Malware Analysis Report

2024-09-22 06:25

Sample ID 230402-v9yr5shf46
Target TLauncher-2.879-Installer-1.0.9.exe
SHA256 42a309cea201b01a1a135fd651fcbec0d079368ed34d5567d3cf3a3811b47266
Tags
bazarbackdoor adware backdoor discovery persistence spyware stealer upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

42a309cea201b01a1a135fd651fcbec0d079368ed34d5567d3cf3a3811b47266

Threat Level: Known bad

The file TLauncher-2.879-Installer-1.0.9.exe was found to be: Known bad.

Malicious Activity Summary

bazarbackdoor adware backdoor discovery persistence spyware stealer upx

BazarBackdoor

Bazar/Team9 Backdoor payload

Downloads MZ/PE file

Blocklisted process makes network request

Reads user/profile data of web browsers

Checks computer location settings

Modifies file permissions

UPX packed file

Registers COM server for autorun

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Drops desktop.ini file(s)

Enumerates connected drives

Installs/modifies Browser Helper Object

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Modifies registry class

Checks processor information in registry

Modifies Internet Explorer settings

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Modifies system certificate store

MITRE ATT&CK Matrix V6

Analysis: static1

Detonation Overview

Reported

2023-04-02 17:42

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-04-02 17:41

Reported

2023-04-02 17:45

Platform

win7-20230220-en

Max time kernel

154s

Max time network

194s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe"

Signatures

BazarBackdoor

backdoor bazarbackdoor

Bazar/Team9 Backdoor payload

Description Indicator Process Target
N/A N/A N/A N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Downloads MZ/PE file

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
N/A N/A C:\ProgramData\Oracle\Java\installcache_x64\7208494.tmp\bspatch.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\jre-windows.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\MsiExec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\ProgramData\Oracle\Java\installcache_x64\7208494.tmp\bspatch.exe N/A
N/A N/A C:\ProgramData\Oracle\Java\installcache_x64\7208494.tmp\bspatch.exe N/A
N/A N/A C:\ProgramData\Oracle\Java\installcache_x64\7208494.tmp\bspatch.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0183-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0097-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0128-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBC}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0074-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0115-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0235-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0088-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0167-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0206-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0080-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0084-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0076-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0181-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0260-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0160-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0124-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0142-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0093-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0130-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0195-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0140-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0159-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0068-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0080-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0174-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0104-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0146-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0092-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0222-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\NoExplorer = "1" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\NoExplorer = "1" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435B-BC74-9C25C1C588A9} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\WindowsAccessBridge-64.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\cryptix.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\jfxrt.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-file-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-heap-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\bcel.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-debug-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-namedpipe-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\dt_shmem.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\dynalink.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\sunjce_provider.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fonts\LucidaBrightDemiItalic.ttf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\LICENSE C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jaas_nt.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\msvcp140_1.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\thaidict.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-heap-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jawt.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jdwp.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\giflib.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\policy\limited\US_export_policy.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\fontmanager.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\klist.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\images\cursors\win32_CopyDrop32x32.gif C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\java.security C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\lcms.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\prism_common.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\servertool.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\unicode.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\dnsns.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\npt.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\mesa3d.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\messages_ko.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\[email protected] C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\psfontj2d.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\release C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-synch-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\pack200.exe C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\ffjcext.zip C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\messages_pt_BR.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fontconfig.bfc C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\blacklist C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\deploy\messages_zh_TW.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\management-agent.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-filesystem-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\colorimaging.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\relaxngdatatype.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\logging.properties C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\java.policy C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-utility-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\prism_d3d.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\splashscreen.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\vcruntime140.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\lcms.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\legal\jdk\zlib.md C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fonts\LucidaBrightItalic.ttf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\localedata.jar C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-core-handle-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\api-ms-win-crt-conio-l1-1-0.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\bin\jfxwebkit.dll C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\ext\sunpkcs11.jar C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\fonts\LucidaTypewriterBold.ttf C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\lib\security\blacklisted.certs C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
File created C:\Program Files\Java\jre1.8.0_351\COPYRIGHT C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\MSIF1B5.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6de438.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6de43a.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF126.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF156.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\6de43c.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\6de438.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIED5E.tmp C:\Windows\system32\msiexec.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\msiexec.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\msiexec.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppName = "javaws.exe" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\AppPath = "C:\\Program Files\\Java\\jre1.8.0_351\\bin" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5852F5ED-8BF4-11D4-A245-0080C6F74284}\Policy = "0" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Software\Microsoft\Internet Explorer\Main C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Software\Microsoft\Internet Explorer\Main C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0187-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_14" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0164-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0179-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0112-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0223-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_223" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBB}\ = "Java Plug-in 1.4.2_68" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}\ = "Java Plug-in 1.5.0_10" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}\ = "Java Plug-in 1.6.0_67" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0215-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0254-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0075-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0079-ABCDEFFEDCBA}\ = "Java Plug-in 1.7.0_79" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\ = "Java Plug-in 1.4.1_03" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0091-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}\ = "Java Plug-in 1.6.0_60" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0180-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0133-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0146-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_146" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0104-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0206-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_206" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0258-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_258" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0073-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0161-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0114-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0140-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBA}\ = "Java Plug-in 1.4.2_73" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0163-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0258-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBA}\ = "Java Plug-in 1.5.0_68" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0093-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0098-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0078-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0084-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0118-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0148-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0158-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0128-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0206-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}\ = "Java Plug-in 1.6.0_21" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0138-ABCDEFFEDCBA}\ = "Java Plug-in 1.6.0_138" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}\ = "Java Plug-in 1.7.0_32" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0215-ABCDEFFEDCBA}\ = "Java Plug-in 1.7.0_215" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0070-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0140-ABCDEFFEDCBC}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0172-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0199-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_199" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0167-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0207-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0225-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0222-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0260-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0110-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0074-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0115-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}\ = "Java Plug-in 1.5.0_04" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0163-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}\ = "Java Plug-in 1.7.0_25" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0125-ABCDEFFEDCBB}\ = "Java Plug-in 1.6.0_125" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0131-ABCDEFFEDCBA}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ = "Java Plug-in 1.6.0_06" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC} C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0087-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}\INPROCSERVER32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBC}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0121-ABCDEFFEDCBB}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\InprocServer32\ = "C:\\Program Files\\Java\\jre1.8.0_351\\bin\\jp2iexp.dll" C:\Program Files\Java\jre1.8.0_351\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32 C:\Program Files\Java\jre1.8.0_351\installer.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 190000000100000010000000749966cecc95c1874194ca7203f9b6200300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d431d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0b000000010000001200000044006900670069004300650072007400000014000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b060105050703080f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa62000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 04000000010000001000000087ce0b7b2a0e4900e158719b37a893720f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa6090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b0601050507030814000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f0b00000001000000120000004400690067006900430065007200740000001d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d43190000000100000010000000749966cecc95c1874194ca7203f9b6202000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeTcbPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeSystemtimePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeAuditPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeUndockPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 1108 wrote to memory of 972 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 972 wrote to memory of 1240 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 1240 wrote to memory of 928 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 928 wrote to memory of 960 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 820 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 620 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 1816 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 960 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe"

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe" "__IRCT:3" "__IRTSS:23652905" "__IRSID:S-1-5-21-1563773381-2037468142-1146002597-1000"

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1841947" "__IRSID:S-1-5-21-1563773381-2037468142-1146002597-1000"

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=97.0.4719.43 --initial-client-data=0x1a4,0x1a8,0x1ac,0x178,0x1b0,0x710f33e0,0x710f33f0,0x710f33fc

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230402174300" --session-guid=31596695-ad78-4cc3-a4d3-361ddec5beb0 --server-tracking-blob=YzFiOTE1MmRkOTRlMGExODE5YzNiMzAwZDE3MzA5Zjc3ZjVkNTFhY2FiNjczYzcxOTJlNjE2YTUxZDhhZjk2MDp7ImNvdW50cnkiOiJJTiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fbWVkaXVtPWFwYiZ1dG1fc291cmNlPU1TVEwmdXRtX2NhbXBhaWduPU9wZXJhRGVza3RvcCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjciLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNjgwNDU3Mzc3Ljg0MjgiLCJ1c2VyYWdlbnQiOiJTZXR1cCBGYWN0b3J5IDkuMCIsInV0bSI6eyJjYW1wYWlnbiI6Ik9wZXJhRGVza3RvcCIsIm1lZGl1bSI6ImFwYiIsInNvdXJjZSI6Ik1TVEwifSwidXVpZCI6IjcwMGQ2YzNiLTM4YmQtNDJhZC1hOThlLTMzY2ZkZDNiNjk5NiJ9 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2C03000000000000

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=97.0.4719.43 --initial-client-data=0x1b0,0x1b4,0x1b8,0x178,0x1bc,0x701433e0,0x701433f0,0x701433fc

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe"

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe" --version

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=96.0.4693.50 --initial-client-data=0x148,0x14c,0x150,0x11c,0x154,0xd36c28,0xd36c38,0xd36c44

C:\Users\Admin\AppData\Local\Temp\jre-windows.exe

"C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1

C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe

"C:\Users\Admin\AppData\Local\Temp\jds7190366.tmp\jre-windows.exe" "STATIC=1"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\MsiExec.exe

C:\Windows\system32\MsiExec.exe -Embedding 86F54EC227D0A471858C5FC0C1DE9133

C:\Program Files\Java\jre1.8.0_351\installer.exe

"C:\Program Files\Java\jre1.8.0_351\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_351\\" STATIC=1 INSTALL_SILENT=1 REPAIRMODE=0 ProductCode={26A24AE4-039D-4CA4-87B4-2F64180351F0}

C:\ProgramData\Oracle\Java\installcache_x64\7208494.tmp\bspatch.exe

"bspatch.exe" baseimagefam8 newimage diff

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/plugin.pack" "C:\Program Files\Java\jre1.8.0_351\lib/plugin.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/javaws.pack" "C:\Program Files\Java\jre1.8.0_351\lib/javaws.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/deploy.pack" "C:\Program Files\Java\jre1.8.0_351\lib/deploy.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/rt.pack" "C:\Program Files\Java\jre1.8.0_351\lib/rt.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/jsse.pack" "C:\Program Files\Java\jre1.8.0_351\lib/jsse.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/charsets.pack" "C:\Program Files\Java\jre1.8.0_351\lib/charsets.jar"

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

"C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.pack" "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.jar"

C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe" -Xshare:dump -Djdk.disableLastUsageTracking

C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe

"C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe" -doHKCUSSVSetup

C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe

"C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe" -wait -fix -permissions -silent

C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe

"C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_351" -vma 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 -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==

Network

Country Destination Domain Proto
US 8.8.8.8:53 dl2.tlauncher.org udp
US 104.20.234.70:443 dl2.tlauncher.org tcp
US 8.8.8.8:53 net.geo.opera.com udp
NL 185.26.182.112:443 net.geo.opera.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 desktop-netinstaller-sub.osp.opera.software udp
NL 185.26.182.123:443 autoupdate.geo.opera.com tcp
NL 185.26.182.123:443 autoupdate.geo.opera.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 download.opera.com udp
US 8.8.8.8:53 features.opera-api2.com udp
NL 185.26.182.94:443 features.opera-api2.com tcp
NL 82.145.216.24:443 download.opera.com tcp
US 8.8.8.8:53 download5.operacdn.com udp
US 104.18.2.211:443 download5.operacdn.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 javadl.oracle.com udp
NL 23.206.103.83:80 javadl.oracle.com tcp
NL 23.206.103.83:443 javadl.oracle.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 sdlc-esd.oracle.com udp
DE 184.30.24.84:443 sdlc-esd.oracle.com tcp
US 8.8.8.8:53 javadl-esd-secure.oracle.com udp
FR 23.40.2.175:443 javadl-esd-secure.oracle.com tcp
US 8.8.8.8:53 rps-svcs.oracle.com udp
FR 23.40.2.175:443 rps-svcs.oracle.com tcp

Files

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/1108-71-0x0000000002B40000-0x0000000002F28000-memory.dmp

memory/1108-72-0x0000000002B40000-0x0000000002F28000-memory.dmp

memory/972-73-0x0000000000CA0000-0x0000000001088000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

memory/1108-135-0x0000000002B40000-0x0000000002F28000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico

MD5 e043a9cb014d641a56f50f9d9ac9a1b9
SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

memory/972-367-0x00000000025A0000-0x00000000025A3000-memory.dmp

memory/972-366-0x0000000010000000-0x0000000010051000-memory.dmp

memory/972-368-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/972-369-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

memory/1108-390-0x0000000002B40000-0x0000000002F28000-memory.dmp

memory/972-391-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/972-392-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG

MD5 ad413a1fa3406283529429463b3c3582
SHA1 541632da39b89d6370444569130a8780e4917886
SHA256 8fb2c6302a6f56fb23e6a2fd1e5e52136941ac1037c40c26ed5d63c9f71c1a27
SHA512 9dd27101508bc457257a58c4df2473c4050be11f55c6b8b9d670c63d52410e216ac99328aceb25035e88202cab177e9303834441fce3c84677173b2ae3f9ffa6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG

MD5 c26a8c3c8a1b4cfa66a04954682cbd00
SHA1 a0fe409f7c63212fa96af3d27e985d1b636d7f5e
SHA256 b215bf4f48b4f943c61a43675ca768f8ff8fa4da813fa3c969a26be550e37b15
SHA512 4088e0d60d5e88ca877af034ee3134a3dec626efcea9a498dfa93c532b77e17f90aca02e03262cf179562136f3b2928d330d3e18dcc9180d22f63c926699baad

memory/972-414-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/972-415-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG

MD5 bfd3f5e88b85b08269a1209c7efff5ef
SHA1 831bb68b2118d3037b34316e8290f3aaaa986a9b
SHA256 a1c5e2e49e3cc71793e79d5be2e8d6f7aa5490c9262675d6db0e3fd537fc42eb
SHA512 95b76358b3bfbd31914d6b1db578aa0e5a19b1e352833df9537a02dc6c2084676eaaeb36ac7fbf397a5ba43b16068df7109b3e84bfaa398b8b7175993bd2edd5

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/972-476-0x0000000003230000-0x0000000003240000-memory.dmp

memory/1240-477-0x0000000002BC0000-0x0000000002FA8000-memory.dmp

memory/1240-478-0x0000000002BC0000-0x0000000002FA8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

memory/928-479-0x0000000000310000-0x00000000006F8000-memory.dmp

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

MD5 4b5ddfcf080692e356951a4ab9154f82
SHA1 2fa5ad0f79b705385100e93614c565f525a0c812
SHA256 a8a9d415956f48c32714b4dcfad89ca859c147a392f09b18a0e8872845a80171
SHA512 943585c0a4b6acd8941c754706cfe1bddd21fad3e8e07fb9003c94cf2d5c491191f430dab2e5c153daeb170840aeac3e7da498d43d8c2b761efb824289919352

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat

MD5 bd5626a0237933e0f1dccf10e7c9fbd6
SHA1 10c47d382d4f44d8d44efaa203501749e42c6d50
SHA256 7dfc1176d8a507135140b23a0c014093b7e2673f0f3e5727c3d85df4e7323762
SHA512 1fd864a5386580cf8bbafbacb12a043ef51948b729b9aedfe6dc81e6c2948a100526c7c600069f22454d550f7f736ad3045a930cc2ef97458dc1d6c782928087

\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

memory/928-514-0x0000000002EF0000-0x0000000002F00000-memory.dmp

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

memory/928-519-0x0000000005550000-0x0000000005A88000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

memory/928-521-0x0000000005550000-0x0000000005A88000-memory.dmp

\Users\Admin\AppData\Local\Temp\Opera_installer_230402174258071960.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\Opera_installer_230402174258585820.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

memory/972-594-0x0000000000CA0000-0x0000000001088000-memory.dmp

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

memory/928-600-0x0000000005550000-0x0000000005A88000-memory.dmp

\Users\Admin\AppData\Local\Temp\Opera_installer_230402174259989620.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

memory/960-614-0x0000000000E60000-0x0000000001398000-memory.dmp

memory/620-612-0x00000000002A0000-0x00000000007D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Opera_installer_230402174259989620.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG

MD5 8aa76bec130c6e445b9afc13e069c705
SHA1 f33b780d401e898ce376dfcc17022efb282613f9
SHA256 f1a88c950c4342a6d2f972ed57d4b2d2bea8d17c76cfaa852aaf8247cb392918
SHA512 76a1a4ff5aad4a839d50e3ecb84130e0335dcbf7ddeaf4f5b36327fdacad92ee13cc3018ab706b3bf0553eca428fa0d2f9c4080007cbeba5042841387c505809

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565

MD5 f6f0bfa58fced53e24045f53bb63da36
SHA1 51747a4d7094010ecea6e1aa264296ba8311c399
SHA256 e7686d0a1a485c9a4b943f9ba71dd555203f107138346fecba3c8924f6a978ed
SHA512 55ec5e24e32c06cb006ef4a31ed311f25bf0c54a1d13fdd1a784b6c53f61bb615252c129e61768894d86b0a3d1ec684096db6d6f3460522f05329a6656991635

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8249ca1fb36c85f89c0177744f767d86
SHA1 27c6a3fc60e433a07434f177431f9c7813169c02
SHA256 793a9989f2423fa92bc6162fe3f2253fb4c544120407c2b8b1259dcae10d210b
SHA512 f46c6a416954b27e595de8167b4d1968e3b8afa1eb643040ed131cb5fad2fd27082a499d30038e1fca6406268342eb69ebc227cc11e6493053496bebcdb51507

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG46.PNG

MD5 c2a26bbdeacb81dd7f8f6bb2bea4a932
SHA1 ed9add65433be66e6a62133632eacf505d23264d
SHA256 9c2e4c1cc89258d95ef6702b7a62d722fdd82ae18f7aab62278aff88ae55a6a9
SHA512 8303b6a274e1d663e9255429dedbbb1eb2b232303d2cce9a6942257c14cc358126684e4bf11f7c111a5cf0063067aa487854daefedf7a4917f6b75b0b6452dcd

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP

MD5 0b445ace8798426e7185f52b7b7b6d1e
SHA1 7a77b46e0848cc9b32283ccb3f91a18c0934c079
SHA256 2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6
SHA512 51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG

MD5 eb70c64eb9637567556946524aaba3c8
SHA1 5e5574aef69a542c92a366c82d1e5cbd54d9778f
SHA256 c1a8a2116ffea80a1ce556fc51174e46be705310e7cafd9a150035056de9c588
SHA512 8c547e03982e75b00801a4a56cf55705e13f26d17e578d0c7ceab0effd1576863416ee2cbf5f205c306b206bd0ff39ab950276dc4a554d8440d85ef4c7112d87

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG45.PNG

MD5 93ab8d6d5e320bb55107ed481364e990
SHA1 151a55018eaf7e439791912786701068fbf3a401
SHA256 696bd78a46953d9314b3193983df419f4dcd016b5d31369bd3f3e3b364efc641
SHA512 7b19c69f69cff9f5505f4637eb71364a347fcfb4771f0c91a881f297a527fc347a73c26a259a69e5cbba164ec416d942d5c1188cd24f9dbb425b494db2d48823

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG

MD5 0d49244ce1c34d0ac58389f7403f60e8
SHA1 1c0a3b4b89a0b937231c86cb80e0d4f2214a29c5
SHA256 e5cb63d87eebf491c4fcef41e9a0a2a6f7ceb3f5685932f5f4e9ec158b7dfb65
SHA512 a4362b18c67d4881b952727005902ad9852a2dda45426d1077961199c0d22130a20a0447e05e588e20b0bdcc4224f8a271929864ce476477091d4349f4ce21f5

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG

MD5 0339f5d817fd1dd5abee2deb93183118
SHA1 e49bbc34cca35193272b7ce66760dc32e5c19334
SHA256 f110d8f101c31fb2c09f6d41a35b8c561c706f88467923052750781bd5fce37f
SHA512 08e0f45b68cd9e83d018e988de0b0b76dd8b9433f5def67f2137336dbef28bce69f6754b64bd26b04931811351a74d4c58cba4dce547a86d937e4980f1416147

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG

MD5 3ebb90db69ab4f89a809ae955ce084db
SHA1 99cc932c29c7195393a374891e86f2212caed004
SHA256 d20387a537000d2e53048ddf7554c02a3fe095a22d6d6232cf882a4eb4808d39
SHA512 4dab7ff56e46d08afe5649e7da7dd205d2a48ed4e600be03827828d5aa48abf4912f61f19dca0aa63f4243d848af67107caa4212a63c02a0cc6a804f9221361d

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG

MD5 b02439a5633e53e207a97fd5c3450109
SHA1 4cd39e991796c96bf2256f1b1adcb4a87e6d100c
SHA256 2eda05afa1dc64eb2ff1e5a5a3e07fab9b728a3249ffbd03ae6b78df2cfb9bcf
SHA512 1330302a734fe306c6edf001f1eb8f1abeea00338e507365035d4f78245716b93abf569cc613997b897547747fa6a8578d80e6084cb09c5d6d82d3c6dda2ee60

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 4bc1313a3918582bd394084c1bb7d3c0
SHA1 a0bf70246eb8ac0f7be9999e2429290cdfc3a4aa
SHA256 641aba89345cb4d3e7a3f3c64e6254d5f7772aa63e33349d9b4858b3f47fb81a
SHA512 eaa0dd1d815ecd7c71ee31d247b88d0942f96901f155ed8dd73f02719b20548f92273cb46fa5610afff75357f3b2c84a5f1ccea06dbafcc71c316fae7d71e809

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG109.PNG

MD5 0e0557b9f62fce2322fa993c91b2e2e7
SHA1 3c31d21dcb323a3faf47dc04663275e2581013b1
SHA256 7cdc6702979255bdc4b0ee0099593e88c94e563f00bfcca3c7d680f2bb2df3dc
SHA512 48bcf980c20e5b9f587d3c9277855171120cf4ef2d3e7f9aed1bfc8e3f894e28043760c5febad7f3806752b1d388ea1a80092351fac107461023fb7bce9cdd6b

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG124.PNG

MD5 6bcf4aff24c28919bf7c8c76c1c13bfd
SHA1 87776afed17d9f9b3a21fabdb530b4083eca3635
SHA256 03a9cdf6e58e6fbf4158af65ba7465a6463a7d2cfefae2b2bcf705f33771149e
SHA512 12fabd4f1818f31d5ca42c7299b576a6b31232b1c2abb468b256df3d57727dce9395affc4ba6334d7362ba1e57022b5341ffc908e08d019bc1ddc4f94a400e68

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 4bc1313a3918582bd394084c1bb7d3c0
SHA1 a0bf70246eb8ac0f7be9999e2429290cdfc3a4aa
SHA256 641aba89345cb4d3e7a3f3c64e6254d5f7772aa63e33349d9b4858b3f47fb81a
SHA512 eaa0dd1d815ecd7c71ee31d247b88d0942f96901f155ed8dd73f02719b20548f92273cb46fa5610afff75357f3b2c84a5f1ccea06dbafcc71c316fae7d71e809

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG

MD5 9df48291509b109da6fa8565dc46ebd0
SHA1 15e0c52b88cd73f4e294c5b469461e1666fc280a
SHA256 19210a58182587ee81486ca8357177df48bcd667cc4fbdb434965988b02cbb4e
SHA512 4e0136b2170c52762a64d1232cfe2638f059d3cc5337336501f40c369672241cba955433d707d6f3e8bae6f326eff1083be0cecbba0c6da535947641626197b7

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG

MD5 74cbb6a9510a5af4e84765729f03aef0
SHA1 44e70d3263b85bcbbf3f40c0b7710284eaed32f8
SHA256 224e1afab80a44dc6bf440bf4a3f3a9535485c271dd38eeefac83cad3a82536e
SHA512 305a8b0f3fd989af6460018bd88edeaf02ff50815d2d8f7553fa511f33eaee9427095f5d0412e7f53e769bf26ef3222cb6df95c4a68ae473fef85d285819641d

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG

MD5 a99cea0ae59b6200452ce912f755ebbf
SHA1 84d44cb1e98d59c64b85dd1d447a01e11e18c9d8
SHA256 ae007f0ee65aa1ea5f0a11f116a7613aa61c67259817f3ac2d7fde299a63e174
SHA512 fc9e5f4aa8551a01e7567df4d1ea764966bb4ec7c177c662f4a82c2095fa12f30d67a64c30d03d08ce72267b924eb78c9bd1e0d9ac4da3797cef36f46d5eaa51

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 3f027f1d398ac3aaaed11c744a3784fc
SHA1 4629a4a9eb2556b4de7551651efc291c9a503779
SHA256 d63c3943fe19168a3f1df84eab5b63cf945e31f23cf5ffa9e108e815da1f9b5c
SHA512 93d6d187d10bb36279c2de2a3cc8ecc72d939b8904cc5362325afd9ca9e65c0e81e6766298fffc02af8aee678a76425fd1e71d53ed7cd9658a6461c8d6070a6e

\Users\Admin\AppData\Local\Temp\Opera_installer_2304021743008011672.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\TarD685.tmp

MD5 73b4b714b42fc9a6aaefd0ae59adb009
SHA1 efdaffd5b0ad21913d22001d91bf6c19ecb4ac41
SHA256 c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd
SHA512 73af3c51b15f89237552b1718bef21fd80788fa416bab2cb2e7fb3a60d56249a716eda0d2dd68ab643752272640e7eaaaf57ce64bcb38373ddc3d035fb8d57cd

C:\Users\Admin\AppData\Local\Temp\CabD663.tmp

MD5 fc4666cbca561e864e7fdf883a9e6661
SHA1 2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5
SHA256 10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b
SHA512 c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG

MD5 8402b903804427eb60533887407e9e3f
SHA1 9ff615c4441fd6e8c2a998e9728f2df91b79926d
SHA256 3c3728982174ca5451f0fd830e1c33f9c92faa46e2e0492186d980b969db6e2c
SHA512 9a193bdc7f17ea6ba20f8bc3fcde1aaf5925508e4d4cf5f3483f96226b79a2bbda27b888d30475c5967f67809454cee6a41108ab9a18a6e62206fb9ea28fc5de

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG22.PNG

MD5 1d20e2d3d0534910b3ceb2659e36b202
SHA1 b36edff00ddd65e57196ca8b650e73fd3d5ee16d
SHA256 0e2c443067936fbcf70f7bcd3f957dcd691124a6684056c1e8407609f6d64226
SHA512 17e9dcb016a4609ea756fe8bf781aa0620f694c67b3135ee24ec03208033aea03ac8f70e445e4fe4a8d707aa7166e13bc284c58cf768a7b9ae1ddbe3ca5f1526

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565

MD5 2747b3e8f6ff8a2706c1e7517391d38d
SHA1 14f4676252c865a4574de217602dcba19f5911d6
SHA256 67eee9643b65533d8097c28527ac33d3f0625b720d60621c1165950f50750569
SHA512 eb2f0fee5f1ad9507fab504958051390c6fabc5ea810f75d48648ebcc623e3f93085aae395566e110a458baf375c6ddb64ae688a2c56c49992425de6addc2bfa

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 545c62b3d98ee4cc02af837a72dd09c4
SHA1 54446a007fd9b7363d9415673b0ac0232d5d70d5
SHA256 738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4
SHA512 8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

\Users\Admin\AppData\Local\Temp\Opera_installer_2304021743004571816.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG

MD5 233878a1dfdf615c0e1dc81530aa5302
SHA1 2cd4b1b5d072e3aec82eedf6a87b6c38bb59ef9a
SHA256 765cd11265661ef8aba10bafa1330b2311a309c6f8209cbef6ea1f4e7a6c922e
SHA512 c2fd7427dfe2fc564389ae1f86155901e11068ecf502d2e43c9e5f018b91a05e2952b08ea984b52e20ba8c83569b193bcf5ffb9b19b6e2e521d92c8086db6ed2

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 5c582807bd495583131e4937a05d3764
SHA1 c0530943f4d4e8ff743ea2a9c0ed4164792e4363
SHA256 f07b310964c99461ea3adc67993accffa3254ed8ed5d3c4a70c2e381c7d54115
SHA512 3b721c14977442caaec7703d128ce3113a684543f37a7d05016db6fa118c68b21fd5048a0c92e65fb24ee8ba3c962e69ca2bf480fefd09cabee7178f7cdc58b8

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 81fce1744944ae60c5f7be9d37fc7a96
SHA1 185ca186dd160388678fd0f407ee07cf04f7980a
SHA256 31c8e6d4f564354a536f8930796a49de4b946e48f0483025b6964ccc2dca87c7
SHA512 f95fc8378fb71407b59e0a0d917f39c4669adf162c13702f9dc55dedb847c2dafad0e09263f2b99a414cdb5ca442c88be7a32a4466bc273fed78f6e66778376d

memory/928-1406-0x0000000000310000-0x00000000006F8000-memory.dmp

memory/820-1408-0x0000000000E60000-0x0000000001398000-memory.dmp

memory/972-1409-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/972-1410-0x0000000010000000-0x0000000010051000-memory.dmp

memory/1816-1411-0x0000000000E60000-0x0000000001398000-memory.dmp

memory/1816-1412-0x0000000002DE0000-0x0000000003318000-memory.dmp

memory/1672-1414-0x0000000000E60000-0x0000000001398000-memory.dmp

memory/960-1416-0x0000000003A10000-0x0000000003F48000-memory.dmp

memory/960-1419-0x00000000040F0000-0x0000000004628000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\opera_package

MD5 6b7771354e081eb94cdbf7627799da4f
SHA1 199341a750443cc6e9b2b2fa1e657d0dd327711f
SHA256 494d1247e61eebf703a6eb19c14bde88edd2f85515fefa4f0465f43873e69aab
SHA512 33e781a102ba3f5c3b1895540bc9c43b78bf4f19af4b91ae0c765594f39d6569d1bad207b33f808426d8ebdcb00c419b7bb76bb050bae0bb843f96dd84355800

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5 e71c8443ae0bc2e282c73faead0a6dd3
SHA1 0c110c1b01e68edfacaeae64781a37b1995fa94b
SHA256 95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72
SHA512 b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

C:\Users\Admin\AppData\Local\Temp\Tar1D80.tmp

MD5 be2bec6e8c5653136d3e72fe53c98aa3
SHA1 a8182d6db17c14671c3d5766c72e58d87c0810de
SHA256 1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd
SHA512 0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\opera_package

MD5 6b7771354e081eb94cdbf7627799da4f
SHA1 199341a750443cc6e9b2b2fa1e657d0dd327711f
SHA256 494d1247e61eebf703a6eb19c14bde88edd2f85515fefa4f0465f43873e69aab
SHA512 33e781a102ba3f5c3b1895540bc9c43b78bf4f19af4b91ae0c765594f39d6569d1bad207b33f808426d8ebdcb00c419b7bb76bb050bae0bb843f96dd84355800

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\opera_package

MD5 6b7771354e081eb94cdbf7627799da4f
SHA1 199341a750443cc6e9b2b2fa1e657d0dd327711f
SHA256 494d1247e61eebf703a6eb19c14bde88edd2f85515fefa4f0465f43873e69aab
SHA512 33e781a102ba3f5c3b1895540bc9c43b78bf4f19af4b91ae0c765594f39d6569d1bad207b33f808426d8ebdcb00c419b7bb76bb050bae0bb843f96dd84355800

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\additional_file0.tmp

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

memory/972-1598-0x0000000003230000-0x0000000003240000-memory.dmp

memory/1240-1599-0x0000000002BC0000-0x0000000002FA8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

memory/928-1604-0x0000000002EF0000-0x0000000002F00000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021743001\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 4bc1313a3918582bd394084c1bb7d3c0
SHA1 a0bf70246eb8ac0f7be9999e2429290cdfc3a4aa
SHA256 641aba89345cb4d3e7a3f3c64e6254d5f7772aa63e33349d9b4858b3f47fb81a
SHA512 eaa0dd1d815ecd7c71ee31d247b88d0942f96901f155ed8dd73f02719b20548f92273cb46fa5610afff75357f3b2c84a5f1ccea06dbafcc71c316fae7d71e809

memory/960-1627-0x0000000003A10000-0x0000000003F48000-memory.dmp

memory/960-1628-0x00000000040F0000-0x0000000004628000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 fe7da9915bfd798dab9906ba5c5c7dac
SHA1 443d319afb66b2aa805c932fa0bfff1e9b4b72ea
SHA256 cafd4ac80d135ca6fe6fed9729f2fbc9e745f652ed50eb92ce680ca77cc188e3
SHA512 7574f9b74e07133b74bd14abd9c1809301bdda11422627c5d85a8f786e2baab8019807478564a15b8a144cd4cca2c1f91511b1070efea1b1ee5ae687087e2f1f

memory/972-1659-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/972-1660-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\jusched.log

MD5 9475f80c2fb328492f9f0f62cec746e8
SHA1 4cd0165744786ed02f43e8f7407365b182e580d5
SHA256 a398a68226bd789faf6cc0c0b88e4de6ba573187dc28d6f2b03d5a84818a0a00
SHA512 f50b1f311fafaf66e5b8c1556ade4008dff042ebafe0884e3dab0b6ecc5be113b703ed330ef6217def02e725cccc19add8217060a5f99f0841639643abc257a7

memory/972-1758-0x0000000000CA0000-0x0000000001088000-memory.dmp

memory/928-1804-0x0000000000310000-0x00000000006F8000-memory.dmp

C:\Windows\Installer\MSIF1B5.tmp

MD5 62cfeb86f117ad91b8bb52f1dda6f473
SHA1 c753b488938b3e08f7f47df209359c7b78764448
SHA256 f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e
SHA512 c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

C:\Windows\Installer\6de438.msi

MD5 1794aaa17d114a315a95473c9780fc8b
SHA1 7f250c022b916b88e22254985e7552bc3ac8db04
SHA256 7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4
SHA512 fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

memory/2852-2008-0x0000000000400000-0x0000000000417000-memory.dmp

memory/2852-2009-0x0000000000230000-0x0000000000247000-memory.dmp

memory/2852-2010-0x0000000000230000-0x0000000000247000-memory.dmp

memory/2852-2011-0x0000000000230000-0x0000000000247000-memory.dmp

memory/2852-2024-0x0000000000400000-0x0000000000417000-memory.dmp

C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe

MD5 691f68efcd902bfdfb60b556a3e11c2c
SHA1 c279fa09293185bddfd73d1170b6a73bd266cf07
SHA256 471d70ebf91bdc762dcacbea9f6ca883f97921938e83269fef911dbf83598a70
SHA512 a4816ae0654f41bd130d56e44839d9f29ab48bd2f99c3d6db38ce3358ac46c1cef09da09184c6291dd378018a49f9e56173c35d780d3eaefcce459592c75de3f

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.url

MD5 3b1c6b5701ef2829986a6bdc3f6fbf94
SHA1 1a2fe685aba9430625cba281d1a8f7ba9d392af0
SHA256 6a2cdce88637830202e1031bc8c11f083103a6bbb8c1ce16fb805671a46633c8
SHA512 f3391d790bb6acb1c25b82253b19c334e7cd73648e9821b7050fefbd5b0bc4b48a0cedd97e425a83c788f9b798337d33dee2e989771604c4f886da46d2debea0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.url

MD5 7fadb9e200dbbd992058cefa41212796
SHA1 e2525d7ba66bb07bc1cd5ba93f88c54e7e2042b4
SHA256 b05abacd15117b1ffcd2a288308f50c0542214d264b852eddfa9025307ac401b
SHA512 94b7bf1f1f5cea2a74f8c326113dd25652cb14e5fa356ac83d16b6ac5a5cac26c9d2b20259f5c2cf8ebc1e022490511e2996335a5d8dd7f5b64dce429fb6dfb1

C:\Program Files\Java\jre1.8.0_351\bin\javacpl.exe

MD5 7a9d69862a2021508931a197cd6501ec
SHA1 a0f7d313a874552f4972784d15042b564e4067fc
SHA256 51ff63cbac78bd133333e98d91b02b652c88cd57cedd0052519051a17be77856
SHA512 5c331e6deefc8256ea203d63770484f6b485d4c3832a60ecf4a540dff3cb75a76dbde37980fe1763ca487401b68126f58f8d1a4c72ee610f5144c624c4736850

C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe

MD5 24ccb37646e1f52ce4f47164cccf2b91
SHA1 bc265e26417026286d6ed951904305086c4f693c
SHA256 adf2d659c2b2a4afff1ca58f3a742d27d767d27eabeca6a8b6ee243e9c913a39
SHA512 cb174e7a219f6ffae3715e37beb428979bc1462202729c05a25fa7b8da90e2dd6faa92c03cd9ca21567d354dce7acc1852669f4071298e953d6a286243794e32

C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\npdeployJava1.dll

MD5 ff91ac355dc6b1df63795886125bccf8
SHA1 90979fc6ea3a89031598d2146bf5cdbbb6db6b77
SHA256 14b30467cfea0071dffc658dd31b8a25b7b4e79608933f171911c2cba6aa9a0a
SHA512 77aa8c7930730004bdb8d49a82712e1042db978102f6eca0d38317b6fd98ef03e52279130eadc7a0da1148e759db6589f7f8334d4c2eccfb2613e8f19542e197

Analysis: behavioral2

Detonation Overview

Submitted

2023-04-02 17:41

Reported

2023-04-02 17:46

Platform

win10v2004-20230220-en

Max time kernel

126s

Max time network

179s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe"

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\icacls.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1675742406-747946869-1029867430-1000\{163ECFA4-B348-4A90-BFCA-0CB4650B133B} C:\Windows\system32\svchost.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 04000000010000001000000078f2fcaa601f2fb4ebc937ba532e75490f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e4190000000100000010000000ffac207997bb2cfe865570179ee037b92000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
N/A N/A C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4512 wrote to memory of 2448 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 4512 wrote to memory of 2448 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 4512 wrote to memory of 2448 N/A C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
PID 2448 wrote to memory of 3880 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 2448 wrote to memory of 3880 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 2448 wrote to memory of 3880 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
PID 3880 wrote to memory of 900 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 3880 wrote to memory of 900 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 3880 wrote to memory of 900 N/A C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
PID 900 wrote to memory of 4344 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 900 wrote to memory of 4344 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 900 wrote to memory of 4344 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 4916 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 4916 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 4916 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 5080 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 5080 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 5080 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 5080 wrote to memory of 3868 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 5080 wrote to memory of 3868 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 5080 wrote to memory of 3868 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
PID 4344 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 4344 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 4344 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe
PID 4344 wrote to memory of 1420 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 4344 wrote to memory of 1420 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 4344 wrote to memory of 1420 N/A C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 1420 wrote to memory of 3252 N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 1420 wrote to memory of 3252 N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 1420 wrote to memory of 3252 N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe
PID 2448 wrote to memory of 5256 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 2448 wrote to memory of 5256 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 2448 wrote to memory of 5256 N/A C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
PID 5256 wrote to memory of 5992 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
PID 5256 wrote to memory of 5992 N/A C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe

"C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe"

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.0.9.exe" "__IRCT:3" "__IRTSS:23652905" "__IRSID:S-1-5-21-1675742406-747946869-1029867430-1000"

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1841947" "__IRSID:S-1-5-21-1675742406-747946869-1029867430-1000"

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=97.0.4719.43 --initial-client-data=0x340,0x344,0x348,0x31c,0x34c,0x6fa733e0,0x6fa733f0,0x6fa733fc

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4344 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230402194242" --session-guid=33794ca5-06ff-40b5-bb0b-31e6c1677055 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=4805000000000000

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=97.0.4719.43 --initial-client-data=0x34c,0x350,0x354,0x31c,0x358,0x6ef533e0,0x6ef533f0,0x6ef533fc

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe"

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe" --version

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=96.0.4693.50 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2cc,0x2fc,0x2b6c28,0x2b6c38,0x2b6c44

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe -Xmx1024m -Dfile.encoding=UTF8 -cp C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar; org.tlauncher.tlauncher.rmo.TLauncher

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Windows\system32\icacls.exe

C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe

"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"

Network

Country Destination Domain Proto
US 52.152.110.14:443 tcp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 176.122.125.40.in-addr.arpa udp
US 8.8.8.8:53 dl2.tlauncher.org udp
US 104.20.235.70:443 dl2.tlauncher.org tcp
US 8.8.8.8:53 70.235.20.104.in-addr.arpa udp
US 8.8.8.8:53 176.122.125.40.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 assets.msn.com udp
NL 84.53.185.177:443 assets.msn.com tcp
US 8.8.8.8:53 177.185.53.84.in-addr.arpa udp
US 8.8.8.8:53 123.108.74.40.in-addr.arpa udp
US 8.8.8.8:53 net.geo.opera.com udp
NL 185.26.182.111:443 net.geo.opera.com tcp
US 8.8.8.8:53 111.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 desktop-netinstaller-sub.osp.opera.software udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 download.opera.com udp
NL 185.26.182.112:443 features.opera-api2.com tcp
NL 185.26.182.122:443 download.opera.com tcp
US 8.8.8.8:53 download5.operacdn.com udp
US 104.18.3.211:443 download5.operacdn.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 121.217.145.82.in-addr.arpa udp
US 8.8.8.8:53 112.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 19.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 122.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 211.3.18.104.in-addr.arpa udp
IE 13.69.239.72:443 tcp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 209.197.3.8:80 tcp
NL 173.223.113.164:443 tcp
NL 173.223.113.131:80 tcp
US 131.253.33.203:80 tcp
US 8.8.8.8:53 45.8.109.52.in-addr.arpa udp
US 93.184.221.240:80 tcp
US 8.8.8.8:53 res.tlauncher.org udp
DE 78.46.66.120:80 res.tlauncher.org tcp
US 8.8.8.8:53 cl1-res.tlauncher.org udp
US 104.20.234.70:443 cl1-res.tlauncher.org tcp
US 8.8.8.8:53 120.66.46.78.in-addr.arpa udp
US 8.8.8.8:53 70.234.20.104.in-addr.arpa udp
US 104.20.234.70:443 cl1-res.tlauncher.org tcp

Files

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

MD5 9597a91c491d87dfb8209de6b878fe8b
SHA1 da77262030402d701d697c65c7d60d70ff8af4be
SHA256 81fdafeef0c0e4c41a687b3072a86efc96a7d5df4c015d66ba2016e065544208
SHA512 b76480193c755e6d83ec7c257d3efe6800fb8f84169ca61096941aa5fa660218e0239e083fdbb9a1e49a0e0d317236c34de1232d827ec8e740d860bf46e9fcb6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

memory/2448-147-0x00000000003B0000-0x0000000000798000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico

MD5 e043a9cb014d641a56f50f9d9ac9a1b9
SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

MD5 da1d0cd400e0b6ad6415fd4d90f69666
SHA1 de9083d2902906cacf57259cf581b1466400b799
SHA256 7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575
SHA512 f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

MD5 1bbf5dd0b6ca80e4c7c77495c3f33083
SHA1 e0520037e60eb641ec04d1e814394c9da0a6a862
SHA256 bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b
SHA512 97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

memory/2448-440-0x0000000010000000-0x0000000010051000-memory.dmp

memory/2448-441-0x0000000006CE0000-0x0000000006CE3000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG

MD5 ad413a1fa3406283529429463b3c3582
SHA1 541632da39b89d6370444569130a8780e4917886
SHA256 8fb2c6302a6f56fb23e6a2fd1e5e52136941ac1037c40c26ed5d63c9f71c1a27
SHA512 9dd27101508bc457257a58c4df2473c4050be11f55c6b8b9d670c63d52410e216ac99328aceb25035e88202cab177e9303834441fce3c84677173b2ae3f9ffa6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG

MD5 c26a8c3c8a1b4cfa66a04954682cbd00
SHA1 a0fe409f7c63212fa96af3d27e985d1b636d7f5e
SHA256 b215bf4f48b4f943c61a43675ca768f8ff8fa4da813fa3c969a26be550e37b15
SHA512 4088e0d60d5e88ca877af034ee3134a3dec626efcea9a498dfa93c532b77e17f90aca02e03262cf179562136f3b2928d330d3e18dcc9180d22f63c926699baad

memory/2448-473-0x00000000003B0000-0x0000000000798000-memory.dmp

memory/2448-474-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

MD5 8d26aecef0a7bdac2b104454d3ba1a87
SHA1 50c29c58dfece62d94ed01cb5b3d070e593dc9cf
SHA256 e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c
SHA512 0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG

MD5 bfd3f5e88b85b08269a1209c7efff5ef
SHA1 831bb68b2118d3037b34316e8290f3aaaa986a9b
SHA256 a1c5e2e49e3cc71793e79d5be2e8d6f7aa5490c9262675d6db0e3fd537fc42eb
SHA512 95b76358b3bfbd31914d6b1db578aa0e5a19b1e352833df9537a02dc6c2084676eaaeb36ac7fbf397a5ba43b16068df7109b3e84bfaa398b8b7175993bd2edd5

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

MD5 018c68cdf5ba005b4a380c20b13fee4c
SHA1 bf6043fbd31288e8667fcfc37cd74414bee1805f
SHA256 3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923
SHA512 506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

MD5 80d93d38badecdd2b134fe4699721223
SHA1 e829e58091bae93bc64e0c6f9f0bac999cfda23d
SHA256 c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59
SHA512 9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

MD5 d328b9a6ccd2b61e92ad634b8f586317
SHA1 caa843f8cb916fb016b758e8ef4f5f8302a30414
SHA256 b58a26c241fe1de4ac4593fec33b47e968986521bcc27075b1ed71d4f5ba2d1c
SHA512 3b86e60a6352e0f763866c6df4e5ccd03abd5b34cc18948af322e03bace4a93eeb63643dbf3f90d05dd7a54e1a96bb37acfdf6c637578d3bd47f28895bb10934

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat

MD5 bd5626a0237933e0f1dccf10e7c9fbd6
SHA1 10c47d382d4f44d8d44efaa203501749e42c6d50
SHA256 7dfc1176d8a507135140b23a0c014093b7e2673f0f3e5727c3d85df4e7323762
SHA512 1fd864a5386580cf8bbafbacb12a043ef51948b729b9aedfe6dc81e6c2948a100526c7c600069f22454d550f7f736ad3045a930cc2ef97458dc1d6c782928087

memory/900-528-0x0000000000120000-0x0000000000508000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942398134344.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942399854916.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942399854916.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

memory/4916-606-0x0000000000FB0000-0x00000000014E8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

memory/4344-594-0x0000000000FB0000-0x00000000014E8000-memory.dmp

memory/2448-610-0x00000000003B0000-0x0000000000798000-memory.dmp

memory/2448-612-0x0000000010000000-0x0000000010051000-memory.dmp

memory/2168-613-0x0000000000D10000-0x0000000001248000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942416722168.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

memory/2168-618-0x0000000000D10000-0x0000000001248000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942424383868.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 899b6baaf4ea078d861ea74d00eedcd6
SHA1 ff79ab1132b5d6d377872f0e1856be2e88f4e4e2
SHA256 87b21c48692142129c6ba699fd5f9b4a68aed7c4f9303da90a853e5d027788c5
SHA512 06c570556dd799972dd7f2e09856b9e4b24ca84e1909c183bd68ba7b41c24a92d34b55db275ef0d2b5d5c10754bc86fdd00aa2db15e94478571b1d009a0b4615

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 899b6baaf4ea078d861ea74d00eedcd6
SHA1 ff79ab1132b5d6d377872f0e1856be2e88f4e4e2
SHA256 87b21c48692142129c6ba699fd5f9b4a68aed7c4f9303da90a853e5d027788c5
SHA512 06c570556dd799972dd7f2e09856b9e4b24ca84e1909c183bd68ba7b41c24a92d34b55db275ef0d2b5d5c10754bc86fdd00aa2db15e94478571b1d009a0b4615

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565

MD5 f6f0bfa58fced53e24045f53bb63da36
SHA1 51747a4d7094010ecea6e1aa264296ba8311c399
SHA256 e7686d0a1a485c9a4b943f9ba71dd555203f107138346fecba3c8924f6a978ed
SHA512 55ec5e24e32c06cb006ef4a31ed311f25bf0c54a1d13fdd1a784b6c53f61bb615252c129e61768894d86b0a3d1ec684096db6d6f3460522f05329a6656991635

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565

MD5 8abbc5c41d19dd302a23684a60373365
SHA1 1568636e0f599d3ac14689c2968b433eb28f5d4b
SHA256 efd7b0201a4c4ef6a1f9334af3cf0fa73972b7ff6bec5b8132806b0238f756ee
SHA512 cfb94cca88d81df1117c673489ff0afba5c5dda20988050486e5d3d48b1618c08546c595675793a3240d079aeb7f1532515517e3a1a4c7ddc7ce31bef98fded1

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304021942423295080.dll

MD5 bac04c920c1505e39636c6d473721292
SHA1 f45d06f54dc4f1dd2256bbe23843be4952aca2ab
SHA256 98c6a36fc123eabe83b724f3b41735a55784ddec0173739c50124e4d7e9d22f0
SHA512 8d2a6f0354aa1557e5ccec3adb9eab59237606c29b92883cfdf106a2f924ebfba06bed6cd65b64462465ad2f11c329ed06fe36b640905bd86427c023f50c4771

C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe

MD5 7c72cd457e1cd933841d6198724daada
SHA1 4e0c60c3ad952cac7c1661d5eb352dbdfd15b16e
SHA256 f8056316f937ad5642ae909245d9e4464d3eb86b93c8149118a2a987b4bed2c4
SHA512 9299398a5f3a78ae616a2e6000cb56de98a58d802b968edc664b28c64e92f5dd5d187e5d03007b8a0309a8278043c5d9e063e619c8f5ed0c629657208583764b

memory/2448-646-0x00000000003B0000-0x0000000000798000-memory.dmp

memory/900-651-0x0000000000120000-0x0000000000508000-memory.dmp

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 efffdc8e52acab368fe039782af83e20
SHA1 127a5e6ca92b6c3abc4fe1039146b92d571260f7
SHA256 066cbfe0079960d196a582efc6982053bb9a9ec2311a28f10e4d495891084707
SHA512 57715f6acf192a8356771031f806716371702dbe4ef73677e307a3042f4c6b44a5577e730e3cb6a66390aa353d6207229cda368ab3a04055aeb7c88ae83431d5

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG

MD5 8aa76bec130c6e445b9afc13e069c705
SHA1 f33b780d401e898ce376dfcc17022efb282613f9
SHA256 f1a88c950c4342a6d2f972ed57d4b2d2bea8d17c76cfaa852aaf8247cb392918
SHA512 76a1a4ff5aad4a839d50e3ecb84130e0335dcbf7ddeaf4f5b36327fdacad92ee13cc3018ab706b3bf0553eca428fa0d2f9c4080007cbeba5042841387c505809

memory/3868-772-0x0000000000FB0000-0x00000000014E8000-memory.dmp

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP

MD5 0b445ace8798426e7185f52b7b7b6d1e
SHA1 7a77b46e0848cc9b32283ccb3f91a18c0934c079
SHA256 2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6
SHA512 51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG

MD5 eb70c64eb9637567556946524aaba3c8
SHA1 5e5574aef69a542c92a366c82d1e5cbd54d9778f
SHA256 c1a8a2116ffea80a1ce556fc51174e46be705310e7cafd9a150035056de9c588
SHA512 8c547e03982e75b00801a4a56cf55705e13f26d17e578d0c7ceab0effd1576863416ee2cbf5f205c306b206bd0ff39ab950276dc4a554d8440d85ef4c7112d87

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG

MD5 0d49244ce1c34d0ac58389f7403f60e8
SHA1 1c0a3b4b89a0b937231c86cb80e0d4f2214a29c5
SHA256 e5cb63d87eebf491c4fcef41e9a0a2a6f7ceb3f5685932f5f4e9ec158b7dfb65
SHA512 a4362b18c67d4881b952727005902ad9852a2dda45426d1077961199c0d22130a20a0447e05e588e20b0bdcc4224f8a271929864ce476477091d4349f4ce21f5

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG

MD5 0339f5d817fd1dd5abee2deb93183118
SHA1 e49bbc34cca35193272b7ce66760dc32e5c19334
SHA256 f110d8f101c31fb2c09f6d41a35b8c561c706f88467923052750781bd5fce37f
SHA512 08e0f45b68cd9e83d018e988de0b0b76dd8b9433f5def67f2137336dbef28bce69f6754b64bd26b04931811351a74d4c58cba4dce547a86d937e4980f1416147

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG46.PNG

MD5 c2a26bbdeacb81dd7f8f6bb2bea4a932
SHA1 ed9add65433be66e6a62133632eacf505d23264d
SHA256 9c2e4c1cc89258d95ef6702b7a62d722fdd82ae18f7aab62278aff88ae55a6a9
SHA512 8303b6a274e1d663e9255429dedbbb1eb2b232303d2cce9a6942257c14cc358126684e4bf11f7c111a5cf0063067aa487854daefedf7a4917f6b75b0b6452dcd

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG45.PNG

MD5 93ab8d6d5e320bb55107ed481364e990
SHA1 151a55018eaf7e439791912786701068fbf3a401
SHA256 696bd78a46953d9314b3193983df419f4dcd016b5d31369bd3f3e3b364efc641
SHA512 7b19c69f69cff9f5505f4637eb71364a347fcfb4771f0c91a881f297a527fc347a73c26a259a69e5cbba164ec416d942d5c1188cd24f9dbb425b494db2d48823

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG

MD5 3ebb90db69ab4f89a809ae955ce084db
SHA1 99cc932c29c7195393a374891e86f2212caed004
SHA256 d20387a537000d2e53048ddf7554c02a3fe095a22d6d6232cf882a4eb4808d39
SHA512 4dab7ff56e46d08afe5649e7da7dd205d2a48ed4e600be03827828d5aa48abf4912f61f19dca0aa63f4243d848af67107caa4212a63c02a0cc6a804f9221361d

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG

MD5 6bcf4aff24c28919bf7c8c76c1c13bfd
SHA1 87776afed17d9f9b3a21fabdb530b4083eca3635
SHA256 03a9cdf6e58e6fbf4158af65ba7465a6463a7d2cfefae2b2bcf705f33771149e
SHA512 12fabd4f1818f31d5ca42c7299b576a6b31232b1c2abb468b256df3d57727dce9395affc4ba6334d7362ba1e57022b5341ffc908e08d019bc1ddc4f94a400e68

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG108.PNG

MD5 0e0557b9f62fce2322fa993c91b2e2e7
SHA1 3c31d21dcb323a3faf47dc04663275e2581013b1
SHA256 7cdc6702979255bdc4b0ee0099593e88c94e563f00bfcca3c7d680f2bb2df3dc
SHA512 48bcf980c20e5b9f587d3c9277855171120cf4ef2d3e7f9aed1bfc8e3f894e28043760c5febad7f3806752b1d388ea1a80092351fac107461023fb7bce9cdd6b

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG

MD5 b02439a5633e53e207a97fd5c3450109
SHA1 4cd39e991796c96bf2256f1b1adcb4a87e6d100c
SHA256 2eda05afa1dc64eb2ff1e5a5a3e07fab9b728a3249ffbd03ae6b78df2cfb9bcf
SHA512 1330302a734fe306c6edf001f1eb8f1abeea00338e507365035d4f78245716b93abf569cc613997b897547747fa6a8578d80e6084cb09c5d6d82d3c6dda2ee60

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG19.PNG

MD5 1d20e2d3d0534910b3ceb2659e36b202
SHA1 b36edff00ddd65e57196ca8b650e73fd3d5ee16d
SHA256 0e2c443067936fbcf70f7bcd3f957dcd691124a6684056c1e8407609f6d64226
SHA512 17e9dcb016a4609ea756fe8bf781aa0620f694c67b3135ee24ec03208033aea03ac8f70e445e4fe4a8d707aa7166e13bc284c58cf768a7b9ae1ddbe3ca5f1526

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG

MD5 233878a1dfdf615c0e1dc81530aa5302
SHA1 2cd4b1b5d072e3aec82eedf6a87b6c38bb59ef9a
SHA256 765cd11265661ef8aba10bafa1330b2311a309c6f8209cbef6ea1f4e7a6c922e
SHA512 c2fd7427dfe2fc564389ae1f86155901e11068ecf502d2e43c9e5f018b91a05e2952b08ea984b52e20ba8c83569b193bcf5ffb9b19b6e2e521d92c8086db6ed2

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG

MD5 8402b903804427eb60533887407e9e3f
SHA1 9ff615c4441fd6e8c2a998e9728f2df91b79926d
SHA256 3c3728982174ca5451f0fd830e1c33f9c92faa46e2e0492186d980b969db6e2c
SHA512 9a193bdc7f17ea6ba20f8bc3fcde1aaf5925508e4d4cf5f3483f96226b79a2bbda27b888d30475c5967f67809454cee6a41108ab9a18a6e62206fb9ea28fc5de

memory/5080-654-0x0000000000FB0000-0x00000000014E8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\opera_package

MD5 08ffaf39dc304e29b6d5d4b6d45e7d87
SHA1 0acb2b4057ffcae1c1b5659d4d897caf63946f9c
SHA256 497229bbce3750058cb5301215561d067bafad7c956db5eb7719faf16e5152b3
SHA512 5f60a042df1b45ad5363555cd685f4a24710f67996d7a1ae5cc0cf3b8bf3678d66946a8712ef5ac480942ef49eaa34d93d68c47fbdf26671298817f3a3f571dc

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG

MD5 9df48291509b109da6fa8565dc46ebd0
SHA1 15e0c52b88cd73f4e294c5b469461e1666fc280a
SHA256 19210a58182587ee81486ca8357177df48bcd667cc4fbdb434965988b02cbb4e
SHA512 4e0136b2170c52762a64d1232cfe2638f059d3cc5337336501f40c369672241cba955433d707d6f3e8bae6f326eff1083be0cecbba0c6da535947641626197b7

C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

MD5 2a376ff46f9c2d072e5ed6ab6484e08e
SHA1 bdbc796f56afc89cb027ac72047114cce63c5198
SHA256 7f260cc25d9c683d9c60975a0960e1ef317149d9f4a98fa6aad4265844ac97c0
SHA512 2f58f3ec5a146e8a27f38288f6b6edcb572f8d6ee1449a6a505909b5ff2ddeefad3840685325962cb1f6365189e40d5da53cb8c1f0f53aa51c23d7adeef979f6

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG

MD5 74cbb6a9510a5af4e84765729f03aef0
SHA1 44e70d3263b85bcbbf3f40c0b7710284eaed32f8
SHA256 224e1afab80a44dc6bf440bf4a3f3a9535485c271dd38eeefac83cad3a82536e
SHA512 305a8b0f3fd989af6460018bd88edeaf02ff50815d2d8f7553fa511f33eaee9427095f5d0412e7f53e769bf26ef3222cb6df95c4a68ae473fef85d285819641d

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG

MD5 a99cea0ae59b6200452ce912f755ebbf
SHA1 84d44cb1e98d59c64b85dd1d447a01e11e18c9d8
SHA256 ae007f0ee65aa1ea5f0a11f116a7613aa61c67259817f3ac2d7fde299a63e174
SHA512 fc9e5f4aa8551a01e7567df4d1ea764966bb4ec7c177c662f4a82c2095fa12f30d67a64c30d03d08ce72267b924eb78c9bd1e0d9ac4da3797cef36f46d5eaa51

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\Assistant_96.0.4693.50_Setup.exe_sfx.exe

MD5 b386cdcb413405daa8219af8e4cbd318
SHA1 ce275ff8514fef0629c915a6ee7b5ac481b9043d
SHA256 408ebcce07eb76963651b97f84255b67e5f0e7ff6869e9c0e5bab0082eafe66e
SHA512 91f6bf600e022a2a80c6b0a7b84fd5549804111447f66c4a30e768a589efc0702d02634a9ba23ce18c42701e42b440af0aa3396cc317fa733c2f90223b6db626

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

memory/2448-1635-0x00000000003B0000-0x0000000000798000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304021942421\assistant\assistant_installer.exe

MD5 2f3d9e21e232b9bfea064d3b2264db06
SHA1 bafddc657d8d1bb531683b29b0342cc065ee51d2
SHA256 25528c314aed2b5391ca1d08c736a3807142aab21ae99d5970f2a862c8258d5d
SHA512 94e81aa3015b7e112bf772b52b2dd6092f5634746e201171b34b2493a62b08fbbf53a6d6c60c904c424c06e802aae6810c6dd88cf7a882846bc0a4793c3b32e5

memory/2448-1636-0x0000000010000000-0x0000000010051000-memory.dmp

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 899b6baaf4ea078d861ea74d00eedcd6
SHA1 ff79ab1132b5d6d377872f0e1856be2e88f4e4e2
SHA256 87b21c48692142129c6ba699fd5f9b4a68aed7c4f9303da90a853e5d027788c5
SHA512 06c570556dd799972dd7f2e09856b9e4b24ca84e1909c183bd68ba7b41c24a92d34b55db275ef0d2b5d5c10754bc86fdd00aa2db15e94478571b1d009a0b4615

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 545c62b3d98ee4cc02af837a72dd09c4
SHA1 54446a007fd9b7363d9415673b0ac0232d5d70d5
SHA256 738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4
SHA512 8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG106.PNG

MD5 b7cfb0f1ee970200738032c7fdfafb8a
SHA1 782983a0e45c87dab5cce32ff637a13080974ea0
SHA256 37c452dd1271e745104e4aebd7e7b8785b6af6951d10f875a627d4fb4b2a36dc
SHA512 2d7079311e5c034cb40da1dfefb42a84d722c84e8dcb532961f5848cb5f693c6876d29538ec120381ae1c838f4c5fdc988609f76c663ca34d41fd88c6edd772f

memory/2448-1661-0x00000000003B0000-0x0000000000798000-memory.dmp

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 545c62b3d98ee4cc02af837a72dd09c4
SHA1 54446a007fd9b7363d9415673b0ac0232d5d70d5
SHA256 738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4
SHA512 8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

MD5 545c62b3d98ee4cc02af837a72dd09c4
SHA1 54446a007fd9b7363d9415673b0ac0232d5d70d5
SHA256 738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4
SHA512 8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

memory/5256-1954-0x0000000000400000-0x0000000000417000-memory.dmp

memory/2448-1955-0x00000000003B0000-0x0000000000798000-memory.dmp

memory/900-1960-0x0000000000120000-0x0000000000508000-memory.dmp

memory/5992-1971-0x0000000000C50000-0x0000000000C51000-memory.dmp

memory/5992-1983-0x0000000000C50000-0x0000000000C51000-memory.dmp

memory/5992-2002-0x0000000000C50000-0x0000000000C51000-memory.dmp

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar

MD5 41f66d1d4d250efebde3bbf8b2d55dfa
SHA1 eeb69005da379a10071aa4948c48d89250febb07
SHA256 9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e
SHA512 109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar

MD5 43bfc49bdc7324f6daaa60c1ee9f3972
SHA1 6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9
SHA256 58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4
SHA512 834f2bf4a5b35edffde0263409649aeaf34ca9a742ba511a06bb9b01626f9e774d2d3c8ba91a7905929dc8cd5e6471de29f7d0ab10260ece2af709b7fdbe4bc3

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar

MD5 04177054e180d09e3998808efa0401c7
SHA1 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
SHA512 3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar

MD5 904094a40b7d81b12936f43b49952922
SHA1 5ccf048dd51a7d0cdd59a1ea6ce2e3b167feacf3
SHA256 0cd5746118a3a38b7e6126770bc53c0f7c4641fab786e3d6004a4caace4fc536
SHA512 36e2bc67d73319b8f10a572ee3ca6f541aa51ca16c1efea9430111f3a058c9c922a43865b064811117f1c3892e39aee3bc79d7fc5ce20ccd75a13d447ca68911

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar

MD5 acbc8aa5ba5cdddf5f1e67befe8cc597
SHA1 63b4bf89744b532e65c1afa3294743d2b3798f2b
SHA256 1f46b3a163012f9729905633b5e5e03ce385066ae43138a564729c942f9ca6b9
SHA512 d974a032d9af451c0dd51fbc0d64840f3e03eb502f40e4ab60d6722913b8a48d44a75752fcff60656e4d19089570a894222959745af11bcdf93ea1544192fee3

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar

MD5 13a8e72587ac6eacfb0986f75e51eb7c
SHA1 6c3daf89705427f73e6106d2d4d9619e99c5ecb5
SHA256 1fcffa073f722737431e2699b1f3ea48b92a3b825397d8f0d1464e4d4d15a014
SHA512 134735390415f60d0c42ff33a060bda508e273b35fc9aab271c20ff23f331b51cf3fa36443009e0987049f6bfb22c4098a1473e65ea0349e719fbf4b528f344e

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar

MD5 51050e595b308c4aec8ac314f66e18bc
SHA1 9c64274b7dbb65288237216e3fae7877fd3f2bee
SHA256 86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840
SHA512 c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar

MD5 04a41f0a068986f0f73485cf507c0f40
SHA1 5af35056b4d257e4b64b9e8069c0746e8b08629f
SHA256 1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9
SHA512 3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar

MD5 39c6476e4de3d4f90ad4ca0ddca48ec2
SHA1 ee9e9eaa0a35360dcfeac129ff4923215fd65904
SHA256 26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5
SHA512 fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar

MD5 8667a442ee77e509fbe8176b94726eb2
SHA1 5fe28b9518e58819180a43a850fbc0dd24b7c050
SHA256 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
SHA512 b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar

MD5 289075e48b909e9e74e6c915b3631d2e
SHA1 6975da39a7040257bd51d21a231b76c915872d38
SHA256 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
SHA512 e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar

MD5 65912196b6e91f2ceb933001c1fb5c94
SHA1 af799dd7e23e6fe8c988da12314582072b07edcb
SHA256 663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868
SHA512 60b15182130ddfd801dd0438058d641dd5ba9122f2d1e081eb63f5e2c12fff0271d9d47c58925be0be8267ed22ae893ea9d1b251faba17dc1d2552b5d93056de

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar

MD5 540f330717bca9d29c8762cf6daca443
SHA1 eed8a2cbf56cc60d07a189a429ead3067564193c
SHA256 52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153
SHA512 a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar

MD5 948dda787593340a7af1a18e328b7b7f
SHA1 9141212b8507ab50a45525b545b39d224614528b
SHA256 ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0
SHA512 6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar

MD5 8f7e4f1a95a870ebee87ddacc425362c
SHA1 300bf1846737e34b9ea10faae257ca8fdcd0616f
SHA256 f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728
SHA512 98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar

MD5 75a215b9e921044cd2c88e73f6cb9745
SHA1 18cc717b85af0b12ba922abf415c2ff4716f8219
SHA256 7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc
SHA512 1a44af2f3f8dbfbf38ad5f71ef11b32d5822d734f77af2cdea419fb6af845e894acb60bffbcebb4533068d86b55a22a8b0f74be20b204c2343bdb165d9c787f9

memory/5992-2027-0x0000000000C50000-0x0000000000C51000-memory.dmp

memory/5992-2030-0x0000000000C50000-0x0000000000C51000-memory.dmp

memory/5992-2046-0x0000000000C50000-0x0000000000C51000-memory.dmp

memory/5992-2048-0x0000000000C50000-0x0000000000C51000-memory.dmp

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre-8u281-windows-x64.tar.gz

MD5 5c482185ed6ae3dc5ee0bce647dbd997
SHA1 c77455fb17472ba547db49e146d3047c81519fce
SHA256 e7e76bd683b832dec6c9badf62d9cb44e669b67d0d9715be3496aadb10089f6a
SHA512 561a7c40576e3bd1482e194bc66bd9ab0391ca9b1c6573cf78abf0242cc4eff5c8eab4da52dade0958996c775a08bf0639903126ead3e961ad0f169dfa534c3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l1-1-0.dll

MD5 580d9ea2308fc2d2d2054a79ea63227c
SHA1 04b3f21cbba6d59a61cd839ae3192ea111856f65
SHA256 7cb0396229c3da434482a5ef929d3a2c392791712242c9693f06baa78948ef66
SHA512 97c1d3f4f9add03f21c6b3517e1d88d1bf9a8733d7bdca1aecba9e238d58ff35780c4d865461cc7cd29e9480b3b3b60864abb664dcdc6f691383d0b281c33369

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-handle-l1-1-0.dll

MD5 bbafa10627af6dfae5ed6e4aeae57b2a
SHA1 3094832b393416f212db9107add80a6e93a37947
SHA256 c78a1217f8dcb157d1a66b80348da48ebdbbedcea1d487fc393191c05aad476d
SHA512 d5fcba2314ffe7ff6e8b350d65a2cdd99ca95ea36b71b861733bc1ed6b6bb4d85d4b1c4c4de2769fbf90d4100b343c250347d9ed1425f4a6c3fe6a20aed01f17

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 cff476bb11cc50c41d8d3bf5183d07ec
SHA1 71e0036364fd49e3e535093e665f15e05a3bde8f
SHA256 b57e70798af248f91c8c46a3f3b2952effae92ca8ef9640c952467bc6726f363
SHA512 7a87e4ee08169e9390d0dfe607e9a220dc7963f9b4c2cdc2f8c33d706e90dc405fbee00ddc4943794fb502d9882b21faae3486bc66b97348121ae665ae58b01c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-string-l1-1-0.dll

MD5 7a15b909b6b11a3be6458604b2ff6f5e
SHA1 0feb824d22b6beeb97bce58225688cb84ac809c7
SHA256 9447218cc4ab1a2c012629aaae8d1c8a428a99184b011bcc766792af5891e234
SHA512 d01dd566ff906aad2379a46516e6d060855558c3027ce3b991056244a8edd09ce29eacec5ee70ceea326ded7fc2683ae04c87f0e189eba0e1d38c06685b743c9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-convert-l1-1-0.dll

MD5 285dcd72d73559678cfd3ed39f81ddad
SHA1 df22928e43ea6a9a41c1b2b5bfcab5ba58d2a83a
SHA256 6c008be766c44bf968c9e91cddc5b472110beffee3106a99532e68c605c78d44
SHA512 84ef0a843798fd6bd6246e1d40924be42550d3ef239dab6db4d423b142fa8f691c6f0603687901f1c52898554bf4f48d18d3aebd47de935560cde4906798c39a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-conio-l1-1-0.dll

MD5 031dc390780ac08f498e82a5604ef1eb
SHA1 cf23d59674286d3dc7a3b10cd8689490f583f15f
SHA256 b119adad588ebca7f9c88628010d47d68bf6e7dc6050b7e4b787559f131f5ede
SHA512 1468ad9e313e184b5c88ffd79a17c7d458d5603722620b500dba06e5b831037cd1dd198c8ce2721c3260ab376582f5791958763910e77aa718449b6622d023c7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-environment-l1-1-0.dll

MD5 5cce7a5ed4c2ebaf9243b324f6618c0e
SHA1 fdb5954ee91583a5a4cbb0054fb8b3bf6235eed3
SHA256 aa3e3e99964d7f9b89f288dbe30ff18cbc960ee5add533ec1b8326fe63787aa3
SHA512 fc85a3be23621145b8dc067290bd66416b6b1566001a799975bf99f0f526935e41a2c8861625e7cfb8539ca0621ed9f46343c04b6c41db812f58412be9c8a0de

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-util-l1-1-0.dll

MD5 735636096b86b761da49ef26a1c7f779
SHA1 e51ffbddbf63dde1b216dccc753ad810e91abc58
SHA256 5eb724c51eecba9ac7b8a53861a1d029bf2e6c62251d00f61ac7e2a5f813aaa3
SHA512 3d5110f0e5244a58f426fbb72e17444d571141515611e65330ecfeabdcc57ad3a89a1a8b2dc573da6192212fb65c478d335a86678a883a1a1b68ff88ed624659

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-timezone-l1-1-0.dll

MD5 43e1ae2e432eb99aa4427bb68f8826bb
SHA1 eee1747b3ade5a9b985467512215caf7e0d4cb9b
SHA256 3d798b9c345a507e142e8dacd7fb6c17528cc1453abfef2ffa9710d2fa9e032c
SHA512 40ec0482f668bde71aeb4520a0709d3e84f093062bfbd05285e2cc09b19b7492cb96cdd6056281c213ab0560f87bd485ee4d2aeefa0b285d2d005634c1f3af0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 9d43b5e3c7c529425edf1183511c29e4
SHA1 07ce4b878c25b2d9d1c48c462f1623ae3821fcef
SHA256 19c78ef5ba470c5b295dddee9244cbd07d0368c5743b02a16d375bfb494d3328
SHA512 c8a1c581c3e465efbc3ff06f4636a749b99358ca899e362ea04b3706ead021c69ae9ea0efc1115eae6bbd9cf6723e22518e9bec21f27ddaafa3cf18b3a0034a7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-synch-l1-2-0.dll

MD5 d175430eff058838cee2e334951f6c9c
SHA1 7f17fbdcef12042d215828c1d6675e483a4c62b1
SHA256 1c72ac404781a9986d8edeb0ee5dd39d2c27ce505683ca3324c0eccd6193610a
SHA512 6076086082e3e824309ba2c178e95570a34ece6f2339be500b8b0a51f0f316b39a4c8d70898c4d50f89f3f43d65c5ebbec3094a47d91677399802f327287d43b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 41fbbb054af69f0141e8fc7480d7f122
SHA1 3613a572b462845d6478a92a94769885da0843af
SHA256 974af1f1a38c02869073b4e7ec4b2a47a6ce8339fa62c549da6b20668de6798c
SHA512 97fb0a19227887d55905c2d622fbf5451921567f145be7855f72909eb3027f48a57d8c4d76e98305121b1b0cc1f5f2667ef6109c59a83ea1b3e266934b2eb33c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-heap-l1-1-0.dll

MD5 212d58cefb2347bd694b214a27828c83
SHA1 f0e98e2d594054e8a836bd9c6f68c3fe5048f870
SHA256 8166321f14d5804ce76f172f290a6f39ce81373257887d9897a6cf3925d47989
SHA512 637c215ed3e781f824ae93a0e04a7b6c0a6b1694d489e9058203630dcfc0b8152f2eb452177ea9fd2872a8a1f29c539f85a2f2824cf50b1d7496fa3febe27dfe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-synch-l1-1-0.dll

MD5 6c3fcd71a6a1a39eab3e5c2fd72172cd
SHA1 15b55097e54028d1466e46febca1dbb8dbefea4f
SHA256 a31a15bed26232a178ba7ecb8c8aa9487c3287bb7909952fc06ed0d2c795db26
SHA512 ef1c14965e5974754cc6a9b94a4fa5107e89966cb2e584ce71bbbdd2d9dc0c0536ccc9d488c06fa828d3627206e7d9cc8065c45c6fb0c9121962ccbecb063d4f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 e1ba66696901cf9b456559861f92786e
SHA1 d28266c7ede971dc875360eb1f5ea8571693603e
SHA256 02d987eba4a65509a2df8ed5dd0b1a0578966e624fcf5806614ece88a817499f
SHA512 08638a0dd0fb6125f4ab56e35d707655f48ae1aa609004329a0e25c13d2e71cb3edb319726f10b8f6d70a99f1e0848b229a37a9ab5427bfee69cd890edfb89d2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-profile-l1-1-0.dll

MD5 0233f97324aaaa048f705d999244bc71
SHA1 5427d57d0354a103d4bb8b655c31e3189192fc6a
SHA256 42f4e84073cf876bbab9dd42fd87124a4ba10bb0b59d2c3031cb2b2da7140594
SHA512 8339f3c0d824204b541aecbd5ad0d72b35eaf6717c3f547e0fd945656bcb2d52e9bd645e14893b3f599ed8f2de6d3bcbebf3b23ed43203599af7afa5a4000311

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processthreads-l1-1-1.dll

MD5 9c9b50b204fcb84265810ef1f3c5d70a
SHA1 0913ab720bd692abcdb18a2609df6a7f85d96db3
SHA256 25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40
SHA512 ea2d22234e587ad9fa255d9f57907cc14327ead917fdede8b0a38516e7c7a08c4172349c8a7479ec55d1976a37e520628006f5c362f6a3ec76ec87978c4469cd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processthreads-l1-1-0.dll

MD5 e173f3ab46096482c4361378f6dcb261
SHA1 7922932d87d3e32ce708f071c02fb86d33562530
SHA256 c9a686030e073975009f993485d362cc31c7f79b683def713e667d13e9605a14
SHA512 3aafefd8a9d7b0c869d0c49e0c23086115fd550b7dc5c75a5b8a8620ad37f36a4c24d2bf269043d81a7448c351ff56cb518ec4e151960d4f6bd655c38aff547f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 f43286b695326fc0c20704f0eebfdea6
SHA1 3e0189d2a1968d7f54e721b1c8949487ef11b871
SHA256 aa415db99828f30a396cbd4e53c94096db89756c88a19d8564f0eed0674add43
SHA512 6ead35348477a08f48a9deb94d26da5f4e4683e36f0a46117b078311235c8b9b40c17259c2671a90d1a210f73bf94c9c063404280ac5dd5c7f9971470beaf8b7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-memory-l1-1-0.dll

MD5 808f1cb8f155e871a33d85510a360e9e
SHA1 c6251abff887789f1f4fc6b9d85705788379d149
SHA256 dadbd2204b015e81f94c537ac7a36cd39f82d7c366c193062210c7288baa19e3
SHA512 441f36ca196e1c773fadf17a0f64c2bbdc6af22b8756a4a576e6b8469b4267e942571a0ae81f4b2230b8de55702f2e1260e8d0afd5447f2ea52f467f4caa9bc6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-localization-l1-2-0.dll

MD5 8acb83d102dabd9a5017a94239a2b0c6
SHA1 9b43a40a7b498e02f96107e1524fe2f4112d36ae
SHA256 059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413
SHA512 b7ecf60e20098ea509b76b1cc308a954a6ede8d836bf709790ce7d4bd1b85b84cf5f3aedf55af225d2d21fbd3065d01aa201dae6c131b8e1e3aa80ed6fc910a4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 d75144fcb3897425a855a270331e38c9
SHA1 132c9ade61d574aa318e835eb78c4cccddefdea2
SHA256 08484ed55e43584068c337281e2c577cf984bb504871b3156de11c7cc1eec38f
SHA512 295a6699529d6b173f686c9bbb412f38d646c66aab329eac4c36713fdd32a3728b9c929f9dcadde562f625fb80bc79026a52772141ad2080a0c9797305adff2e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-interlocked-l1-1-0.dll

MD5 a038716d7bbd490378b26642c0c18e94
SHA1 29cd67219b65339b637a1716a78221915ceb4370
SHA256 b02324c49dd039fa889b4647331aa9ac65e5adc0cc06b26f9f086e2654ff9f08
SHA512 43cb12d715dda4dcdb131d99127417a71a16e4491bc2d5723f63a1c6dfabe578553bc9dc8cf8effae4a6be3e65422ec82079396e9a4d766bf91681bdbd7837b1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-heap-l1-1-0.dll

MD5 3a4b6b36470bad66621542f6d0d153ab
SHA1 5005454ba8e13bac64189c7a8416ecc1e3834dc6
SHA256 2e981ee04f35c0e0b7c58282b70dcc9fc0318f20f900607dae7a0d40b36e80af
SHA512 84b00167abe67f6b58341045012723ef4839c1dfc0d8f7242370c4ad9fabbe4feefe73f9c6f7953eae30422e0e743dc62503a0e8f7449e11c5820f2dfca89294

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l2-1-0.dll

MD5 3bf4406de02aa148f460e5d709f4f67d
SHA1 89b28107c39bb216da00507ffd8adb7838d883f6
SHA256 349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e
SHA512 5ff6e8ad602d9e31ac88e06a6fbb54303c57d011c388f46d957aee8cd3b7d7cced8b6bfa821ff347ade62f7359acb1fba9ee181527f349c03d295bdb74efbace

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-file-l1-2-0.dll

MD5 35bc1f1c6fbccec7eb8819178ef67664
SHA1 bbcad0148ff008e984a75937aaddf1ef6fda5e0c
SHA256 7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7
SHA512 9ab9b5b12215e57af5b3c588ed5003d978071dc591ed18c78c4563381a132edb7b2c508a8b75b4f1ed8823118d23c88eda453cd4b42b9020463416f8f6832a3d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 94788729c9e7b9c888f4e323a27ab548
SHA1 b0ba0c4cf1d8b2b94532aa1880310f28e87756ec
SHA256 accdd7455fb6d02fe298b987ad412e00d0b8e6f5fb10b52826367e7358ae1187
SHA512 ab65495b1d0dd261f2669e04dc18a8da8f837b9ac622fc69fde271ff5e6aa958b1544edd8988f017d3dd83454756812c927a7702b1ed71247e506530a11f21c6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-debug-l1-1-0.dll

MD5 b0e0678ddc403effc7cdc69ae6d641fb
SHA1 c1a4ce4ded47740d3518cd1ff9e9ce277d959335
SHA256 45e48320abe6e3c6079f3f6b84636920a367989a88f9ba6847f88c210d972cf1
SHA512 2badf761a0614d09a60d0abb6289ebcbfa3bf69425640eb8494571afd569c8695ae20130aac0e1025e8739d76a9bff2efc9b4358b49efe162b2773be9c3e2ad4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-datetime-l1-1-0.dll

MD5 ac51e3459e8fce2a646a6ad4a2e220b9
SHA1 60cf810b7ad8f460d0b8783ce5e5bbcd61c82f1a
SHA256 77577f35d3a61217ea70f21398e178f8749455689db52a2b35a85f9b54c79638
SHA512 6239240d4f4fa64fc771370fb25a16269f91a59a81a99a6a021b8f57ca93d6bb3b3fcecc8dede0ef7914652a2c85d84d774f13a4143536a3f986487a776a2eae

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-core-console-l1-2-0.dll

MD5 7676560d0e9bc1ee9502d2f920d2892f
SHA1 4a7a7a99900e41ff8a359ca85949acd828ddb068
SHA256 00942431c2d3193061c7f4dc340e8446bfdbf792a7489f60349299dff689c2f9
SHA512 f1e8db9ad44cd1aa991b9ed0e000c58978eb60b3b7d9908b6eb78e8146e9e12590b0014fc4a97bc490ffe378c0bf59a6e02109bfd8a01c3b6d0d653a5b612d15

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\api-ms-win-core-console-l1-1-0.dll

MD5 919e653868a3d9f0c9865941573025df
SHA1 eff2d4ff97e2b8d7ed0e456cb53b74199118a2e2
SHA256 2afbfa1d77969d0f4cee4547870355498d5c1da81d241e09556d0bd1d6230f8c
SHA512 6aec9d7767eb82ebc893ebd97d499debff8da130817b6bb4bcb5eb5de1b074898f87db4f6c48b50052d4f8a027b3a707cad9d7ed5837a6dd9b53642b8a168932

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-locale-l1-1-0.dll

MD5 242829c7be4190564becee51c7a43a7e
SHA1 663154c1437acf66480518068fbc756f5cabb72f
SHA256 edc1699e9995f98826df06d2c45beb9e02aa7817bae3e61373096ae7f6fa06e0
SHA512 3529fde428affc3663c5c69baee60367a083841b49583080f0c4c7e72eaa63cabbf8b9da8ccfc473b3c552a0453405a4a68fcd7888d143529d53e5eec9a91a34

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 a5b920f24aea5c2528fe539cd7d20105
SHA1 3fae25b81dc65923c1911649ed19f193adc7bdde
SHA256 5b3e29116383ba48a2f46594402246264b4cb001023237ebbf28e7e9292cdb92
SHA512 f77f83c7fad442a9a915abcbc2af36198a56a1bc93d1423fc22e6016d5cc53e47de712e07c118dd85e72d4750ca450d90fdb6f9544d097afc170aeecc5863158

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-math-l1-1-0.dll

MD5 fb79420ec05aa715fe76d9b89111f3e2
SHA1 15c6d65837c9979af7ec143e034923884c3b0dbd
SHA256 f6a93fe6b57a54aac46229f2ed14a0a979bf60416adb2b2cfc672386ccb2b42e
SHA512 c40884c80f7921addced37b1bf282bb5cb47608e53d4f4127ef1c6ce7e6bb9a4adc7401389bc8504bf24751c402342693b11cef8d06862677a63159a04da544e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-process-l1-1-0.dll

MD5 dd899c6ffecce1dca3e1c3b9ba2c8da2
SHA1 2914b84226f5996161eb3646e62973b1e6c9e596
SHA256 191f53988c7f02dd888c4fbf7c1d3351570f3b641146fae6d60acdae544771ae
SHA512 2db47faa025c797d8b9b82de4254ee80e499203de8c6738bd17ddf6a77149020857f95d0b145128681a3084b95c7d14eb678c0a607c58b76137403c80fe8f856

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-private-l1-1-0.dll

MD5 5c2004daf398620211f0ad9781ff4ec2
SHA1 e43dd814e90330880ee75259809eee7b91b4ffa6
SHA256 55bc91a549d22b160ae4704485e19dee955c7c2534e7447afb84801ee629639b
SHA512 11edbbc662584bb1dea37d1b23c56426b970d127f290f3be21cd1ba0a80d1f202047abb80d8460d17a7cacf095de90b78a54f7c7ec395043d54b49ffe688df51

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-runtime-l1-1-0.dll

MD5 883120f9c25633b6c688577d024efd12
SHA1 e4fa6254623a2b4cdea61712cdfa9c91aa905f18
SHA256 4390c389bbbf9ec7215d12d22723efd77beb4cd83311c75ffe215725ecfd55dc
SHA512 f17d3b667cc8002f4b6e6b96b630913fa1cb4083d855db5b7269518f6ff6eebf835544fa3b737f4fc0eb46ccb368778c4ae8b11ebcf9274ce1e5a0ba331a0e2f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-stdio-l1-1-0.dll

MD5 29680d7b1105171116a137450c8bb452
SHA1 492bb8c231aae9d5f5af565abb208a706fb2b130
SHA256 6f6f6e857b347f70ecc669b4df73c32e42199b834fe009641d7b41a0b1c210af
SHA512 87dcf131e21041b06ed84c3a510fe360048de46f1975155b4b12e4bbf120f2dd0cb74ccd2e8691a39eee0da7f82ad39bc65c81f530fc0572a726f0a6661524f5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-time-l1-1-0.dll

MD5 143a735134cd8c889ec7d7b85298705b
SHA1 906ac1f3a933dd57798ae826bbefa3096c20d424
SHA256 b48310b0837027f756d62c37ea91af988baa403cbcbd01cb26b6fdae21ea96a2
SHA512 c9abe209508afae2d1776391f73b658c9a25628876724344023e0fc8a790ecb7dbce75fddae267158d08a8237f83336b1d2bd5b5ce0a8eed7dd41cbe0c031d48

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-string-l1-1-0.dll

MD5 f816666e3fc087cd24828943cb15f260
SHA1 eae814c9c41e3d333f43890ed7dafa3575e4c50e
SHA256 45e0835b1d3b446fe2c347bd87922c53cfb6dd826499e19a1d977bf4c11b0e4a
SHA512 6860abe8ab5220efb88f68b80e6c6e95fe35b4029f46b59bc467e3850fe671bda1c7c1c7b035b287bdfed5daeac879ee481d35330b153ea7ef2532970f62c581

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\awt.dll

MD5 d490a92ad643cdaa908acc6c523331ec
SHA1 685485b7cfd294c23a49a67951c082b76472631c
SHA256 3dabdf89394fb5b3c87a7a148b53b6869698eb656d1edf6a88059f3fc8bee08f
SHA512 2d5addcee9308362187839925e27e16b36f458fa64eb45a50157c5d19b93ecdcb98d2c4d43433f009c509adce89da6130a70f92b259217704ed9c06bc1258b07

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dcpr.dll

MD5 f6d39ff988711a4ccd27c661e995e56e
SHA1 bc8312b511e45338522314644cfe879d7e868efb
SHA256 3b2e8a2045363c6dc21afa5c11ab68b0288ece7b7dc439abeac425578cf406c3
SHA512 ebcce9d61b4d2a56edefcd69c98992bfb973bf4df6961ac2aaf7b37032751026854d9cad83b1bc9dfadb57b189f15696a6bf60601e25a0e80a70a3fd954b968b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\bci.dll

MD5 8e57838d8353c27b6829acd776dff101
SHA1 079218bb58f2256148a0aa04a7adf10a1849cd50
SHA256 37c897cb22573c16ddfbc1d7f227d8081f449136b22e418d3b0fc78fcdd47081
SHA512 992e0093c451d35b6b8251cb5128d1ffc2d62cef2742fd3b1aaf7d16783922ab5b80cc1ac65097a071862657b51612acfd093534e266c64711cc2b56c108e920

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\api-ms-win-crt-utility-l1-1-0.dll

MD5 6f1a1dfb2761228ccc7d07b8b190054c
SHA1 117d66360c84a0088626e22d8b3b4b685cb70d56
SHA256 c81c4bba4e5f205359ad145963f6fbd074879047c66569f52b6d66711108e1ed
SHA512 480b4f9179d5da56010fa90e1937fe3a232f2f8682596c16eeaed08f57cf8cffeaa506060429501764f695cb6c5b3e56b0037de948c4d0e3933f022a0b4103d2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\decora_sse.dll

MD5 44fd71d6208e200a8531d1aaecfec0e0
SHA1 3aaf7431274da063441854b12b2eee9327714d7f
SHA256 49c665210084dd50379f5c83418896eb86d1d6700d94bbbaef8f9394c598e9af
SHA512 9d10601b56c7f1cf4de0288224e23897da9ddb5f0f6beb26acce6486a20a25046ac4bc60ff5179123d4a0fd8fcab7872a36426c09f0775a428c09a3fc52afb2d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dtplugin\npdeployJava1.dll

MD5 c6705167c7d1ecc1ffda84501d327349
SHA1 13bc19a74199e1b065791481ef566517d60b79d5
SHA256 9e8ca7fc15b88b5c1c46d9373e29023247dab6f2cb756de35ba1f999ffc0a1b2
SHA512 440c6097a9dce104ce02749ec98cdf469db08985903b577e2595dfff2dd92fe6c50620c3a16e1b8781ac17b0da50694c4f1c451571e076f9229619dbe6ffac1d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\fxplugins.dll

MD5 2cb0aba2aaeccee0e64b48c7dc5e0c13
SHA1 13fa9458be298dde5573e83f0eaa099d88c4fe59
SHA256 d255ee9c855ebafc48f05f0844bb2eb1a7b5ae82842fff8484aa2e09616e9e3f
SHA512 b2dedbaf417e0851eff71c17467348a3fe52072afe2a97a73001ad40f8a2aa5fb7af8cc8722ba135dbf5b8db0682994c69236c089e612025004b9d75d7e076a5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\fontmanager.dll

MD5 87b86cda1d6df190d8471ed546256428
SHA1 a36169d7b8fa248a6647571c0319c7ac54e815a8
SHA256 8a96e6e5aac86ca14b4014773309beda90cc281eae2253dda3b4a0e469a3ce46
SHA512 201034c28707382c0bcc397ce1a2bfa81567723e29d3e484733a4fc5d4dcef84d099f96fc963e442e8823fdf1a4305231321c9603a7c166e3432f6fd88ed3151

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\eula.dll

MD5 e89aa9d7c55f98d339a49ce2f7fa1621
SHA1 d52aa48e73bf59cd790ba4c2f5cda631822e4a04
SHA256 7c6714f9fa1e4d6b8c87b99090def9bc06a3d7f11bab42864dc4349f2401f1f5
SHA512 f1a09013a1eafc5ff86d1890e90a7add5ba4d410787d2de986811053755f42942a8b9a467b49fae4558b4b053651e8f2935a038bf4a0e63a4bc3be099dbab759

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dt_socket.dll

MD5 410247c1e2d6fe985495a743f3470585
SHA1 af3b172ed825dbffc86b6bac3db15c4313e9ac08
SHA256 ff8007c358fb0a8e72c436b96bcc0cdc07641628bcc1162d85ba99f20268c4ec
SHA512 ec5d74edf21a16fd0ebfed506cecbd0e1e53e18363850322c0a7368ca1d745d7170bf8c6c5cbcd01947727aec747d567f86a0601856bf3a9fb033e487804a8ca

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dt_shmem.dll

MD5 4c4736ec42f9fe5a625e1075d5a4ba76
SHA1 f801d4f4683216f397a4a7de068093ef9d721689
SHA256 65d7a60a309697026ce202a19c9efb475f48a860be3b5e3bb87d985ab7235a57
SHA512 e75fe34fa5745f5014aa2c45b713f0498d621ebf04dd364541f2d34e79a048e51fb34784fa9c399d316f20b38f7b42cbad565bb053bebc98414e9df9d17b1a40

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\dtplugin\deployJava1.dll

MD5 5466b1d563c7eee2abe0869b1026782c
SHA1 cd2b2a0f6bc6c770778b8d0795f9dd1be692b0a5
SHA256 e3b3f41eb00a2605c50fcb9c01be50fcf4bf6d16b06ee9f0d791b7a763ed9ec3
SHA512 2450e03945e0fc708a0f6dfc259e23a197d3e7c1a244d88b2e0115aa74cfd4f32aefb9705e69c83388c163ab51b929f93c0b083cf980f414684acc483f02cee8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\deploy.dll

MD5 c5b2c293650ecea377b5c586ccb035cc
SHA1 21855c9a5ac053143a6953a953bccb2556536362
SHA256 8f57325b5149713806d427f365083328837209aa26961f5b274b828f2718776d
SHA512 0b68f5c495e3238bb5b81d3d8f213208ec48f528629c4632801822a299e0747cab49f001bcd1c055e75c314703383052b2ac7605080643202e14ffbe233a1cfb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java.dll

MD5 949fc2c63994ec317abcccfc1452ef22
SHA1 41d496159e826e894988ad1dcca7918d10e793e5
SHA256 6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8
SHA512 26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javaws.exe

MD5 fd3824c639c079da7ca2e40d2e03614c
SHA1 bf3e9853a3e20c79fef2e04a24a0be87421edc76
SHA256 8a8006658eab33b332787b35636b4f803b8634868f94b64d393f947a1d93c765
SHA512 074d0f7c4454b240f6eb9ac05d9499b3f3f555895fa75dddd47fb9001bc613ffcb4a9a1febe464f5c16ce60f2830b24ddb3b663dcd1008bd8b34e5cdb39eca00

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfxmedia.dll

MD5 2d146e5a772b59b798faf9424968e7cd
SHA1 d22fc56f02558b3ca051e07bb88f4e8712223ac9
SHA256 10da28d64cb67a7bf3ad157db48c9bfbbbc839efbd57b66bda2cf51e6973bb48
SHA512 d41b9024bfb692d8dadb1ff5ee4db0e24e39ed593a6792816ff0448e09cd263ab3c7061017b0ca42361c80748b9fc9bd8b413c520fd85b9566281f8952132a72

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfr.dll

MD5 74d62b779bdbd5ff541a8eccbc2eead5
SHA1 752365939c5f4a1f378ab136e6474bbdda1af19a
SHA256 f7fda38c0d1aca4a3a912408094dbee0404b3cc2ef1e460b891f3e50b805b3a6
SHA512 1c82a082baa740b3de562d26a6add39b70223d4e77923480ced56871dc1134358cead2ca792a704bf77014f1cc983231e158169794142806dd4b95819eb0bdea

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2iexp.dll

MD5 ad256ff4303579453bea57922fc1de65
SHA1 837a4a0aa46f6e54604f7002bb74bab252a69367
SHA256 2da988ede307852b96c9eacf00b5aecc947b91f3700938cf52e86d217888d0ea
SHA512 2d5cb7a597ce54651ee0141236bd1878698fd2648c20b906cf54422f19cbe2ce7d2326f5d16ba74bd6f1e63197b536de16524f153b730f25f53d1ef29e129d8a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\plugin2\npjp2.dll

MD5 668d24d0ec961ba522bc84ce096246d6
SHA1 fe20ec142c126ac9ac851bd64bb6cba84ffbc678
SHA256 36aff0f80162041a2efc94ec3d8a49854c2bca1656cd3b6912ed32387f50442b
SHA512 2925234b43833c8a4f1781a1b5a061b07b827bc872b4573e52203d5033051626826ffcc38358c1925d74d7972209a849e2ace029694121b256666cc67467e99a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\rmiregistry.exe

MD5 1845868936406a4b04bc0041b82466a5
SHA1 5899265b5197108e482479bb73607b529b7b6803
SHA256 4ac831ae074760e3517cc5c5ad800c325049dbf3d98ce9d6a45555887e501d01
SHA512 a5dd10fde76f95b0d06da916e0f1e0c74ac95b41dd4b38e752ab8f304e0726d8ca652b247303f3e94daa1cb74e9a08528d8be01ac1e9ec92f69b4e33498bce9e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\unpack.dll

MD5 816b15aea405cc9c0c8549445cef3b99
SHA1 1de48dc27b1684d5ef5c4a925f4aec1590d1ec47
SHA256 11c146a6f7bfdc0b76f763dc50aff00d680fbfe4568410ceb19e28fc0789c5fd
SHA512 94e0a065d6f83f6276d1f239a2119da978ae35bec73787ec112f20efb855e4be9d63f5478984d31aad4d5fc31f13d90630715440d3e26f9d4882065019904571

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\cryptix.md

MD5 6c5c5a8fef2914e5e09fb918b6d89efb
SHA1 7f9c85ac9d5a2b534d427bb6ca3f7e1c28b86e99
SHA256 9b21963c3f1ff7a63f2d76cedb65271d3302646d5b1bec2f2cc058f2f10c54de
SHA512 d4e21ab2bad8df19acd966e222f58bab8c4627cb077d14366dc856fcbe70678dc79c2f0bc31db771f91be0a8701d3d40b8c0558660b88f73b26addce40f35738

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\content-types.properties

MD5 f507712b379fdc5a8d539811faf51d02
SHA1 82bb25303cf6835ac4b076575f27e8486dab9511
SHA256 46f47b3883c7244a819ae1161113fe9d2375f881b75c9b3012d7a6b3497e030a
SHA512 cb3c99883336d04c42cea9c2401e81140ecbb7fc5b8ef3301b13268a45c1ac93fd62176ab8270b91528ac8e938c7c90cc9663d8598e224794354546139965dfe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightDemiItalic.ttf

MD5 793ae1ab32085c8de36541bb6b30da7c
SHA1 1fd1f757febf3e5f5fbb7fbf7a56587a40d57de7
SHA256 895c5262cdb6297c13725515f849ed70609dbd7c49974a382e8bbfe4a3d75f8c
SHA512 a92addd0163f6d81c3aeabd63ff5c293e71a323f4aedfb404f6f1cde7f84c2a995a30dfec84a9caf8ffaf8e274edd0d7822e6aabb2b0608696a360cabfc866c6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\resources.jar

MD5 168ce2722069378d518639bf864e5cc7
SHA1 d4ec09c71649c578648bbcb487ab4d89d8cdfd39
SHA256 7f959725602ff75a444d619a140d2302420afa2dbb1db2fecbbf7b92358901ab
SHA512 2ef79da45a0c61aa788661e28a7b26f675e22fe0c2349ddf153a023d0039eb08d3e1999b5c8117c700550256fe5398eebe99cd823279ea1878705db4b998d967

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\LICENSE

MD5 2c311f1936f63834199de94319a5cd8c
SHA1 6c5f8a9ebab689f905fefe44aca0a1f77d39e425
SHA256 2d5ec5b2984090d43bfb27c331b59bb537fbbbc9b5e015f1f94a5978372d293f
SHA512 e8a51e80f98098f601130d556ae42af6a9162b382820a4d5ad7fef9d68270626384b440e41e3208acd0a61103404454ff5fbe6e0b5d1434ed759667ed7e5b8df

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\THIRDPARTYLICENSEREADME.txt

MD5 59e82b41579ad2e2016d98f191c8d5ff
SHA1 bd9f7a797e0fca53892f9fc5ea87727d8da41da5
SHA256 7d7336cc8fa87c4629eac7f0efcbf12e5c975ac9ee44cd1343a0ea68a813ddca
SHA512 32393b417e62f1399c6f1754cc8f3001689593a6b59569885fdfe0f1478018c81222c8b82dadfc0e514659daa01d819ce79faa53969beaefd438d15c9df5b9c5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 f3af2718f86b00497fa423046f50cee6
SHA1 0ff70aad905069978c0d83728621fc982fd492fa
SHA256 4e4079bd53b742d9d6f18fbd06f743c28285f1e4b9ffd636d2d24a70a2ee7f00
SHA512 ffa6a3098182084d9d563274bd30c5f55ea0f7c9f9ab4dc8cd1664b971d0cf03bfc8061e19d1bda6a4591b100a87b74f26aa1bdbfeccbc1ea195af809a8c49fa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\release

MD5 fcefd920fb658afd9b80bb4ecd7f4860
SHA1 f3a05b8b40800cdeadcc0d301247cb5c9f8eb6d0
SHA256 6c3ab49ce393eabd9a968bb0c061e3130d734cbcad728699e984f76a003cc93f
SHA512 deede3d254c794820443209377b20f7c8674afc3045e629fb34b2d28525dc0c94ac9e4573c1cf3700f48f416f768a578884b112f03b65d86ddf1593e4a57a0bb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\README.txt

MD5 0f1123976b959ac5e8b89eb8c245c4bd
SHA1 f90331df1e5badeadc501d8dd70714c62a920204
SHA256 963095cf8db76fb8071fd19a3110718a42f2ab42b27a3adfd9ec58981c3e88d2
SHA512 e9136fdf42a4958138732318df0b4ba363655d97f8449703a3b3a40ddb40eeff56363267d07939889086a500cb9c9aaf887b73eead06231269116110a0c0a693

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\tzmappings

MD5 62bc9fa21191d34f1db3ed7ad5106efa
SHA1 750cc36b35487d6054e039469039aece3a0cc9e9
SHA256 83755efbcb24476f61b7b57bcf54707161678431347e5de2d7b894d022a0089a
SHA512 af0ddb1bc2e9838b8f37dc196d26024126ac989f5b632cb2a8efdc29fbce289b4d0bac587fe23f17dfb6905ceada8d07b18508db78f226b15b15900738f581a3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\tzdb.dat

MD5 87bf51971bb056fd8b4e295905557467
SHA1 e2ab9b21bed47a7863566f4f4a1587f2fde744d7
SHA256 b0b5edb15f66402c4c2510a7aa800e5284e2cc32946cd44014332ce18c76e5e9
SHA512 fabf88cda16226fee963dc75146bc52ce04163ddafb89e84604bfccbc13cabd00aac0d0342c153e85b9511d90e4d5ef03ad75a118d47967e4f1b08eb1356af9f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\sound.properties

MD5 4f95242740bfb7b133b879597947a41e
SHA1 9afceb218059d981d0fa9f07aad3c5097cf41b0c
SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
SHA512 99fdd75b8ce71622f85f957ae52b85e6646763f7864b670e993df0c2c77363ef9cfce2727badee03503cda41abe6eb8a278142766bf66f00b4eb39d0d4fc4a87

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\unlimited\US_export_policy.jar

MD5 6cbca5808b4a8613d2fed6fe4a84c449
SHA1 0135b30ebec03fb69d79cdc3126e608d9effb8b2
SHA256 761aab2969883e9e5ea76df63ca404fb67673efc3f97def057f8e22517fc9518
SHA512 4d9bf052aa124d07673c601cbfb83223b87369f7be7575a13e13c0d893e57849ba11e430b7769901782c26471528dfaa130996916451e1a7e38cf28468e44cfa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\unlimited\local_policy.jar

MD5 360663f26c5584e6c6127254b261fa0c
SHA1 aee6515eede2ad7c697ba8a61bdd9359be3319d2
SHA256 02f69a433405ea928c89a8aade74e5462282ccb9a9d30851312ed3459398f85c
SHA512 e3920d5abbbe6b0e3029ed1e0b2ce1a53da6c7e728f635b12f00b1fd2eb6151fff74b9dc85ec0c0920f7fda440c1604d24ca766cdbcb78be3425088d97e00208

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\limited\US_export_policy.jar

MD5 0d59c5639aa24c7d326e7bd54bb8eda5
SHA1 58875d7463460d7998c4013912fb89965e823044
SHA256 9ce50a70ed7051c155ab8ea06755f94823d8d1cba67ffd8fd3fe3249b3ac31ea
SHA512 2175b0cb6ff8b3afe37fb24ebeef406d7920be404ee66597a47699607a9b39f981c023f7e4133359fef9910fe7885ba846d3c532b22891a8231e23eaf440896d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\policy\limited\local_policy.jar

MD5 6280d06e46e0cc047e04c85c83874566
SHA1 7d0a29932b496edbdd1fc55572014bc89703ad07
SHA256 92780525250258f336a8f746ed7437035512d06050d85786fb44fdf12e08419c
SHA512 e3ef446b02943915f874dc09433833e5ff131abad93d04f95aa6e887881cbf71b15ad0f41e8c7d57864a003559bbc3769452b17600664207308ae99340bfb46e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\javaws.policy

MD5 9107d028bd329dbfe4c1f19015ed6d80
SHA1 4384ca5e4d32f7dd86d8baddd1e690730d74e694
SHA256 b7a87d1f3f4b7ba1d19d0460fa4b63bd1093afc514d67fe3c356247236326425
SHA512 81b14373b64ce14af26b70d12d831e05158d5a4fa8cec0508fef8a6ca65b6f4ef73928f4b1e617c68ddeacff9328a3d4433b041b7fb14de248b1428c51dbc716

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\java.security

MD5 44e161cddfff8b98e40eb76212b5654f
SHA1 9d2da007c0747c6dcf7b27e70805fc38f6f521d4
SHA256 0457564ff35fcc49b4e33f26e6b46a32b68095034c3bdfc17508d8c4c6b1db0f
SHA512 b6f05e107c3a80eab39100ca82475e84bcc02edeb95e1ac8f7fcf5e8e72fc683f09cddb0f4a13c1363556832dfb2f0c94aa460c52c70b5e54063944003235b9b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\java.policy

MD5 11340cd598a8517a0fd315a319716a08
SHA1 c0112209a567b3b523cfed7041709f9440227968
SHA256 b8582889b0df36065093c642ed0f9fa2a94cc0dc6fde366980cfd818ec957250
SHA512 2b6dadc555eeb28dc1c553ab429f0cb9e3ad9aa64dfa2b62910769a935a1e6030a7ff0dde2689f29c58d1b0720416d6b99ffa19bd23e6686efb1547afb7dccfd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\cacerts

MD5 488066a377ab1c8effc28f79093094ea
SHA1 5a3512369271c5962a46dbefe559f8bb9970868f
SHA256 dd908314557d7a569c66c8beed6e5433d6f7ee0f5699898f82777c62f49898ec
SHA512 a3531ebaf03ed7c08d5600436cb5d59de73855023f395db7c9141d8516d0b293d8ed202df8fc7d3f84ca4bb2564cfa8dcad72555dbb8ebf1ac5d55d0709e4df2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\blacklisted.certs

MD5 8273f70416f494f7fa5b6c70a101e00e
SHA1 aeaebb14fbf146fbb0aaf347446c08766c86ca7f
SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
SHA512 e697a57d64ace1f302300f83e875c2726407f8daf7c1d38b07ab8b4b11299fd698582d825bee817a1af85a285f27877a9e603e48e01c72e482a04dc7ab12c8da

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\security\blacklist

MD5 b2c6eae6382150192ea3912393747180
SHA1 d4ffb3857eab403955ce9d156e46d056061e6a5a
SHA256 6c73c877b36d4abd086cb691959b180513ac5abc0c87fe9070d2d5426d3dbf71
SHA512 898582c23f311f9f46825e7f8b6d36bed7255e5a4e2fa4b4452153b86efbd88db7e5b94dbd9cb9db554f62b84d19f22ae9d81822b4896081c487fb50946a9a9a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\rt.jar

MD5 fe585f04bd7d106d1813fd6139e3dd0c
SHA1 872297c77a7d1d3c706761404aedbdce24f694c1
SHA256 1f9f7bc629c6205e9d0eb3c097803b9e06a2045cecbbaf69a526c5b488dd3a7e
SHA512 9466beda4744a2eadd218b42f6bbe6f063306e99635eb8195bc551701ab945f42938cd7397f9e7a8a8947520b630bfd9c2fc05f44232524f9e0924c5e2c86f0a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\psfontj2d.properties

MD5 f8734590a1aec97f6b22f08d1ad1b4bb
SHA1 aa327a22a49967f4d74afeee6726f505f209692f
SHA256 7d51936fa3fd5812ae51f9f5657e0e70487dca810b985607b6c5d6603f5e6c98
SHA512 72e62dc63daa2591b48b2b774e2479b8861d159061b92fd3a0a06256295da4d8b20dafa77983fdbf6179f666f9ff6b3275f7a5bcf9555e638595230b9a42b177

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\psfont.properties.ja

MD5 7c5514b805b4a954bc55d67b44330c69
SHA1 56ed1c661eeede17b4fae8c9de7b5edbad387abc
SHA256 0c790de696536165913685785ea8cbe1ac64acf09e2c8d92d802083a6da09393
SHA512 ccd4cb61c95defdcba6a6a3f898c29a64cd5831a8ab50e0afac32adb6a9e0c4a4ba37eb6dee147830da33ae0b2067473132c0b91a21d546a6528f42267a2c40e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\plugin.jar

MD5 4089ebb698b91506409c4a51dc239a42
SHA1 96fc2e84cc95d4f39455e842d745874892d4b7df
SHA256 a71c433cebea404816adb8c9d03689fcf342a03b17190604774453d9cf2e1239
SHA512 0b10cbd04d5703957325474eabdf811ff9a1eb958c1889e0cf3392fb99bfcb50bef414d0b2655bd23ef1280acde55da7fc03cfe31a2fce257f2ad2b1f7db8f0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\net.properties

MD5 8bc6628d01bad30798440cc00f638165
SHA1 fd9471742eb759f4478bb1de9a0dc0527265b6ea
SHA256 31ce7ce29c66a1696a985a197195b5e051b2c243ea83e9d1de614f0c4b4f7530
SHA512 8da3439774a07a6309f985d1a29dda5383975bbdf6b8e2809bab69a2c44f65d3de2a546231ed6e183864193f834c9a7042fdcc4ee10181d0bd3891363032c242

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\meta-index

MD5 91aa6ea7320140f30379f758d626e59d
SHA1 3be2febe28723b1033ccdaa110eaf59bbd6d1f96
SHA256 4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4
SHA512 03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management-agent.jar

MD5 c24f9117d0218d51e4a57af7c14f5b25
SHA1 146b136e70a1d39829130c0c31a789f551086501
SHA256 ad5b5a048c3802155bf6b5881200fbb3958abaff52a87f61b20401e021b8fc84
SHA512 04518adedf91762d06ff3ad78d9d368e641b379484df22efae0157f626c3fe090305d8f082e02a06d1fbabc5ff2bb96174b7bd694c6ac561611e0c77a12c0f7d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\snmp.acl.template

MD5 71a7de7dbe2977f6ece75c904d430b62
SHA1 2e9f9ac287274532eb1f0d1afcefd7f3e97cc794
SHA256 f1dc97da5a5d220ed5d5b71110ce8200b16cac50622b33790bb03e329c751ced
SHA512 3a46e2a4e8a78b190260afe4eeb54e7d631db50e6776f625861759c0e0bc9f113e8cd8d734a52327c28608715f6eb999a3684abd83ee2970274ce04e56ca1527

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\management.properties

MD5 5edb0d3275263013f0981ff0df96f87e
SHA1 e0451d8d7d9e84d7b1c39ec7d00993307a5cbbf1
SHA256 3a923735d9c2062064cd8fd30ff8cca84d0bc0ab5a8fab80fdad3155c0e3a380
SHA512 f31a3802665f9bb1a00a0f838b94ae4d9f1b9d6284faf626ebe4f96819e24494771a1b8bfe655fd2da202c5463d47bae3b2391764e6f4c5867c0337aa21c87c1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\jmxremote.password.template

MD5 7b46c291e7073c31d3ce0adae2f7554f
SHA1 c1e0f01408bf20fbbb8b4810520c725f70050db5
SHA256 3d83e336c9a24d09a16063ea1355885e07f7a176a37543463596b5db8d82f8fa
SHA512 d91eebc8f30edce1a7e16085eb1b18cfddf0566efab174bbca53de453ee36dfecb747d401e787a4d15cc9798e090e19a8a0cf3fc8246116ce507d6b464068cdb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\management\jmxremote.access

MD5 f63bea1f4a31317f6f061d83215594df
SHA1 21200eaad898ba4a2a8834a032efb6616fabb930
SHA256 439158eb513525feda19e0e4153ccf36a08fe6a39c0c6ceeb9fcee86899dd33c
SHA512 de49913b8fa2593dc71ff8dac85214a86de891bedee0e4c5a70fcdd34e605f8c5c8483e2f1bdb06e1001f7a8cf3c86cad9fa575de1a4dc466e0c8ff5891a2773

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\logging.properties

MD5 809c50033f825eff7fc70419aaf30317
SHA1 89da8094484891f9ec1fa40c6c8b61f94c5869d0
SHA256 ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232
SHA512 c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jvm.hprof.txt

MD5 c677ff69e70dc36a67c72a3d7ef84d28
SHA1 fbd61d52534cdd0c15df332114d469c65d001e33
SHA256 b055bf25b07e5ac70e99b897fb8152f288769065b5b84387362bb9cc2e6c9d38
SHA512 32d82daedbca1988282a3bf67012970d0ee29b16a7e52c1242234d88e0f3ed8af9fc9d6699924d19d066fd89a2100e4e8898aac67675d4cd9831b19b975ed568

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jsse.jar

MD5 dba0bf9f6b98935aedc0fb9a51b595c7
SHA1 234537e4eb503680683d447fccc6e6cb6ef6d58e
SHA256 6870cf65be3347816aed672938540d119b9442168bafa22821f490e671772799
SHA512 454a43cc175436c6c039f9a1608344f7d323243da77dfdcae7f7e61798ea7a6243b9f9d8975968ec8dd5d4ad21579532c15cee52f6e4ded72ca51839b4f7731e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfxswt.jar

MD5 873ecf8d275f6d8705fd3bb86c77411c
SHA1 382c4f1f46189f9e67fc918ab6b8c5453716866d
SHA256 060cd6c389ae4dc887ecc0af690a8befbd5f7397d0cf4b07a5538d399a5fe350
SHA512 5b8b8e5be65d3a27dbfa378ec96501f0f629b0d11ccd3384a3f283593b17b53fab9a489806a3c0c7167d2bc4625913c06e370a6adc7dfeb52485e31bfafa154b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr.jar

MD5 7b55067c892d4e543c50dfe339d3c045
SHA1 08d82c6684351b73220d25d8dec22107d033a772
SHA256 d20e6f6d62f6e392640124fbf4319780130e3cd128bd4823eeb92d2b77b331ca
SHA512 dd97f44a5018b361cdbea244c09831488c36a7e4b170533b861930c6ba794068f15b1ce01b3be2dce1f38d68e01ba2ce2f9fda0c936e4bcc0f29c73d548398a1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr\profile.jfc

MD5 67735a686d709d5612fae97cd67ecf07
SHA1 5ae707011fb0adaf564d2c71d8e6443aaddd6809
SHA256 57f1556cd4a7554944b8339a4c29cc25c1c462418e42d22a2f84f8b713205826
SHA512 5ba2fb473fa4b3e6c4f13b0aadc5030d35498a8413c928cb6e5f67832cb164238222a21275e7e99cb476f095ab901250417d1f10b2f5e305bd13980182e9c38d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jfr\default.jfc

MD5 09ff01e042e7d016217a23f29250c193
SHA1 e60d9aaa39c5f0ef4a54da5107b0c75ab491df0e
SHA256 05079c086677ff5ada9853f60b7b1c623750c7a97c6eec692e54ad7ebf51d343
SHA512 50abc8f6c0eeef68b600826ffb5adc1c329996882d4ef378c65a1c5330e1177222e48fd1a0c4798116ee63cc231ffbd120e22ed82290d975dc81ca246f0e1cb3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\jce.jar

MD5 add502acaefc139fe3ae8e7e484a41c3
SHA1 cf4be57ad520baa55d9e526c411c4a6e41a029cd
SHA256 f583dadafc2e1672da2861428d20d6c91ce702ec7f34bf5f5f97f15ea080395d
SHA512 5d43c9d2eb3e89ef8ef2d7a35c3942f641e13bffb324a548b9527374eac305ed3b7d2d73361b18448871c2fd3d14ee50c027969ba90330e22fa19dd7e49b50fb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\javaws.jar

MD5 7d64898834ed7465e44d0b59ba65ec3e
SHA1 8de65da2291ffb29d00a8f11b97025e925944cf7
SHA256 f5097fa50a5eb7c2967ddae96d5a5471d1e9dd6f2472da3ac540e06ce251b838
SHA512 4e95e4317aed706acecfca5be9068a06f30a4d74155b33651603ae3a731b78d5ea407164d5e8b03ecd6a9fc1aa9f9c2e2c666ac0d5989854af6b67463f3f9741

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\javafx.properties

MD5 18b1ab00ead4e3b944af6a20c65d5973
SHA1 63fcc1e2822007f1d8721863a3dadabe7d0bfd55
SHA256 efd2644e856ae38315b16069e56980a4a884ca32e7420bb5b549abf34a25ccf0
SHA512 956a02e64aeeb06e046b6e638bfb582602d689db68b2f192cbfaabc75a8897d482c2659dcaa771f6ec35bfab9e6878aa4134a8251d25c4fe8ce3ef7283dbc7ad

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_MoveDrop32x32.gif

MD5 cc8dd9ab7ddf6efa2f3b8bcfa31115c0
SHA1 1333f489ac0506d7dc98656a515feeb6e87e27f9
SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
SHA512 9857b329acd0db45ea8c16e945b4cfa6df9445a1ef457e4b8b40740720e8c658301fc3ab8bdd242b7697a65ae1436fd444f1968bd29da6a89725cdde1de387b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_LinkDrop32x32.gif

MD5 694a59efde0648f49fa448a46c4d8948
SHA1 4b3843cbd4f112a90d112a37957684c843d68e83
SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
SHA512 cf2dfd500af64b63cc080151bc5b9de59edb99f0e31676056cf1afbc9d6e2e5af18dc40e393e043bbbbcb26f42d425af71cce6d283e838e67e61d826ed6ecd27

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\win32_CopyDrop32x32.gif

MD5 89cdf623e11aaf0407328fd3ada32c07
SHA1 ae813939f9a52e7b59927f531ce8757636ff8082
SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
SHA512 2a35311d7db5466697d7284de75babee9bd0f0e2b20543332fcb6813f06debf2457a9c0cf569449c37f371bfeb0d81fb0d219e82b9a77acc6bafa07499eac2f7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\invalid32x32.gif

MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\images\cursors\cursors.properties

MD5 269d03935907969c3f11d43fef252ef1
SHA1 713acb9eff5f0b14a109e6c2771f62eac9b57d7c
SHA256 7b8b63f78e2f732bd58bf8f16144c4802c513a52970c18dc0bdb789dd04078e4
SHA512 94d8ee79847cd07681645d379feef6a4005f1836ac00453fb685422d58113f641e60053f611802b0ff8f595b2186b824675a91bf3e68d336ef5bd72fafb2dcc5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\hijrah-config-umalqura.properties

MD5 1eddfb1ee252055556f40cdc79632e98
SHA1 84aa425100740722e91f4725caf849e7863d12ba
SHA256 69becfe0d45b62bbdbcf6fe111a8a3a041fb749b6cf38e8a2f670607e17c9ee2
SHA512 a0fdbf42ff105c9a2f12179124606a720df8f32365605644e15600767e5732312777a58390fdb1a9b1c0b152ccc29496133b278a6e5736b38af2b5fab251d40c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaTypewriterRegular.ttf

MD5 c1397e8d6e6abcd727c71fca2132e218
SHA1 c144dcafe4faf2e79cfd74d8134a631f30234db1
SHA256 d9d0aab0354c3856df81afac49bdc586e930a77428cb499007dde99ed31152ff
SHA512 da70826793c7023e61f272d37e2cc2983449f26926746605c550e9d614acbf618f73d03d0c6351b9537703b05007cd822e42e6dc74423cb5cc736b31458d33b1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaTypewriterBold.ttf

MD5 a0c96aa334f1aeaa799773db3e6cba9c
SHA1 a5da2eb49448f461470387c939f0e69119310e0b
SHA256 fc908259013b90f1cbc597a510c6dd7855bf9e7830abe3fc3612ab4092edcde2
SHA512 a43cf773a42b4cebf4170a6c94060ea2602d2d7fa7f6500f69758a20dc5cc3ed1793c7ceb9b44ce8640721ca919d2ef7f9568c5af58ba6e3cf88eae19a95e796

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaSansRegular.ttf

MD5 b75309b925371b38997df1b25c1ea508
SHA1 39cc8bcb8d4a71d4657fc92ef0b9f4e3e9e67add
SHA256 f8d877b0b64600e736dfe436753e8e11acb022e59b5d7723d7d221d81dc2fcde
SHA512 9c792ef3116833c90103f27cfd26a175ab1eb11286959f77062893a2e15de44d79b27e5c47694cbba734cc05a9a5befa72e991c7d60eab1495aac14c5cad901d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaSansDemiBold.ttf

MD5 5dd099908b722236aa0c0047c56e5af2
SHA1 92b79fefc35e96190250c602a8fed85276b32a95
SHA256 53773357d739f89bc10087ab2a829ba057649784a9acbffee18a488b2dccb9ee
SHA512 440534eb2076004bea66cf9ac2ce2b37c10fbf5cc5e0dd8b8a8edea25e3613ce8a59ffcb2500f60528bbf871ff37f1d0a3c60396bc740ccdb4324177c38be97a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightRegular.ttf

MD5 630a6fa16c414f3de6110e46717aad53
SHA1 5d7ed564791c900a8786936930ba99385653139c
SHA256 0faaaca3c730857d3e50fba1bbad4ca2330add217b35e22b7e67f02809fac923
SHA512 0b7cde0face982b5867aebfb92918404adac7fb351a9d47dcd9fe86c441caca4dd4ec22e36b61025092220c0a8730d292da31e9cafd7808c56cdbf34ecd05035

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightItalic.ttf

MD5 4d666869c97cdb9e1381a393ffe50a3a
SHA1 aa5c037865c563726ecd63d61ca26443589be425
SHA256 d68819a70b60ff68ca945ef5ad358c31829e43ec25024a99d17174c626575e06
SHA512 1d1f61e371e4a667c90c2ce315024ae6168e47fe8a5c02244dbf3df26e8ac79f2355ac7e36d4a81d82c52149197892daed1b4c19241575256bb4541f8b126ae2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fonts\LucidaBrightDemiBold.ttf

MD5 af0c5c24ef340aea5ccac002177e5c09
SHA1 b5c97f985639e19a3b712193ee48b55dda581fd1
SHA256 72cee3e6df72ad577af49c59dca2d0541060f95a881845950595e5614c486244
SHA512 6ce87441e223543394b7242ac0cb63505888b503ec071bbf7db857b5c935b855719b818090305e17c1197de882ccc90612fb1e0a0e5d2731f264c663eb8da3f9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fontconfig.properties.src

MD5 77cd430a6d793b50b4501edc37a1e533
SHA1 d18014cc830fa07c6dbb7d8b6edbdb4178b9d241
SHA256 2c5837ca86d000a8621275540d1380880852cf6de2cfd7496418741b7e88bdf9
SHA512 705bd76336d20d0c5c30266cbcd8fc91cf0ff1901bdcb682119174173f765bcc50291676664071619ac7af521a8d1c137f78efaf065afbe4a6bf413f9f604401

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\fontconfig.bfc

MD5 ad8365719b70a2deade79683d8986a15
SHA1 88cbf37d05f28691b7f82e74fa891792e93b41b9
SHA256 b2ab990df3c4c1c2ec4317aaf22c946df17f0796727dbda712402307c56558ac
SHA512 287b19b6996a189baa3cf2894a57917b14b0615d551c5248ad55860678e5d6e58dd21247799bebe91b8236fc2f5300399fcfc1bb159edb9ae8d663805c6a30f1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\flavormap.properties

MD5 d8b47b11e300ef3e8be3e6e50ac6910b
SHA1 2d5ed3b53072b184d67b1a4e26aec2df908ddc55
SHA256 c2748e07b59398cc40cacccd47fc98a70c562f84067e9272383b45a8df72a692
SHA512 8c5f3e1619e8a92b9d9cf5932392b1cb9f77625316b9eef447e4dce54836d90951d9ee70ffd765482414dd51b816649f846e40fd07b4fbdd5080c056adbbae6f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\zipfs.jar

MD5 c0bc0f8e2be436613485dc61f3472b32
SHA1 12e45c243c46a85acf3b8dc32c0ed00f9d15584f
SHA256 b626dc18f225da74ea37f82c3a5cf19f20bb40e372c4ea96085813e04fb826bd
SHA512 da91db8037e738a9e1f762aff790253547c8ddbf3fc9990c286c5f86628151c016b3cb8a0d0042626fd1dba260a1ea67a7ddfcaf0e178cf425d9a4b6caf2c776

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunpkcs11.jar

MD5 3a40576c0507f578165072d158978e09
SHA1 eb733aa15f70957bd41948acf043ed90a1e4f4f1
SHA256 ef81320d360c0e79fa1cc074e33a8fb78129782d0e702cca9bf9ae62810f6dc0
SHA512 4a073240d643a76e1946c1f49151cba886c2ea30fc53366033c1b2f677342adda9d9b113c4f65e7305018a26ff175e3e7faba4bc7e15a17cb5598339ac92ca82

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunmscapi.jar

MD5 1ff7ee583f97ce293285273567cf6461
SHA1 98ebf3b46c728ec7b9b70ef70fde73fb49159957
SHA256 0659a230121358f0d084f1cb1c76b4e18edab7ef35b9c8209e247c20f8a3269b
SHA512 7139474439365d7298953d8ce2136516d391ae20d3acfdb03f0b294f4dd98a973cd1885d2c565d74244c1489222eede000a070bba1aa8323c190cb998867e590

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunjce_provider.jar

MD5 421f1fe7dee0ba30ef06489c3147dc54
SHA1 94149820a6a8258b903e57bf8d37a65a842b5a48
SHA256 2a0022225b5ba05d3988b59eb34294a0fbef7e02b5c4464534f14ab7898173d9
SHA512 e7c8edb8be2cdac9659645fb8aff0fb83ccfa51c592a13d20da05120cb879f4b925a88126320a8da5c475e7d0108c2a5d48eed852813e02de6f5152d2fa6c2f7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\sunec.jar

MD5 8f584d88c5b02b9dde9b4ac752ee05f6
SHA1 2dfc8984e13a84aa39b1766072219f6df1a58228
SHA256 b7467f44b1e57661c56726e72d5c0ad1d8b608813c9f723373a0e98e5648c98f
SHA512 6910bad9e07dda3b8ed8aab665ac4fc66ba4b558f138fc23ce2bee687fb0fc6f34a4dc1e35bc11e199e5f23781a979a1374aefeca0cc172a06ea09945d2fa867

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\nashorn.jar

MD5 4af1141d8ac57628fe9045dc0262e08f
SHA1 a3742067ab37da101af34b3ab9e42c692291433a
SHA256 697205ab7c64e4e8f086389117c92b021eba7777fd88adf6fa0ab619d8d68abb
SHA512 f7b8d4930cc90aaf351962ba9d1888015b0ba924e45d3abd5541ddbb20cae205319608a57d7cd0b5f6d6f4403813c186d70020c88fb4d75cbf100289ef82c3d9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\meta-index

MD5 005faac2118450bfcd46ae414da5f0e5
SHA1 9f5c887e0505e1bb06bd1fc7975a3219709d061d
SHA256 f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8
SHA512 8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\localedata.jar

MD5 fb3d07349f60828dd345d13f8e132c94
SHA1 d6fe96755f4471c3a8ffdbbb35524824139cd369
SHA256 44e60598b3a2b9d9c0294ed0e352eeec3612ca8a3eeec0cd384a76424d34c17b
SHA512 d3feaf5e8eb000342a922b69adbbc8909b04cc72d4daa30076361838496926a27a2d3d47b1d7121256d5110ad03a342fb5cf639e4e024f6f24c417f0ab653c5f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\jfxrt.jar

MD5 7d9d9ee56bfb825020cbf0578bb5eee8
SHA1 c0b6aa831169a437fe493e86a562d7ec2d635f73
SHA256 c15b5e101c0a1f220e1c362133c7ccfb609355424a7cf2f8b5519bd195e4baae
SHA512 1a6c807058294aee3b4ef5cf004a1c1224598dfb34427663c37160084c52797de34b10f717ca3787b83430c004f7ff12f5359ac91f32135d581fbb82019cf9b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\jaccess.jar

MD5 0e9459a6cb06d8696d4b0e702282333f
SHA1 c6c4f344f469f490bc6fa4e618307cd82bfd32d9
SHA256 9afad4c8976e934ff4de3dd54f832cd18388c2fdd33d3ea5c034a6fc036c6077
SHA512 7851d1d6cde7e256f8a74ef266f4495481ec5b929916c9574388a175f02bfe64998042aab82925768d2700d012844812fc38aa4867384dffb0dc3da024207282

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\dnsns.jar

MD5 616881418f1add7d9e60214ba2d175eb
SHA1 05088bf2f6d228e2f5679265481a7d373f69c188
SHA256 072e754b8b08715efdf9101c250df6e97a8981b0e9ec044ed180b6b82d07fedc
SHA512 f70021f92a76a46941578a2e494d66e8f2a374dbade6b505f97ca0bf9de1335366830da6c2c042914868ba17cbe8f6c725d000a342408c6f607497632db07cfc

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\cldrdata.jar

MD5 a5c79910a260e61ff73e41127eab9dfe
SHA1 b92ec67e3eac281a5e5f7c5c84c6ef4d33f472b7
SHA256 ebf2432e90d8484f51db5fe0fd073daaeae3e1f8c3e919aceb811474864b2cb3
SHA512 c8caa8120b735b57ca9f4a2a282c4b58fbaffd7f19361e230ef526216efcae2d1461e70771d37f984bc2db7c24f000c768d5a4c1242c013e75db8833b1e20e8e

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\ext\access-bridge-64.jar

MD5 7afa8afd933b4847adf2d9ff4831fb30
SHA1 403849771c976cba4d41c1f9f87c9f6006f3e1d7
SHA256 3b15b25f66b5118340579194c6eb6a32f0cd111b387ca78cf628417004920b75
SHA512 78768cafa078deefbcab3dfce6837be417e67bdcbefa6028d9c45dfae9157b43bae00564ec9bd5d2cde0173fd1cff7289af316f6c869e00401a70a58b3e7b1b6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy.jar

MD5 25f76bdd88c80c19d432a4401544ed42
SHA1 73e85e6d2a8e5d50265392fc59afb8d0adf95656
SHA256 76e94245b818564bce6e2203ba5d9f1144eedfd478ff6264ce0ed13bb1e30d44
SHA512 16909c99cb9cf257d0cdd7b31b86f6c42bfb00c263947bb17c3697d64f42959fbab4482d9ecaf80874247dc642475df0a609689cca088daedfb3b72a951baf42

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\[email protected]

MD5 3fe2013854a5bdaa488a6d7208d5ddd3
SHA1 d2bff9bbf7920ca743b81a0ee23b0719b4d057ca
SHA256 fc39d09d187739e580e47569556de0d19af28b53df5372c7e0538fd26edb7988
SHA512 e3048e8e0c22f6b200e5275477309083aa0435c0f33d1994c10ce65a52f357ee7cf7081f85c00876f438dfa1ee59b542d602287ec02ea340bfdf90c0c6abd548

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\splash_11-lic.gif

MD5 9e8f541e6ceba93c12d272840cc555f8
SHA1 8def364e07f40142822df84b5bb4f50846cb5e4e
SHA256 c5578ac349105de51c1e9109d22c7843aab525c951e312700c73d5fd427281b9
SHA512 2ab06cae68dec9d92b66288466f24cc25505af954fa038748d6f294d1cffb72fcc7c07ba8928001d6c487d1bf71fe0af1b1aa0f35120e5f6b1b2c209ba596ce2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\[email protected]

MD5 cb81fed291361d1dd745202659857b1b
SHA1 0ae4a5bda2a6d628fac51462390b503c99509fdc
SHA256 9dd5ccd6bdfdaad38f7d05a14661108e629fdd207fc7776268b566f7941e1435
SHA512 4a383107ac2d642f4eb63ee7e7e85a8e2f63c67b41ca55ebae56b52cecfe8a301aaf14e6536553cbc3651519db5c10fc66588c84c9840d496f5ae980ef2ed2b9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\splash.gif

MD5 249053609eaf5b17ddd42149fc24c469
SHA1 20e7aec75f6d036d504277542e507eb7dc24aae8
SHA256 113b01304ebbf3cc729a5ca3452dda2093bd8b3ddc2ba29e5e1c1605661f90be
SHA512 9c04a20e2fa70e4bcfac729e366a0802f6f5167ea49475c2157c8e2741c4e4b8452d14c75f67906359c12f1514f9fb7e9af8e736392ac8434f0a5811f7dde0cb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\deploy\messages_zh_HK.properties

MD5 880baacb176553deab39edbe4b74380d
SHA1 37a57aad121c14c25e149206179728fa62203bf0
SHA256 ff4a3a92bc92cb08d2c32c435810440fd264edd63e56efa39430e0240c835620
SHA512 3039315bb283198af9090bd3d31cfae68ee73bc2b118bbae0b32812d4e3fd0f11ce962068d4a17b065dab9a66ef651b9cb8404c0a2defce74bb6b2d1d93646d5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_zh_CN.properties

MD5 e6f84c081895acdfd98da0f496e1dd3d
SHA1 1c2b96673dddd3596890ef4fc22017d484a1f652
SHA256 a1752a0175f490f61e0aad46dc6887c19711f078309062d5260e164ac844f61a
SHA512 d4d28780147e22678cd8e7415cacfad533ae5af31d74426bbe4993f05a0707e4f0f71d948093ffa1a0d6ea48310e901cd0ed1c14e2fbdf69c92462d070a9664f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_sv.properties

MD5 bf9652f69c3be79d0972e860990ce375
SHA1 bb5a4aa0ba499f6b1916a83e3c7922a4583b4adb
SHA256 99d7f49ecd3109370c0c6e8f1230317f7bea299ebbc811ca780028475e59b547
SHA512 61232dfb1d9b9d519ee9b000802286ef2708609ea847737477ca5f762dbbba917ed958ef38d4f7aeae45ab7acf830fccdb6915c1ce1c17662baaa7722b843132

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_pt_BR.properties

MD5 ed15a441a20ea85c29521a0c7c8c3097
SHA1 24e4951743521ab9a11381c77bd0cdb1ed30f5b5
SHA256 4140663a49040ff191c07d2d04588402263ec2e1679a9a1a79b790a137ee7fb8
SHA512 be5f0639de6b0ac95792987d0af83ca77495f7f49953698c8b18692de982f77b68fe63159e8cd7537d62a71209a9ffabbecf046ad82d8341f613d39f180f9c83

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_ko.properties

MD5 fed33982e349f696ef21e35ed0dbbde3
SHA1 bf9e055b5ab138ad6d49769e2b7630b7938848d6
SHA256 d9c95c31b4c1092f32bdcf40d5232b31cc09fb5b68564067c1c2a5f59d3869fa
SHA512 88b16b7c3acfed2fc4b1e3a14006fef532147eb1e2930d8966e90629069462fb2e8cbf65f561e6cbc9a946f39d1866583cb02d6bb84c60c71428f489daaa61ef

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_ja.properties

MD5 b7279f1c3ba0b63806f37f6b9d33c314
SHA1 751170a7cdefcb1226604ac3f8196e06a04fd7ac
SHA256 8d499c1cb14d58e968a823e11d5b114408c010b053b3b38cfef7ebf9fb49096f
SHA512 4a3bf898a36d55010c8a8f92e5a784516475bdfffcd337d439d6da251ddb97bcc7e26f104ac5602320019ed5c0b8dc8883b2581760afea9c59c74982574d164b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_it.properties

MD5 a81c4b0f3bf9a499429e14a881010ef6
SHA1 dbe49949308f28540a42ae6cd2ad58afbf615592
SHA256 550954f1f80fe0e73d74eb10ad529b454d5ebc626eb94a6b294d7d2acf06f372
SHA512 6fed61cbcd7fe82c15c9a312aced9d93836ebcffaf3e13543bc9dd8b4c88400c371d2365feee0f1bb844a6372d4128376568a5b6fe666fd6213636fcbd8c7791

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_fr.properties

MD5 c11ab66fede3042ee75dfd19032c8a72
SHA1 69bd2d03c2064f8679de5b4e430ea61b567c69c5
SHA256 8deeec35ed29348f5755801f42675e3bf3fa7ad4b1e414acca283c4da40e4d77
SHA512 072f8923df111f82f482d65651758b8b4ba2486cb0ea08fb8b113f472a42a1c3bcb00dae7d1780cf371e2c2bd955d8b66658d5ee15e548b1eea16b312fdcbdf9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_es.properties

MD5 6d32848bd173b9444b71922616e0645e
SHA1 1b0334b79db481c3a59be6915d5118d760c97baa
SHA256 be987d93e23ab7318db095727dedd8461ba6d98b9409ef8fc7f5c79fa9666b84
SHA512 8e9e92d3229ff80761010e4878b4a33bfb9f0bd053040fe152565cfb2819467e9a92609b3786f9bdbf0d7934cf3c7d20bc3369fe1ad7d0df7fadf561c3fdca3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages_de.properties

MD5 d77c3b5274b8161328ab5c78f66dd0d0
SHA1 d989fe1b8f7904888d5102294ebefd28d932ecdb
SHA256 c9399a33bb9c75345130b99d1d7ce886d9148f1936543587848c47b8540da640
SHA512 696e28b6bc7e834c51ab9821d0d65d1a32f00eb15caa732047b751288ea73d8d703d3152bf81f267147f8c1538e1bf470748df41176392f10e622f4c7708dd92

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\messages.properties

MD5 811bafa6f97801186910e9b1d9927fe2
SHA1 dc52841c708e3c1eb2a044088a43396d1291bb5e
SHA256 926ccadaec649f621590d1aa5e915481016564e7ab28390c8d68bdaaf4785f1f
SHA512 5ae9c27dce552ea32603b2c87c1510858f86d9d10cade691b2e54747c3602fe75de032cf8917dcd4ee160ee4cc5be2e708b321bb1d5cdebfa9fe46c2f870ca7c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\deploy\ffjcext.zip

MD5 91750df08b2de1d64a2cd12e75ab6d5a
SHA1 769e82d5863286dc2335ae4d532c33c8ddcb58c2
SHA256 82a249cf1113449be09b3b0ab537a5b1f53ed12ce6101ba68fbe60dfb1ba1e43
SHA512 647898a0385440a3217533f214b48c8f54919a71af8d24637a93872f8a1923b4e2f11afc600e7b4db9a4d922748157080a44fb62e71ae741e0e984a398f79bbe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\currency.data

MD5 06cbdc01d247d7b365c804c4e9aaefad
SHA1 183cb72e7bf7118d870e549e9ca1fc096a2e3107
SHA256 183cea6ec937c92c47f2af345fda468cb19c6126dbb1a35b70dd47623efabe2b
SHA512 78a768406649b73457796f19f347c407c867c630be77d79997e25ca852e3987c0645fb5affecaaae458b1d6f9dbc6e359f505760652a898d6a1f515034a004c2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\sRGB.pf

MD5 1d3fda2edb4a89ab60a23c5f7c7d81dd
SHA1 9eaea0911d89d63e39e95f2e2116eaec7e0bb91e
SHA256 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
SHA512 16aae81acf757036634b40fb8b638d3eba89a0906c7f95bd915bc3579e3be38c7549ee4cd3f344ef0a17834ff041f875b9370230042d20b377c562952c47509b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\PYCC.pf

MD5 24b9dee2469f9cc8ec39d5bdb3901500
SHA1 4f7eed05b8f0eea7bcdc8f8f7aaeb1925ce7b144
SHA256 48122294b5c08c69b7fe1db28904969dcb6edc9aa5076e3f8768bf48b76204d0
SHA512 d23ce2623de400216d249602486f21f66398b75196e80e447143d058a07438919a78ae0ed2ddf8e80d20bd70a635d51c9fb300e9f08a4751e00cd21883b88693

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\LINEAR_RGB.pf

MD5 a387b65159c9887265babdef9ca8dae5
SHA1 7913274c2f73bafcf888f09ff60990b100214ede
SHA256 712036aa1951427d42e3e190e714f420ca8c2dd97ef01fcd0675ee54b920db46
SHA512 359d9b57215855f6794e47026c06036b93710998205d0817c6e602b2a24daeb92537c388f129407461fc60180198f02a236aeb349a17430ed7ac85a1e5f71350

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\GRAY.pf

MD5 1002f18fc4916f83e0fc7e33dcc1fa09
SHA1 27f93961d66b8230d0cdb8b166bc8b4153d5bc2d
SHA256 081caac386d968add4c2d722776e259380dcf78a306e14cc790b040ab876d424
SHA512 334d932d395b46dfc619576b391f2adc2617e345aff032b592c25e333e853735da8b286ef7542eb19059cde8215cdcea147a3419ed56bdd6006ca9918d0618e1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\cmm\CIEXYZ.pf

MD5 10f23396e21454e6bdfb0db2d124db85
SHA1 b7779924c70554647b87c2a86159ca7781e929f8
SHA256 207d748a76c10e5fa10ec7d0494e31ab72f2bacab591371f2e9653961321fe9c
SHA512 f5c5f9fc3c4a940d684297493902fd46f6aa5248d2b74914ca5a688f0bad682831f6060e2264326d2ecb1f3544831eb1fa029499d1500ea4bfe3b97567fe8444

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\classlist

MD5 7fc71a62d85ccf12996680a4080aa44e
SHA1 199dccaa94e9129a3649a09f8667b552803e1d0e
SHA256 01fe24232d0dbefe339f88c44a3fd3d99ff0e17ae03926ccf90b835332f5f89c
SHA512 b0b9b486223cf79ccf9346aaf5c1ca0f9588247a00c826aa9f3d366b7e2ef905af4d179787dcb02b32870500fd63899538cf6fafcdd9b573799b255f658ceb1d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\charsets.jar

MD5 67374911df954ceea5e7f39ef34f457d
SHA1 a4e92db3d9d0dca3b248f8539e04ef09c8b4fdf3
SHA256 1084059cc0a99a04bc55582772311050274bc38710095e3828acb0c3c049c5f1
SHA512 7dc21958aabc59c07968b8756138c3f5aaac51d2db74c5b7573476b169c27528e9f3a3484794d189b23cb1ce7f364e916bd7909f2fe5993740f93f3099bca72b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\calendars.properties

MD5 3f731b169e01a9efe3e19a1f40679c9a
SHA1 531a6316953fc152809601806fec55e1be806700
SHA256 1169fcba1385b8e4baccbd8156a43e3179c26e1877cc154bd16ff23874b208ea
SHA512 81c03e0b1cf93c873ea495cb6f434fa5fa41f02cfd7dc399e859c565e52e2e942e3ed04d4025f1e4f114ddb180503a5f97ff88fd4c41bb1c810afb0f03b93ec6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\amd64\jvm.cfg

MD5 499f2a4e0a25a41c1ff80df2d073e4fd
SHA1 e2469cbe07e92d817637be4e889ebb74c3c46253
SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
SHA512 7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\lib\accessibility.properties

MD5 2ed483df31645d3d00c625c00c1e5a14
SHA1 27c9b302d2d47aae04fc1f4ef9127a2835a77853
SHA256 68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf
SHA512 4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\zlib.md

MD5 b98b87940a5ebc38435b5477304d4f5f
SHA1 b290a0b013bd477efa51c2f32b6380ad18c1a722
SHA256 aa1639bdefec3b16586704e184322b7b98d2c88cefab442f417c4957aa95c12b
SHA512 7ba1af7985aeb61a1466983ae4cd1df0d751bfa139a57ce210bbc68e3b36d44493b339f4ff1fbe0521756e4a6f1d45352f4d6795727c471313c871e178e632f4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xmlresolver.md

MD5 32e91e00a778e38ed2adceec6f11d095
SHA1 cccc59ce234d3911dfd1ca4fac9dac17ec2ed55b
SHA256 db53f31c2479b8b902a3434b9112ca24f0639c3c2ec366722f30db3d5f22108b
SHA512 8b47e55be6a842dd986ff1a145f57d28ccb6d8b97c4608a8d265307e247f9f56a9a5c2ff9d2b560dc3773dcf2fe70968bd0e03ec6b9e7be3d26dcefebb2c600b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xerces.md

MD5 c351d8057c38402b15ae504a786c610f
SHA1 b0cb2ab480cadb37fd0502e2ebd7fa52b1d36ecb
SHA256 c5d15dd57a8a1401795da0dd5de83a9977eebfcff24ffacf8e643b945d7ce336
SHA512 5bd09127183395acd08625f8d24a954f7a971dce4467e2e4fcc3ac2c5f6209a0a003ba6d3014f0dd5c7ed34b66ed78fe5d966a3502ab1c2763a4b7c72e346d37

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\xalan.md

MD5 2c76aeedc888f46a7ed9eb5fa6fb0e29
SHA1 d07f52befde05615a38cde5947f0b4f09d57b5a9
SHA256 2c161f3e92ed1618d5758f9916deba2df4e4d7e1ad1303a6c0d8210797b0efae
SHA512 a2a66767dbe2ec5b19d292f96f45d15f6de0e78f474b4f5b2633ce03e0d504bac13216ff91407f02b3bc7d913659e78f90f0903383059d718c9a18a896c47f9b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\unicode.md

MD5 288ec55b4b45c6c13eb50b339d180cc8
SHA1 8eabfcd5c0de57f253a016618ebf3e02543c85dd
SHA256 90333c7083132be31a9a29e3d64bb16c438204678152c40ff96b1508c168ee93
SHA512 9732852c7f069e6dda5c58d2677f3a39e6f105da0117c60c961daa0a509eadbbbaa393f65d96cf8603ecdf8da97954295721389f28a2e9cb0081a734b459b021

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\thaidict.md

MD5 38e321ef31b7429d8a717525cc85ca8e
SHA1 80b2b391c1ff687d693218d72aca31c190b4fdad
SHA256 b9b6b1d88c6fcd67dc6d5869731a4a29ed7cfdd0d3503fd7216924a9c007070d
SHA512 17f701624384e9f276d0cb5083ac04affd348651278f9f9d65c8d84accaa9a6e2b56318b633fd496632e5aaf0f87e725f07ad827498723d87f8e3afce6dc9aee

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\santuario.md

MD5 6c75ec996c31a810ea05d713f50740e4
SHA1 37bba4f3af6197ccd2fb73fbe74a211b52513492
SHA256 e05fc973677344cef1002d46e4edfbbe3067bfde753dec7e9f7c38023ddb4afd
SHA512 c05ba624a10160e9b9f2d03381bf0cd786934deb5e48018c617ed17fc9e56d1171ad28e7224fc85e38709bb72f5b97d19c2f0777a529a1832935fb5a6dffbc17

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngom.md

MD5 b4115178f21fa2c5cdb05b65539590af
SHA1 cc76c0a7b630f1fa56dd457f54cfdab531031986
SHA256 7c02d2fb4bf17c847cdc9df090a5bea606a2fc40459c63b25f5467204f735b6a
SHA512 4664ee35471a3fc482d259dda49e3a290897f2e85bb988205b9003f82e8ad9b18e743ee56deade1f4754b81774ff12c249d90a60b62ab3ab297232e5b282b0df

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngdatatype.md

MD5 19c79cd6c27e7aa0e4ae4ae2f8d25f66
SHA1 2b95e8949e7d1dca8dcfc4d822357863fe67341e
SHA256 8454b0b740cd1fdb98b9a5d56685c872b1c548b6308e5a8e8cfe2164474ac53c
SHA512 4a98acc829dc48e185fe418a7dde6a51c497c343e2c36a2f5cade2bf7c0de4aac8ba8c0f08843bfdeea23da72d3fe09efe877e68f890174f1dff44b0d143d7b2

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\relaxngcc.md

MD5 7a73168e2d1d60635d4a477735ef9c46
SHA1 03698bddf01c463ed4add5707136a067f9446551
SHA256 da023d685dcf9206eba77aff21957e09633084903991ba422625d41ef18e6073
SHA512 8122e4b9d698632b36085c9a334883756b4499ee5cbb80760f3b1c31d50c9121f788b838664171ccef20cebffa04723d7536004f6dbf31174eddf2825a55b8d5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\pkcs11wrapper.md

MD5 65933eb0fa6b3c3e93fb30b2f2613131
SHA1 b1783ddcb9e112987deb97e14d30be27df7061d0
SHA256 12dd724a8014735dec61b95ca4417476688c07dd1550cc9c1071637806e232a0
SHA512 4f784bcea1d66eaa7c56c31d3f2d00061963ca1b437774dbbb7bdbb3e62f92ff426419e075d8feb82a2f984faee4b1573dd175d0c152699b8bbe3313ebc18faf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\pkcs11cryptotoken.md

MD5 300c82d64d67c9ea31509946a84f0698
SHA1 8f958ab754dcf1357bc9113fc39550059484f630
SHA256 4a109d67362ad02955d7aba54d246d25c01d41750334adadee24c49429d751db
SHA512 8f0c10fa9725358c5499b707f9052f90cf5f1dcde7b53d5658666c3572a50e9774e312dbbfc91b86e33c2fae65dc593df927caecdb012ac9fbdcd954b11bbffe

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\mesa3d.md

MD5 554eff799c8ccb5914167a9508e50c7a
SHA1 dcc9c36e4ffb3ae40e8ac97c4be457cb2580aef3
SHA256 5e0f791f69ba15f61a4288bb7cc109296e4ce188badccecf4ff975f782ab81cd
SHA512 2716397f8ddb2ab71b836ebc7e4dfd237262689432f313d40c57ace31dc8ec273065ab9602b261d1716e9602ee1377aabf14f191c26228a83d43f29e3da27f93

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\libpng.md

MD5 add2752f10e8e1e08068caa896c69a71
SHA1 2927514cb727874819dc25ae9bf781ca6ad11b9b
SHA256 c1723f935403494bb1b26f00ae149c49964cff2711a7a92746c8bc34ebf1fb75
SHA512 c6facc70789ac6b0e6531ea4b059bc29d28fe36d6767853bcdfb797536142a084aeb58c2102d6809e404a8cb597016808927dbecb3dc2ff2cf45d44c2efc018d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\lcms.md

MD5 6f01e9d461092507e7952ccdda30a431
SHA1 4337452d96ac8371f0a91837317ee95c02c0f764
SHA256 db74d60223cd2e2c2790e697bd77d9b4e7171812ec49313a430f460527c9f70e
SHA512 421ffb5b30d7f471d91cdaa9c0d1b96e5a84cac7b4d87ecbcb45ea5228bd1791147a0074d013f86597be772c2a4b738c191435a4948b272f29a4240971bf5f94

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\Welcome.html

MD5 4a8c8c0695ae945d27d0975360dfee51
SHA1 b3f41c7b42daba14268b5dc4ca1ced8ef4a2c329
SHA256 3e33897086524eb85005e13ff3a8d2c8b3433546ba8d6803f276c5995727adff
SHA512 533f3e3376d366e9bf6372b91eab6a04e1c9671086ab83cbd3403646958b88b7c0ec2c818f6022855d1841a4adad455070332980c5b4268dc9b08ffe8cb18529

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jpeg.md

MD5 78403eddfd77b7f194ad07541ff1a88c
SHA1 3a2280a0fc1b05a3ccdcd328e6c9d9d47abdbc66
SHA256 3b0b5d9c7587a7f194966a793d08f9d81f067457a9a68209dc25c908c03998ce
SHA512 82a31cc6402b6b1c5d5e527ee93ddf09386ac4cc2cec2666140fcd38a36993ba8cb799d6280fec76fc6101370699c0bc831ac9b84dab5e439cc4052c3c38296d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jopt-simple.md

MD5 3e20d03f3ab0742d0b0a35ba1215fedd
SHA1 a68353b6ae21632813bb8cfacc5741703b16fc7e
SHA256 ef38f6f236aa85bb2c01160f741f0c02ef1a76b80021e3e85ca8dafc0a6e2883
SHA512 eb5b02852a54e8072c1d75d6d3fd04d921acc02e37cb5dc63c2eb4818e3f33b3770a71fe97c97abfaa0d2481ea3650552e6259972350142fba14bfbe8753c559

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\joni.md

MD5 275c596413ff4412c14628abf9e5a42d
SHA1 9b16ad5c7eeac982ab077569bd73a15625e66693
SHA256 9307974e7d1039bbfe2a384f0aedf9a3f281b4b61f1352a0acac2bd25bf9ca36
SHA512 ab08170073ef6b74293f992f0f1e8f8973208d4ed750a41b8535ab7bce0d38815c648023173c70465b88017473ed011ed98e40c632ad6bef5e6f879cb72e15c4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\jcup.md

MD5 7f39baa619c092f5d8088a0b5ff35365
SHA1 31656532c09b14db067b27f61ac2204ae85101b2
SHA256 5848acf6f867a1186753ddaa87a307442dcaf24027f7c2efcc063ff72a932afa
SHA512 b5ff9cfe4a465aa8bc9310944bb2cdcd6ecb7c97dc19f73e12905f83d04bd49566d41d6ff7ddca12bfdb4b670b6980caebd9c36457c14a7fe31f5188d50af258

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\icu.md

MD5 f06c93f6e0508ff7475234cff59d9f0a
SHA1 be09fa29c875f3957947a3a93b2d5f4063fcbd82
SHA256 8ec7dfc03761f581c0dde060b794bda2c657a9db708abaaf05be48e1889b4674
SHA512 dd27147c253252e76012ce4b0c8bd4dbc3dc5e3e31cbc068438babe22ce7d54725474d30f2b075739f9926ec6477a9cf91962358c50700fa3aa2a703006324e1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\giflib.md

MD5 492019df920279baeac09aa0c64f8434
SHA1 7890596300f139834f6a32d16210337261fb5498
SHA256 9139bdc457eee7432a019a24f18065c7ddf79cc9486e1f9d54c73d1e2cd5b504
SHA512 aabe3502058aed12c8544e9103594f76161abb9f81a842742ffb9c80be7424587d2c64469fe28651efceb13ae461b28be5f46a7a35eb9e060405bd36f1e3beec

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\freebxml.md

MD5 409fc7d453b37e23e9abef873a810ed8
SHA1 0c9427f433e516e7cd2a2f292eb9d0a0a61010d3
SHA256 8800731ab11e49c7b4a9d18e0e21882d9949f7dcbcc4540b8024f962cfe65b11
SHA512 b3e2f4b3119175218577ee00001fefed21f84e1421713da3eb5c1d482a5092a7b28824d35208cc4ed72404b94bd5f273cc4db660938d1e6e2f8a2dcd8ed30ded

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\ecc.md

MD5 9e4ab0e65a11abb7114e44cf7873d1e8
SHA1 293e0e53e2e49bcc7665eaf5f2e839b086caea76
SHA256 0fbac43e8435a91103100a041d8dc6dbc498b417dc09f11157bdca3050ae5e45
SHA512 1059297ba56f0aefe66bff142f8b99291729c2714ae8d2a4191639498da2659e8dabc2680d73173dd3cfe2234249661bffa7e6ba22141545cde6e4da82736bae

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\dynalink.md

MD5 1d40cc2d0eeaed836a3d0b8154c3d657
SHA1 7e5cb50c5a1daca603061e00d38193d1c50b72af
SHA256 754a50e07cf9e0129d4875bb5a2e10fc7628cc82e3816c102ee1966165f5ffc3
SHA512 df00f602ff05d5a5fe71449db703f9f851546e40ae5ce85b79821939aca35387cf97226dcfef75b942522e93c3762642acb9105acd17ab35a3cee6e8c2752492

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\dom.md

MD5 48f3d84f045f1bab02fc578bb4b53fcb
SHA1 93f5b4d5b0beaaca3cb9832645ed8b2dafc0072a
SHA256 597f472066dff302001616f60f2dafa540f7b33810f44bb9ca905d892d4111b7
SHA512 bab0c3b443e18a00fc28f697a4e6923f38b938474c1f326c95e3f57920734bfbf40c099884e2479d53d4260d6de044d878cf89e8c8b153986c39c9cad639f579

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\colorimaging.md

MD5 f1ba49fadb244e70f7d79f5121fcf56f
SHA1 0d5706cb3c0bd0a7c036cd03e4751d132a0e4074
SHA256 2c102f5ca80236be62e9a495e452d97b57f3b3353705ded10e5736a7af940f67
SHA512 250a39516ca1bc418fa7a85035912481ef13e66ecbe01bed3bdc47c7bb77290cda833a0a05401ba671a59df0c8e58ccd2a3a08bba632cea745c69cface7ca652

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\cldr.md

MD5 ed19b9beb7d30c00fba258c27da06e5e
SHA1 1003665d1b3b1c0aeeec8297f6810988f242f1d1
SHA256 8b59040a8ba6c3711cf1e3078df798e7d7fa85377c7a9911703db02fe1d6525f
SHA512 5dc562f74a91d87c8c7366688f1afd0f449293e9101858c683075cbf3c79b442ef893551a71c520d1ebbe2e231112bc635ff8cebbab40e637a32869a5dcf5cdb

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\bcel.md

MD5 29d63d3eb2736a8173e059d1dd821b4d
SHA1 b40cdb05866dac35107b6b1b1a4f74ef6a5e5da6
SHA256 20772f1f3e766ab16f661d25819f23fd89be976ca8428cd7e0c2075baadfdcbc
SHA512 31de58d496104e654ebc457e260d5fddb0a117fbb9107c60e0105a06afed26922668a39ccda1a6a075b6f51e73efce682b6efa98ba9b59271f8e654c2315b629

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\jdk\asm.md

MD5 c82eeeca7fed16ebbe4bd8c4b2dcb476
SHA1 303a33d78c0b836681e2dd01313084dae2208f5c
SHA256 862d6caaa90ed0d85cd0e685118ebbf6e81976df48e62fbb81236b743ea7b8ab
SHA512 5ee3b0dfa02f3865fc743b083f53d8ac756bf3cad80fafe69aa546d82539d6b0acb92f01a1630f9c24fc71453619df5063f459e828447688750edb609edd4184

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\webkit.md

MD5 979ff0b364144ae7752611823d7579bf
SHA1 3438ab2bd0029853ae64d59eac1b7a0e07b8dad6
SHA256 c8c5cca6d584aab2cd9094550f0e60d1286cf2fa7ccba94ec2ac57122ad9e0b1
SHA512 57b03308ed3e615eff41ce446250e3e64b25dd84593923aaef1861be39b2a7d198ad459cff70493980634661e6243a29fbfba90e6a45f21cec75282684aef864

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\mesa3d.md

MD5 7d22d2f1498757c13c6b44a012e6c3c6
SHA1 61efa1786c6871f9c2f53678dcfc144752ad01ce
SHA256 d2f8764309e1784d359e41fb08006e6fcb993f5cdb62ee7e7f23ac559b1755c6
SHA512 1f38dcd5529d87b425861740d5e6fce43adc2f53fa15193424f20d7ca058c121936586f4da260af385f03ef728c7108f6a0f93d7b4e39a497cf46ad46f033012

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libxslt.md

MD5 fdb61eed7af5bd0db6df08cdd8ce8c38
SHA1 81912ee0166ac5df7d52c10a75b33cf5f5472297
SHA256 60df039c8c6084581dd9ba1b00b95c4761a41e5f9b475fc8e6ba4934246b4e76
SHA512 9fecda82cea98d626f28a996fb9b52afc4df7dff28da512f736a9b8fba173c1e707a206a997355c5f9a282486da00daa368b64e73c5d979cc009af4d43b4a961

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libxml2.md

MD5 558798ece848ab07f14a2010cc35bdd6
SHA1 65de4035dbd83b087d420936b8e9ad806f49b217
SHA256 2921c846360fd93aa5c767ae64980aa8519a86b8dd5eb132429bb9a6c78b1868
SHA512 55a4ee17e8d22286bbe5af25225f9e9e7f69c08945c839d0d7a2652f9e0bd38c31651d43b745a97e2919a20aff41dff5e672fe8c15725c28569097cec44644e9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\libffi.md

MD5 686f85093806b86d50e3e655400413a9
SHA1 be2174703b4c54d1919b76f9e9e98556c1f6cb5c
SHA256 74219d63dd5cf24ee3fafb4a9c3d0128653cce5f4041f1b176d37d769a8833ca
SHA512 2ba758f0a50f86e62f0bccb748efcead1e013541d4681affbd720720081666e28f3af8ce00d468e1e17823902ab12792d22d6e46c9d4d656602e907c062f3fb9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\jpeg_fx.md

MD5 b709883a76ce6552c61216fdbc39e768
SHA1 f95b93cf73eb9ca8a0ce94b8114bb81932dce8f3
SHA256 60761a6d3da122df3b130700b686174dc1b433840fa22f08291886486ac4c8cb
SHA512 749ee947a1a5fd814c1283c08f042d768f48d55e165d19ffb8e1839f01696dc2d40f5196a1452e4902d0725be243723663289ca0a1836acf323073a2a7fcae24

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\icu_web.md

MD5 801ef9090d108780a89c29cc12589bb8
SHA1 6c4ee4d392efdad007ff360d28ee9964c7aae379
SHA256 522d75f2e378f73b1cac580158e71577fafe4305396e478877b273ffc7f399a5
SHA512 ffc7407e4adc4374bcb9b286efafd87d565b1a3d751d02707abffb939a568ef31a070578065ea55e63e0523d9744c62fb02e542dd153fd7bdb871633538cba6d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\gstreamer.md

MD5 f3ee88bb0506667696435c1f82a680de
SHA1 252c1e15d4233210901e4e286af89643dbf31d09
SHA256 c655748d933a512348ccaf8d6b398b05d11391efebc0e769c34d481c81a32f82
SHA512 8747cb1389c97341e6521f8cdad6546a3a594fe088fc4dfcb1730d678b3961d108d56312dfcab23984f65c6484483819983527ba92a05e19ca2de833c3c8a254

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\glib.md

MD5 2d583cbb663bb8dfab9dc68bcb8509cd
SHA1 9f1a38cfbfd6561b0129a80e5ea939ddee62c5a6
SHA256 130442ed1d0f7c20731d47d81980a82b54392f0235c922065f7ae92708348016
SHA512 408c5367b5298ce3cea25cb17b964733fd889f8eb068f4e3d408e1eea51b60a69e2d864164ad2876165c5800b7f91e89708d1df901c1ff89fd16a10514cda8de

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\legal\javafx\directshow.md

MD5 b1047db8237b15d97b1dd072f71f4d15
SHA1 2484425df3be1049de4016ed88e5518aa9751b35
SHA256 d847da5757a30d093db3f90a0bac9b1699a52965daa3ec5dedf3ebf14c81c698
SHA512 bbd78681a97abf5fe515be598f81edb4d2140e0dd12959f3ab6f89609e9962991bb5bfe09eed67cdd29529c51ecbdf59c37a61bb0d592250b0f9ad0c6090798b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\COPYRIGHT

MD5 3b30005a147ea84b3d330fed5d791173
SHA1 cc410c7a5757559442268906846e8f4d6c7d7973
SHA256 43dc26a1d7bd0ce5a6858d8084358da5b22c17bdeed2b1734eb8c0aea3148f3a
SHA512 0219fb51065358b2efcc6ee192812f66c5b84e113a9effdfb9980ea2c0ced0e6c919149f56960b942050394dea8c2d55340ece6d9f24d49de4229b129f36b05a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\zip.dll

MD5 2bad0abfd30c0bf121f5374f35702fcd
SHA1 f88f5c79d8f24d140ffbf88cd245cd9277f69887
SHA256 99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8
SHA512 f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\wsdetect.dll

MD5 4efced6f8698dc2f38e92f55bf6b3e7c
SHA1 0122c4b13235882f538752c5a8daa3e1fbae9463
SHA256 45c520aa8eb9208331805426d0a0c8b5b4dc91ae2ed2bf87492cf26fcd6c8812
SHA512 b0662674f8733348b22c070cca04eb6ae36393813869cfa8a2233ceb4734800a34f132b87922909462c42f200aa723556129f4219e54c261c3c93c8ed6183a2f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\WindowsAccessBridge-64.dll

MD5 9626e48462130ad35b86c8a683d2ae45
SHA1 202e5d5f1ecada4fdb93f1908b7498dc307b640b
SHA256 430709c24725e82e74f28f929ce7245d4c8418c29d1b302244573ea4b2db27cf
SHA512 f477456e20df7ee6ed707643d308b1959225c7e35711d1c94d8e3bc6ff9a80a297a4ca5f4e4f2d5279cf1b66f236f69faa8531a9735146d7d75407eb71454526

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\w2k_lsa_auth.dll

MD5 9186aad5f27243daf2c4ca17677b33b2
SHA1 ea54fd05a5a69b20fa73dc6dc017ec927ebc3de2
SHA256 c032c9421aabf96bd4931baca8ea56a4a3a88f50d481a831d4683c0bdec9b2c8
SHA512 c14d9906de48f53cd5eae7fa6789a8afe8c8b1303d1ec5ea87cdac0d9b6272541ce15b6d15ae3281b33c36ce3148b216642b867a7fab99d111a036a069c3a472

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\unpack200.exe

MD5 9bc8abeedf17b7e6bf826dd8ddeec12b
SHA1 5bdf9e3f1ccd272c20e85dc3782065ce2cda4285
SHA256 3122e3a84aaa39a52962e1f134408ea609ac4916c7461db96c10d7cf0d4d1ef1
SHA512 425cef99302f1bdb8359c5f18a3ab74b37432958767677102dbbd5bfe727304605440142163450de59d6297053d67bfe46cdb486b889d8502fcd547b2f3a8d4f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ucrtbase.dll

MD5 61eb0ad4c285b60732353a0cb5c9b2ab
SHA1 21a1bea01f6ca7e9828a522c696853706d0a457b
SHA256 10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd
SHA512 44cd871f48b5193abb3b9664dbea8cdad19e72c47b6967c685cf1cc803bc9abb48a8a93009c972ef4936e7f78e3c92110828790aa0a9d26b80e6a523bbcd830d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\tnameserv.exe

MD5 f51da6fdf63a1d723b566f06b7111e69
SHA1 aa2dfeae2d584994a2411c9c61e70b73c3c4e88d
SHA256 6eb6cda8c2881765cbd0ed458e4c946082dd3dd7f74760f75c9a4af84c9fe4b2
SHA512 75d0057daf2c6f93f8958d0b3acf0e092e5532282958b58ebb273156919a742509805a261f56aad9565eea349c2ce6455dd772c887538cb1ba4eb6f0669a2a1f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\t2k.dll

MD5 e0f0791f583a14d2d66782fb39d48714
SHA1 de29cbbd23a98bcf7bb5aef750cac42b8172e567
SHA256 49ccf53650d5eecc7e8a38cd393e8c00d935e768a595a4d29cd94dde4f2de8c3
SHA512 1c680c02297f73e3eab741129cb14803825f037073ec18ba7203b05164eb64c8207a9bf0acc4700b223c0b1aa09379ef37af7c645c4096979aff93847f4637a5

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\sunmscapi.dll

MD5 b813162906a8a8fb6d11d8efde9c18fb
SHA1 999219efc3178cd9c23dadfb5c63dbc7052cb755
SHA256 7089d5113d90ca6b139e9b729623babf56ee2963defa6288769aafce0175172b
SHA512 bb6efe9df797b95c5451eba0844990ce2bf7499256f03b87a4aaedc34fd63ec165a375f9b20e5c5e29b7ba48edd379188109f26665baba3a6ff24e7f1917d6c9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\sunec.dll

MD5 5ea0d610e366e3e1548bd3659990d90f
SHA1 b7674cd5b71527691cc1108ed76a3a05a83d1a1b
SHA256 1783b234e032f92b5b5e725bb8b5bdb7a362dae7885c65038be786fe28f870e6
SHA512 d146aa497e92066a5c98ba86e46c2af04bc24e5d750580f26afca4986ca1a2bf79b4a36e481a722982a0f19a22ab4a255bd4afda0c7b8bbfd0c1ff10ad7ef383

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ssvagent.exe

MD5 843eaf8326525beff0c67fae73d89c65
SHA1 8f847a4ca5b1ae13a6c8ae966d1b16c569a3a17f
SHA256 760ef2f3214e49a8f34919a5f507f8270ecbca5a147249463c8003d94a72b56a
SHA512 c46170fc09534c4138a0b9bc0910d9e365bc3ff9854e6a656412153f7d4da9523dc7d2d5789f91a3a14a8bc0a94a26a72232b20f58d2951e7ab055d146694f3c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ssv.dll

MD5 24ef123370127d3bc375339b23175982
SHA1 e0cdc9d87c7b8b25a47828db6ffc965ae2e44def
SHA256 1e9d524e610ea76fd3155d2c06b38720bcd3c05b86698cb10d0f398e12a26803
SHA512 95bf6fe4a5e575626a775f810b30d49a7eaace8c5df351f6b8e5e660e7b53e601764c3a79dcd423d39ab05d8fb022cb70d4794d804398fdced9d7a859a65722b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\splashscreen.dll

MD5 c1ee29cfcd480a26e936cde8ab01f6f5
SHA1 c09ac014155a9c6a7153817e1abf07193703a375
SHA256 0fab9860f9968ea50a40332448ab7e91ce5314ae77600c94b41cb633c4a23e6d
SHA512 5092e2c00b81085134437e9aac01865e152e12fa2a6fcd89f3877a150f3b6fa423800f46c1d4a50a0785152d962e14a03925e87fd11fea7ae6a14b18d85bc852

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\rmid.exe

MD5 abfa48731cde27264da847fd29aa2cf0
SHA1 554891d7f158d51c5b2d801804740569cc632c54
SHA256 52c61766c164db9453917c2ecd083b53fe4056832c9dedbd96644d22f0e26eb0
SHA512 77264b73bf396871bfe5df92b13946e0653488c4f31a947b85f006ae23b66b6caf431a66d5244d2087e8015b35eaaa1aae1c6050c70c4cb13ce50ef49831aa87

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\resource.dll

MD5 663c721d2dce7157c388aeab4b8758cd
SHA1 284112dccf35913b93a175840e4baaacdc39aaec
SHA256 c76a1d56ee567e53a3ad1af153e6e28869a49fc054ba43f441f19a241b15a3bb
SHA512 ff74a340146fddf0314a61c309c4cba87ce88c6213e84d56627ab19da7991ea9b42c5cad2b1559bbd349f654ace219cc6d17bc27e04865326d6835a68e14c7bc

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_sw.dll

MD5 331369b9b339fbe10ec6052bd4086671
SHA1 f3cb3ee4635df14b99525f1ec1bf287bcef4e722
SHA256 d699246f105d05b9441a58bbc8a631ce74f7281f88a78dc6c4930b538bfa6d60
SHA512 0aa635c8a1cf0174af82c82774a22d37dceeeb334b4bbd13203aeb4c4399f2e52cd850db376aa07ce6945516d8aa96a6f046b2771bd15c41d2af3021b98af607

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_d3d.dll

MD5 c95f0ea3edcec247791942098ad738af
SHA1 38db711db8f27276eb5c96156289b1d323333663
SHA256 700c6dfdbddc4cc1ebfdd02835c7942e424fe6b694579a67b793406a11f7afd9
SHA512 c4093309441110cc70bef9ef8c02cf1d579068442692715b7b71d5bc40c4ffc0c1148de2195e16ac946b2479bf75986a3c9feace1cbd22b63af87f11b94d07af

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\prism_common.dll

MD5 93dabde1ac41ba0107239faddfb52865
SHA1 4b2a0c6e36429687ad4d4b8b647e71f82b487254
SHA256 c23b3bf4beffab1c9f132656084615d7a90f181bcceabc9ad6626a47bc7f797c
SHA512 92d7299929f3b9eb661616129a70d42f7088a253cd7c3cf8c8fa1f744b0657adb65be6aaad095d119d181e1f5813cad613fdfb4dd3ba0796954953fc4bef743b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\policytool.exe

MD5 1fcd594ea6cc06b9a7f85dfe0883c0f6
SHA1 23f7adb866001d83c4471d09256a1b97d2c33e09
SHA256 af823b3838552ff3c43a01b36ebe112ae8bc652c7ba64a48b573bbc32b73aac2
SHA512 57eca05b6d48c5d1af3b9fbc1515f177cfd49bbf6ae06ffaabeaf56d06095abc1c36b6265b26ac87c001eaa0e2dfe3bc05da061377a29fdbfd2b0d3b1f3e9804

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\plugin2\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\pack200.exe

MD5 b255aa86da28dcfce8ea84530250233d
SHA1 ee11b16a659df2ba905e8e913cafa603598c0e47
SHA256 7f134048aa7ba1aac76cbc6410fc243969656b6cb545fb9a675052ac0d0079ce
SHA512 6fd01476cbe31cb5a9fc0cc0dffe0cb4032c7ac17fa74891631484789fba108ec53d3d1a8bc596fb25a24fdcef4f9886a8493c2bbec3b5df2a878f3d303d1d5d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\orbd.exe

MD5 7c922106597b57fbafc27ad0dca05920
SHA1 bff3b1c05c72de725eae5396d63043454965d72c
SHA256 eb7e4d9cb4b3c41ba8618f935ba7af4a09d01f65bed6a98177345565965ace11
SHA512 d97125b073ea2eb5b986f1470f7a352d9c3058155faaa29c8cb77e70a8a5564070756df8e19cb7807e2de498aaabe0957d57126e197035bfcd5244667af8315d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\npt.dll

MD5 e62346482352eae1a37e7149617ba94d
SHA1 e5158f961a27a3d7e93f03a6b78dd13696bff1ff
SHA256 4e6a9dd7869a0a6b4edafb7b83642c862d0023098889e361a659ee9bdb787655
SHA512 62a18dd0091a65bfdcc8ad4cfecf7beee4c49f09d047583a35f99e9971774ebdb118734485f9bc889158871c901b094c595bd0cb644632f7a1387f8910d61ce7

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\nio.dll

MD5 a0bf549a97dd4752c34bd7d502f8d778
SHA1 1197c9c31eb06bcf81d265c33d11c6db016c7378
SHA256 7a2cd76fa640ec6154ebfac5ef46d472f08d5d1c00247049ac67896b6aefb156
SHA512 87c8f7201dc8c50403c990b84400b71a710243969f590a187604bb1bb1678582e95e28521ca0aad0565c32d26d7c4799c1f7f161cf344e5f6fa627641720b3c1

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\net.dll

MD5 1f06a0a450a470a60370089408237e36
SHA1 ab488bc6dd912a4107ee6753d760fa2a0c9ca2f0
SHA256 69ae7599e82c5c25906faf7f845421405caad07acdbb5f1021aa56e170c5152b
SHA512 1d41781c4b86ff2fe62650f8db32ba6df3cc029d0faf9d4f21a3fdace2f3bd7ab667e70a0055cf7b84b54762ee35dcdd032ccb41bf02787b3e28bb7230ad0ea9

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\servertool.exe

MD5 fcef40876a2b1677acd13c1e0c881a8d
SHA1 34f0db8efc41a14e57b5d03410400709cf8d3141
SHA256 2cc1af0d83f7a33383cbc27fe372df472622217182550fb0c89e2141ae851b71
SHA512 b5aa97aecc1915f11b37a0f020bc5fc14f63fd28cdfd96f49753afd1b158022a0156bfba6f2a64e186445718d52f7fbe7cff75da6da6d9c8bfe6722c2753ef0b

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\server\Xusage.txt

MD5 b3174769a9e9e654812315468ae9c5fa
SHA1 238b369dfc7eb8f0dc6a85cdd080ed4b78388ca8
SHA256 37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08
SHA512 0815ca93c8cf762468de668ad7f0eb0bdd3802dcaa42d55f2fb57a4ae23d9b9e2fe148898a28fe22c846a4fcdf1ee5190e74bcdabf206f73da2de644ea62a5d3

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\mlib_image.dll

MD5 c03abac4822b06ca7f4bfa9d1ace3d44
SHA1 da8749639fb4e7bfc2020342a2aff26d622bc4a8
SHA256 ad565b5bf3c0f0bc18411fd9a7bf8ce7aa556444e8aa0ca38a66d5cec6fab05a
SHA512 021cd0bd6e326d5386abd483ac755bc5fa716486d97cc43cd17243984768c71450022499f05e6b79c2cd3770771c0fab13d332b5c4cd276b5239e083be5e7550

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\management.dll

MD5 37b0569971b26876e53c6de81a1b3f92
SHA1 b11cd13b385201dcfc0c0a493c4590975159b902
SHA256 24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b
SHA512 d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\lcms.dll

MD5 e5db8a41229567f4e690ddb742ca7629
SHA1 e814b3f0cc61bbc1345c111235a38473fc88b214
SHA256 b86e4fcf2c53bd7eb46c017d53a194c6b2224dfbed72bcfaa8a8825e4adb02e4
SHA512 f457e8111dc856422793af5068718fe078b1dcee3418c0bc4c7e965ac91e094241eb65bd4f1dca0cc7477c33146b2e32690deb99fda0f84d18ccafc5eee734bd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\ktab.exe

MD5 68815b6c76ed327d7bcbadfde57e16a6
SHA1 22cb9005419bf2af52fd50823ce16791dbaf740d
SHA256 a98dde45ac6ec2a9190d156a0d282908a08c08738878c1c87b863c3bb0561892
SHA512 de1cae42d5db8b9efcd1a53a187543f96dd9d4c77e1d9ac8ef6f67a7a518c139edf11b9df091c9817e31e4eb3288cf62bf0610357af930c4bd0e64fd49607708

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\klist.exe

MD5 6d5cde989983d225bd16397b342f93bd
SHA1 170904855f49308efeef76abcbecb1c70c9f38b2
SHA256 73a17f1679865cff81f3e049c21ce97f83c19ce208526c8b8aa08ba50a5b7ca1
SHA512 6103ab6c8f5596002ac52eabccaa578ec7af115d784592a10a7d520075aa71891ac793edd4b8c8d96f8744858e70441e02211cbc7a17d588734c7aa761c6fed6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\kinit.exe

MD5 e71812ce5d00ae92154553a95932f412
SHA1 956ac5a6127622b99dcf8e6e1256b0d7ec0d5a34
SHA256 bcc997dce7f72bf2a6b2be5d7fbec5c8de198cb0190d8389c2bd138495554c74
SHA512 a6308c24b13e3b41d587d00fd1e47cc69ceea2d733c1e9240051eea7b4f5e66d3c126a8e2d283420fd8bec256c37bbdbfa5dd4a9c009079a1d3a80492b497f48

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\keytool.exe

MD5 a8b499100141742fbb90089fe4c5f90e
SHA1 32dd5fdab96a6693c27c8b6cd8914ce213164336
SHA256 d6d2a0e5cdacdbfe30eb261204a019fbb835da0c7d42d5d4d935ac37077ac179
SHA512 8782c7abbf60a1ff773d742c8e831c186d5e79c9472fa291c11f827dbe5adb04f7b24045b54eb22bdf27a1accbbbc87458ab1f3dd37054d0f68a398809aa89ce

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsoundds.dll

MD5 c8f9ff0c99f21919edfa5cf51e5f3c5d
SHA1 09249700495e919468331d3c6a9a8eaece8858c5
SHA256 5e223ac8822e9fc8f991825f7df99b0c0246d01c77c3451f1a2997140580b1af
SHA512 36f318ea0c634ca2f47ccc7fff8ae388d5cf59c461589793eac55825115f0dd675ced98a2b73ca6db1bda4c0ad0f428812fa45dc7d9f5d6b66d539b9a0efec93

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsound.dll

MD5 920711e14ca19a8e13bb77e136b16bd6
SHA1 e1ccc066d8d4b1eb76d68baa64049b0b8db7e6f3
SHA256 cd3d2a4628feb4e855e2e8afd230804deadb59ace599d9a0b29dcae5b56d16d6
SHA512 758e74efb12067f9efe838c378b8b51fe065cd3cd7fd818ace46575a359819fc6e4cd1ee85b98a3c1fc134c6c045b00dcdeeb6c51ea7ce7b38091aaa56b280aa

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jsdt.dll

MD5 7df2c598323379d38e33e12770b41958
SHA1 97f5b6d7d2352369ed4b28a2eb8adbe0eaf64316
SHA256 6cdebb01148510979a8a67655d00d2dd9ebe9570161b076fef4967471f28ed4e
SHA512 93a147307a7088de7bd5948f77c7171a75b67d426d004d00e111633d9db1f7ba5f8aec60033fdb947ab6d3f5047eef9b3bab4effebf10c41885c857b95ae37a4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jpeg.dll

MD5 21a18357ab3ac03a9dba8ec492c69a4a
SHA1 cf778a77ae869d32bda9e8f07cf7cee184b9db45
SHA256 13f85ab5b740fcd03e4175b95c69a5b87cfc6fc1bea372c5172bf4f87ad55138
SHA512 7752a77e6575bd5e7aaeec565ff9bf1541a5772dc81d33a50bdb7163c577c4d0f1bc579d07375633b210df979b8caa822b28d9e752c2c601e3e3bc762fd08bce

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2ssv.dll

MD5 8a2f0ef26e972724690f000879164a6d
SHA1 5557293b3bf1aa8357617d3ea331c85a9d44bb24
SHA256 b0af9e8a496afc6fdd5633e3c30ce5ecddf4cab8947e0efb9fc4644707f4a53d
SHA512 a968aed422bc35891f6b140fa153aa95133ccfbd42daf2a96a8d809f51f499ced55f06b54b4aabf8ef89c56ab0101fb4f5b1b5cd1642aa7b12c1eb97669f01a6

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2native.dll

MD5 b85fa7bc2c2d32db3c4042fba6dfab3b
SHA1 2f72c178781ea9f9b549a407a2590f5255cc441b
SHA256 9831bbf5d60242dc2f26e61bcc9a92204e2a77d90b8a3e7af2103e23a339dfc9
SHA512 1eacbb61367d05b83fd6a0a5da561cafe975854d71d0be16aaa4da895707230c3d67a5ae07bedcd74423cfc72739c66041a86d002c0950b0c8e897aef9558883

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jp2launcher.exe

MD5 52dda94059a249603794d850fe6a8e15
SHA1 587834e0ca8670cfcb178f79564a4d17f21599a1
SHA256 d883c234227e4fa1d5d44bc7e40957e2aef1fe9aaf2b36c03f28f8a83de5656c
SHA512 9c6f04dc0a1aa3e0e619237a2a873e90d0f2223c8373945b0c5035b836083d10d7b6f50e1b4b51516ae5ba725a7281a7ed7a4d629aecbf2ab744fed533698328

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jli.dll

MD5 1ad845c9e59affa1f2feec8fc6315857
SHA1 4f7397b957956a7db66e31ee95e698b109cd04d0
SHA256 f62245ed37326a3a7fba6003a91a2c2baf816ea81286262f2772ecc4fb2042ac
SHA512 e1be782a292afeb9a34a051559ebe5670779a909b2c71e25dca883d87ded9fbe6d9000e695ccd45c965ace4fc8911e7951f616fdfdf1eebd93ab19b61dbf2c98

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jjs.exe

MD5 a649a3454c7a6b4a53ee5d771c2ab707
SHA1 04c49fb609982375ede216303f18abac14d0d4d0
SHA256 10211ee851ac482ae429349ca4b540508bc292dc92cce5d12f31318843fd2e75
SHA512 1b8f7153bf9ba5816267a88331ee9e9fda22c50db92a82fe652dedca23683b931858d60661f8637154a5bbd4a9a374386d5063b79f09f73e5e685e97d58f6376

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jfxwebkit.dll

MD5 4fe724800a23b7d74c3d6c5c1a080dd4
SHA1 8a47c02495f39188846d351cc28c7619af8f08e4
SHA256 fd2a9df5a7a2fa119ccc716f31eef577b396dbc070322f63635f1372834402ba
SHA512 915e5ae4312c6194ce203e1a4b123ee2d40623a57e63c8dc3f04f306135cbadd850c20b7649b35c66681945256a77cdc912ece8cd47d3e9ed77f38e2a8cdf036

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jdwp.dll

MD5 7a8d04f34af6ee50ceae3789e0cacbc3
SHA1 efb55b885b4dae389919f3cb5cadf7eebce62a63
SHA256 7a951fa676508723b79e3e206ad2e9a3b627f658b3078b92c8456b076caf6c2a
SHA512 5d2496cf8808965c5153dc0b5fb5467537e0ee4aad0b9e92e7c3dd352edba76d648e87e2da8a8f87da669298e8e5f3e69b380d3cba322eecf5b669bbc62b1689

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\JAWTAccessBridge-64.dll

MD5 a80d422ddf4449546f3decf01032a035
SHA1 cb85cae8d5aa5992a7a25ec6ce7799662d90daaf
SHA256 36281bee3a089620283cf8e85e9b839a004b48dc952b523949922612a2e35146
SHA512 d1e3e49140867eb89433c1e9a19a8ff489846ad79bfb278d4bea24ebed16efec09177962878be9a7057d51f52d29921e170f2fe308425de6d552f8f6cc4ce735

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jawt.dll

MD5 b7a1000a27c5774160ed66ff97c979d0
SHA1 192c06bafc5a45bd2f98e7c385853d255157afa8
SHA256 d4b402c9d2a6e662ae7219ae00eca9dcce94269aba73116c6af4e5812b384503
SHA512 83ba9b6737cd09053c047f8d8455bf950464347d0f80b060e5a08ba814752287c34c8428e1270bf02371441b604039fb6c144a87b57ee5566d75e1bfaeaf42bf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java_crw_demo.dll

MD5 213d33c3bc1c91c64c909acc951957f2
SHA1 f73ae3e39fc2bc815279ddf5e57536efd26e9427
SHA256 8b4f6d6bb6b5c015824c45a776f93ae700af7e8bc4c3f15c9e63dfa2fdb0ce3b
SHA512 82f07f611387a0aa7e1e1e8c2f73ae0ad1dc27a1443f369713d416db2055a4087dd73b5f8721643788a49b2937109bc73e9ba5e42631d483326316593973e06d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javafx_iio.dll

MD5 478670109cdd98a317fcf0a392735e8d
SHA1 c76913bc9dabe37b927a1857705705bbceab809e
SHA256 e8e102d6f1a07440d57f7b30ada46671562c1f22f31486e789a0dadcdcc0154d
SHA512 8d5e42947b655a4b6e25498a971135d3955890e6ead6eb9bfb425afa8b849b78a2642a38c94705efe13a493367235181a877025bfe18450d97d6c3e732f1994f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javafx_font.dll

MD5 857c873dd97fb776ab2a09a6bf1a0652
SHA1 a55d2db79bb903c2d3f78da1d7cfda141064590b
SHA256 7a2c11541e683483865c55d400f71704cfeb81a3d1ab222016cc4c8f3f8eed80
SHA512 e92a6e43d02724bebd7e2d1ee1c8d4eab5b2c55f1cb39d31c21311361a6c02b433d424ca32cbca2ab55437f3e2affa088e6742382e83f6c01421fee048220f41

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javacpl.exe

MD5 1cb69e18bbede1266da41f00d0a45cd2
SHA1 ce7e3f06f7e74c5ec367cc7c9fa3f0c38cd2f307
SHA256 1e3334f488b8fef03432d87640c31176c13ed817feda163d8b7288793a67f7b5
SHA512 a9d10cbf080daeb347164adf485d9420a94c8aaebec8f33f029a91ae5bf7ea8b1aecd7d76f87db00d9923cf5d78c8bb26c654f392412e4e36313cfa0e9e52aaf

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\javacpl.cpl

MD5 fcda3200760c9b36bdd60a251d330661
SHA1 4c4ee011714f08a0171173a9ccfcba63e68622de
SHA256 e6ea0fc7e1e43bd0e10a17c572ce43d71b3576863bf77f7085401c19f6f7792b
SHA512 8d7bf54c03e2a5c5d17ab22f3bc66f9dfc867916ee7f4eb3fe85e07480923c7a875b23019b691c862cc10f345e503da8ad95dcd09a44fa73ca9c2b458d55c55c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\JavaAccessBridge-64.dll

MD5 7f5215e9f978c38587339e017eddf273
SHA1 b3f131ca5a2517474099f02c79cc61dfe37064ba
SHA256 1c6f684bf75232e3f6b5f2f1f984741fa07cb07e2e335fb2b5b2d6b46c63c555
SHA512 14d3e61caef04491a319361007c9f2974dd94294331e651318bb7b9985980b2a11b8c520f6544016d0bae79027bbcfef5eca25720cfe71ce7483ecf7cc4da29f

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java.exe

MD5 c863273afd4c2ee6b2cbecde86ebe021
SHA1 b5f24ba94b910e30b511332f3a96729cb0a539d9
SHA256 093a4662d587079a9d73871b4b727d863d10280de9f49c5d12a1a7e7a239285f
SHA512 7bba04dadb70d8bcceac0a3e965000c2537369ad649adc90601a0aa0b555c97ee07011b86f600218681255f72ccfaf9dc6710168a21a33f5121ec45b55390760

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\java-rmi.exe

MD5 158cb66b1e636cf32d593c4d7db7e858
SHA1 7889ca20462fec79cfcef497639c037e99350a7f
SHA256 c5f85de246b91a4d295a49f23930b8475d92d493f1cb94bb6f6602b0599d6e1b
SHA512 d88621d98822b008cd60ee6977aaf2ad5834a9cb1ae6dcbc351a0bda976af8fb9baa0345841dff0e3d68cf5e8c528dfd0f89280bbc20c9b8d0b4b8697bf084b8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jabswitch.exe

MD5 b5cb189c19bd012180a757d8419fb36d
SHA1 2c5292f7bb2c851261f504de57d094c5ab36e333
SHA256 6b9db2995902e87e04c1123d9c1bb3893404cfd039de07499b778ea68b912fa2
SHA512 d41ca378edc86972efdae2f9222a6f8532c269299df961b047f41182f33d04128a445ffd0f72853306c89706c15817a1049d8fb9cf5f8ed0837b6be328982302

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\jaas_nt.dll

MD5 e9b3538e0c65eeda59c0314a43a5628a
SHA1 39dff196e5df61f669bc7c164c44241609dd3b95
SHA256 7de04d5c23a6bea207e61b8916e30a91051f0cad4ed03db1b434e7c6ea615ea9
SHA512 afcaa97ab18334bd13bcc61fde33cb8c6acacae6177ebcf2797638f55d8da6bc45a4c793ce5141b2e6a27017b512f9f9dd162eb719dc59010385fee9efc9cbf4

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\j2pkcs11.dll

MD5 d8e9609228a58f6ee0f2c65f0951da50
SHA1 88110286f8ccb34e590f2810d052b92063a29354
SHA256 1194b079a5f6722e643bf8dc7034515bb1428038172369203dd7c7f01535ce39
SHA512 6a8b8ba2f707dec2e1e8767b8319452e48bb722c832f1d7f4e0bc75a8217c5ab0a8a50d2f3ac61aa265085fd5ac7cfb7f6c9bb9ac4e06ed6c55706db293048e0

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\j2pcsc.dll

MD5 3122ed91712925c702c8485eda5d973f
SHA1 0fb2a7e7f93c77cb7c73b705376b5d9e25c02975
SHA256 45d59e544a4ce244ebe2259f339d2f8c9a0d5c08fec58e23e9eada3f6a97be42
SHA512 e7f6c27f333fe64d5ff1791fea5fce178bc7e5a4870ab2e875b387b8adf1143c2ba52311231daf28eab5dc8a79d63b53d6d59ceee283e2f482705b41e55c4b5c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\instrument.dll

MD5 ff77f28ced53c635eefbc89495753e5d
SHA1 cbe5a5487661a64f38e05f226241a8ddb84083df
SHA256 4bf36c2c0f485b767d59d204a91dbf4ceb06568ab86d092bb8041a22ac4fde78
SHA512 65079278158f3e9cab0854becc94fbbcebcb4ecc6f89f3a6fe173a4a378033a545f12d093a4760601e8d0ef7baf04f5679458d0e496099c748f26ea10c3480bd

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\hprof.dll

MD5 e6786f2ac8baf5e52815466cf7647bf2
SHA1 5d1fc0885a6ffde2803f8080696afbb3ebcda8c8
SHA256 aef5825bc6bcdd0787e9ad8a66130e7264adf809cf077ac5a4014a82c1e02ff3
SHA512 67cfabca24d232fd121df085fb04cac3ac9f256d26993e3ef2dee38972b58c132173fe1c577b726ead35b275864c578326c1fce14b0433bc9bec86266175f68c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\gstreamer-lite.dll

MD5 622fd8994d2a6c32e5d0806df7a074e2
SHA1 088c5848a407342474dc3b3b78a76b016ef9b06f
SHA256 1193c9770a37da882664096783040c3bab8b79ab8782beebf4b1a1ac438a2a7b
SHA512 44ba498e8fc1fe37e425c1637f4fd12ae1c974eb8a61e68126e3dc03fc1c3146398012ec1b07641496d08d7d4d685bc0414677d085a98774b18155c093bb9567

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\glib-lite.dll

MD5 f2179d1d0c374bf3021e3186892acacd
SHA1 0ac7054b9a46aeaae965aa5f6a9ee423e9fca1b7
SHA256 556272977bcbb95ce0583e0e022c703f099ee2c3f78c057e9b11fd6ca7227f96
SHA512 6c4a880b3dadf2a7e3c929024e514f58db0c90e5a0f87cde4c95ca6b3a32ecf9517058c0163550e1615ebbd2505a0217b5b7beef33376e08b969b9cdc0ee1bf8

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281_temp\jre1.8.0_281\bin\glass.dll

MD5 1bfe0ca4030a9b0652079802c5a8f065
SHA1 7487b68b6440265609eb1e181a3eb7e61f90376d
SHA256 3786c96847b57d25dac2244c179051a3e9dff6a698dcef6d25581b725a5bc1c4
SHA512 c2b4419447b693647be1f0c2345da3cc0cf8272720c9712726d89c95b759d44797c279e51f244dcc84805ba89e6b9055391a1b65540d84ed57da060a98cbd097

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

MD5 900d7fa750bfddfc160e1732470d305d
SHA1 fc5c9fa077eceb5886e3b88fc94ad08937f6387b
SHA256 f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e
SHA512 243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

MD5 b6eccb52a3c72e3359419bedac89ccad
SHA1 e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595
SHA256 c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d
SHA512 34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\amd64\jvm.cfg

MD5 499f2a4e0a25a41c1ff80df2d073e4fd
SHA1 e2469cbe07e92d817637be4e889ebb74c3c46253
SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
SHA512 7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\java.dll

MD5 949fc2c63994ec317abcccfc1452ef22
SHA1 41d496159e826e894988ad1dcca7918d10e793e5
SHA256 6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8
SHA512 26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

MD5 74198e9118b9b57592f08fed2380ddb6
SHA1 e5c6541d4a133d434192155f758b750a17a532c5
SHA256 a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458
SHA512 c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026