a8e2d283420fd8bec256c37bbdbfa5dd4a9c009079a1d3a80492b497f48

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\keytool.exe

MD5 a8b499100141742fbb90089fe4c5f90e
SHA1 32dd5fdab96a6693c27c8b6cd8914ce213164336
SHA256 d6d2a0e5cdacdbfe30eb261204a019fbb835da0c7d42d5d4d935ac37077ac179
SHA512 8782c7abbf60a1ff773d742c8e831c186d5e79c9472fa291c11f827dbe5adb04f7b24045b54eb22bdf27a1accbbbc87458ab1f3dd37054d0f68a398809aa89ce

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsoundds.dll

MD5 c8f9ff0c99f21919edfa5cf51e5f3c5d
SHA1 09249700495e919468331d3c6a9a8eaece8858c5
SHA256 5e223ac8822e9fc8f991825f7df99b0c0246d01c77c3451f1a2997140580b1af
SHA512 36f318ea0c634ca2f47ccc7fff8ae388d5cf59c461589793eac55825115f0dd675ced98a2b73ca6db1bda4c0ad0f428812fa45dc7d9f5d6b66d539b9a0efec93

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsound.dll

MD5 920711e14ca19a8e13bb77e136b16bd6
SHA1 e1ccc066d8d4b1eb76d68baa64049b0b8db7e6f3
SHA256 cd3d2a4628feb4e855e2e8afd230804deadb59ace599d9a0b29dcae5b56d16d6
SHA512 758e74efb12067f9efe838c378b8b51fe065cd3cd7fd818ace46575a359819fc6e4cd1ee85b98a3c1fc134c6c045b00dcdeeb6c51ea7ce7b38091aaa56b280aa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsdt.dll

MD5 7df2c598323379d38e33e12770b41958
SHA1 97f5b6d7d2352369ed4b28a2eb8adbe0eaf64316
SHA256 6cdebb01148510979a8a67655d00d2dd9ebe9570161b076fef4967471f28ed4e
SHA512 93a147307a7088de7bd5948f77c7171a75b67d426d004d00e111633d9db1f7ba5f8aec60033fdb947ab6d3f5047eef9b3bab4effebf10c41885c857b95ae37a4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jpeg.dll

MD5 21a18357ab3ac03a9dba8ec492c69a4a
SHA1 cf778a77ae869d32bda9e8f07cf7cee184b9db45
SHA256 13f85ab5b740fcd03e4175b95c69a5b87cfc6fc1bea372c5172bf4f87ad55138
SHA512 7752a77e6575bd5e7aaeec565ff9bf1541a5772dc81d33a50bdb7163c577c4d0f1bc579d07375633b210df979b8caa822b28d9e752c2c601e3e3bc762fd08bce

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2native.dll

MD5 b85fa7bc2c2d32db3c4042fba6dfab3b
SHA1 2f72c178781ea9f9b549a407a2590f5255cc441b
SHA256 9831bbf5d60242dc2f26e61bcc9a92204e2a77d90b8a3e7af2103e23a339dfc9
SHA512 1eacbb61367d05b83fd6a0a5da561cafe975854d71d0be16aaa4da895707230c3d67a5ae07bedcd74423cfc72739c66041a86d002c0950b0c8e897aef9558883

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2launcher.exe

MD5 52dda94059a249603794d850fe6a8e15
SHA1 587834e0ca8670cfcb178f79564a4d17f21599a1
SHA256 d883c234227e4fa1d5d44bc7e40957e2aef1fe9aaf2b36c03f28f8a83de5656c
SHA512 9c6f04dc0a1aa3e0e619237a2a873e90d0f2223c8373945b0c5035b836083d10d7b6f50e1b4b51516ae5ba725a7281a7ed7a4d629aecbf2ab744fed533698328

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2iexp.dll

MD5 ad256ff4303579453bea57922fc1de65
SHA1 837a4a0aa46f6e54604f7002bb74bab252a69367
SHA256 2da988ede307852b96c9eacf00b5aecc947b91f3700938cf52e86d217888d0ea
SHA512 2d5cb7a597ce54651ee0141236bd1878698fd2648c20b906cf54422f19cbe2ce7d2326f5d16ba74bd6f1e63197b536de16524f153b730f25f53d1ef29e129d8a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jli.dll

MD5 1ad845c9e59affa1f2feec8fc6315857
SHA1 4f7397b957956a7db66e31ee95e698b109cd04d0
SHA256 f62245ed37326a3a7fba6003a91a2c2baf816ea81286262f2772ecc4fb2042ac
SHA512 e1be782a292afeb9a34a051559ebe5670779a909b2c71e25dca883d87ded9fbe6d9000e695ccd45c965ace4fc8911e7951f616fdfdf1eebd93ab19b61dbf2c98

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jjs.exe

MD5 a649a3454c7a6b4a53ee5d771c2ab707
SHA1 04c49fb609982375ede216303f18abac14d0d4d0
SHA256 10211ee851ac482ae429349ca4b540508bc292dc92cce5d12f31318843fd2e75
SHA512 1b8f7153bf9ba5816267a88331ee9e9fda22c50db92a82fe652dedca23683b931858d60661f8637154a5bbd4a9a374386d5063b79f09f73e5e685e97d58f6376

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfxwebkit.dll

MD5 4fe724800a23b7d74c3d6c5c1a080dd4
SHA1 8a47c02495f39188846d351cc28c7619af8f08e4
SHA256 fd2a9df5a7a2fa119ccc716f31eef577b396dbc070322f63635f1372834402ba
SHA512 915e5ae4312c6194ce203e1a4b123ee2d40623a57e63c8dc3f04f306135cbadd850c20b7649b35c66681945256a77cdc912ece8cd47d3e9ed77f38e2a8cdf036

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jdwp.dll

MD5 7a8d04f34af6ee50ceae3789e0cacbc3
SHA1 efb55b885b4dae389919f3cb5cadf7eebce62a63
SHA256 7a951fa676508723b79e3e206ad2e9a3b627f658b3078b92c8456b076caf6c2a
SHA512 5d2496cf8808965c5153dc0b5fb5467537e0ee4aad0b9e92e7c3dd352edba76d648e87e2da8a8f87da669298e8e5f3e69b380d3cba322eecf5b669bbc62b1689

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\JAWTAccessBridge-64.dll

MD5 a80d422ddf4449546f3decf01032a035
SHA1 cb85cae8d5aa5992a7a25ec6ce7799662d90daaf
SHA256 36281bee3a089620283cf8e85e9b839a004b48dc952b523949922612a2e35146
SHA512 d1e3e49140867eb89433c1e9a19a8ff489846ad79bfb278d4bea24ebed16efec09177962878be9a7057d51f52d29921e170f2fe308425de6d552f8f6cc4ce735

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jawt.dll

MD5 b7a1000a27c5774160ed66ff97c979d0
SHA1 192c06bafc5a45bd2f98e7c385853d255157afa8
SHA256 d4b402c9d2a6e662ae7219ae00eca9dcce94269aba73116c6af4e5812b384503
SHA512 83ba9b6737cd09053c047f8d8455bf950464347d0f80b060e5a08ba814752287c34c8428e1270bf02371441b604039fb6c144a87b57ee5566d75e1bfaeaf42bf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java_crw_demo.dll

MD5 213d33c3bc1c91c64c909acc951957f2
SHA1 f73ae3e39fc2bc815279ddf5e57536efd26e9427
SHA256 8b4f6d6bb6b5c015824c45a776f93ae700af7e8bc4c3f15c9e63dfa2fdb0ce3b
SHA512 82f07f611387a0aa7e1e1e8c2f73ae0ad1dc27a1443f369713d416db2055a4087dd73b5f8721643788a49b2937109bc73e9ba5e42631d483326316593973e06d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javaws.exe

MD5 fd3824c639c079da7ca2e40d2e03614c
SHA1 bf3e9853a3e20c79fef2e04a24a0be87421edc76
SHA256 8a8006658eab33b332787b35636b4f803b8634868f94b64d393f947a1d93c765
SHA512 074d0f7c4454b240f6eb9ac05d9499b3f3f555895fa75dddd47fb9001bc613ffcb4a9a1febe464f5c16ce60f2830b24ddb3b663dcd1008bd8b34e5cdb39eca00

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javafx_iio.dll

MD5 478670109cdd98a317fcf0a392735e8d
SHA1 c76913bc9dabe37b927a1857705705bbceab809e
SHA256 e8e102d6f1a07440d57f7b30ada46671562c1f22f31486e789a0dadcdcc0154d
SHA512 8d5e42947b655a4b6e25498a971135d3955890e6ead6eb9bfb425afa8b849b78a2642a38c94705efe13a493367235181a877025bfe18450d97d6c3e732f1994f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javafx_font.dll

MD5 857c873dd97fb776ab2a09a6bf1a0652
SHA1 a55d2db79bb903c2d3f78da1d7cfda141064590b
SHA256 7a2c11541e683483865c55d400f71704cfeb81a3d1ab222016cc4c8f3f8eed80
SHA512 e92a6e43d02724bebd7e2d1ee1c8d4eab5b2c55f1cb39d31c21311361a6c02b433d424ca32cbca2ab55437f3e2affa088e6742382e83f6c01421fee048220f41

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javacpl.exe

MD5 1cb69e18bbede1266da41f00d0a45cd2
SHA1 ce7e3f06f7e74c5ec367cc7c9fa3f0c38cd2f307
SHA256 1e3334f488b8fef03432d87640c31176c13ed817feda163d8b7288793a67f7b5
SHA512 a9d10cbf080daeb347164adf485d9420a94c8aaebec8f33f029a91ae5bf7ea8b1aecd7d76f87db00d9923cf5d78c8bb26c654f392412e4e36313cfa0e9e52aaf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javacpl.cpl

MD5 fcda3200760c9b36bdd60a251d330661
SHA1 4c4ee011714f08a0171173a9ccfcba63e68622de
SHA256 e6ea0fc7e1e43bd0e10a17c572ce43d71b3576863bf77f7085401c19f6f7792b
SHA512 8d7bf54c03e2a5c5d17ab22f3bc66f9dfc867916ee7f4eb3fe85e07480923c7a875b23019b691c862cc10f345e503da8ad95dcd09a44fa73ca9c2b458d55c55c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\JavaAccessBridge-64.dll

MD5 7f5215e9f978c38587339e017eddf273
SHA1 b3f131ca5a2517474099f02c79cc61dfe37064ba
SHA256 1c6f684bf75232e3f6b5f2f1f984741fa07cb07e2e335fb2b5b2d6b46c63c555
SHA512 14d3e61caef04491a319361007c9f2974dd94294331e651318bb7b9985980b2a11b8c520f6544016d0bae79027bbcfef5eca25720cfe71ce7483ecf7cc4da29f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java.exe

MD5 c863273afd4c2ee6b2cbecde86ebe021
SHA1 b5f24ba94b910e30b511332f3a96729cb0a539d9
SHA256 093a4662d587079a9d73871b4b727d863d10280de9f49c5d12a1a7e7a239285f
SHA512 7bba04dadb70d8bcceac0a3e965000c2537369ad649adc90601a0aa0b555c97ee07011b86f600218681255f72ccfaf9dc6710168a21a33f5121ec45b55390760

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java-rmi.exe

MD5 158cb66b1e636cf32d593c4d7db7e858
SHA1 7889ca20462fec79cfcef497639c037e99350a7f
SHA256 c5f85de246b91a4d295a49f23930b8475d92d493f1cb94bb6f6602b0599d6e1b
SHA512 d88621d98822b008cd60ee6977aaf2ad5834a9cb1ae6dcbc351a0bda976af8fb9baa0345841dff0e3d68cf5e8c528dfd0f89280bbc20c9b8d0b4b8697bf084b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jabswitch.exe

MD5 b5cb189c19bd012180a757d8419fb36d
SHA1 2c5292f7bb2c851261f504de57d094c5ab36e333
SHA256 6b9db2995902e87e04c1123d9c1bb3893404cfd039de07499b778ea68b912fa2
SHA512 d41ca378edc86972efdae2f9222a6f8532c269299df961b047f41182f33d04128a445ffd0f72853306c89706c15817a1049d8fb9cf5f8ed0837b6be328982302

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jaas_nt.dll

MD5 e9b3538e0c65eeda59c0314a43a5628a
SHA1 39dff196e5df61f669bc7c164c44241609dd3b95
SHA256 7de04d5c23a6bea207e61b8916e30a91051f0cad4ed03db1b434e7c6ea615ea9
SHA512 afcaa97ab18334bd13bcc61fde33cb8c6acacae6177ebcf2797638f55d8da6bc45a4c793ce5141b2e6a27017b512f9f9dd162eb719dc59010385fee9efc9cbf4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\instrument.dll

MD5 ff77f28ced53c635eefbc89495753e5d
SHA1 cbe5a5487661a64f38e05f226241a8ddb84083df
SHA256 4bf36c2c0f485b767d59d204a91dbf4ceb06568ab86d092bb8041a22ac4fde78
SHA512 65079278158f3e9cab0854becc94fbbcebcb4ecc6f89f3a6fe173a4a378033a545f12d093a4760601e8d0ef7baf04f5679458d0e496099c748f26ea10c3480bd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\hprof.dll

MD5 e6786f2ac8baf5e52815466cf7647bf2
SHA1 5d1fc0885a6ffde2803f8080696afbb3ebcda8c8
SHA256 aef5825bc6bcdd0787e9ad8a66130e7264adf809cf077ac5a4014a82c1e02ff3
SHA512 67cfabca24d232fd121df085fb04cac3ac9f256d26993e3ef2dee38972b58c132173fe1c577b726ead35b275864c578326c1fce14b0433bc9bec86266175f68c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\gstreamer-lite.dll

MD5 622fd8994d2a6c32e5d0806df7a074e2
SHA1 088c5848a407342474dc3b3b78a76b016ef9b06f
SHA256 1193c9770a37da882664096783040c3bab8b79ab8782beebf4b1a1ac438a2a7b
SHA512 44ba498e8fc1fe37e425c1637f4fd12ae1c974eb8a61e68126e3dc03fc1c3146398012ec1b07641496d08d7d4d685bc0414677d085a98774b18155c093bb9567

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\glib-lite.dll

MD5 f2179d1d0c374bf3021e3186892acacd
SHA1 0ac7054b9a46aeaae965aa5f6a9ee423e9fca1b7
SHA256 556272977bcbb95ce0583e0e022c703f099ee2c3f78c057e9b11fd6ca7227f96
SHA512 6c4a880b3dadf2a7e3c929024e514f58db0c90e5a0f87cde4c95ca6b3a32ecf9517058c0163550e1615ebbd2505a0217b5b7beef33376e08b969b9cdc0ee1bf8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\glass.dll

MD5 1bfe0ca4030a9b0652079802c5a8f065
SHA1 7487b68b6440265609eb1e181a3eb7e61f90376d
SHA256 3786c96847b57d25dac2244c179051a3e9dff6a698dcef6d25581b725a5bc1c4
SHA512 c2b4419447b693647be1f0c2345da3cc0cf8272720c9712726d89c95b759d44797c279e51f244dcc84805ba89e6b9055391a1b65540d84ed57da060a98cbd097

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\COPYRIGHT

MD5 3b30005a147ea84b3d330fed5d791173
SHA1 cc410c7a5757559442268906846e8f4d6c7d7973
SHA256 43dc26a1d7bd0ce5a6858d8084358da5b22c17bdeed2b1734eb8c0aea3148f3a
SHA512 0219fb51065358b2efcc6ee192812f66c5b84e113a9effdfb9980ea2c0ced0e6c919149f56960b942050394dea8c2d55340ece6d9f24d49de4229b129f36b05a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\icu_web.md

MD5 801ef9090d108780a89c29cc12589bb8
SHA1 6c4ee4d392efdad007ff360d28ee9964c7aae379
SHA256 522d75f2e378f73b1cac580158e71577fafe4305396e478877b273ffc7f399a5
SHA512 ffc7407e4adc4374bcb9b286efafd87d565b1a3d751d02707abffb939a568ef31a070578065ea55e63e0523d9744c62fb02e542dd153fd7bdb871633538cba6d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\gstreamer.md

MD5 f3ee88bb0506667696435c1f82a680de
SHA1 252c1e15d4233210901e4e286af89643dbf31d09
SHA256 c655748d933a512348ccaf8d6b398b05d11391efebc0e769c34d481c81a32f82
SHA512 8747cb1389c97341e6521f8cdad6546a3a594fe088fc4dfcb1730d678b3961d108d56312dfcab23984f65c6484483819983527ba92a05e19ca2de833c3c8a254

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\jpeg_fx.md

MD5 b709883a76ce6552c61216fdbc39e768
SHA1 f95b93cf73eb9ca8a0ce94b8114bb81932dce8f3
SHA256 60761a6d3da122df3b130700b686174dc1b433840fa22f08291886486ac4c8cb
SHA512 749ee947a1a5fd814c1283c08f042d768f48d55e165d19ffb8e1839f01696dc2d40f5196a1452e4902d0725be243723663289ca0a1836acf323073a2a7fcae24

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\asm.md

MD5 c82eeeca7fed16ebbe4bd8c4b2dcb476
SHA1 303a33d78c0b836681e2dd01313084dae2208f5c
SHA256 862d6caaa90ed0d85cd0e685118ebbf6e81976df48e62fbb81236b743ea7b8ab
SHA512 5ee3b0dfa02f3865fc743b083f53d8ac756bf3cad80fafe69aa546d82539d6b0acb92f01a1630f9c24fc71453619df5063f459e828447688750edb609edd4184

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\bcel.md

MD5 29d63d3eb2736a8173e059d1dd821b4d
SHA1 b40cdb05866dac35107b6b1b1a4f74ef6a5e5da6
SHA256 20772f1f3e766ab16f661d25819f23fd89be976ca8428cd7e0c2075baadfdcbc
SHA512 31de58d496104e654ebc457e260d5fddb0a117fbb9107c60e0105a06afed26922668a39ccda1a6a075b6f51e73efce682b6efa98ba9b59271f8e654c2315b629

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\ecc.md

MD5 9e4ab0e65a11abb7114e44cf7873d1e8
SHA1 293e0e53e2e49bcc7665eaf5f2e839b086caea76
SHA256 0fbac43e8435a91103100a041d8dc6dbc498b417dc09f11157bdca3050ae5e45
SHA512 1059297ba56f0aefe66bff142f8b99291729c2714ae8d2a4191639498da2659e8dabc2680d73173dd3cfe2234249661bffa7e6ba22141545cde6e4da82736bae

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\pkcs11wrapper.md

MD5 65933eb0fa6b3c3e93fb30b2f2613131
SHA1 b1783ddcb9e112987deb97e14d30be27df7061d0
SHA256 12dd724a8014735dec61b95ca4417476688c07dd1550cc9c1071637806e232a0
SHA512 4f784bcea1d66eaa7c56c31d3f2d00061963ca1b437774dbbb7bdbb3e62f92ff426419e075d8feb82a2f984faee4b1573dd175d0c152699b8bbe3313ebc18faf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xmlresolver.md

MD5 32e91e00a778e38ed2adceec6f11d095
SHA1 cccc59ce234d3911dfd1ca4fac9dac17ec2ed55b
SHA256 db53f31c2479b8b902a3434b9112ca24f0639c3c2ec366722f30db3d5f22108b
SHA512 8b47e55be6a842dd986ff1a145f57d28ccb6d8b97c4608a8d265307e247f9f56a9a5c2ff9d2b560dc3773dcf2fe70968bd0e03ec6b9e7be3d26dcefebb2c600b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\currency.data

MD5 06cbdc01d247d7b365c804c4e9aaefad
SHA1 183cb72e7bf7118d870e549e9ca1fc096a2e3107
SHA256 183cea6ec937c92c47f2af345fda468cb19c6126dbb1a35b70dd47623efabe2b
SHA512 78a768406649b73457796f19f347c407c867c630be77d79997e25ca852e3987c0645fb5affecaaae458b1d6f9dbc6e359f505760652a898d6a1f515034a004c2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\splash.gif

MD5 249053609eaf5b17ddd42149fc24c469
SHA1 20e7aec75f6d036d504277542e507eb7dc24aae8
SHA256 113b01304ebbf3cc729a5ca3452dda2093bd8b3ddc2ba29e5e1c1605661f90be
SHA512 9c04a20e2fa70e4bcfac729e366a0802f6f5167ea49475c2157c8e2741c4e4b8452d14c75f67906359c12f1514f9fb7e9af8e736392ac8434f0a5811f7dde0cb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\jaccess.jar

MD5 0e9459a6cb06d8696d4b0e702282333f
SHA1 c6c4f344f469f490bc6fa4e618307cd82bfd32d9
SHA256 9afad4c8976e934ff4de3dd54f832cd18388c2fdd33d3ea5c034a6fc036c6077
SHA512 7851d1d6cde7e256f8a74ef266f4495481ec5b929916c9574388a175f02bfe64998042aab82925768d2700d012844812fc38aa4867384dffb0dc3da024207282

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\zipfs.jar

MD5 c0bc0f8e2be436613485dc61f3472b32
SHA1 12e45c243c46a85acf3b8dc32c0ed00f9d15584f
SHA256 b626dc18f225da74ea37f82c3a5cf19f20bb40e372c4ea96085813e04fb826bd
SHA512 da91db8037e738a9e1f762aff790253547c8ddbf3fc9990c286c5f86628151c016b3cb8a0d0042626fd1dba260a1ea67a7ddfcaf0e178cf425d9a4b6caf2c776

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaTypewriterBold.ttf

MD5 a0c96aa334f1aeaa799773db3e6cba9c
SHA1 a5da2eb49448f461470387c939f0e69119310e0b
SHA256 fc908259013b90f1cbc597a510c6dd7855bf9e7830abe3fc3612ab4092edcde2
SHA512 a43cf773a42b4cebf4170a6c94060ea2602d2d7fa7f6500f69758a20dc5cc3ed1793c7ceb9b44ce8640721ca919d2ef7f9568c5af58ba6e3cf88eae19a95e796

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jce.jar

MD5 add502acaefc139fe3ae8e7e484a41c3
SHA1 cf4be57ad520baa55d9e526c411c4a6e41a029cd
SHA256 f583dadafc2e1672da2861428d20d6c91ce702ec7f34bf5f5f97f15ea080395d
SHA512 5d43c9d2eb3e89ef8ef2d7a35c3942f641e13bffb324a548b9527374eac305ed3b7d2d73361b18448871c2fd3d14ee50c027969ba90330e22fa19dd7e49b50fb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfxswt.jar

MD5 873ecf8d275f6d8705fd3bb86c77411c
SHA1 382c4f1f46189f9e67fc918ab6b8c5453716866d
SHA256 060cd6c389ae4dc887ecc0af690a8befbd5f7397d0cf4b07a5538d399a5fe350
SHA512 5b8b8e5be65d3a27dbfa378ec96501f0f629b0d11ccd3384a3f283593b17b53fab9a489806a3c0c7167d2bc4625913c06e370a6adc7dfeb52485e31bfafa154b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr.jar

MD5 7b55067c892d4e543c50dfe339d3c045
SHA1 08d82c6684351b73220d25d8dec22107d033a772
SHA256 d20e6f6d62f6e392640124fbf4319780130e3cd128bd4823eeb92d2b77b331ca
SHA512 dd97f44a5018b361cdbea244c09831488c36a7e4b170533b861930c6ba794068f15b1ce01b3be2dce1f38d68e01ba2ce2f9fda0c936e4bcc0f29c73d548398a1

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\psfontj2d.properties

MD5 f8734590a1aec97f6b22f08d1ad1b4bb
SHA1 aa327a22a49967f4d74afeee6726f505f209692f
SHA256 7d51936fa3fd5812ae51f9f5657e0e70487dca810b985607b6c5d6603f5e6c98
SHA512 72e62dc63daa2591b48b2b774e2479b8861d159061b92fd3a0a06256295da4d8b20dafa77983fdbf6179f666f9ff6b3275f7a5bcf9555e638595230b9a42b177

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jsse.jar

MD5 dba0bf9f6b98935aedc0fb9a51b595c7
SHA1 234537e4eb503680683d447fccc6e6cb6ef6d58e
SHA256 6870cf65be3347816aed672938540d119b9442168bafa22821f490e671772799
SHA512 454a43cc175436c6c039f9a1608344f7d323243da77dfdcae7f7e61798ea7a6243b9f9d8975968ec8dd5d4ad21579532c15cee52f6e4ded72ca51839b4f7731e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr\profile.jfc

MD5 67735a686d709d5612fae97cd67ecf07
SHA1 5ae707011fb0adaf564d2c71d8e6443aaddd6809
SHA256 57f1556cd4a7554944b8339a4c29cc25c1c462418e42d22a2f84f8b713205826
SHA512 5ba2fb473fa4b3e6c4f13b0aadc5030d35498a8413c928cb6e5f67832cb164238222a21275e7e99cb476f095ab901250417d1f10b2f5e305bd13980182e9c38d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr\default.jfc

MD5 09ff01e042e7d016217a23f29250c193
SHA1 e60d9aaa39c5f0ef4a54da5107b0c75ab491df0e
SHA256 05079c086677ff5ada9853f60b7b1c623750c7a97c6eec692e54ad7ebf51d343
SHA512 50abc8f6c0eeef68b600826ffb5adc1c329996882d4ef378c65a1c5330e1177222e48fd1a0c4798116ee63cc231ffbd120e22ed82290d975dc81ca246f0e1cb3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\javaws.jar

MD5 7d64898834ed7465e44d0b59ba65ec3e
SHA1 8de65da2291ffb29d00a8f11b97025e925944cf7
SHA256 f5097fa50a5eb7c2967ddae96d5a5471d1e9dd6f2472da3ac540e06ce251b838
SHA512 4e95e4317aed706acecfca5be9068a06f30a4d74155b33651603ae3a731b78d5ea407164d5e8b03ecd6a9fc1aa9f9c2e2c666ac0d5989854af6b67463f3f9741

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\javafx.properties

MD5 18b1ab00ead4e3b944af6a20c65d5973
SHA1 63fcc1e2822007f1d8721863a3dadabe7d0bfd55
SHA256 efd2644e856ae38315b16069e56980a4a884ca32e7420bb5b549abf34a25ccf0
SHA512 956a02e64aeeb06e046b6e638bfb582602d689db68b2f192cbfaabc75a8897d482c2659dcaa771f6ec35bfab9e6878aa4134a8251d25c4fe8ce3ef7283dbc7ad

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_MoveDrop32x32.gif

MD5 cc8dd9ab7ddf6efa2f3b8bcfa31115c0
SHA1 1333f489ac0506d7dc98656a515feeb6e87e27f9
SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
SHA512 9857b329acd0db45ea8c16e945b4cfa6df9445a1ef457e4b8b40740720e8c658301fc3ab8bdd242b7697a65ae1436fd444f1968bd29da6a89725cdde1de387b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_LinkDrop32x32.gif

MD5 694a59efde0648f49fa448a46c4d8948
SHA1 4b3843cbd4f112a90d112a37957684c843d68e83
SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
SHA512 cf2dfd500af64b63cc080151bc5b9de59edb99f0e31676056cf1afbc9d6e2e5af18dc40e393e043bbbbcb26f42d425af71cce6d283e838e67e61d826ed6ecd27

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_CopyDrop32x32.gif

MD5 89cdf623e11aaf0407328fd3ada32c07
SHA1 ae813939f9a52e7b59927f531ce8757636ff8082
SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
SHA512 2a35311d7db5466697d7284de75babee9bd0f0e2b20543332fcb6813f06debf2457a9c0cf569449c37f371bfeb0d81fb0d219e82b9a77acc6bafa07499eac2f7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\invalid32x32.gif

MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\cursors.properties

MD5 269d03935907969c3f11d43fef252ef1
SHA1 713acb9eff5f0b14a109e6c2771f62eac9b57d7c
SHA256 7b8b63f78e2f732bd58bf8f16144c4802c513a52970c18dc0bdb789dd04078e4
SHA512 94d8ee79847cd07681645d379feef6a4005f1836ac00453fb685422d58113f641e60053f611802b0ff8f595b2186b824675a91bf3e68d336ef5bd72fafb2dcc5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\hijrah-config-umalqura.properties

MD5 1eddfb1ee252055556f40cdc79632e98
SHA1 84aa425100740722e91f4725caf849e7863d12ba
SHA256 69becfe0d45b62bbdbcf6fe111a8a3a041fb749b6cf38e8a2f670607e17c9ee2
SHA512 a0fdbf42ff105c9a2f12179124606a720df8f32365605644e15600767e5732312777a58390fdb1a9b1c0b152ccc29496133b278a6e5736b38af2b5fab251d40c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaTypewriterRegular.ttf

MD5 c1397e8d6e6abcd727c71fca2132e218
SHA1 c144dcafe4faf2e79cfd74d8134a631f30234db1
SHA256 d9d0aab0354c3856df81afac49bdc586e930a77428cb499007dde99ed31152ff
SHA512 da70826793c7023e61f272d37e2cc2983449f26926746605c550e9d614acbf618f73d03d0c6351b9537703b05007cd822e42e6dc74423cb5cc736b31458d33b1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaSansRegular.ttf

MD5 b75309b925371b38997df1b25c1ea508
SHA1 39cc8bcb8d4a71d4657fc92ef0b9f4e3e9e67add
SHA256 f8d877b0b64600e736dfe436753e8e11acb022e59b5d7723d7d221d81dc2fcde
SHA512 9c792ef3116833c90103f27cfd26a175ab1eb11286959f77062893a2e15de44d79b27e5c47694cbba734cc05a9a5befa72e991c7d60eab1495aac14c5cad901d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaSansDemiBold.ttf

MD5 5dd099908b722236aa0c0047c56e5af2
SHA1 92b79fefc35e96190250c602a8fed85276b32a95
SHA256 53773357d739f89bc10087ab2a829ba057649784a9acbffee18a488b2dccb9ee
SHA512 440534eb2076004bea66cf9ac2ce2b37c10fbf5cc5e0dd8b8a8edea25e3613ce8a59ffcb2500f60528bbf871ff37f1d0a3c60396bc740ccdb4324177c38be97a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightRegular.ttf

MD5 630a6fa16c414f3de6110e46717aad53
SHA1 5d7ed564791c900a8786936930ba99385653139c
SHA256 0faaaca3c730857d3e50fba1bbad4ca2330add217b35e22b7e67f02809fac923
SHA512 0b7cde0face982b5867aebfb92918404adac7fb351a9d47dcd9fe86c441caca4dd4ec22e36b61025092220c0a8730d292da31e9cafd7808c56cdbf34ecd05035

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightItalic.ttf

MD5 4d666869c97cdb9e1381a393ffe50a3a
SHA1 aa5c037865c563726ecd63d61ca26443589be425
SHA256 d68819a70b60ff68ca945ef5ad358c31829e43ec25024a99d17174c626575e06
SHA512 1d1f61e371e4a667c90c2ce315024ae6168e47fe8a5c02244dbf3df26e8ac79f2355ac7e36d4a81d82c52149197892daed1b4c19241575256bb4541f8b126ae2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightDemiItalic.ttf

MD5 793ae1ab32085c8de36541bb6b30da7c
SHA1 1fd1f757febf3e5f5fbb7fbf7a56587a40d57de7
SHA256 895c5262cdb6297c13725515f849ed70609dbd7c49974a382e8bbfe4a3d75f8c
SHA512 a92addd0163f6d81c3aeabd63ff5c293e71a323f4aedfb404f6f1cde7f84c2a995a30dfec84a9caf8ffaf8e274edd0d7822e6aabb2b0608696a360cabfc866c6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightDemiBold.ttf

MD5 af0c5c24ef340aea5ccac002177e5c09
SHA1 b5c97f985639e19a3b712193ee48b55dda581fd1
SHA256 72cee3e6df72ad577af49c59dca2d0541060f95a881845950595e5614c486244
SHA512 6ce87441e223543394b7242ac0cb63505888b503ec071bbf7db857b5c935b855719b818090305e17c1197de882ccc90612fb1e0a0e5d2731f264c663eb8da3f9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fontconfig.properties.src

MD5 77cd430a6d793b50b4501edc37a1e533
SHA1 d18014cc830fa07c6dbb7d8b6edbdb4178b9d241
SHA256 2c5837ca86d000a8621275540d1380880852cf6de2cfd7496418741b7e88bdf9
SHA512 705bd76336d20d0c5c30266cbcd8fc91cf0ff1901bdcb682119174173f765bcc50291676664071619ac7af521a8d1c137f78efaf065afbe4a6bf413f9f604401

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fontconfig.bfc

MD5 ad8365719b70a2deade79683d8986a15
SHA1 88cbf37d05f28691b7f82e74fa891792e93b41b9
SHA256 b2ab990df3c4c1c2ec4317aaf22c946df17f0796727dbda712402307c56558ac
SHA512 287b19b6996a189baa3cf2894a57917b14b0615d551c5248ad55860678e5d6e58dd21247799bebe91b8236fc2f5300399fcfc1bb159edb9ae8d663805c6a30f1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\flavormap.properties

MD5 d8b47b11e300ef3e8be3e6e50ac6910b
SHA1 2d5ed3b53072b184d67b1a4e26aec2df908ddc55
SHA256 c2748e07b59398cc40cacccd47fc98a70c562f84067e9272383b45a8df72a692
SHA512 8c5f3e1619e8a92b9d9cf5932392b1cb9f77625316b9eef447e4dce54836d90951d9ee70ffd765482414dd51b816649f846e40fd07b4fbdd5080c056adbbae6f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunpkcs11.jar

MD5 3a40576c0507f578165072d158978e09
SHA1 eb733aa15f70957bd41948acf043ed90a1e4f4f1
SHA256 ef81320d360c0e79fa1cc074e33a8fb78129782d0e702cca9bf9ae62810f6dc0
SHA512 4a073240d643a76e1946c1f49151cba886c2ea30fc53366033c1b2f677342adda9d9b113c4f65e7305018a26ff175e3e7faba4bc7e15a17cb5598339ac92ca82

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunmscapi.jar

MD5 1ff7ee583f97ce293285273567cf6461
SHA1 98ebf3b46c728ec7b9b70ef70fde73fb49159957
SHA256 0659a230121358f0d084f1cb1c76b4e18edab7ef35b9c8209e247c20f8a3269b
SHA512 7139474439365d7298953d8ce2136516d391ae20d3acfdb03f0b294f4dd98a973cd1885d2c565d74244c1489222eede000a070bba1aa8323c190cb998867e590

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunjce_provider.jar

MD5 421f1fe7dee0ba30ef06489c3147dc54
SHA1 94149820a6a8258b903e57bf8d37a65a842b5a48
SHA256 2a0022225b5ba05d3988b59eb34294a0fbef7e02b5c4464534f14ab7898173d9
SHA512 e7c8edb8be2cdac9659645fb8aff0fb83ccfa51c592a13d20da05120cb879f4b925a88126320a8da5c475e7d0108c2a5d48eed852813e02de6f5152d2fa6c2f7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunec.jar

MD5 8f584d88c5b02b9dde9b4ac752ee05f6
SHA1 2dfc8984e13a84aa39b1766072219f6df1a58228
SHA256 b7467f44b1e57661c56726e72d5c0ad1d8b608813c9f723373a0e98e5648c98f
SHA512 6910bad9e07dda3b8ed8aab665ac4fc66ba4b558f138fc23ce2bee687fb0fc6f34a4dc1e35bc11e199e5f23781a979a1374aefeca0cc172a06ea09945d2fa867

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\nashorn.jar

MD5 4af1141d8ac57628fe9045dc0262e08f
SHA1 a3742067ab37da101af34b3ab9e42c692291433a
SHA256 697205ab7c64e4e8f086389117c92b021eba7777fd88adf6fa0ab619d8d68abb
SHA512 f7b8d4930cc90aaf351962ba9d1888015b0ba924e45d3abd5541ddbb20cae205319608a57d7cd0b5f6d6f4403813c186d70020c88fb4d75cbf100289ef82c3d9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\meta-index

MD5 005faac2118450bfcd46ae414da5f0e5
SHA1 9f5c887e0505e1bb06bd1fc7975a3219709d061d
SHA256 f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8
SHA512 8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\localedata.jar

MD5 fb3d07349f60828dd345d13f8e132c94
SHA1 d6fe96755f4471c3a8ffdbbb35524824139cd369
SHA256 44e60598b3a2b9d9c0294ed0e352eeec3612ca8a3eeec0cd384a76424d34c17b
SHA512 d3feaf5e8eb000342a922b69adbbc8909b04cc72d4daa30076361838496926a27a2d3d47b1d7121256d5110ad03a342fb5cf639e4e024f6f24c417f0ab653c5f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\jfxrt.jar

MD5 7d9d9ee56bfb825020cbf0578bb5eee8
SHA1 c0b6aa831169a437fe493e86a562d7ec2d635f73
SHA256 c15b5e101c0a1f220e1c362133c7ccfb609355424a7cf2f8b5519bd195e4baae
SHA512 1a6c807058294aee3b4ef5cf004a1c1224598dfb34427663c37160084c52797de34b10f717ca3787b83430c004f7ff12f5359ac91f32135d581fbb82019cf9b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\dnsns.jar

MD5 616881418f1add7d9e60214ba2d175eb
SHA1 05088bf2f6d228e2f5679265481a7d373f69c188
SHA256 072e754b8b08715efdf9101c250df6e97a8981b0e9ec044ed180b6b82d07fedc
SHA512 f70021f92a76a46941578a2e494d66e8f2a374dbade6b505f97ca0bf9de1335366830da6c2c042914868ba17cbe8f6c725d000a342408c6f607497632db07cfc

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\cldrdata.jar

MD5 a5c79910a260e61ff73e41127eab9dfe
SHA1 b92ec67e3eac281a5e5f7c5c84c6ef4d33f472b7
SHA256 ebf2432e90d8484f51db5fe0fd073daaeae3e1f8c3e919aceb811474864b2cb3
SHA512 c8caa8120b735b57ca9f4a2a282c4b58fbaffd7f19361e230ef526216efcae2d1461e70771d37f984bc2db7c24f000c768d5a4c1242c013e75db8833b1e20e8e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\access-bridge-64.jar

MD5 7afa8afd933b4847adf2d9ff4831fb30
SHA1 403849771c976cba4d41c1f9f87c9f6006f3e1d7
SHA256 3b15b25f66b5118340579194c6eb6a32f0cd111b387ca78cf628417004920b75
SHA512 78768cafa078deefbcab3dfce6837be417e67bdcbefa6028d9c45dfae9157b43bae00564ec9bd5d2cde0173fd1cff7289af316f6c869e00401a70a58b3e7b1b6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy.jar

MD5 25f76bdd88c80c19d432a4401544ed42
SHA1 73e85e6d2a8e5d50265392fc59afb8d0adf95656
SHA256 76e94245b818564bce6e2203ba5d9f1144eedfd478ff6264ce0ed13bb1e30d44
SHA512 16909c99cb9cf257d0cdd7b31b86f6c42bfb00c263947bb17c3697d64f42959fbab4482d9ecaf80874247dc642475df0a609689cca088daedfb3b72a951baf42

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\[email protected]

MD5 3fe2013854a5bdaa488a6d7208d5ddd3
SHA1 d2bff9bbf7920ca743b81a0ee23b0719b4d057ca
SHA256 fc39d09d187739e580e47569556de0d19af28b53df5372c7e0538fd26edb7988
SHA512 e3048e8e0c22f6b200e5275477309083aa0435c0f33d1994c10ce65a52f357ee7cf7081f85c00876f438dfa1ee59b542d602287ec02ea340bfdf90c0c6abd548

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\splash_11-lic.gif

MD5 9e8f541e6ceba93c12d272840cc555f8
SHA1 8def364e07f40142822df84b5bb4f50846cb5e4e
SHA256 c5578ac349105de51c1e9109d22c7843aab525c951e312700c73d5fd427281b9
SHA512 2ab06cae68dec9d92b66288466f24cc25505af954fa038748d6f294d1cffb72fcc7c07ba8928001d6c487d1bf71fe0af1b1aa0f35120e5f6b1b2c209ba596ce2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\[email protected]

MD5 cb81fed291361d1dd745202659857b1b
SHA1 0ae4a5bda2a6d628fac51462390b503c99509fdc
SHA256 9dd5ccd6bdfdaad38f7d05a14661108e629fdd207fc7776268b566f7941e1435
SHA512 4a383107ac2d642f4eb63ee7e7e85a8e2f63c67b41ca55ebae56b52cecfe8a301aaf14e6536553cbc3651519db5c10fc66588c84c9840d496f5ae980ef2ed2b9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\deploy\messages_zh_HK.properties

MD5 880baacb176553deab39edbe4b74380d
SHA1 37a57aad121c14c25e149206179728fa62203bf0
SHA256 ff4a3a92bc92cb08d2c32c435810440fd264edd63e56efa39430e0240c835620
SHA512 3039315bb283198af9090bd3d31cfae68ee73bc2b118bbae0b32812d4e3fd0f11ce962068d4a17b065dab9a66ef651b9cb8404c0a2defce74bb6b2d1d93646d5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_zh_CN.properties

MD5 e6f84c081895acdfd98da0f496e1dd3d
SHA1 1c2b96673dddd3596890ef4fc22017d484a1f652
SHA256 a1752a0175f490f61e0aad46dc6887c19711f078309062d5260e164ac844f61a
SHA512 d4d28780147e22678cd8e7415cacfad533ae5af31d74426bbe4993f05a0707e4f0f71d948093ffa1a0d6ea48310e901cd0ed1c14e2fbdf69c92462d070a9664f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_sv.properties

MD5 bf9652f69c3be79d0972e860990ce375
SHA1 bb5a4aa0ba499f6b1916a83e3c7922a4583b4adb
SHA256 99d7f49ecd3109370c0c6e8f1230317f7bea299ebbc811ca780028475e59b547
SHA512 61232dfb1d9b9d519ee9b000802286ef2708609ea847737477ca5f762dbbba917ed958ef38d4f7aeae45ab7acf830fccdb6915c1ce1c17662baaa7722b843132

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_pt_BR.properties

MD5 ed15a441a20ea85c29521a0c7c8c3097
SHA1 24e4951743521ab9a11381c77bd0cdb1ed30f5b5
SHA256 4140663a49040ff191c07d2d04588402263ec2e1679a9a1a79b790a137ee7fb8
SHA512 be5f0639de6b0ac95792987d0af83ca77495f7f49953698c8b18692de982f77b68fe63159e8cd7537d62a71209a9ffabbecf046ad82d8341f613d39f180f9c83

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_ko.properties

MD5 fed33982e349f696ef21e35ed0dbbde3
SHA1 bf9e055b5ab138ad6d49769e2b7630b7938848d6
SHA256 d9c95c31b4c1092f32bdcf40d5232b31cc09fb5b68564067c1c2a5f59d3869fa
SHA512 88b16b7c3acfed2fc4b1e3a14006fef532147eb1e2930d8966e90629069462fb2e8cbf65f561e6cbc9a946f39d1866583cb02d6bb84c60c71428f489daaa61ef

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_ja.properties

MD5 b7279f1c3ba0b63806f37f6b9d33c314
SHA1 751170a7cdefcb1226604ac3f8196e06a04fd7ac
SHA256 8d499c1cb14d58e968a823e11d5b114408c010b053b3b38cfef7ebf9fb49096f
SHA512 4a3bf898a36d55010c8a8f92e5a784516475bdfffcd337d439d6da251ddb97bcc7e26f104ac5602320019ed5c0b8dc8883b2581760afea9c59c74982574d164b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_it.properties

MD5 a81c4b0f3bf9a499429e14a881010ef6
SHA1 dbe49949308f28540a42ae6cd2ad58afbf615592
SHA256 550954f1f80fe0e73d74eb10ad529b454d5ebc626eb94a6b294d7d2acf06f372
SHA512 6fed61cbcd7fe82c15c9a312aced9d93836ebcffaf3e13543bc9dd8b4c88400c371d2365feee0f1bb844a6372d4128376568a5b6fe666fd6213636fcbd8c7791

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_fr.properties

MD5 c11ab66fede3042ee75dfd19032c8a72
SHA1 69bd2d03c2064f8679de5b4e430ea61b567c69c5
SHA256 8deeec35ed29348f5755801f42675e3bf3fa7ad4b1e414acca283c4da40e4d77
SHA512 072f8923df111f82f482d65651758b8b4ba2486cb0ea08fb8b113f472a42a1c3bcb00dae7d1780cf371e2c2bd955d8b66658d5ee15e548b1eea16b312fdcbdf9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_es.properties

MD5 6d32848bd173b9444b71922616e0645e
SHA1 1b0334b79db481c3a59be6915d5118d760c97baa
SHA256 be987d93e23ab7318db095727dedd8461ba6d98b9409ef8fc7f5c79fa9666b84
SHA512 8e9e92d3229ff80761010e4878b4a33bfb9f0bd053040fe152565cfb2819467e9a92609b3786f9bdbf0d7934cf3c7d20bc3369fe1ad7d0df7fadf561c3fdca3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_de.properties

MD5 d77c3b5274b8161328ab5c78f66dd0d0
SHA1 d989fe1b8f7904888d5102294ebefd28d932ecdb
SHA256 c9399a33bb9c75345130b99d1d7ce886d9148f1936543587848c47b8540da640
SHA512 696e28b6bc7e834c51ab9821d0d65d1a32f00eb15caa732047b751288ea73d8d703d3152bf81f267147f8c1538e1bf470748df41176392f10e622f4c7708dd92

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages.properties

MD5 811bafa6f97801186910e9b1d9927fe2
SHA1 dc52841c708e3c1eb2a044088a43396d1291bb5e
SHA256 926ccadaec649f621590d1aa5e915481016564e7ab28390c8d68bdaaf4785f1f
SHA512 5ae9c27dce552ea32603b2c87c1510858f86d9d10cade691b2e54747c3602fe75de032cf8917dcd4ee160ee4cc5be2e708b321bb1d5cdebfa9fe46c2f870ca7c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\ffjcext.zip

MD5 91750df08b2de1d64a2cd12e75ab6d5a
SHA1 769e82d5863286dc2335ae4d532c33c8ddcb58c2
SHA256 82a249cf1113449be09b3b0ab537a5b1f53ed12ce6101ba68fbe60dfb1ba1e43
SHA512 647898a0385440a3217533f214b48c8f54919a71af8d24637a93872f8a1923b4e2f11afc600e7b4db9a4d922748157080a44fb62e71ae741e0e984a398f79bbe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\content-types.properties

MD5 f507712b379fdc5a8d539811faf51d02
SHA1 82bb25303cf6835ac4b076575f27e8486dab9511
SHA256 46f47b3883c7244a819ae1161113fe9d2375f881b75c9b3012d7a6b3497e030a
SHA512 cb3c99883336d04c42cea9c2401e81140ecbb7fc5b8ef3301b13268a45c1ac93fd62176ab8270b91528ac8e938c7c90cc9663d8598e224794354546139965dfe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\sRGB.pf

MD5 1d3fda2edb4a89ab60a23c5f7c7d81dd
SHA1 9eaea0911d89d63e39e95f2e2116eaec7e0bb91e
SHA256 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
SHA512 16aae81acf757036634b40fb8b638d3eba89a0906c7f95bd915bc3579e3be38c7549ee4cd3f344ef0a17834ff041f875b9370230042d20b377c562952c47509b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\PYCC.pf

MD5 24b9dee2469f9cc8ec39d5bdb3901500
SHA1 4f7eed05b8f0eea7bcdc8f8f7aaeb1925ce7b144
SHA256 48122294b5c08c69b7fe1db28904969dcb6edc9aa5076e3f8768bf48b76204d0
SHA512 d23ce2623de400216d249602486f21f66398b75196e80e447143d058a07438919a78ae0ed2ddf8e80d20bd70a635d51c9fb300e9f08a4751e00cd21883b88693

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\LINEAR_RGB.pf

MD5 a387b65159c9887265babdef9ca8dae5
SHA1 7913274c2f73bafcf888f09ff60990b100214ede
SHA256 712036aa1951427d42e3e190e714f420ca8c2dd97ef01fcd0675ee54b920db46
SHA512 359d9b57215855f6794e47026c06036b93710998205d0817c6e602b2a24daeb92537c388f129407461fc60180198f02a236aeb349a17430ed7ac85a1e5f71350

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\GRAY.pf

MD5 1002f18fc4916f83e0fc7e33dcc1fa09
SHA1 27f93961d66b8230d0cdb8b166bc8b4153d5bc2d
SHA256 081caac386d968add4c2d722776e259380dcf78a306e14cc790b040ab876d424
SHA512 334d932d395b46dfc619576b391f2adc2617e345aff032b592c25e333e853735da8b286ef7542eb19059cde8215cdcea147a3419ed56bdd6006ca9918d0618e1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\CIEXYZ.pf

MD5 10f23396e21454e6bdfb0db2d124db85
SHA1 b7779924c70554647b87c2a86159ca7781e929f8
SHA256 207d748a76c10e5fa10ec7d0494e31ab72f2bacab591371f2e9653961321fe9c
SHA512 f5c5f9fc3c4a940d684297493902fd46f6aa5248d2b74914ca5a688f0bad682831f6060e2264326d2ecb1f3544831eb1fa029499d1500ea4bfe3b97567fe8444

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\classlist

MD5 7fc71a62d85ccf12996680a4080aa44e
SHA1 199dccaa94e9129a3649a09f8667b552803e1d0e
SHA256 01fe24232d0dbefe339f88c44a3fd3d99ff0e17ae03926ccf90b835332f5f89c
SHA512 b0b9b486223cf79ccf9346aaf5c1ca0f9588247a00c826aa9f3d366b7e2ef905af4d179787dcb02b32870500fd63899538cf6fafcdd9b573799b255f658ceb1d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\charsets.jar

MD5 67374911df954ceea5e7f39ef34f457d
SHA1 a4e92db3d9d0dca3b248f8539e04ef09c8b4fdf3
SHA256 1084059cc0a99a04bc55582772311050274bc38710095e3828acb0c3c049c5f1
SHA512 7dc21958aabc59c07968b8756138c3f5aaac51d2db74c5b7573476b169c27528e9f3a3484794d189b23cb1ce7f364e916bd7909f2fe5993740f93f3099bca72b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\calendars.properties

MD5 3f731b169e01a9efe3e19a1f40679c9a
SHA1 531a6316953fc152809601806fec55e1be806700
SHA256 1169fcba1385b8e4baccbd8156a43e3179c26e1877cc154bd16ff23874b208ea
SHA512 81c03e0b1cf93c873ea495cb6f434fa5fa41f02cfd7dc399e859c565e52e2e942e3ed04d4025f1e4f114ddb180503a5f97ff88fd4c41bb1c810afb0f03b93ec6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\amd64\jvm.cfg

MD5 499f2a4e0a25a41c1ff80df2d073e4fd
SHA1 e2469cbe07e92d817637be4e889ebb74c3c46253
SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
SHA512 7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\accessibility.properties

MD5 2ed483df31645d3d00c625c00c1e5a14
SHA1 27c9b302d2d47aae04fc1f4ef9127a2835a77853
SHA256 68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf
SHA512 4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\zlib.md

MD5 b98b87940a5ebc38435b5477304d4f5f
SHA1 b290a0b013bd477efa51c2f32b6380ad18c1a722
SHA256 aa1639bdefec3b16586704e184322b7b98d2c88cefab442f417c4957aa95c12b
SHA512 7ba1af7985aeb61a1466983ae4cd1df0d751bfa139a57ce210bbc68e3b36d44493b339f4ff1fbe0521756e4a6f1d45352f4d6795727c471313c871e178e632f4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xerces.md

MD5 c351d8057c38402b15ae504a786c610f
SHA1 b0cb2ab480cadb37fd0502e2ebd7fa52b1d36ecb
SHA256 c5d15dd57a8a1401795da0dd5de83a9977eebfcff24ffacf8e643b945d7ce336
SHA512 5bd09127183395acd08625f8d24a954f7a971dce4467e2e4fcc3ac2c5f6209a0a003ba6d3014f0dd5c7ed34b66ed78fe5d966a3502ab1c2763a4b7c72e346d37

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xalan.md

MD5 2c76aeedc888f46a7ed9eb5fa6fb0e29
SHA1 d07f52befde05615a38cde5947f0b4f09d57b5a9
SHA256 2c161f3e92ed1618d5758f9916deba2df4e4d7e1ad1303a6c0d8210797b0efae
SHA512 a2a66767dbe2ec5b19d292f96f45d15f6de0e78f474b4f5b2633ce03e0d504bac13216ff91407f02b3bc7d913659e78f90f0903383059d718c9a18a896c47f9b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\unicode.md

MD5 288ec55b4b45c6c13eb50b339d180cc8
SHA1 8eabfcd5c0de57f253a016618ebf3e02543c85dd
SHA256 90333c7083132be31a9a29e3d64bb16c438204678152c40ff96b1508c168ee93
SHA512 9732852c7f069e6dda5c58d2677f3a39e6f105da0117c60c961daa0a509eadbbbaa393f65d96cf8603ecdf8da97954295721389f28a2e9cb0081a734b459b021

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\thaidict.md

MD5 38e321ef31b7429d8a717525cc85ca8e
SHA1 80b2b391c1ff687d693218d72aca31c190b4fdad
SHA256 b9b6b1d88c6fcd67dc6d5869731a4a29ed7cfdd0d3503fd7216924a9c007070d
SHA512 17f701624384e9f276d0cb5083ac04affd348651278f9f9d65c8d84accaa9a6e2b56318b633fd496632e5aaf0f87e725f07ad827498723d87f8e3afce6dc9aee

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\santuario.md

MD5 6c75ec996c31a810ea05d713f50740e4
SHA1 37bba4f3af6197ccd2fb73fbe74a211b52513492
SHA256 e05fc973677344cef1002d46e4edfbbe3067bfde753dec7e9f7c38023ddb4afd
SHA512 c05ba624a10160e9b9f2d03381bf0cd786934deb5e48018c617ed17fc9e56d1171ad28e7224fc85e38709bb72f5b97d19c2f0777a529a1832935fb5a6dffbc17

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngom.md

MD5 b4115178f21fa2c5cdb05b65539590af
SHA1 cc76c0a7b630f1fa56dd457f54cfdab531031986
SHA256 7c02d2fb4bf17c847cdc9df090a5bea606a2fc40459c63b25f5467204f735b6a
SHA512 4664ee35471a3fc482d259dda49e3a290897f2e85bb988205b9003f82e8ad9b18e743ee56deade1f4754b81774ff12c249d90a60b62ab3ab297232e5b282b0df

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngdatatype.md

MD5 19c79cd6c27e7aa0e4ae4ae2f8d25f66
SHA1 2b95e8949e7d1dca8dcfc4d822357863fe67341e
SHA256 8454b0b740cd1fdb98b9a5d56685c872b1c548b6308e5a8e8cfe2164474ac53c
SHA512 4a98acc829dc48e185fe418a7dde6a51c497c343e2c36a2f5cade2bf7c0de4aac8ba8c0f08843bfdeea23da72d3fe09efe877e68f890174f1dff44b0d143d7b2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngcc.md

MD5 7a73168e2d1d60635d4a477735ef9c46
SHA1 03698bddf01c463ed4add5707136a067f9446551
SHA256 da023d685dcf9206eba77aff21957e09633084903991ba422625d41ef18e6073
SHA512 8122e4b9d698632b36085c9a334883756b4499ee5cbb80760f3b1c31d50c9121f788b838664171ccef20cebffa04723d7536004f6dbf31174eddf2825a55b8d5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\pkcs11cryptotoken.md

MD5 300c82d64d67c9ea31509946a84f0698
SHA1 8f958ab754dcf1357bc9113fc39550059484f630
SHA256 4a109d67362ad02955d7aba54d246d25c01d41750334adadee24c49429d751db
SHA512 8f0c10fa9725358c5499b707f9052f90cf5f1dcde7b53d5658666c3572a50e9774e312dbbfc91b86e33c2fae65dc593df927caecdb012ac9fbdcd954b11bbffe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\mesa3d.md

MD5 554eff799c8ccb5914167a9508e50c7a
SHA1 dcc9c36e4ffb3ae40e8ac97c4be457cb2580aef3
SHA256 5e0f791f69ba15f61a4288bb7cc109296e4ce188badccecf4ff975f782ab81cd
SHA512 2716397f8ddb2ab71b836ebc7e4dfd237262689432f313d40c57ace31dc8ec273065ab9602b261d1716e9602ee1377aabf14f191c26228a83d43f29e3da27f93

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\libpng.md

MD5 add2752f10e8e1e08068caa896c69a71
SHA1 2927514cb727874819dc25ae9bf781ca6ad11b9b
SHA256 c1723f935403494bb1b26f00ae149c49964cff2711a7a92746c8bc34ebf1fb75
SHA512 c6facc70789ac6b0e6531ea4b059bc29d28fe36d6767853bcdfb797536142a084aeb58c2102d6809e404a8cb597016808927dbecb3dc2ff2cf45d44c2efc018d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\lcms.md

MD5 6f01e9d461092507e7952ccdda30a431
SHA1 4337452d96ac8371f0a91837317ee95c02c0f764
SHA256 db74d60223cd2e2c2790e697bd77d9b4e7171812ec49313a430f460527c9f70e
SHA512 421ffb5b30d7f471d91cdaa9c0d1b96e5a84cac7b4d87ecbcb45ea5228bd1791147a0074d013f86597be772c2a4b738c191435a4948b272f29a4240971bf5f94

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jpeg.md

MD5 78403eddfd77b7f194ad07541ff1a88c
SHA1 3a2280a0fc1b05a3ccdcd328e6c9d9d47abdbc66
SHA256 3b0b5d9c7587a7f194966a793d08f9d81f067457a9a68209dc25c908c03998ce
SHA512 82a31cc6402b6b1c5d5e527ee93ddf09386ac4cc2cec2666140fcd38a36993ba8cb799d6280fec76fc6101370699c0bc831ac9b84dab5e439cc4052c3c38296d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jopt-simple.md

MD5 3e20d03f3ab0742d0b0a35ba1215fedd
SHA1 a68353b6ae21632813bb8cfacc5741703b16fc7e
SHA256 ef38f6f236aa85bb2c01160f741f0c02ef1a76b80021e3e85ca8dafc0a6e2883
SHA512 eb5b02852a54e8072c1d75d6d3fd04d921acc02e37cb5dc63c2eb4818e3f33b3770a71fe97c97abfaa0d2481ea3650552e6259972350142fba14bfbe8753c559

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\joni.md

MD5 275c596413ff4412c14628abf9e5a42d
SHA1 9b16ad5c7eeac982ab077569bd73a15625e66693
SHA256 9307974e7d1039bbfe2a384f0aedf9a3f281b4b61f1352a0acac2bd25bf9ca36
SHA512 ab08170073ef6b74293f992f0f1e8f8973208d4ed750a41b8535ab7bce0d38815c648023173c70465b88017473ed011ed98e40c632ad6bef5e6f879cb72e15c4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jcup.md

MD5 7f39baa619c092f5d8088a0b5ff35365
SHA1 31656532c09b14db067b27f61ac2204ae85101b2
SHA256 5848acf6f867a1186753ddaa87a307442dcaf24027f7c2efcc063ff72a932afa
SHA512 b5ff9cfe4a465aa8bc9310944bb2cdcd6ecb7c97dc19f73e12905f83d04bd49566d41d6ff7ddca12bfdb4b670b6980caebd9c36457c14a7fe31f5188d50af258

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\icu.md

MD5 f06c93f6e0508ff7475234cff59d9f0a
SHA1 be09fa29c875f3957947a3a93b2d5f4063fcbd82
SHA256 8ec7dfc03761f581c0dde060b794bda2c657a9db708abaaf05be48e1889b4674
SHA512 dd27147c253252e76012ce4b0c8bd4dbc3dc5e3e31cbc068438babe22ce7d54725474d30f2b075739f9926ec6477a9cf91962358c50700fa3aa2a703006324e1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\giflib.md

MD5 492019df920279baeac09aa0c64f8434
SHA1 7890596300f139834f6a32d16210337261fb5498
SHA256 9139bdc457eee7432a019a24f18065c7ddf79cc9486e1f9d54c73d1e2cd5b504
SHA512 aabe3502058aed12c8544e9103594f76161abb9f81a842742ffb9c80be7424587d2c64469fe28651efceb13ae461b28be5f46a7a35eb9e060405bd36f1e3beec

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\freebxml.md

MD5 409fc7d453b37e23e9abef873a810ed8
SHA1 0c9427f433e516e7cd2a2f292eb9d0a0a61010d3
SHA256 8800731ab11e49c7b4a9d18e0e21882d9949f7dcbcc4540b8024f962cfe65b11
SHA512 b3e2f4b3119175218577ee00001fefed21f84e1421713da3eb5c1d482a5092a7b28824d35208cc4ed72404b94bd5f273cc4db660938d1e6e2f8a2dcd8ed30ded

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\dynalink.md

MD5 1d40cc2d0eeaed836a3d0b8154c3d657
SHA1 7e5cb50c5a1daca603061e00d38193d1c50b72af
SHA256 754a50e07cf9e0129d4875bb5a2e10fc7628cc82e3816c102ee1966165f5ffc3
SHA512 df00f602ff05d5a5fe71449db703f9f851546e40ae5ce85b79821939aca35387cf97226dcfef75b942522e93c3762642acb9105acd17ab35a3cee6e8c2752492

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\dom.md

MD5 48f3d84f045f1bab02fc578bb4b53fcb
SHA1 93f5b4d5b0beaaca3cb9832645ed8b2dafc0072a
SHA256 597f472066dff302001616f60f2dafa540f7b33810f44bb9ca905d892d4111b7
SHA512 bab0c3b443e18a00fc28f697a4e6923f38b938474c1f326c95e3f57920734bfbf40c099884e2479d53d4260d6de044d878cf89e8c8b153986c39c9cad639f579

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\cryptix.md

MD5 6c5c5a8fef2914e5e09fb918b6d89efb
SHA1 7f9c85ac9d5a2b534d427bb6ca3f7e1c28b86e99
SHA256 9b21963c3f1ff7a63f2d76cedb65271d3302646d5b1bec2f2cc058f2f10c54de
SHA512 d4e21ab2bad8df19acd966e222f58bab8c4627cb077d14366dc856fcbe70678dc79c2f0bc31db771f91be0a8701d3d40b8c0558660b88f73b26addce40f35738

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\colorimaging.md

MD5 f1ba49fadb244e70f7d79f5121fcf56f
SHA1 0d5706cb3c0bd0a7c036cd03e4751d132a0e4074
SHA256 2c102f5ca80236be62e9a495e452d97b57f3b3353705ded10e5736a7af940f67
SHA512 250a39516ca1bc418fa7a85035912481ef13e66ecbe01bed3bdc47c7bb77290cda833a0a05401ba671a59df0c8e58ccd2a3a08bba632cea745c69cface7ca652

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\cldr.md

MD5 ed19b9beb7d30c00fba258c27da06e5e
SHA1 1003665d1b3b1c0aeeec8297f6810988f242f1d1
SHA256 8b59040a8ba6c3711cf1e3078df798e7d7fa85377c7a9911703db02fe1d6525f
SHA512 5dc562f74a91d87c8c7366688f1afd0f449293e9101858c683075cbf3c79b442ef893551a71c520d1ebbe2e231112bc635ff8cebbab40e637a32869a5dcf5cdb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\webkit.md

MD5 979ff0b364144ae7752611823d7579bf
SHA1 3438ab2bd0029853ae64d59eac1b7a0e07b8dad6
SHA256 c8c5cca6d584aab2cd9094550f0e60d1286cf2fa7ccba94ec2ac57122ad9e0b1
SHA512 57b03308ed3e615eff41ce446250e3e64b25dd84593923aaef1861be39b2a7d198ad459cff70493980634661e6243a29fbfba90e6a45f21cec75282684aef864

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\mesa3d.md

MD5 7d22d2f1498757c13c6b44a012e6c3c6
SHA1 61efa1786c6871f9c2f53678dcfc144752ad01ce
SHA256 d2f8764309e1784d359e41fb08006e6fcb993f5cdb62ee7e7f23ac559b1755c6
SHA512 1f38dcd5529d87b425861740d5e6fce43adc2f53fa15193424f20d7ca058c121936586f4da260af385f03ef728c7108f6a0f93d7b4e39a497cf46ad46f033012

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libxslt.md

MD5 fdb61eed7af5bd0db6df08cdd8ce8c38
SHA1 81912ee0166ac5df7d52c10a75b33cf5f5472297
SHA256 60df039c8c6084581dd9ba1b00b95c4761a41e5f9b475fc8e6ba4934246b4e76
SHA512 9fecda82cea98d626f28a996fb9b52afc4df7dff28da512f736a9b8fba173c1e707a206a997355c5f9a282486da00daa368b64e73c5d979cc009af4d43b4a961

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libxml2.md

MD5 558798ece848ab07f14a2010cc35bdd6
SHA1 65de4035dbd83b087d420936b8e9ad806f49b217
SHA256 2921c846360fd93aa5c767ae64980aa8519a86b8dd5eb132429bb9a6c78b1868
SHA512 55a4ee17e8d22286bbe5af25225f9e9e7f69c08945c839d0d7a2652f9e0bd38c31651d43b745a97e2919a20aff41dff5e672fe8c15725c28569097cec44644e9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libffi.md

MD5 686f85093806b86d50e3e655400413a9
SHA1 be2174703b4c54d1919b76f9e9e98556c1f6cb5c
SHA256 74219d63dd5cf24ee3fafb4a9c3d0128653cce5f4041f1b176d37d769a8833ca
SHA512 2ba758f0a50f86e62f0bccb748efcead1e013541d4681affbd720720081666e28f3af8ce00d468e1e17823902ab12792d22d6e46c9d4d656602e907c062f3fb9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\glib.md

MD5 2d583cbb663bb8dfab9dc68bcb8509cd
SHA1 9f1a38cfbfd6561b0129a80e5ea939ddee62c5a6
SHA256 130442ed1d0f7c20731d47d81980a82b54392f0235c922065f7ae92708348016
SHA512 408c5367b5298ce3cea25cb17b964733fd889f8eb068f4e3d408e1eea51b60a69e2d864164ad2876165c5800b7f91e89708d1df901c1ff89fd16a10514cda8de

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\directshow.md

MD5 b1047db8237b15d97b1dd072f71f4d15
SHA1 2484425df3be1049de4016ed88e5518aa9751b35
SHA256 d847da5757a30d093db3f90a0bac9b1699a52965daa3ec5dedf3ebf14c81c698
SHA512 bbd78681a97abf5fe515be598f81edb4d2140e0dd12959f3ab6f89609e9962991bb5bfe09eed67cdd29529c51ecbdf59c37a61bb0d592250b0f9ad0c6090798b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\zip.dll

MD5 2bad0abfd30c0bf121f5374f35702fcd
SHA1 f88f5c79d8f24d140ffbf88cd245cd9277f69887
SHA256 99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8
SHA512 f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\wsdetect.dll

MD5 4efced6f8698dc2f38e92f55bf6b3e7c
SHA1 0122c4b13235882f538752c5a8daa3e1fbae9463
SHA256 45c520aa8eb9208331805426d0a0c8b5b4dc91ae2ed2bf87492cf26fcd6c8812
SHA512 b0662674f8733348b22c070cca04eb6ae36393813869cfa8a2233ceb4734800a34f132b87922909462c42f200aa723556129f4219e54c261c3c93c8ed6183a2f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\WindowsAccessBridge-64.dll

MD5 9626e48462130ad35b86c8a683d2ae45
SHA1 202e5d5f1ecada4fdb93f1908b7498dc307b640b
SHA256 430709c24725e82e74f28f929ce7245d4c8418c29d1b302244573ea4b2db27cf
SHA512 f477456e20df7ee6ed707643d308b1959225c7e35711d1c94d8e3bc6ff9a80a297a4ca5f4e4f2d5279cf1b66f236f69faa8531a9735146d7d75407eb71454526

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\w2k_lsa_auth.dll

MD5 9186aad5f27243daf2c4ca17677b33b2
SHA1 ea54fd05a5a69b20fa73dc6dc017ec927ebc3de2
SHA256 c032c9421aabf96bd4931baca8ea56a4a3a88f50d481a831d4683c0bdec9b2c8
SHA512 c14d9906de48f53cd5eae7fa6789a8afe8c8b1303d1ec5ea87cdac0d9b6272541ce15b6d15ae3281b33c36ce3148b216642b867a7fab99d111a036a069c3a472

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\psfont.properties.ja

MD5 7c5514b805b4a954bc55d67b44330c69
SHA1 56ed1c661eeede17b4fae8c9de7b5edbad387abc
SHA256 0c790de696536165913685785ea8cbe1ac64acf09e2c8d92d802083a6da09393
SHA512 ccd4cb61c95defdcba6a6a3f898c29a64cd5831a8ab50e0afac32adb6a9e0c4a4ba37eb6dee147830da33ae0b2067473132c0b91a21d546a6528f42267a2c40e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\plugin.jar

MD5 4089ebb698b91506409c4a51dc239a42
SHA1 96fc2e84cc95d4f39455e842d745874892d4b7df
SHA256 a71c433cebea404816adb8c9d03689fcf342a03b17190604774453d9cf2e1239
SHA512 0b10cbd04d5703957325474eabdf811ff9a1eb958c1889e0cf3392fb99bfcb50bef414d0b2655bd23ef1280acde55da7fc03cfe31a2fce257f2ad2b1f7db8f0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\meta-index

MD5 91aa6ea7320140f30379f758d626e59d
SHA1 3be2febe28723b1033ccdaa110eaf59bbd6d1f96
SHA256 4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4
SHA512 03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\net.properties

MD5 8bc6628d01bad30798440cc00f638165
SHA1 fd9471742eb759f4478bb1de9a0dc0527265b6ea
SHA256 31ce7ce29c66a1696a985a197195b5e051b2c243ea83e9d1de614f0c4b4f7530
SHA512 8da3439774a07a6309f985d1a29dda5383975bbdf6b8e2809bab69a2c44f65d3de2a546231ed6e183864193f834c9a7042fdcc4ee10181d0bd3891363032c242

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management-agent.jar

MD5 c24f9117d0218d51e4a57af7c14f5b25
SHA1 146b136e70a1d39829130c0c31a789f551086501
SHA256 ad5b5a048c3802155bf6b5881200fbb3958abaff52a87f61b20401e021b8fc84
SHA512 04518adedf91762d06ff3ad78d9d368e641b379484df22efae0157f626c3fe090305d8f082e02a06d1fbabc5ff2bb96174b7bd694c6ac561611e0c77a12c0f7d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\snmp.acl.template

MD5 71a7de7dbe2977f6ece75c904d430b62
SHA1 2e9f9ac287274532eb1f0d1afcefd7f3e97cc794
SHA256 f1dc97da5a5d220ed5d5b71110ce8200b16cac50622b33790bb03e329c751ced
SHA512 3a46e2a4e8a78b190260afe4eeb54e7d631db50e6776f625861759c0e0bc9f113e8cd8d734a52327c28608715f6eb999a3684abd83ee2970274ce04e56ca1527

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\management.properties

MD5 5edb0d3275263013f0981ff0df96f87e
SHA1 e0451d8d7d9e84d7b1c39ec7d00993307a5cbbf1
SHA256 3a923735d9c2062064cd8fd30ff8cca84d0bc0ab5a8fab80fdad3155c0e3a380
SHA512 f31a3802665f9bb1a00a0f838b94ae4d9f1b9d6284faf626ebe4f96819e24494771a1b8bfe655fd2da202c5463d47bae3b2391764e6f4c5867c0337aa21c87c1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\jmxremote.access

MD5 f63bea1f4a31317f6f061d83215594df
SHA1 21200eaad898ba4a2a8834a032efb6616fabb930
SHA256 439158eb513525feda19e0e4153ccf36a08fe6a39c0c6ceeb9fcee86899dd33c
SHA512 de49913b8fa2593dc71ff8dac85214a86de891bedee0e4c5a70fcdd34e605f8c5c8483e2f1bdb06e1001f7a8cf3c86cad9fa575de1a4dc466e0c8ff5891a2773

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\jmxremote.password.template

MD5 7b46c291e7073c31d3ce0adae2f7554f
SHA1 c1e0f01408bf20fbbb8b4810520c725f70050db5
SHA256 3d83e336c9a24d09a16063ea1355885e07f7a176a37543463596b5db8d82f8fa
SHA512 d91eebc8f30edce1a7e16085eb1b18cfddf0566efab174bbca53de453ee36dfecb747d401e787a4d15cc9798e090e19a8a0cf3fc8246116ce507d6b464068cdb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\logging.properties

MD5 809c50033f825eff7fc70419aaf30317
SHA1 89da8094484891f9ec1fa40c6c8b61f94c5869d0
SHA256 ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232
SHA512 c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jvm.hprof.txt

MD5 c677ff69e70dc36a67c72a3d7ef84d28
SHA1 fbd61d52534cdd0c15df332114d469c65d001e33
SHA256 b055bf25b07e5ac70e99b897fb8152f288769065b5b84387362bb9cc2e6c9d38
SHA512 32d82daedbca1988282a3bf67012970d0ee29b16a7e52c1242234d88e0f3ed8af9fc9d6699924d19d066fd89a2100e4e8898aac67675d4cd9831b19b975ed568

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\resources.jar

MD5 168ce2722069378d518639bf864e5cc7
SHA1 d4ec09c71649c578648bbcb487ab4d89d8cdfd39
SHA256 7f959725602ff75a444d619a140d2302420afa2dbb1db2fecbbf7b92358901ab
SHA512 2ef79da45a0c61aa788661e28a7b26f675e22fe0c2349ddf153a023d0039eb08d3e1999b5c8117c700550256fe5398eebe99cd823279ea1878705db4b998d967

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\limited\local_policy.jar

MD5 6280d06e46e0cc047e04c85c83874566
SHA1 7d0a29932b496edbdd1fc55572014bc89703ad07
SHA256 92780525250258f336a8f746ed7437035512d06050d85786fb44fdf12e08419c
SHA512 e3ef446b02943915f874dc09433833e5ff131abad93d04f95aa6e887881cbf71b15ad0f41e8c7d57864a003559bbc3769452b17600664207308ae99340bfb46e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\tzdb.dat

MD5 87bf51971bb056fd8b4e295905557467
SHA1 e2ab9b21bed47a7863566f4f4a1587f2fde744d7
SHA256 b0b5edb15f66402c4c2510a7aa800e5284e2cc32946cd44014332ce18c76e5e9
SHA512 fabf88cda16226fee963dc75146bc52ce04163ddafb89e84604bfccbc13cabd00aac0d0342c153e85b9511d90e4d5ef03ad75a118d47967e4f1b08eb1356af9f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\Welcome.html

MD5 4a8c8c0695ae945d27d0975360dfee51
SHA1 b3f41c7b42daba14268b5dc4ca1ced8ef4a2c329
SHA256 3e33897086524eb85005e13ff3a8d2c8b3433546ba8d6803f276c5995727adff
SHA512 533f3e3376d366e9bf6372b91eab6a04e1c9671086ab83cbd3403646958b88b7c0ec2c818f6022855d1841a4adad455070332980c5b4268dc9b08ffe8cb18529

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\THIRDPARTYLICENSEREADME.txt

MD5 59e82b41579ad2e2016d98f191c8d5ff
SHA1 bd9f7a797e0fca53892f9fc5ea87727d8da41da5
SHA256 7d7336cc8fa87c4629eac7f0efcbf12e5c975ac9ee44cd1343a0ea68a813ddca
SHA512 32393b417e62f1399c6f1754cc8f3001689593a6b59569885fdfe0f1478018c81222c8b82dadfc0e514659daa01d819ce79faa53969beaefd438d15c9df5b9c5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 f3af2718f86b00497fa423046f50cee6
SHA1 0ff70aad905069978c0d83728621fc982fd492fa
SHA256 4e4079bd53b742d9d6f18fbd06f743c28285f1e4b9ffd636d2d24a70a2ee7f00
SHA512 ffa6a3098182084d9d563274bd30c5f55ea0f7c9f9ab4dc8cd1664b971d0cf03bfc8061e19d1bda6a4591b100a87b74f26aa1bdbfeccbc1ea195af809a8c49fa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\sound.properties

MD5 4f95242740bfb7b133b879597947a41e
SHA1 9afceb218059d981d0fa9f07aad3c5097cf41b0c
SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
SHA512 99fdd75b8ce71622f85f957ae52b85e6646763f7864b670e993df0c2c77363ef9cfce2727badee03503cda41abe6eb8a278142766bf66f00b4eb39d0d4fc4a87

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\unlimited\US_export_policy.jar

MD5 6cbca5808b4a8613d2fed6fe4a84c449
SHA1 0135b30ebec03fb69d79cdc3126e608d9effb8b2
SHA256 761aab2969883e9e5ea76df63ca404fb67673efc3f97def057f8e22517fc9518
SHA512 4d9bf052aa124d07673c601cbfb83223b87369f7be7575a13e13c0d893e57849ba11e430b7769901782c26471528dfaa130996916451e1a7e38cf28468e44cfa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\unlimited\local_policy.jar

MD5 360663f26c5584e6c6127254b261fa0c
SHA1 aee6515eede2ad7c697ba8a61bdd9359be3319d2
SHA256 02f69a433405ea928c89a8aade74e5462282ccb9a9d30851312ed3459398f85c
SHA512 e3920d5abbbe6b0e3029ed1e0b2ce1a53da6c7e728f635b12f00b1fd2eb6151fff74b9dc85ec0c0920f7fda440c1604d24ca766cdbcb78be3425088d97e00208

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\limited\US_export_policy.jar

MD5 0d59c5639aa24c7d326e7bd54bb8eda5
SHA1 58875d7463460d7998c4013912fb89965e823044
SHA256 9ce50a70ed7051c155ab8ea06755f94823d8d1cba67ffd8fd3fe3249b3ac31ea
SHA512 2175b0cb6ff8b3afe37fb24ebeef406d7920be404ee66597a47699607a9b39f981c023f7e4133359fef9910fe7885ba846d3c532b22891a8231e23eaf440896d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\javaws.policy

MD5 9107d028bd329dbfe4c1f19015ed6d80
SHA1 4384ca5e4d32f7dd86d8baddd1e690730d74e694
SHA256 b7a87d1f3f4b7ba1d19d0460fa4b63bd1093afc514d67fe3c356247236326425
SHA512 81b14373b64ce14af26b70d12d831e05158d5a4fa8cec0508fef8a6ca65b6f4ef73928f4b1e617c68ddeacff9328a3d4433b041b7fb14de248b1428c51dbc716

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\java.security

MD5 44e161cddfff8b98e40eb76212b5654f
SHA1 9d2da007c0747c6dcf7b27e70805fc38f6f521d4
SHA256 0457564ff35fcc49b4e33f26e6b46a32b68095034c3bdfc17508d8c4c6b1db0f
SHA512 b6f05e107c3a80eab39100ca82475e84bcc02edeb95e1ac8f7fcf5e8e72fc683f09cddb0f4a13c1363556832dfb2f0c94aa460c52c70b5e54063944003235b9b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\java.policy

MD5 11340cd598a8517a0fd315a319716a08
SHA1 c0112209a567b3b523cfed7041709f9440227968
SHA256 b8582889b0df36065093c642ed0f9fa2a94cc0dc6fde366980cfd818ec957250
SHA512 2b6dadc555eeb28dc1c553ab429f0cb9e3ad9aa64dfa2b62910769a935a1e6030a7ff0dde2689f29c58d1b0720416d6b99ffa19bd23e6686efb1547afb7dccfd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\cacerts

MD5 488066a377ab1c8effc28f79093094ea
SHA1 5a3512369271c5962a46dbefe559f8bb9970868f
SHA256 dd908314557d7a569c66c8beed6e5433d6f7ee0f5699898f82777c62f49898ec
SHA512 a3531ebaf03ed7c08d5600436cb5d59de73855023f395db7c9141d8516d0b293d8ed202df8fc7d3f84ca4bb2564cfa8dcad72555dbb8ebf1ac5d55d0709e4df2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\blacklisted.certs

MD5 8273f70416f494f7fa5b6c70a101e00e
SHA1 aeaebb14fbf146fbb0aaf347446c08766c86ca7f
SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
SHA512 e697a57d64ace1f302300f83e875c2726407f8daf7c1d38b07ab8b4b11299fd698582d825bee817a1af85a285f27877a9e603e48e01c72e482a04dc7ab12c8da

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\blacklist

MD5 b2c6eae6382150192ea3912393747180
SHA1 d4ffb3857eab403955ce9d156e46d056061e6a5a
SHA256 6c73c877b36d4abd086cb691959b180513ac5abc0c87fe9070d2d5426d3dbf71
SHA512 898582c23f311f9f46825e7f8b6d36bed7255e5a4e2fa4b4452153b86efbd88db7e5b94dbd9cb9db554f62b84d19f22ae9d81822b4896081c487fb50946a9a9a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\rt.jar

MD5 fe585f04bd7d106d1813fd6139e3dd0c
SHA1 872297c77a7d1d3c706761404aedbdce24f694c1
SHA256 1f9f7bc629c6205e9d0eb3c097803b9e06a2045cecbbaf69a526c5b488dd3a7e
SHA512 9466beda4744a2eadd218b42f6bbe6f063306e99635eb8195bc551701ab945f42938cd7397f9e7a8a8947520b630bfd9c2fc05f44232524f9e0924c5e2c86f0a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\release

MD5 fcefd920fb658afd9b80bb4ecd7f4860
SHA1 f3a05b8b40800cdeadcc0d301247cb5c9f8eb6d0
SHA256 6c3ab49ce393eabd9a968bb0c061e3130d734cbcad728699e984f76a003cc93f
SHA512 deede3d254c794820443209377b20f7c8674afc3045e629fb34b2d28525dc0c94ac9e4573c1cf3700f48f416f768a578884b112f03b65d86ddf1593e4a57a0bb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\README.txt

MD5 0f1123976b959ac5e8b89eb8c245c4bd
SHA1 f90331df1e5badeadc501d8dd70714c62a920204
SHA256 963095cf8db76fb8071fd19a3110718a42f2ab42b27a3adfd9ec58981c3e88d2
SHA512 e9136fdf42a4958138732318df0b4ba363655d97f8449703a3b3a40ddb40eeff56363267d07939889086a500cb9c9aaf887b73eead06231269116110a0c0a693

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\LICENSE

MD5 2c311f1936f63834199de94319a5cd8c
SHA1 6c5f8a9ebab689f905fefe44aca0a1f77d39e425
SHA256 2d5ec5b2984090d43bfb27c331b59bb537fbbbc9b5e015f1f94a5978372d293f
SHA512 e8a51e80f98098f601130d556ae42af6a9162b382820a4d5ad7fef9d68270626384b440e41e3208acd0a61103404454ff5fbe6e0b5d1434ed759667ed7e5b8df

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\tzmappings

MD5 62bc9fa21191d34f1db3ed7ad5106efa
SHA1 750cc36b35487d6054e039469039aece3a0cc9e9
SHA256 83755efbcb24476f61b7b57bcf54707161678431347e5de2d7b894d022a0089a
SHA512 af0ddb1bc2e9838b8f37dc196d26024126ac989f5b632cb2a8efdc29fbce289b4d0bac587fe23f17dfb6905ceada8d07b18508db78f226b15b15900738f581a3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\java.dll

MD5 949fc2c63994ec317abcccfc1452ef22
SHA1 41d496159e826e894988ad1dcca7918d10e793e5
SHA256 6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8
SHA512 26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\zip.dll

MD5 2bad0abfd30c0bf121f5374f35702fcd
SHA1 f88f5c79d8f24d140ffbf88cd245cd9277f69887
SHA256 99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8
SHA512 f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\meta-index

MD5 91aa6ea7320140f30379f758d626e59d
SHA1 3be2febe28723b1033ccdaa110eaf59bbd6d1f96
SHA256 4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4
SHA512 03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jfr.jar

MD5 7b55067c892d4e543c50dfe339d3c045
SHA1 08d82c6684351b73220d25d8dec22107d033a772
SHA256 d20e6f6d62f6e392640124fbf4319780130e3cd128bd4823eeb92d2b77b331ca
SHA512 dd97f44a5018b361cdbea244c09831488c36a7e4b170533b861930c6ba794068f15b1ce01b3be2dce1f38d68e01ba2ce2f9fda0c936e4bcc0f29c73d548398a1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\charsets.jar

MD5 67374911df954ceea5e7f39ef34f457d
SHA1 a4e92db3d9d0dca3b248f8539e04ef09c8b4fdf3
SHA256 1084059cc0a99a04bc55582772311050274bc38710095e3828acb0c3c049c5f1
SHA512 7dc21958aabc59c07968b8756138c3f5aaac51d2db74c5b7573476b169c27528e9f3a3484794d189b23cb1ce7f364e916bd7909f2fe5993740f93f3099bca72b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jce.jar

MD5 add502acaefc139fe3ae8e7e484a41c3
SHA1 cf4be57ad520baa55d9e526c411c4a6e41a029cd
SHA256 f583dadafc2e1672da2861428d20d6c91ce702ec7f34bf5f5f97f15ea080395d
SHA512 5d43c9d2eb3e89ef8ef2d7a35c3942f641e13bffb324a548b9527374eac305ed3b7d2d73361b18448871c2fd3d14ee50c027969ba90330e22fa19dd7e49b50fb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jsse.jar

MD5 dba0bf9f6b98935aedc0fb9a51b595c7
SHA1 234537e4eb503680683d447fccc6e6cb6ef6d58e
SHA256 6870cf65be3347816aed672938540d119b9442168bafa22821f490e671772799
SHA512 454a43cc175436c6c039f9a1608344f7d323243da77dfdcae7f7e61798ea7a6243b9f9d8975968ec8dd5d4ad21579532c15cee52f6e4ded72ca51839b4f7731e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\rt.jar

MD5 fe585f04bd7d106d1813fd6139e3dd0c
SHA1 872297c77a7d1d3c706761404aedbdce24f694c1
SHA256 1f9f7bc629c6205e9d0eb3c097803b9e06a2045cecbbaf69a526c5b488dd3a7e
SHA512 9466beda4744a2eadd218b42f6bbe6f063306e99635eb8195bc551701ab945f42938cd7397f9e7a8a8947520b630bfd9c2fc05f44232524f9e0924c5e2c86f0a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\resources.jar

MD5 168ce2722069378d518639bf864e5cc7
SHA1 d4ec09c71649c578648bbcb487ab4d89d8cdfd39
SHA256 7f959725602ff75a444d619a140d2302420afa2dbb1db2fecbbf7b92358901ab
SHA512 2ef79da45a0c61aa788661e28a7b26f675e22fe0c2349ddf153a023d0039eb08d3e1999b5c8117c700550256fe5398eebe99cd823279ea1878705db4b998d967

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\zip.dll

MD5 2bad0abfd30c0bf121f5374f35702fcd
SHA1 f88f5c79d8f24d140ffbf88cd245cd9277f69887
SHA256 99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8
SHA512 f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\amd64\jvm.cfg

MD5 499f2a4e0a25a41c1ff80df2d073e4fd
SHA1 e2469cbe07e92d817637be4e889ebb74c3c46253
SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
SHA512 7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\java.dll

MD5 949fc2c63994ec317abcccfc1452ef22
SHA1 41d496159e826e894988ad1dcca7918d10e793e5
SHA256 6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8
SHA512 26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\ext\meta-index

MD5 005faac2118450bfcd46ae414da5f0e5
SHA1 9f5c887e0505e1bb06bd1fc7975a3219709d061d
SHA256 f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8
SHA512 8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

C:\ProgramData\Oracle\Java\.oracle_jre_usage\934bb0918aaa4c7a.timestamp

MD5 cc8e4f8a1e11d159cc22a65fe7db8af1
SHA1 ff2118918527bfdfc4b75d1369d8bc82703fb638
SHA256 6712e653a1d0548286bc91ea4e9df1e2631c2cf0747f1fe4503cb0e525065aca
SHA512 94f46f395caaefdcd3b71053486b51eacf8ca96c7d2be2762638766352335686d5a5fc23df494cd00f9e582e3b62bbfbef25a4236c823ad0bb8c27eddf818072

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\tzdb.dat

MD5 87bf51971bb056fd8b4e295905557467
SHA1 e2ab9b21bed47a7863566f4f4a1587f2fde744d7
SHA256 b0b5edb15f66402c4c2510a7aa800e5284e2cc32946cd44014332ce18c76e5e9
SHA512 fabf88cda16226fee963dc75146bc52ce04163ddafb89e84604bfccbc13cabd00aac0d0342c153e85b9511d90e4d5ef03ad75a118d47967e4f1b08eb1356af9f

C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties

MD5 fd956a1e7d46009d939eeccfcf3bd7d9
SHA1 ba99f27d20489c2a985496b3132fa4330a92b3fc
SHA256 d9f395289380c7cb9cfe2b918450d81ccdeb6b4e9e6719595acf56a86717d005
SHA512 611b55aba0c4f6465a39a935e76138bc87a273eae17343a79882817d1d667bd07d78b0e6fb922af82521bc04a09b0324b8017cb6ecf749ee36f07b13fc41319e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\management.dll

MD5 37b0569971b26876e53c6de81a1b3f92
SHA1 b11cd13b385201dcfc0c0a493c4590975159b902
SHA256 24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b
SHA512 d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\management.dll

MD5 37b0569971b26876e53c6de81a1b3f92
SHA1 b11cd13b385201dcfc0c0a493c4590975159b902
SHA256 24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b
SHA512 d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\net.dll

MD5 1f06a0a450a470a60370089408237e36
SHA1 ab488bc6dd912a4107ee6753d760fa2a0c9ca2f0
SHA256 69ae7599e82c5c25906faf7f845421405caad07acdbb5f1021aa56e170c5152b
SHA512 1d41781c4b86ff2fe62650f8db32ba6df3cc029d0faf9d4f21a3fdace2f3bd7ab667e70a0055cf7b84b54762ee35dcdd032ccb41bf02787b3e28bb7230ad0ea9

C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2275444769-3691835758-4097679484-1000\83aa4cc77f591dfc2374580bbd95f6ba_6d187d53-139c-415c-b71c-a4b59992e636

MD5 c8366ae350e7019aefc9d1e6e6a498c6
SHA1 5731d8a3e6568a5f2dfbbc87e3db9637df280b61
SHA256 11e6aca8e682c046c83b721eeb5c72c5ef03cb5936c60df6f4993511ddc61238
SHA512 33c980d5a638bfc791de291ebf4b6d263b384247ab27f261a54025108f2f85374b579a026e545f81395736dd40fa4696f2163ca17640dd47f1c42bc9971b18cd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\security\java.security

MD5 44e161cddfff8b98e40eb76212b5654f
SHA1 9d2da007c0747c6dcf7b27e70805fc38f6f521d4
SHA256 0457564ff35fcc49b4e33f26e6b46a32b68095034c3bdfc17508d8c4c6b1db0f
SHA512 b6f05e107c3a80eab39100ca82475e84bcc02edeb95e1ac8f7fcf5e8e72fc683f09cddb0f4a13c1363556832dfb2f0c94aa460c52c70b5e54063944003235b9b