Overview

overview

10

Static

static

1

TLauncher-....0.exe

windows7-x64

10

TLauncher-....0.exe

windows10-2004-x64

7

Resubmissions

05-04-2023 23:31

230405-3hnf4acc21 7

05-04-2023 23:30

230405-3g82eacc2y 7

05-04-2023 23:20

230405-3bpetaab26 10

Analysis

  • max time kernel
    551s
  • max time network
    768s
  • platform
    windows7_x64
  • resource
    win7-20230220-es
  • resource tags

    arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    05-04-2023 23:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.879-Installer-1.1.0.exe

  • Size

    22.6MB

  • MD5

    601b94e3b018e39e0da90881fe89156d

  • SHA1

    dc5340d6e1cb98c6ae2fa6882a4c7284e990705b

  • SHA256

    845b0953c143daf9382b38c8ac7faeef62d5298bb0191f1be60865f78a942bac

  • SHA512

    493c283aa3e201501843e59d593d82b3c98d2628639c95c977c9f22c268d89f7b072907d7b5d244fb7f122348277a97f7d68ce0ebdb36d7fc479c5f3c5bd33db

  • SSDEEP

    393216:+Xj4yibrRbGPfs/dQETVlOBbpFEjdGphRqV56Hpkf+V4scTKAjENq+:+zCrRsHExi73qqHpg+Vvc+AmX

Score
10/10
bazarbackdooradwarebackdoordiscoverypersistencestealerupx

Malware Config

Signatures

  • BazarBackdoor

    Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

    backdoorbazarbackdoor
  • Bazar/Team9 Backdoor payload 9 IoCs
  • Blocklisted process makes network request 1 IoCs
  • Downloads MZ/PE file
  • Executes dropped EXE 21 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • UPX packed file 43 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 13 IoCs
  • Modifies Internet Explorer settings 1 TTPs 59 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 21 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.1.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.879-Installer-1.1.0.exe" "__IRCT:3" "__IRTSS:23652861" "__IRSID:S-1-5-21-3948302646-268491222-1934009652-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1716
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1072
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1841947" "__IRSID:S-1-5-21-3948302646-268491222-1934009652-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          PID:1520
      • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
        "C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:316
        • C:\Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe
          "C:\Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe" "STATIC=1"
          4⤵
          • Executes dropped EXE
          • Modifies Internet Explorer settings
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          PID:1928
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://java-for-minecraft.com/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1000
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1000 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:1824
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Blocklisted process makes network request
    • Loads dropped DLL
    • Enumerates connected drives
    • Drops file in Windows directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:492
    • C:\Windows\system32\MsiExec.exe
      C:\Windows\system32\MsiExec.exe -Embedding A8817124B1BB7196343253FCB246A75C
      2⤵
      • Loads dropped DLL
      PID:2508
    • C:\Program Files\Java\jre1.8.0_351\installer.exe
      "C:\Program Files\Java\jre1.8.0_351\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_351\\" STATIC=1 INSTALL_SILENT=1 REPAIRMODE=0 ProductCode={26A24AE4-039D-4CA4-87B4-2F64180351F0}
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Registers COM server for autorun
      • Installs/modifies Browser Helper Object
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2832
      • C:\ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
        "bspatch.exe" baseimagefam8 newimage diff
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2144
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/plugin.pack" "C:\Program Files\Java\jre1.8.0_351\lib/plugin.jar"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2696
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/javaws.pack" "C:\Program Files\Java\jre1.8.0_351\lib/javaws.jar"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        PID:2724
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/deploy.pack" "C:\Program Files\Java\jre1.8.0_351\lib/deploy.jar"
        3⤵
        • Executes dropped EXE
        PID:2776
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/rt.pack" "C:\Program Files\Java\jre1.8.0_351\lib/rt.jar"
        3⤵
        • Executes dropped EXE
        PID:2812
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/jsse.pack" "C:\Program Files\Java\jre1.8.0_351\lib/jsse.jar"
        3⤵
        • Executes dropped EXE
        PID:2888
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/charsets.pack" "C:\Program Files\Java\jre1.8.0_351\lib/charsets.jar"
        3⤵
        • Executes dropped EXE
        PID:2932
      • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.pack" "C:\Program Files\Java\jre1.8.0_351\lib/ext/localedata.jar"
        3⤵
        • Executes dropped EXE
        PID:2972
      • C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\javaw.exe" -Xshare:dump -Djdk.disableLastUsageTracking
        3⤵
        • Executes dropped EXE
        PID:3016
      • C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\ssvagent.exe" -doHKCUSSVSetup
        3⤵
        • Executes dropped EXE
        • Registers COM server for autorun
        • Modifies registry class
        PID:2940
      • C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe" -wait -fix -permissions -silent
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:3024
        • C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe
          "C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_351" -vma 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 -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:1992
      • C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe
        "C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe" -wait -fix -shortcut -silent
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:2712
        • C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe
          "C:\Program Files\Java\jre1.8.0_351\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_351" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxkZXBsb3kuamFyAC1EamF2YS5zZWN1cml0eS5wb2xpY3k9ZmlsZTpDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxzZWN1cml0eVxqYXZhd3MucG9saWN5AC1EdHJ1c3RQcm94eT10cnVlAC1YdmVyaWZ5OnJlbW90ZQAtRGpubHB4LmhvbWU9QzpcUHJvZ3JhbSBGaWxlc1xKYXZhXGpyZTEuOC4wXzM1MVxiaW4ALURqYXZhLnNlY3VyaXR5Lm1hbmFnZXIALURzdW4uYXd0Lndhcm11cD10cnVlAC1YYm9vdGNsYXNzcGF0aC9hOkM6XFByb2dyYW0gRmlsZXNcSmF2YVxqcmUxLjguMF8zNTFcbGliXGphdmF3cy5qYXI7QzpcUHJvZ3JhbSBGaWxlc1xKYXZhXGpyZTEuOC4wXzM1MVxsaWJcZGVwbG95LmphcjtDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGxpYlxwbHVnaW4uamFyAC1EamF2YS5hd3QuaGVhZGxlc3M9dHJ1ZQAtRGpubHB4Lmp2bT1DOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzUxXGJpblxqYXZhdy5leGU= -ma LXdhaXQALWZpeAAtc2hvcnRjdXQALXNpbGVudAAtbm90V2ViSmF2YQ==
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          PID:2860
    • C:\Windows\system32\MsiExec.exe
      C:\Windows\system32\MsiExec.exe -Embedding 051BD251C727F46318B13703B24D0331 M Global\MSI0000
      2⤵
        PID:3324
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      PID:2476
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
        2⤵
          PID:2544
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1428 --field-trial-handle=1408,i,2558925318541084807,14284931703455133851,131072 /prefetch:8
          2⤵
            PID:3128
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1132 --field-trial-handle=1408,i,2558925318541084807,14284931703455133851,131072 /prefetch:2
            2⤵
              PID:3120
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe"
            1⤵
            • Enumerates system info in registry
            PID:2756
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
              2⤵
                PID:2816
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1380 --field-trial-handle=1372,i,11388667258794678149,7828847495873681858,131072 /prefetch:8
                2⤵
                  PID:3168
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1208 --field-trial-handle=1372,i,11388667258794678149,7828847495873681858,131072 /prefetch:2
                  2⤵
                    PID:3112
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                  1⤵
                  • Enumerates system info in registry
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  PID:2796
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
                    2⤵
                      PID:2900
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1508 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                      2⤵
                        PID:3152
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1404 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                        2⤵
                          PID:3144
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:2
                          2⤵
                            PID:3136
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2256 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:1
                            2⤵
                              PID:3916
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2236 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:1
                              2⤵
                                PID:3856
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1148 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:2
                                2⤵
                                  PID:3816
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1332 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                  2⤵
                                    PID:2780
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1328 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                    2⤵
                                      PID:880
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3844 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                      2⤵
                                        PID:4048
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3716 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                        2⤵
                                          PID:3100
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3744 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                          2⤵
                                            PID:2220
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1044 --field-trial-handle=1392,i,8166745560877290089,4531054336952227841,131072 /prefetch:8
                                            2⤵
                                              PID:2172
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                            1⤵
                                            • Enumerates system info in registry
                                            PID:2460
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
                                              2⤵
                                                PID:1520
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1364 --field-trial-handle=1280,i,439699384912495477,13903309678200281298,131072 /prefetch:8
                                                2⤵
                                                  PID:3080
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1064 --field-trial-handle=1280,i,439699384912495477,13903309678200281298,131072 /prefetch:2
                                                  2⤵
                                                    PID:1924
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
                                                  1⤵
                                                    PID:284
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef3f19758,0x7fef3f19768,0x7fef3f19778
                                                    1⤵
                                                      PID:1600
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                      1⤵
                                                      • Enumerates system info in registry
                                                      PID:2096
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1176 --field-trial-handle=1204,i,14261734496326409037,6747786522526761474,131072 /prefetch:2
                                                        2⤵
                                                          PID:3088
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1372 --field-trial-handle=1204,i,14261734496326409037,6747786522526761474,131072 /prefetch:8
                                                          2⤵
                                                            PID:3096
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                          1⤵
                                                          • Enumerates system info in registry
                                                          PID:2492
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1420 --field-trial-handle=1404,i,15327697025127501152,12772468336154108832,131072 /prefetch:8
                                                            2⤵
                                                              PID:3176
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1120 --field-trial-handle=1404,i,15327697025127501152,12772468336154108832,131072 /prefetch:2
                                                              2⤵
                                                                PID:3104
                                                            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                              1⤵
                                                                PID:3532

                                                              Network

                                                              MITRE ATT&CK Enterprise v6

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              • C:\Config.Msi\6f07f1.rbs
                                                                Filesize

                                                                926KB

                                                                MD5

                                                                278995fbada6ecc146a7d5d3a3d29e85

                                                                SHA1

                                                                e908d1c185e4cdaf89cc02be9253ebe2369ed576

                                                                SHA256

                                                                9c2fa826c49aa12fdb45dae96e8313cc72f9f376e9c16ff78f36118c6980132e

                                                                SHA512

                                                                a859a85c8325e70ca262625156b73d671d4473d34821b4cc1392ca70c18f8f141bcac6ae1aab1cf76de7cd1ee101d205ed02721520c9c2e2d9f06dcaf6404a5e

                                                                Download Submit

                                                              • C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\npdeployJava1.dll
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                ff91ac355dc6b1df63795886125bccf8

                                                                SHA1

                                                                90979fc6ea3a89031598d2146bf5cdbbb6db6b77

                                                                SHA256

                                                                14b30467cfea0071dffc658dd31b8a25b7b4e79608933f171911c2cba6aa9a0a

                                                                SHA512

                                                                77aa8c7930730004bdb8d49a82712e1042db978102f6eca0d38317b6fd98ef03e52279130eadc7a0da1148e759db6589f7f8334d4c2eccfb2613e8f19542e197

                                                                Download Submit

                                                              • C:\Program Files\Java\jre1.8.0_351\bin\javacpl.exe
                                                                Filesize

                                                                103KB

                                                                MD5

                                                                7a9d69862a2021508931a197cd6501ec

                                                                SHA1

                                                                a0f7d313a874552f4972784d15042b564e4067fc

                                                                SHA256

                                                                51ff63cbac78bd133333e98d91b02b652c88cd57cedd0052519051a17be77856

                                                                SHA512

                                                                5c331e6deefc8256ea203d63770484f6b485d4c3832a60ecf4a540dff3cb75a76dbde37980fe1763ca487401b68126f58f8d1a4c72ee610f5144c624c4736850

                                                                Download Submit

                                                              • C:\Program Files\Java\jre1.8.0_351\bin\javaws.exe
                                                                Filesize

                                                                446KB

                                                                MD5

                                                                24ccb37646e1f52ce4f47164cccf2b91

                                                                SHA1

                                                                bc265e26417026286d6ed951904305086c4f693c

                                                                SHA256

                                                                adf2d659c2b2a4afff1ca58f3a742d27d767d27eabeca6a8b6ee243e9c913a39

                                                                SHA512

                                                                cb174e7a219f6ffae3715e37beb428979bc1462202729c05a25fa7b8da90e2dd6faa92c03cd9ca21567d354dce7acc1852669f4071298e953d6a286243794e32

                                                                Download Submit

                                                              • C:\Program Files\Java\jre1.8.0_351\bin\unpack200.exe
                                                                Filesize

                                                                216KB

                                                                MD5

                                                                691f68efcd902bfdfb60b556a3e11c2c

                                                                SHA1

                                                                c279fa09293185bddfd73d1170b6a73bd266cf07

                                                                SHA256

                                                                471d70ebf91bdc762dcacbea9f6ca883f97921938e83269fef911dbf83598a70

                                                                SHA512

                                                                a4816ae0654f41bd130d56e44839d9f29ab48bd2f99c3d6db38ce3358ac46c1cef09da09184c6291dd378018a49f9e56173c35d780d3eaefcce459592c75de3f

                                                                Download Submit

                                                              • C:\Program Files\Java\jre1.8.0_351\installer.exe
                                                                Filesize

                                                                130.3MB

                                                                MD5

                                                                1b7d3a2eb4a3893ea7fec68dbcc09a81

                                                                SHA1

                                                                5abe3f871f41d9226f6b330e0d76f4aeb4987891

                                                                SHA256

                                                                75fe10b94b9570bff04d8440340bead917ce46fc20f0a9795bca73053c3aa5d5

                                                                SHA512

                                                                b834ec60c4fba13e1065d248bede905f386e92207d91a2e1c7465eddc9767a5b0d27f49b19cdf64b241dcb7664ef5976f9367c90b10ff2ea7adb281e6aaf7953

                                                                Download Submit

                                                              • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Documentación de Referencia.lnk
                                                                Filesize

                                                                197B

                                                                MD5

                                                                b5e1de7d05841796c6d96dfe5b8b338c

                                                                SHA1

                                                                c7c64e5b35d0cca1a5c98a1c68e1e5d4c8b72547

                                                                SHA256

                                                                062cb9dec2b2ce02c633fc442d1a23e910e602548a54a54c8310b0dde9ae074d

                                                                SHA512

                                                                963a89b04f34bc00fea5b8e0f9648596c428beac2db30d8b0932974b15c0eb90b7c801ba6fa1082ea9d133258f393ae27e61f27fd3b3951f5c2e4b8c6a212c2d

                                                                Download Submit

                                                              • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Obtener Ayuda.url
                                                                Filesize

                                                                182B

                                                                MD5

                                                                7fadb9e200dbbd992058cefa41212796

                                                                SHA1

                                                                e2525d7ba66bb07bc1cd5ba93f88c54e7e2042b4

                                                                SHA256

                                                                b05abacd15117b1ffcd2a288308f50c0542214d264b852eddfa9025307ac401b

                                                                SHA512

                                                                94b7bf1f1f5cea2a74f8c326113dd25652cb14e5fa356ac83d16b6ac5a5cac26c9d2b20259f5c2cf8ebc1e022490511e2996335a5d8dd7f5b64dce429fb6dfb1

                                                                Download Submit

                                                              • C:\ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
                                                                Filesize

                                                                34KB

                                                                MD5

                                                                2e7543a4deec9620c101771ca9b45d85

                                                                SHA1

                                                                fa33f3098c511a1192111f0b29a09064a7568029

                                                                SHA256

                                                                32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

                                                                SHA512

                                                                8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

                                                                Download Submit

                                                              • C:\ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
                                                                Filesize

                                                                34KB

                                                                MD5

                                                                2e7543a4deec9620c101771ca9b45d85

                                                                SHA1

                                                                fa33f3098c511a1192111f0b29a09064a7568029

                                                                SHA256

                                                                32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

                                                                SHA512

                                                                8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

                                                                Download Submit

                                                              • C:\ProgramData\Oracle\Java\installcache_x64\7289255.tmp\diff
                                                                Filesize

                                                                50.4MB

                                                                MD5

                                                                926bc57fb311cc95bcefa1e1ad0ce459

                                                                SHA1

                                                                8c43b4d7aa223eaf9c73c789072545da0b2c55df

                                                                SHA256

                                                                9ccf1e30069b4781362f85c4a30993d86da99f211c2aaad4447ad051cc61600a

                                                                SHA512

                                                                216cb6483598960f5aea83beeb37fa700d047352d0b3c6c2405a7ee668554e0ab15358c178a6a2fc8c067f4177a0452cde93783797c15fccf224e640715f0743

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
                                                                Filesize

                                                                914B

                                                                MD5

                                                                e4a68ac854ac5242460afd72481b2a44

                                                                SHA1

                                                                df3c24f9bfd666761b268073fe06d1cc8d4f82a4

                                                                SHA256

                                                                cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

                                                                SHA512

                                                                5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                61KB

                                                                MD5

                                                                e71c8443ae0bc2e282c73faead0a6dd3

                                                                SHA1

                                                                0c110c1b01e68edfacaeae64781a37b1995fa94b

                                                                SHA256

                                                                95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

                                                                SHA512

                                                                b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                61KB

                                                                MD5

                                                                e71c8443ae0bc2e282c73faead0a6dd3

                                                                SHA1

                                                                0c110c1b01e68edfacaeae64781a37b1995fa94b

                                                                SHA256

                                                                95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

                                                                SHA512

                                                                b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
                                                                Filesize

                                                                471B

                                                                MD5

                                                                e196f61f805bfeeb85f489d617188875

                                                                SHA1

                                                                207ac5e6c0179577dff11ed4986e5b9662b9cde7

                                                                SHA256

                                                                4db0736220a2c5f928e59097a554a4ab5d745a0b42e6a23d2aa806cccc397639

                                                                SHA512

                                                                5959b4623dd5f5b05a43f456626b32b281d55cd6fa8fa1f211041ce32d91764ec78e08e0c6e0ee18d44b356897e48be103d46d33ade02aabddca167410508524

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                a266bb7dcc38a562631361bbf61dd11b

                                                                SHA1

                                                                3b1efd3a66ea28b16697394703a72ca340a05bd5

                                                                SHA256

                                                                df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

                                                                SHA512

                                                                0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
                                                                Filesize

                                                                252B

                                                                MD5

                                                                b6559eb8881a4cec15ab55254f779733

                                                                SHA1

                                                                ef390479e188e0b7c9977c1146d05d0d7f6e92f6

                                                                SHA256

                                                                c0cbe2c4a2df6141ae6548f5d92649894c00409837da8d5562cb20b42d38b578

                                                                SHA512

                                                                021ca3b0436dc5cb4f1d5b97d5d2190a5992bdd2a2cd4b8b89a89f9767bd61161970cb12a3a1d33b00d33cb6453e247553f10012adb46efed10dc4d21ebd014c

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                342B

                                                                MD5

                                                                e8d049380d86b42e5d853a3b2e465544

                                                                SHA1

                                                                11243aef9b7300bd08c2ad691e68eaf399f99774

                                                                SHA256

                                                                541ce093736d491bf10e060b551dcaabe681e60db5238b8dcf3d8bc734cfc6ec

                                                                SHA512

                                                                fd4f78d5f8c2794037176630e92b8de192d6d33dac479139b825f031a675df46e67f60cb4a13fcc74399bd97294498ecac86a5f592d11103306207fb8c68b9aa

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                342B

                                                                MD5

                                                                ebb2696ffbe553b5f5143f6a94ad806a

                                                                SHA1

                                                                48e9ad890bb39fcff2f955ffb13646c563aa91d3

                                                                SHA256

                                                                3d253df3f0ffb5277ba3a41958f28c32b58d61b28a3e3dc7d374d90c97f25de1

                                                                SHA512

                                                                6cbe7b80713dbf25ac3a80f85136bf929a06af655a1eccbf62131b0cd48757ecd8d5b728460b1bdf46471c2fc19f879395683600c7133a33f339ca7f4188c45a

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                342B

                                                                MD5

                                                                3c2d6054ab843fdf03b1b17fddb8ac46

                                                                SHA1

                                                                bba6f9e194ccdbabbde03784dfcfa5db63984c43

                                                                SHA256

                                                                ee4909e6f737b071079a53fd94e3b996d5cab596b637f141d29e5f0ad62457e9

                                                                SHA512

                                                                2830b070615599d5e85dd68eedc2f832cc7e23a6045380b18a53fffa5ac210baccd22e7802c3a57d607ee870b68183fb0b6b7e96d52b6573c061f327fc516783

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                                                Filesize

                                                                342B

                                                                MD5

                                                                51dc70275583db333d9c986492e04c0d

                                                                SHA1

                                                                4d6babcb604ffafbb8d0a8eb2732080a3217650d

                                                                SHA256

                                                                ef44043cd01b8c5f2549537204c9ac806d992a371e649e319ce454173916449f

                                                                SHA512

                                                                a3d8adbe9ddbeba697e4120a00050ef331e060566042a1c9b875338eebd7e948a9a78594ffa7f1334decc30a0567166169856d0355cef7d08ff30007d9c25e5d

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
                                                                Filesize

                                                                400B

                                                                MD5

                                                                4b1821cc1966850cfdab64f40f6c128f

                                                                SHA1

                                                                a6e0b3d3f98db859c695b04e7c454ecc5a90792a

                                                                SHA256

                                                                627b48ab66204ff9eaa9d2c08b42a41c940fafec1f9489e18a0460f5384424fb

                                                                SHA512

                                                                71290258cb7e4be01e6eebbeb3d1844aaa66cfbdecd903a67ade9c9f8eb7f8570772e8795d8450956275b874724980c7d6061350c99789d77004d3d0827949b8

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
                                                                Filesize

                                                                242B

                                                                MD5

                                                                3726682ff35808f8503ef710b6f3f314

                                                                SHA1

                                                                9f6e882203d0865113f1daafeaf3d0d4751f30a5

                                                                SHA256

                                                                141839a37da8cded75a3f0c6d32092a55f578822b1a73dc59108c282e109e26f

                                                                SHA512

                                                                fda55c52543e39ff292f01cd411128d9ca8dcad04cd1a4855c0988c4e6c01d6b7e0cee3c144caa8efa70380eeafefee0a35727ad47cbdaaeb839e4f638a19c80

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_351_x64\jre1.8.0_35164.msi
                                                                Filesize

                                                                81.0MB

                                                                MD5

                                                                1794aaa17d114a315a95473c9780fc8b

                                                                SHA1

                                                                7f250c022b916b88e22254985e7552bc3ac8db04

                                                                SHA256

                                                                7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4

                                                                SHA512

                                                                fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\LocalLow\Sun\Java\jre1.8.0_351\Java3BillDevices.png
                                                                Filesize

                                                                11KB

                                                                MD5

                                                                b3c9f084b052e95aa3014e492d16bfa6

                                                                SHA1

                                                                0e33962b2191e7b1a5d85102cdf3c74fcd1254e4

                                                                SHA256

                                                                a68ddd67f6fcb0bbf1defa0778ee543e92c1074c442197ab623f733cc6285948

                                                                SHA512

                                                                06f51ac2962a0ec5f05ad6c90a2ba85b851d1fa2f0c079dc264fe930316cead959f68f6e34ff591b131867b482c266ac42400b06385dae712637ff0a90f902d4

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4d501d96-4d8b-4eb7-84d2-a3888b9158d1.tmp
                                                                Filesize

                                                                71KB

                                                                MD5

                                                                b6c5c32258bee2c8cfea78752736cab5

                                                                SHA1

                                                                063197bf8ed4c462744d17692e1749a986aaf2dd

                                                                SHA256

                                                                4adaad8c6ae58411aea9ecf92d11ff0c3ae9edeadc92917eef5b8fb02b3f6d06

                                                                SHA512

                                                                afc41c3bf5c629e848403cd47f9ad6190ad36d039a164998a1bbe3b69c179de578c896d4b79eb2e33f61ad9b698e0db9a9e1d3a9c2e63ecf0c1b12671bb09d8a

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\50dc19b0-e035-4e0c-ad78-b418fb18ec5e.tmp
                                                                Filesize

                                                                71KB

                                                                MD5

                                                                3a9bcff5419b000dcc3de811c36e4f06

                                                                SHA1

                                                                2a7c28267487b11a5e4df5892c520ef6d162f55f

                                                                SHA256

                                                                62c9b9a5ab696cf7994e7cdc6304758a20b4c051331376df58b50b5244bdb66b

                                                                SHA512

                                                                7c09149b32c95a9275187ff73db2b3e9c857c05a8957f73986d555982c3778e6be97f437fdf9ce2a404d26f95b1deffe2ca9eafc2bd09cae19a1a2ebaf709e0b

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                Filesize

                                                                40B

                                                                MD5

                                                                c6e4431d295a1842fea0a903fba97f96

                                                                SHA1

                                                                b61072829b60b8e757f84812d1e44ce318b8eb12

                                                                SHA256

                                                                775ba22acda7362b3b8913914d10b3df1610e9ef9e11619c36c6607811bc9f93

                                                                SHA512

                                                                15761feea1df597afc51529909961187188ce64601193513ecbe41bc8b22fb5877d48a8ce85ce45fb874c8ac51049bfb1eb6cff16164104bc53cbcc38737f5b0

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT~RF76cd20.TMP
                                                                Filesize

                                                                16B

                                                                MD5

                                                                46295cac801e5d4857d09837238a6394

                                                                SHA1

                                                                44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                SHA256

                                                                0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                SHA512

                                                                8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                                                                Filesize

                                                                264KB

                                                                MD5

                                                                b57eaed62d0e2eb3a12084f944087912

                                                                SHA1

                                                                72c3aaa6e2f81e805a32802ff70ef273b9d7eb15

                                                                SHA256

                                                                51b880e23fc3ea6f067a4c354d82aac049e189f8f902ee72ca6dee68ab4379cb

                                                                SHA512

                                                                04cfcd7c1e51a955e130bba7574db3367687bcc26bae7a584fc66048db596e81ee73c518145014391b72e13354e01b66de203f3df988283aa85a3115ed10ebd7

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                Filesize

                                                                1014B

                                                                MD5

                                                                b743f73896d24d8c11bd23881e9fef39

                                                                SHA1

                                                                e8e1bdb890d4dad1b2da1868f9fd9509118636a4

                                                                SHA256

                                                                197371c4d03dbc5d587efe344a9ca0dae4b7b5577f21e3f9961d256a715f3a54

                                                                SHA512

                                                                d6d37be96bd15b6f5dab833f644ae1728daf98ce42cd7065e8ab7579d0d62eeeb56e95d1dea6f93d35820210db45d66af4143d2c139400db822efa4043e15b79

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                Filesize

                                                                4KB

                                                                MD5

                                                                27cd32f621b57bf9aec27d3e1cc99886

                                                                SHA1

                                                                34360321d8256b7da721c531a859646d60aaa224

                                                                SHA256

                                                                9972e9ece33fce51362d329adab7a3f1ac23e5cfc56ad7a6bebbdd5d8a160948

                                                                SHA512

                                                                812c62c7efe344b717142e7baa8a2ff47800e7eb5d84755521d7f3caa27d6945ceb2ecadb82b97c3f4fce75e70abe11997a797252ee5a50e71ea76677d7333dd

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000004.dbtmp
                                                                Filesize

                                                                16B

                                                                MD5

                                                                6752a1d65b201c13b62ea44016eb221f

                                                                SHA1

                                                                58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                SHA256

                                                                0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                SHA512

                                                                9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\dc98023c-7ca3-435d-b0de-09dc7030c898.tmp
                                                                Filesize

                                                                4KB

                                                                MD5

                                                                21e7570f76e5b8f768eccf2c14663728

                                                                SHA1

                                                                c9cc0b667d6ff61e5b1051aab2d57973e40cb182

                                                                SHA256

                                                                c9cd3afe94a210011fbabef18b6148b67ed800c6c8ff00bbb691faa0c29e8fec

                                                                SHA512

                                                                8bd6dfff3141dbd8e0116506513bd3a4a11288cd05cdcad2b6f15cdaf7e66afa449483c1eea0bc43fedf56386686db08ad4a4837e0d6aa8f37a2450180365334

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                Filesize

                                                                71KB

                                                                MD5

                                                                68c70a899809c1fbd62fe0e50af1e61b

                                                                SHA1

                                                                82b8ea8eb7f4ccbbb64d6304449d109f14fb912a

                                                                SHA256

                                                                a3827f615c3582e35fa7e96ba789f131dbcf0a2bafea55ce0bc384f95a7dfe0b

                                                                SHA512

                                                                b95b26028604f162a9a3a67bdb820dadbc18a1e0290d90066b013154b9c87be9c77f6ae9d2a28c89f0dc003b47d6baf4c26acd897661d62fca011f8871098467

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\aaf8a630-c477-40ec-80b6-d2a3d73d8654.tmp
                                                                Filesize

                                                                71KB

                                                                MD5

                                                                4acc6e7738a2e5bd435af059154b4f71

                                                                SHA1

                                                                b928569533e76668c195a9abaa425cfe7fba12e1

                                                                SHA256

                                                                32245339eb3ed4bcdea94fff890902589e9ccb8547ee62e44bd7ee52314af761

                                                                SHA512

                                                                9270b49950a3444a41a70d620115a22e0f9edf7295890198513e324f9a401966f2d717ecb7256bd695111971938d4a65e9d87031e2b0ea2d581c5dcede832872

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e6b77870-19cf-42fb-8e2d-2feddb832427.tmp
                                                                Filesize

                                                                71KB

                                                                MD5

                                                                c30fa8ef4dbfc716ccd2e1df31a12453

                                                                SHA1

                                                                03e23c58399f3c59b6b7be2d9cc9391b17d93344

                                                                SHA256

                                                                16dee782728fff1b23f0ad846bb224409cdd725cf71515f50ca873bd58b51f5f

                                                                SHA512

                                                                b90bdda7370e52215d722ae3bcfb676f0cb3b0956251b0e808a85066eef575200051158c43b1c29c4fbbb4a28709431a0d92817fba2771c926ba78951584362c

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\idyde9r\imagestore.dat
                                                                Filesize

                                                                32KB

                                                                MD5

                                                                4c6d8bad082568f9b3eab0162375de9b

                                                                SHA1

                                                                5debf5ee730efc5b0fa95cb2968884aef6ea17d6

                                                                SHA256

                                                                5631c7d070f001bf46162e758708d94e385562e6b23ddc2859f5e6c3e3482646

                                                                SHA512

                                                                5732fef9c7bc7f85bf43fe8e9bb2c492f1c3626f53cfbc544d0507610837e703176f5776c56c19dd4d2bbbd0980da964af5ac32ff0f8a904ff3c1b901e16de99

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AFOBZ3YS\favicon-196x196[1].png
                                                                Filesize

                                                                28KB

                                                                MD5

                                                                a75485f99fd7e589f7a784e87c0eecf7

                                                                SHA1

                                                                389cc19d374a79ad9779fc0b4165a36b84d55554

                                                                SHA256

                                                                d38a40b5fe5403a5b6d0a3f6892c99718b31c9a62d3287c1c7292d7ed36ba44a

                                                                SHA512

                                                                3f594a05e0e6809d47bb1c3d016ae0374b452c0fc6d44f27bc8be447f4dbccdd795e67b5e5356356732708b3ddbf65e1b9479fdddd1ba965618dfa6eed93e11d

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIMPJA9E\suggestions[1].es-ES
                                                                Filesize

                                                                18KB

                                                                MD5

                                                                e2749896090665aeb9b29bce1a591a75

                                                                SHA1

                                                                59e05283e04c6c0252d2b75d5141ba62d73e9df9

                                                                SHA256

                                                                d428ea8ca335c7cccf1e1564554d81b52fb5a1f20617aa99136cacf73354e0b7

                                                                SHA512

                                                                c750e9ccb30c45e2c4844df384ee9b02b81aa4c8e576197c0811910a63376a7d60e68f964dad858ff0e46a8fd0952ddaf19c8f79f3fd05cefd7dbf2c043d52c5

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\Cab3FB.tmp
                                                                Filesize

                                                                61KB

                                                                MD5

                                                                fc4666cbca561e864e7fdf883a9e6661

                                                                SHA1

                                                                2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

                                                                SHA256

                                                                10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

                                                                SHA512

                                                                c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\Tar829A.tmp
                                                                Filesize

                                                                161KB

                                                                MD5

                                                                73b4b714b42fc9a6aaefd0ae59adb009

                                                                SHA1

                                                                efdaffd5b0ad21913d22001d91bf6c19ecb4ac41

                                                                SHA256

                                                                c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd

                                                                SHA512

                                                                73af3c51b15f89237552b1718bef21fd80788fa416bab2cb2e7fb3a60d56249a716eda0d2dd68ab643752272640e7eaaaf57ce64bcb38373ddc3d035fb8d57cd

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\TarF88D.tmp
                                                                Filesize

                                                                161KB

                                                                MD5

                                                                be2bec6e8c5653136d3e72fe53c98aa3

                                                                SHA1

                                                                a8182d6db17c14671c3d5766c72e58d87c0810de

                                                                SHA256

                                                                1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

                                                                SHA512

                                                                0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                Filesize

                                                                116KB

                                                                MD5

                                                                e043a9cb014d641a56f50f9d9ac9a1b9

                                                                SHA1

                                                                61dc6aed3d0d1f3b8afe3d161410848c565247ed

                                                                SHA256

                                                                9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946

                                                                SHA512

                                                                4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
                                                                Filesize

                                                                339B

                                                                MD5

                                                                a45137507477ea159a4c0481fadbdde8

                                                                SHA1

                                                                772e535525cd41abb781167334f923f1127f6d24

                                                                SHA256

                                                                fcc6693f94f87dbb9f03bd664f029db87257c79ac9a974d2caadc790f20ea67a

                                                                SHA512

                                                                393a8d9387b388524fbf7bc8387d521c830e7d384aabe278251cb4fa1291d32e2875c464a01f93670259bc2009d69507b632a692d43244f3eb7551414c9d635a

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG
                                                                Filesize

                                                                644B

                                                                MD5

                                                                f54bbaadafacf2ed607c2b44e76bd5f2

                                                                SHA1

                                                                e6e313e86b0adb771643dc9aa465652646d83329

                                                                SHA256

                                                                2dcd3efb7e14a1439973b066c810eb3187cb851a7d01b2a03376d978b6b0d927

                                                                SHA512

                                                                1d7f940d290c3c7eca12739f7e4753901a1d070ca9f43171b4fe25530ba48b3b376c16b125a32d6e701d63d576ef829824472bcac99e568784543bfc4c50b732

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG
                                                                Filesize

                                                                40KB

                                                                MD5

                                                                4f71465fa9fcc2f321a1e934f214ac33

                                                                SHA1

                                                                38c9f15f23e4e5158b04c2eee54d0fcc8104405a

                                                                SHA256

                                                                ea29ba222b5c2c2f13a71314ae449fca748e96343a6d1520140a9534df57cda0

                                                                SHA512

                                                                6f151ae73b3ef807a3397cdb57820a839f77923320951bfef09c0efcab84e3fbfbe02dfe71e912b7d1b36ea78bf70c254a0015227fa5dbf861f40551fd0e1645

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG109.PNG
                                                                Filesize

                                                                2KB

                                                                MD5

                                                                c70b569d43f5e00ee3dd81530899f191

                                                                SHA1

                                                                38b7f73c29d9d355625bf7dcc611d657c263dbc4

                                                                SHA256

                                                                778c8b5a8e7422ce84f4113fc1cbd90204f3b3c0b3bb8545b3fe68003525e9e8

                                                                SHA512

                                                                f0aafa93ffd1edb8764f7e435fa982b0eb596b1962472dcefac26731382c58d44306e876f04675146595a1e7ee6ae8170e2fa01ed0fca075e36a9749709f4df7

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG112.PNG
                                                                Filesize

                                                                2KB

                                                                MD5

                                                                ea8671ae7652a011ca93335e37030ed6

                                                                SHA1

                                                                7886057cbba7b2560c09cc1e51448ba8e6c8554f

                                                                SHA256

                                                                c64ee09ac910430af3e13e6870390e5732e04b5b2094deaa5a951d2791c64358

                                                                SHA512

                                                                4d699a4c2c4e1c8afd174f0403a171c11efcdc5cd294cf3cad3aa8207ba9b500b8b7cc83458d6a3ab849579f6cbb1542d8397435703f71a602dbe7fe72197da7

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG
                                                                Filesize

                                                                280B

                                                                MD5

                                                                01e097a324673878a3cb5e8e0f3cf152

                                                                SHA1

                                                                35ef5c438eca9672c7ee19bcde3952f83dc77928

                                                                SHA256

                                                                d8d0719a20d267a73d298d2ec1fbc050fe2ce25447c7441058ea3966acfbbb22

                                                                SHA512

                                                                e873763e96b3a52fe73f3fc9b3bcfd764c807c0206b5984d5f7dddd7debec4e6f0b6705ca6a7c6379b83c2fea792d7a16880ea109469ac1af41cc7bdb5f96e27

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG22.PNG
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                362d3183b2acc152c99ec123611f3297

                                                                SHA1

                                                                3db69a12917cb11a14fb9294d73c5409fe11a398

                                                                SHA256

                                                                8ae66727c5c92ca76a131aa104cc126858e8e3ed490ae08482109dfedd9a8cda

                                                                SHA512

                                                                2c7f40564479d1fe90cb59b4b413e8bf9a5bb7cd2f94193f8759e376549c0269afce030df7d306b4cd814f604ad460d744fb00d961f6d2608a4ecb6b186a4f1f

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                                                                Filesize

                                                                281B

                                                                MD5

                                                                d88e18e2a020a756a8de999b76e7b1fd

                                                                SHA1

                                                                150f801600b9427039197847aaac784f8ba15258

                                                                SHA256

                                                                38b8f2202a5e48a8f528708922f504379896ef52b3882ce82efc3481c51804bb

                                                                SHA512

                                                                d048a569d155aa4636f25ed2963fd5e2234643735ad461df3ad3201cbe152b646c2893557a236fa9683aa3cb07351fa79b9e5788f631442e5142cab0bc98654a

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG45.PNG
                                                                Filesize

                                                                438B

                                                                MD5

                                                                87221bf8c9222a1489e949e4266a2980

                                                                SHA1

                                                                60c9d850f696e56b53dc3f940f52463d228febf2

                                                                SHA256

                                                                8d6e1d814dd38525115ee5d77e2d2ae6df8be31562a3c6805012097d6625efc4

                                                                SHA512

                                                                fa7ba5edb212a0ad70de123b1eabebd8d4cf5e2e3f59841330923c91d6ce6d8a0bbbf0176a8215a183ea860ae5286a4205b73f70df4d032cfd6c03109d1e433c

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG46.PNG
                                                                Filesize

                                                                206B

                                                                MD5

                                                                bc193c9f3fd0730341d2ba951f734652

                                                                SHA1

                                                                ebe3f410cf0bf5f30fe36b1c1df96fa27e73b01f

                                                                SHA256

                                                                e9137bc2fefbd9a3c4506708f283fe52c40b00b35c2677fc31e196b305b00e67

                                                                SHA512

                                                                355cb9a7ba6e2a77a51339bfa732537bc77d36da372fe926f1e4bf25de865b09c98122d9559f5ec234b41a83cb97de4fd49427a9476169653ac6058912261c1e

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG
                                                                Filesize

                                                                43KB

                                                                MD5

                                                                16c0e37cb0c5540fd9f93a8d82d94e52

                                                                SHA1

                                                                52d5aabf804381b47d13a358d80256c4088eec21

                                                                SHA256

                                                                2b772e66ebc70c93deb0b9a9e054373ee33d9245809e16174b1f132f786a063f

                                                                SHA512

                                                                dd54308739f9621f5fe707c69f24657431fd58b46e357a79d25c3d8e96d3b2914ce19d94beeee0bbd32311737670f06b01c364f0c7d70625a4246da64c29b0af

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG92.PNG
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                65bc4b5e358556b0cc14c93c31ebbd4e

                                                                SHA1

                                                                0557e0135b96ca1c37e458f8ba0a9813126ef3b4

                                                                SHA256

                                                                5273860a71d72a1a1b749ef31d6fc17e2e233d6cf64271244853ba6812b20350

                                                                SHA512

                                                                4f0bb2c2ee70380d570e1270ec80ff72e15c35afbd3aa4bfdda501f6c624f429e240fe13cb43eb27dc4bf65ffafea785ff5749dce99e86c843711d46bb751a22

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                Filesize

                                                                1.7MB

                                                                MD5

                                                                1bbf5dd0b6ca80e4c7c77495c3f33083

                                                                SHA1

                                                                e0520037e60eb641ec04d1e814394c9da0a6a862

                                                                SHA256

                                                                bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

                                                                SHA512

                                                                97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                Filesize

                                                                97KB

                                                                MD5

                                                                da1d0cd400e0b6ad6415fd4d90f69666

                                                                SHA1

                                                                de9083d2902906cacf57259cf581b1466400b799

                                                                SHA256

                                                                7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

                                                                SHA512

                                                                f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
                                                                Filesize

                                                                326KB

                                                                MD5

                                                                80d93d38badecdd2b134fe4699721223

                                                                SHA1

                                                                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                                                                SHA256

                                                                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                                                                SHA512

                                                                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat
                                                                Filesize

                                                                114KB

                                                                MD5

                                                                bd5626a0237933e0f1dccf10e7c9fbd6

                                                                SHA1

                                                                10c47d382d4f44d8d44efaa203501749e42c6d50

                                                                SHA256

                                                                7dfc1176d8a507135140b23a0c014093b7e2673f0f3e5727c3d85df4e7323762

                                                                SHA512

                                                                1fd864a5386580cf8bbafbacb12a043ef51948b729b9aedfe6dc81e6c2948a100526c7c600069f22454d550f7f736ad3045a930cc2ef97458dc1d6c782928087

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
                                                                Filesize

                                                                326KB

                                                                MD5

                                                                80d93d38badecdd2b134fe4699721223

                                                                SHA1

                                                                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                                                                SHA256

                                                                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                                                                SHA512

                                                                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe
                                                                Filesize

                                                                84.1MB

                                                                MD5

                                                                dfcfc788d67437530a50177164db42b0

                                                                SHA1

                                                                2d9ed0dc5671a358186dcf83abb74bfe39c40e9f

                                                                SHA256

                                                                a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1

                                                                SHA512

                                                                dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe
                                                                Filesize

                                                                84.1MB

                                                                MD5

                                                                dfcfc788d67437530a50177164db42b0

                                                                SHA1

                                                                2d9ed0dc5671a358186dcf83abb74bfe39c40e9f

                                                                SHA256

                                                                a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1

                                                                SHA512

                                                                dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
                                                                Filesize

                                                                84.5MB

                                                                MD5

                                                                7542ec421a2f6e90751e8b64c22e0542

                                                                SHA1

                                                                d207d221a28ede5c2c8415f82c555989aa7068ba

                                                                SHA256

                                                                188ca8ecc44de1b7f602e883c3054dc392792c3631bf362b1bc4f3e1dba323e6

                                                                SHA512

                                                                8987bf8aa1b401815fa9850e56954db6015bdd06ce78b65ba435724582ffa615dee4e1452fa237c53257dca8ee97b469d01c27757a5f070ce6f807a4f81094bc

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                Filesize

                                                                3KB

                                                                MD5

                                                                ca70b8052ed99d1fd3038007b677f639

                                                                SHA1

                                                                fc3d5cb758745b7e426dacb78d564e1f0f123e17

                                                                SHA256

                                                                9688b69c5db3a79f433ecac3472aa7fe47a3a700f3d06c4a68e239cdd6ae0b26

                                                                SHA512

                                                                879c9bd657f2ee3947473815e8fcc85de512094cf653a1dec7da40aa8d8a790e7fe038950174f57e1db22134ba83365924c5a8470a24f502e3b1720af78b86f9

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                Filesize

                                                                3KB

                                                                MD5

                                                                ca70b8052ed99d1fd3038007b677f639

                                                                SHA1

                                                                fc3d5cb758745b7e426dacb78d564e1f0f123e17

                                                                SHA256

                                                                9688b69c5db3a79f433ecac3472aa7fe47a3a700f3d06c4a68e239cdd6ae0b26

                                                                SHA512

                                                                879c9bd657f2ee3947473815e8fcc85de512094cf653a1dec7da40aa8d8a790e7fe038950174f57e1db22134ba83365924c5a8470a24f502e3b1720af78b86f9

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                Filesize

                                                                12KB

                                                                MD5

                                                                e8f3595ec5f6d32474b43545a489ce5d

                                                                SHA1

                                                                786f088e3938471eaea3d38489e2b5a0b6046514

                                                                SHA256

                                                                fe1c6d388c0119dc2636a71c840f5a2b1fa07f96846f9ce46d72aa45a3db4f4a

                                                                SHA512

                                                                fee35f8f616bd78265594e29048452f66c9d9134f24d2ab19ec9367db4f63d3d5a131448ef4c1302b2442b855454ead198089a343b4633f61c26d3f28fc5cd04

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                Filesize

                                                                21KB

                                                                MD5

                                                                483476de0204569dfa725f072256b155

                                                                SHA1

                                                                512d104340af1a26f86d38f11db845dfb65a20c2

                                                                SHA256

                                                                4a6e194c7ca65bec91d031008809c7b21a07f2f50e475910b0f656d74a0bf132

                                                                SHA512

                                                                0168fe92c58b7fded05ce49adfa7b3b225325bfbf636845c669ce205cb6e0e02bdb8aad5225dc30097b88fbde68015365c742a76847d4dafb562f92b89488eda

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                Filesize

                                                                40KB

                                                                MD5

                                                                33b9144e1224fb0063757479fc08cc33

                                                                SHA1

                                                                f2fd4148021df0f7a042490be0324b34c6bba14b

                                                                SHA256

                                                                5fc33214dcac1285ab7ef2b16d4de77788143ffb35a6fa999eee0d2d984775e1

                                                                SHA512

                                                                ceca470140dbbb433ff1dcc2835444a3080742e6b7ef79dd24d94b219a79f5b82ba323be2d2ebf50394a44441ede094e3cc164fb2013d1810b885215d69e5c76

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                Filesize

                                                                591B

                                                                MD5

                                                                110b18ba19ff09dd5229d6f97558d2c7

                                                                SHA1

                                                                3a108754f3a66703801ba3804716d58eccba78cb

                                                                SHA256

                                                                f05c0fc3d776779b1f4765680b2a00d370ae095dfd9fd18da8f33ce9647ed9b3

                                                                SHA512

                                                                b1efac2f5cb1baefc404d0778fdded064b1627937027564b7d98d9ad674d6f850b9ee2fb318f10300a467d15667d7766b52544c296c5da7c51e84bebcf80e145

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                Filesize

                                                                6.3MB

                                                                MD5

                                                                545c62b3d98ee4cc02af837a72dd09c4

                                                                SHA1

                                                                54446a007fd9b7363d9415673b0ac0232d5d70d5

                                                                SHA256

                                                                738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4

                                                                SHA512

                                                                8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                Filesize

                                                                6.3MB

                                                                MD5

                                                                545c62b3d98ee4cc02af837a72dd09c4

                                                                SHA1

                                                                54446a007fd9b7363d9415673b0ac0232d5d70d5

                                                                SHA256

                                                                738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4

                                                                SHA512

                                                                8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                Filesize

                                                                6.3MB

                                                                MD5

                                                                545c62b3d98ee4cc02af837a72dd09c4

                                                                SHA1

                                                                54446a007fd9b7363d9415673b0ac0232d5d70d5

                                                                SHA256

                                                                738029a4f974128180fa2cd239e873b01e456e8bf53bfdbf34b8ba8b57897be4

                                                                SHA512

                                                                8bf9c754861ed267efd2055ac09b4ad44df61b989859fccd14190592dca1dab0fa8f57360209eaceabb5137f742c9cea73a1a985ab1955f87a6875d0be95fdcf

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP
                                                                Filesize

                                                                451KB

                                                                MD5

                                                                0b445ace8798426e7185f52b7b7b6d1e

                                                                SHA1

                                                                7a77b46e0848cc9b32283ccb3f91a18c0934c079

                                                                SHA256

                                                                2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6

                                                                SHA512

                                                                51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG11.PNG
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                611498aff48165f9ac2674b0f15ea7e0

                                                                SHA1

                                                                23b9eaf1ae9123ca11daef7b4949c7b941e6d227

                                                                SHA256

                                                                f6326742fdae6ab4e28f80a95d224e6580750b79c2151cbb21ab0591000d49b1

                                                                SHA512

                                                                280789be34daae37d7df8d66cdace9f13cdf25b8697773cdacbb185ecd3fca90045316e12304967ec43143f29095267824f67f7d5ecd0addc16d3a2550666d83

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG29.PNG
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                f0b56fe3ed6accd87cc6d52e1cd5c20b

                                                                SHA1

                                                                7b71e3a64d9888af63c2203877f0565e9ccd0e9d

                                                                SHA256

                                                                bf38b19950e679c0fef5b25c869849d75ac8549b43c1bcd9d2dd1962f3008eef

                                                                SHA512

                                                                1faa4b0d5a71a1fff680ee3e051a13d00ba98bb231fb353b381d21e9576c850ed08d2eb3ce1c762d2b60c2420b5d95fbd319fa7d822d02d4c8c2e37ab9f00724

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
                                                                Filesize

                                                                45KB

                                                                MD5

                                                                32b9a83f00af4123b811eb6a85ee7971

                                                                SHA1

                                                                a1e6bdfe76e6103aca76bd21ce60c0b48e4de570

                                                                SHA256

                                                                a39a8cb1d54a2036257211b6364f84caf033fccf3394e9f890434563770e594d

                                                                SHA512

                                                                eb272c6dbaa3e59887cfdfd21dba5e2abc56a12beeda55ba091aa9b02da71af5ce11c0f7af4fb34f58da9836f91d787e26ab9f898b8669c861e9bacee973ca9f

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG
                                                                Filesize

                                                                457B

                                                                MD5

                                                                19678bec078614865a71ade211a305f2

                                                                SHA1

                                                                9da7f2ff66044138863ed5d1dcf2fc7e90ffedf4

                                                                SHA256

                                                                d80c15c79946fbe8b3a6a5280f2509eed654338e53096fa6f22d280ad2f6263d

                                                                SHA512

                                                                b2894b6bbdb5ab639fcc615ff0d2b414fb517d9e1ea8062c61d23182056a0de02e118b9e43824b4765a8617dc4fd330c7f4187e3b395ee92c6ac5e893f242602

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG
                                                                Filesize

                                                                352B

                                                                MD5

                                                                034eab9a50571cbab86294322e639886

                                                                SHA1

                                                                cae94b8cfe3ecce8e750d6fd34d54e766ea607aa

                                                                SHA256

                                                                449d678cc9a235d42a5a2f4e685536d9af87c6b5fc022f28dba32b08b4e88ee1

                                                                SHA512

                                                                b364c0cbb38bfb35e3c2d29705df72a8ce7dc111f04ebc05eceec4294987f18200581a31b78a79b05da890b5358e5463d1640d2230a8af930804efa3d4da42b0

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG54.PNG
                                                                Filesize

                                                                2KB

                                                                MD5

                                                                d18e51e3cf7f2c03f6055f978988a6a4

                                                                SHA1

                                                                b2823d97c7f3f1ccb549daf965f380049ca33411

                                                                SHA256

                                                                f6250a0acf0abd7cc1535e826f9a393a4214b1c9cd3429584436bce6fc2277c8

                                                                SHA512

                                                                10ffb505fbf3efc7adaf2e36e6e9130b727a8fa23505adc3b91cf6dd80ddbada24576ca92ed129cf90e2102ca59d4dcff2fed9dfdd42190d46ef11b9bb7f0a08

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG
                                                                Filesize

                                                                41KB

                                                                MD5

                                                                7aae2de61d5e6296c00fde67046dfaeb

                                                                SHA1

                                                                87a65e99d520045c39997b53c6a0aa08cec35e57

                                                                SHA256

                                                                07b11e82a30598438ac4221d6c8796739c42c2a596365464f257481a37fa00c6

                                                                SHA512

                                                                c5ebaf43ffc19a1a3b2f49e070ea1d5532ae433c3bcd02493e31bd3389b6c3edfb1e04373902fbd252eb7370612dd96c3d36eb3fac8240111f57020ab99fa882

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG73.PNG
                                                                Filesize

                                                                1KB

                                                                MD5

                                                                7fe8a6da32b8fc296e514439af7423c6

                                                                SHA1

                                                                7414e5e0aa0f5ade9dd080e8a15e652e994ac9c1

                                                                SHA256

                                                                0e90159b2da08bc7eb4452cf0f992da05a2e0282d634b59909c0d7d93ceca501

                                                                SHA512

                                                                292cf3b71ed51109ea4a5cd6f3dc7ede9b14e198f449c152aa599068a8662e8416bb20c0701b1c1ca5417ef7796ff0543500d3ed12461bc158a9ded1cd498758

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG8.BMP
                                                                Filesize

                                                                451KB

                                                                MD5

                                                                d2b43decae0a14deb90423bfb687dc63

                                                                SHA1

                                                                c191705fcb927d476d4fc639860bd52e324a274c

                                                                SHA256

                                                                3266fb3a33a97fac7d71652129865c3d0dd06e70af6ed5a3b2506d842eb69e70

                                                                SHA512

                                                                3cd903b0c4590e25502cd0f91b678c1e798989211e174d5a6dbfd52b343a426b867204979cc078a4919d63a4c4401c4f8eaa295227cec0ccc043c7e285d3d2df

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                Filesize

                                                                33KB

                                                                MD5

                                                                25c8bcbcf1a313b8512aafaa36717696

                                                                SHA1

                                                                c17d21d6b6bf9e0e438ba089ca175cbab78f02cf

                                                                SHA256

                                                                44b0554a75d96c80d2a6fa7ad97f1fc32a098de14d2e71ea0411abcb16a218b8

                                                                SHA512

                                                                ab7eb76e66b4c48d7457094e019e52245cadcd6c2bb89ba2150d92f778dee297b68aa0f1540d3d03fba65fdf0831f63044eeaf68aad5c3b83fbf67f7d481af66

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                Filesize

                                                                6KB

                                                                MD5

                                                                4f7be9736242579cb8afa1af86980dfe

                                                                SHA1

                                                                1c486393847996db4f6b78532dd7bd9a0a924549

                                                                SHA256

                                                                9cecc28716f392d2394829f4cc3f307d08f5aecaf3e2124bdaaa0d6d9c3400b4

                                                                SHA512

                                                                4c55bc2698d8934713e791c015480248198e22efa66dd5ca79ea834b9835c9e85ca8c2869c9b40dc394ae7e27da039f79c392f88472dedc1adfa83dd1e94f1c9

                                                                Download Submit

                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\9H0YP198.txt
                                                                Filesize

                                                                869B

                                                                MD5

                                                                425a5adee6ab89b4f8813557cdd4ff1e

                                                                SHA1

                                                                554ac8e9b71e5844dd51a447e4ec8baa0ae6bc6f

                                                                SHA256

                                                                6e7602a0e1a4410a1413822e98476be352648ac65d84be39b85804287f854e0b

                                                                SHA512

                                                                18c00fca81093d936e60827c2591775d909566224741dd4e3b683300f13da8123409f0b5f0d559a441783e96133e1cb3429d0b5fe84355f6779c91c645fdc1c7

                                                                Download Submit

                                                              • C:\Windows\Installer\6f07ee.msi
                                                                Filesize

                                                                81.0MB

                                                                MD5

                                                                1794aaa17d114a315a95473c9780fc8b

                                                                SHA1

                                                                7f250c022b916b88e22254985e7552bc3ac8db04

                                                                SHA256

                                                                7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4

                                                                SHA512

                                                                fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

                                                                Download Submit

                                                              • C:\Windows\Installer\6f07f2.msi
                                                                Filesize

                                                                81.0MB

                                                                MD5

                                                                1794aaa17d114a315a95473c9780fc8b

                                                                SHA1

                                                                7f250c022b916b88e22254985e7552bc3ac8db04

                                                                SHA256

                                                                7682233d155e6d19f30cf61b185a02055be0dbcacd2c9accf90a99de21547eb4

                                                                SHA512

                                                                fb9defdf73786528e82ffc7e1ccfa03cfb687365ec740e9620993da785414306f03a7e1fa523192a9d690a882b012d1e426afd1757639f3ef5f1e612c01e6516

                                                                Download Submit

                                                              • C:\Windows\Installer\MSI20A2.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • C:\Windows\Installer\MSI2583.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • C:\Windows\Installer\MSI298A.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • C:\Windows\Installer\MSI298A.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • \Program Files\Java\jre1.8.0_351\installer.exe
                                                                Filesize

                                                                130.3MB

                                                                MD5

                                                                1b7d3a2eb4a3893ea7fec68dbcc09a81

                                                                SHA1

                                                                5abe3f871f41d9226f6b330e0d76f4aeb4987891

                                                                SHA256

                                                                75fe10b94b9570bff04d8440340bead917ce46fc20f0a9795bca73053c3aa5d5

                                                                SHA512

                                                                b834ec60c4fba13e1065d248bede905f386e92207d91a2e1c7465eddc9767a5b0d27f49b19cdf64b241dcb7664ef5976f9367c90b10ff2ea7adb281e6aaf7953

                                                                Download Submit

                                                              • \ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
                                                                Filesize

                                                                34KB

                                                                MD5

                                                                2e7543a4deec9620c101771ca9b45d85

                                                                SHA1

                                                                fa33f3098c511a1192111f0b29a09064a7568029

                                                                SHA256

                                                                32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

                                                                SHA512

                                                                8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

                                                                Download Submit

                                                              • \ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
                                                                Filesize

                                                                34KB

                                                                MD5

                                                                2e7543a4deec9620c101771ca9b45d85

                                                                SHA1

                                                                fa33f3098c511a1192111f0b29a09064a7568029

                                                                SHA256

                                                                32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

                                                                SHA512

                                                                8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

                                                                Download Submit

                                                              • \ProgramData\Oracle\Java\installcache_x64\7289255.tmp\bspatch.exe
                                                                Filesize

                                                                34KB

                                                                MD5

                                                                2e7543a4deec9620c101771ca9b45d85

                                                                SHA1

                                                                fa33f3098c511a1192111f0b29a09064a7568029

                                                                SHA256

                                                                32a4664e367a5c6bc7316d2213e60086d2813c21db3d407350e4aca61c1b16a1

                                                                SHA512

                                                                8a69acae37d34930ed1b37a48012f4c1b214eacb18e46c7adc54aaa720b75c17ac0512206e7c7a72669c9f53e393b13ef9b7783f02482f19ea756c1022580f0d

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                                                Filesize

                                                                1.8MB

                                                                MD5

                                                                8d26aecef0a7bdac2b104454d3ba1a87

                                                                SHA1

                                                                50c29c58dfece62d94ed01cb5b3d070e593dc9cf

                                                                SHA256

                                                                e6c069c08e356b05465edb5aa9437e8af82c3cc8367d143d3ba6a8790f99490c

                                                                SHA512

                                                                0daa8bc75d9a067c3f9c46e4fda2aa4811083a06fc0dac74b45dfcdce60623066dac0189538d48128e55850ba20da12ab5f2f748dfbb9a6ec546802a61065475

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                Filesize

                                                                1.7MB

                                                                MD5

                                                                1bbf5dd0b6ca80e4c7c77495c3f33083

                                                                SHA1

                                                                e0520037e60eb641ec04d1e814394c9da0a6a862

                                                                SHA256

                                                                bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

                                                                SHA512

                                                                97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                Filesize

                                                                97KB

                                                                MD5

                                                                da1d0cd400e0b6ad6415fd4d90f69666

                                                                SHA1

                                                                de9083d2902906cacf57259cf581b1466400b799

                                                                SHA256

                                                                7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

                                                                SHA512

                                                                f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                f8da4bc14cb40b7ff8cd2c798ca0f7b9

                                                                SHA1

                                                                1264c77f79f7a328d60dfd752e721a463fc3e247

                                                                SHA256

                                                                3050ebf56103a20f9a9466f5371561cf62d4ed3b152f7b86f86d2910f20f5be1

                                                                SHA512

                                                                0a85a6b25687e3847da34bfa360d0d01ffbd1518a26d097d16cffee00f975a9a9223c6107d270b1b70b32be3b2a6e47b2311b9ef7570dc64692837068a786d96

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
                                                                Filesize

                                                                326KB

                                                                MD5

                                                                80d93d38badecdd2b134fe4699721223

                                                                SHA1

                                                                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                                                                SHA256

                                                                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                                                                SHA512

                                                                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                Filesize

                                                                1.3MB

                                                                MD5

                                                                018c68cdf5ba005b4a380c20b13fee4c

                                                                SHA1

                                                                bf6043fbd31288e8667fcfc37cd74414bee1805f

                                                                SHA256

                                                                3c7e2319176b70bed0460000d772da9d4cfeb8d2b06dfd913905f15e65942923

                                                                SHA512

                                                                506c062854f64c4f0d74e2fe709cbaa60a1d2fef0ca7c226fed264be1843e3d329ee542290288335e337c10d266e487c552836d6cae1919ab035f945afa87ed6

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
                                                                Filesize

                                                                326KB

                                                                MD5

                                                                80d93d38badecdd2b134fe4699721223

                                                                SHA1

                                                                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                                                                SHA256

                                                                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                                                                SHA512

                                                                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe
                                                                Filesize

                                                                84.1MB

                                                                MD5

                                                                dfcfc788d67437530a50177164db42b0

                                                                SHA1

                                                                2d9ed0dc5671a358186dcf83abb74bfe39c40e9f

                                                                SHA256

                                                                a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1

                                                                SHA512

                                                                dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\jds7221738.tmp\jre-windows.exe
                                                                Filesize

                                                                84.1MB

                                                                MD5

                                                                dfcfc788d67437530a50177164db42b0

                                                                SHA1

                                                                2d9ed0dc5671a358186dcf83abb74bfe39c40e9f

                                                                SHA256

                                                                a90318bae7d99da633d9cac8ce322120d087e7b6f5eec0d1d0d7f9413fdd4dc1

                                                                SHA512

                                                                dbdfd02528c9f0e506232e8640a8602fade0d05f4139368187300ea2d537e41d2d167655ded30d938bd445a21c776a3c3721f8db4d3f03e3c06807a84cf232e3

                                                                Download Submit

                                                              • \Users\Admin\AppData\Local\Temp\jre-windows.exe
                                                                Filesize

                                                                84.5MB

                                                                MD5

                                                                7542ec421a2f6e90751e8b64c22e0542

                                                                SHA1

                                                                d207d221a28ede5c2c8415f82c555989aa7068ba

                                                                SHA256

                                                                188ca8ecc44de1b7f602e883c3054dc392792c3631bf362b1bc4f3e1dba323e6

                                                                SHA512

                                                                8987bf8aa1b401815fa9850e56954db6015bdd06ce78b65ba435724582ffa615dee4e1452fa237c53257dca8ee97b469d01c27757a5f070ce6f807a4f81094bc

                                                                Download Submit

                                                              • \Windows\Installer\MSI20A2.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • \Windows\Installer\MSI2583.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • \Windows\Installer\MSI298A.tmp
                                                                Filesize

                                                                757KB

                                                                MD5

                                                                62cfeb86f117ad91b8bb52f1dda6f473

                                                                SHA1

                                                                c753b488938b3e08f7f47df209359c7b78764448

                                                                SHA256

                                                                f06cba20bd40e9d841add1877cf8d3b406f0acfa4800b80ae041ed3cc374eb7e

                                                                SHA512

                                                                c1b0e76cee4e2c3ca604dcc8f5665e72e70008acc824e20d89404f139d7e7e789e99dff131dafd76409f6ea0a813aa136f96089fbdadcf90d6485b1807762e4e

                                                                Download Submit

                                                              • memory/1072-500-0x0000000002D60000-0x0000000003148000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1072-490-0x0000000002D60000-0x0000000003148000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1072-491-0x0000000002D60000-0x0000000003148000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1520-514-0x0000000001030000-0x0000000001418000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1520-501-0x0000000001030000-0x0000000001418000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-1516-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-393-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-2163-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-1344-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-2155-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-489-0x0000000002CD0000-0x0000000002CE0000-memory.dmp

                                                                Filesize

                                                                64KB

                                                                Download

                                                              • memory/1716-1617-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-515-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-1345-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-1363-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-1364-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-73-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-517-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-888-0x0000000002CD0000-0x0000000002CE0000-memory.dmp

                                                                Filesize

                                                                64KB

                                                                Download

                                                              • memory/1716-1373-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-365-0x00000000008D0000-0x00000000008D3000-memory.dmp

                                                                Filesize

                                                                12KB

                                                                Download

                                                              • memory/1716-364-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-366-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-367-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-369-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-425-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1716-390-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-424-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-2264-0x0000000001090000-0x0000000001478000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1716-391-0x0000000010000000-0x0000000010051000-memory.dmp

                                                                Filesize

                                                                324KB

                                                                Download

                                                              • memory/1936-368-0x0000000002DE0000-0x00000000031C8000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1936-71-0x0000000002DE0000-0x00000000031C8000-memory.dmp

                                                                Filesize

                                                                3.9MB

                                                                Download

                                                              • memory/1992-3014-0x0000000000220000-0x0000000000221000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download

                                                              • memory/1992-2998-0x0000000000220000-0x0000000000221000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download

                                                              • memory/1992-3012-0x0000000000220000-0x0000000000221000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download

                                                              • memory/1992-3006-0x0000000000220000-0x0000000000221000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download

                                                              • memory/1992-3015-0x0000000000220000-0x0000000000221000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download

                                                              • memory/2020-1509-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2392-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2374-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2375-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2373-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2370-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2369-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2364-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2361-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2360-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2359-0x0000000000230000-0x0000000000247000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/2144-2354-0x0000000000400000-0x0000000000417000-memory.dmp

                                                                Filesize

                                                                92KB

                                                                Download

                                                              • memory/3016-2750-0x0000000000110000-0x0000000000111000-memory.dmp

                                                                Filesize

                                                                4KB

                                                                Download