Overview

overview

8

Static

static

1

TLauncher-....6.exe

windows7-x64

7

TLauncher-....6.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    141s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/04/2023, 15:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.841-Installer-0.9.6.exe

  • Size

    20.9MB

  • MD5

    3f287173a52111e30366ab7c601ce1a5

  • SHA1

    dae84d13bf14ac70a5565912e19c92bf2fa9f581

  • SHA256

    79f3253ef6d17fabd5bbb627fd604f2093519642f1d74875050f4c5b5c14a30b

  • SHA512

    698a7a38d60a42c035cbf5a5dd69c0a164cf4fb1b629a6461803b216384d407d0cce61dea81624157f916d4352a7f6084b78441b1ab79cfadb571b9ca23f97d4

  • SSDEEP

    393216:DXXRIcBtYto0fs/dQETVlOBbpFEj9GZdqV56HpkV3sZH3oegnW:DnRPBWTHExiTTqqHp8aH2W

Score
8/10
discoveryspywarestealerupx

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 13 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • UPX packed file 33 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies system certificate store 2 TTPs 11 IoCs
    evasionspywaretrojan
  • Suspicious use of SetWindowsHookEx 23 IoCs
  • Suspicious use of WriteProcessMemory 42 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.6.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.6.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3992
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1908426 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.6.exe" "__IRCT:3" "__IRTSS:21900001" "__IRSID:S-1-5-21-2805025096-2326403612-4231045514-1000"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2724
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3660
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1814730 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1839152" "__IRSID:S-1-5-21-2805025096-2326403612-4231045514-1000"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4344
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Modifies system certificate store
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:992
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=98.0.4759.6 --initial-client-data=0x340,0x344,0x348,0x31c,0x34c,0x6f83c398,0x6f83c3a8,0x6f83c3b4
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:4192
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              PID:3492
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=992 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230421172434" --session-guid=cb82b1ee-7fbf-410b-b22c-a9d0c507b9fe --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=DC05000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:3432
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=98.0.4759.6 --initial-client-data=0x34c,0x350,0x354,0x31c,0x358,0x6ed7c398,0x6ed7c3a8,0x6ed7c3b4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of SetWindowsHookEx
                PID:2812
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\Assistant_98.0.4759.6_Setup.exe_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\Assistant_98.0.4759.6_Setup.exe_sfx.exe"
              6⤵
              • Executes dropped EXE
              • Suspicious use of SetWindowsHookEx
              PID:4220
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4768
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=98.0.4759.6 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2cc,0x2fc,0x3f9b08,0x3f9b18,0x3f9b24
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of SetWindowsHookEx
                PID:4748
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2380
        • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          4⤵
          • Suspicious use of SetWindowsHookEx
          PID:2668
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:4380
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      PID:4876
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:4728
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      2⤵
        PID:3148

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\.oracle_jre_usage\90737d32e3aba4b.timestamp
      Filesize

      50B

      MD5

      1abcfe0ea46785aefbc9b6ed751ce757

      SHA1

      348ac4bd4adc98979555d7c7f6f985f5ffee8c85

      SHA256

      eaea72286e62229b0037c7177a7b506a128407969f3b463bfecee59003335a58

      SHA512

      6d74fe5311f68548ce29ae5d053ca1002a2635c5a83b072be00f245163e952a5fbd8611800ec76e74681f6f08f7d12f12cf15b9da4cd7690eddc57aa092aecca

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
      Filesize

      471B

      MD5

      6ee7f05a243a82fe5c92daab156605f8

      SHA1

      be250581be629c57c120279e182f1ad85c1b2892

      SHA256

      28fd9510542a0f53cbc51d31e94777ba65eef014b3009eb1ecb4bd26dc1562eb

      SHA512

      a69ddf95a32466cf1e0ab51567e89a7bafff513924265a8de76739130d5b5e038ad2e2d47bb400bee3bf83621f275b77971ab068b9054bdae7ce356ae6ab89f2

      Download Submit

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
      Filesize

      434B

      MD5

      d9a88e8d6ead2e1377f3ad32c2fb0935

      SHA1

      12c3bb3552e831d61413b1ae05fc7d81638ce5eb

      SHA256

      abe4068f67f5088e281fb1cbb4def66e52e0999c3adce9c008ed3c22a126afee

      SHA512

      3c0000837b1730b682a107f5bcab1b47a92cdebfef9835c921d0950eece6aa0c2aee44a88fe6ea31e4e48655fcf60299d66b6426cbff5a2343177672d6e171ac

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\additional_file0.tmp
      Filesize

      2.4MB

      MD5

      090de281df0aff70c6bab2e004321dbb

      SHA1

      25746cf9a368636c35d552b0c08f74b455c7c44b

      SHA256

      9b829a0ac23000a77a4455c46b49f23e27e99251d56c99edf9a5b3163d0a5be1

      SHA512

      263945666f7a077368ad20025eb71098b604a3a7af04d08ee5fcad81e12be3fe39d9dd415cf26d194cf645c534d3056e8385824889dceea82657993e6c47d61b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\Assistant_98.0.4759.6_Setup.exe_sfx.exe
      Filesize

      2.4MB

      MD5

      090de281df0aff70c6bab2e004321dbb

      SHA1

      25746cf9a368636c35d552b0c08f74b455c7c44b

      SHA256

      9b829a0ac23000a77a4455c46b49f23e27e99251d56c99edf9a5b3163d0a5be1

      SHA512

      263945666f7a077368ad20025eb71098b604a3a7af04d08ee5fcad81e12be3fe39d9dd415cf26d194cf645c534d3056e8385824889dceea82657993e6c47d61b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\Assistant_98.0.4759.6_Setup.exe_sfx.exe
      Filesize

      2.4MB

      MD5

      090de281df0aff70c6bab2e004321dbb

      SHA1

      25746cf9a368636c35d552b0c08f74b455c7c44b

      SHA256

      9b829a0ac23000a77a4455c46b49f23e27e99251d56c99edf9a5b3163d0a5be1

      SHA512

      263945666f7a077368ad20025eb71098b604a3a7af04d08ee5fcad81e12be3fe39d9dd415cf26d194cf645c534d3056e8385824889dceea82657993e6c47d61b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe
      Filesize

      2.0MB

      MD5

      3c942ff0d46769c4ebebaf8af7cecd09

      SHA1

      22edc54535ca0d310f078741e5a384032dff4dda

      SHA256

      6411b8efde988c3c5e24c1555ee0b910985a5e037b3beb887b38754aceb7f533

      SHA512

      4138e8d6c21510451d47b7ad7f3d4954eccdf8fa04b2a676082c710e79110da8ff21e96337c93bd5903442740d2cf4b249974248571a05bcc0fd5a25018d8da7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe
      Filesize

      2.0MB

      MD5

      3c942ff0d46769c4ebebaf8af7cecd09

      SHA1

      22edc54535ca0d310f078741e5a384032dff4dda

      SHA256

      6411b8efde988c3c5e24c1555ee0b910985a5e037b3beb887b38754aceb7f533

      SHA512

      4138e8d6c21510451d47b7ad7f3d4954eccdf8fa04b2a676082c710e79110da8ff21e96337c93bd5903442740d2cf4b249974248571a05bcc0fd5a25018d8da7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\assistant_installer.exe
      Filesize

      2.0MB

      MD5

      3c942ff0d46769c4ebebaf8af7cecd09

      SHA1

      22edc54535ca0d310f078741e5a384032dff4dda

      SHA256

      6411b8efde988c3c5e24c1555ee0b910985a5e037b3beb887b38754aceb7f533

      SHA512

      4138e8d6c21510451d47b7ad7f3d4954eccdf8fa04b2a676082c710e79110da8ff21e96337c93bd5903442740d2cf4b249974248571a05bcc0fd5a25018d8da7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbgcore.DLL
      Filesize

      166KB

      MD5

      8e7190bf9a51e2951b140642511c00fe

      SHA1

      8ac4ad95c91cca1f5a048a97f63619b2babd7348

      SHA256

      775c3e3c76780e8a61db42a4520b81a663eac224e7ec33dc252a1276e47613b5

      SHA512

      d5dc33882b2a211a997cb178aefdda7013f30efd626722dc56cbbb1b85855a5eb7b77c70bf7fe6b605e93658498ae086f590b1b53346df01891fa0071c5cf4e7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbgcore.dll
      Filesize

      166KB

      MD5

      8e7190bf9a51e2951b140642511c00fe

      SHA1

      8ac4ad95c91cca1f5a048a97f63619b2babd7348

      SHA256

      775c3e3c76780e8a61db42a4520b81a663eac224e7ec33dc252a1276e47613b5

      SHA512

      d5dc33882b2a211a997cb178aefdda7013f30efd626722dc56cbbb1b85855a5eb7b77c70bf7fe6b605e93658498ae086f590b1b53346df01891fa0071c5cf4e7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbgcore.dll
      Filesize

      166KB

      MD5

      8e7190bf9a51e2951b140642511c00fe

      SHA1

      8ac4ad95c91cca1f5a048a97f63619b2babd7348

      SHA256

      775c3e3c76780e8a61db42a4520b81a663eac224e7ec33dc252a1276e47613b5

      SHA512

      d5dc33882b2a211a997cb178aefdda7013f30efd626722dc56cbbb1b85855a5eb7b77c70bf7fe6b605e93658498ae086f590b1b53346df01891fa0071c5cf4e7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbghelp.dll
      Filesize

      1.7MB

      MD5

      bcc596c2460244066b3c40a6559b88d9

      SHA1

      6ee955c1efd65eba6eb6020467bc4d26aaa82793

      SHA256

      e7ba778244de4144318b6946e2f9aa382ee6c8e93849f49ed54bbb9a9625f34f

      SHA512

      016468a0188239a5e9eb93dd3842eed5bde60b1e5fc69ea822099ebc2a7d2094d307ce4abfe98a222fa684d3538cd3df1b63bbf5dd694d020020543f41f328be

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbghelp.dll
      Filesize

      1.7MB

      MD5

      bcc596c2460244066b3c40a6559b88d9

      SHA1

      6ee955c1efd65eba6eb6020467bc4d26aaa82793

      SHA256

      e7ba778244de4144318b6946e2f9aa382ee6c8e93849f49ed54bbb9a9625f34f

      SHA512

      016468a0188239a5e9eb93dd3842eed5bde60b1e5fc69ea822099ebc2a7d2094d307ce4abfe98a222fa684d3538cd3df1b63bbf5dd694d020020543f41f328be

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\assistant\dbghelp.dll
      Filesize

      1.7MB

      MD5

      bcc596c2460244066b3c40a6559b88d9

      SHA1

      6ee955c1efd65eba6eb6020467bc4d26aaa82793

      SHA256

      e7ba778244de4144318b6946e2f9aa382ee6c8e93849f49ed54bbb9a9625f34f

      SHA512

      016468a0188239a5e9eb93dd3842eed5bde60b1e5fc69ea822099ebc2a7d2094d307ce4abfe98a222fa684d3538cd3df1b63bbf5dd694d020020543f41f328be

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202304211724341\opera_package
      Filesize

      90.2MB

      MD5

      8f9ed7d51d16b4ae41da996343ceb425

      SHA1

      54fafeceb0f93350560631fc32488d993f932ae9

      SHA256

      7e47787c07836a1f0f5e9ae42f37252ca8995bcf4496099de9791eabe890bee9

      SHA512

      ea05630f0173e3c4bdce7d9a1e2f282a2be6f6f2578a30c52e854880e57dd42555a12255872ff00e26fe9d6a0e90d2bca97825768bc541d6e8a0f98f02a0a42b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_230421172430720992.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304211724317674192.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304211724317674192.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304211724345023492.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304211724349073432.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Opera_installer_2304211724363292812.dll
      Filesize

      4.4MB

      MD5

      43a273845a4101133ae610099c152ea3

      SHA1

      32d1123c170320b230d4fdafde0c7bc8c88a4a1e

      SHA256

      0ad97ae9e060805113be5acf996454c87a243c0bc2a59a2412e0073835588c6b

      SHA512

      cb38c289023f8d266f16974ac5062df846d41ffa14d40f84fb9d74bfdfe19471badea2424987a2e8b59bdc7de4b242d790a4993cd726c5520280e0d8d96098fa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\TLauncher.exe
      Filesize

      6.3MB

      MD5

      f08d9bbc61cff8e8c3504524c3220bef

      SHA1

      b4268c667469620bb528c04eaa819d508159b398

      SHA256

      2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

      SHA512

      a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
      Filesize

      116KB

      MD5

      e043a9cb014d641a56f50f9d9ac9a1b9

      SHA1

      61dc6aed3d0d1f3b8afe3d161410848c565247ed

      SHA256

      9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946

      SHA512

      4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
      Filesize

      1.8MB

      MD5

      f8996d2158a69a12b4bc99edd28100bc

      SHA1

      892887691df881fe432e09b618e90f50447340e6

      SHA256

      866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

      SHA512

      d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
      Filesize

      339B

      MD5

      fe137c81fbde2a02aa1144c7be80a6e2

      SHA1

      aebc161f139a5e204484f09935ce93aea2815b85

      SHA256

      cb61659f0698a66ed996db7f8a9dbe770c2888f7132b480427a06631e8b963c6

      SHA512

      1f47fe0ba45e26240605a5ed52b376fe86f2a599b3c67348d1b579cd8d452a002bfb6fc9a380122451c1916ea324a4b9f1764443e3847bd8b1138a955d7d8416

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG
      Filesize

      40KB

      MD5

      d9014b0296ca862ce63a31896ad8b0d5

      SHA1

      1d5c437fb4d0bea1021ce3e34dd54f5c3db4ec43

      SHA256

      78390f091624addd4f060a58f6e96d3012dbb17355470f6c33831f68773ec0d7

      SHA512

      abe9836e63b182c35e1b38168b4ebf7703a6b7aee408466fde883ca0cc47aa55dbe289ae21a2fc502db20a29fef07aa9dc3d756cf6148c88604042e0fdd305aa

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG
      Filesize

      1KB

      MD5

      d83f1730a96b95e76287da1a6693a06a

      SHA1

      32308a5d667c6522d73388d7b67e38c97d5308a0

      SHA256

      5700a7080ab93c16129f8f72527f8efe1370acf712ad8cb8ae31bd5052b1ed43

      SHA512

      07be8a92a3ef5a937424a56f926c839ee394b91ab18b975e4cf767643dc66644aa84756a4157c4d91d787a05bee2897f54699faa91054b67121cb8e71c5661de

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG107.PNG
      Filesize

      2KB

      MD5

      b64546a43eb61ea574f2e7f77078b4a1

      SHA1

      77be598cc22686c9d993cc0e0e821185e54fd4fc

      SHA256

      88b4f791137b5b961c0a26f88aef627e9826532c8cb4a684e1cc3826e33ea502

      SHA512

      5a861a434607029416ad8bc94a74b5af1eb6e06a75e4234bc66d0c52f303d62ea9f17e79b41b73596e34a5890e1bd3fda1106f16a5b84f0e39fa72701ea5464a

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG19.PNG
      Filesize

      1KB

      MD5

      e8b5b830f0aecefd7913201dae73e130

      SHA1

      ccae811e66ab16141b304fe0837581bb4e437fe7

      SHA256

      06c2bfdb9abe36e2944d1e3ade5f06a2d26b7d1abd9375089a31b444ee3d615e

      SHA512

      112a7ab2acf6666a576953bca0ce88157350149ea498ef2b0cd3121dd9659d8df261115a66891bcef2fda25f637894b35b692e6f8985cae05a497da69469f367

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG
      Filesize

      280B

      MD5

      706c01b9fc4abbc103f4801e82fde0f7

      SHA1

      e9dc373751d241f3b4c0257846fc7f4a4d779344

      SHA256

      fdf94d2223e3edf60a71134446de70577a9bdeb37edd039f04d67af3764cb04a

      SHA512

      4448de09cf0d31e7256f418fea18ae6bafe448966edfca18c40aee77cd2858fcd809bfaae956559894bb95e2f8d7970a49f45ff9fefa4f62657d008d0140b472

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
      Filesize

      281B

      MD5

      57dafa9987575c033bda214c847b1458

      SHA1

      29e6c1f2a1299504303132de0519f37e580d0942

      SHA256

      ffa2ac5921d812b08a4d694d10e393c8c76f410635c4ca96ba782cb743ab2855

      SHA512

      8bbba096aa0e967a3f2898a46663e327c34b28f437f45bed422a91bdc5f8366dc3e10689a2b8843d051d18e9e76044f30f98bf1db01602d1d8b30954f0dab110

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG
      Filesize

      43KB

      MD5

      801095e25a19f34bdd0125332baa586f

      SHA1

      0d61fc1fe7652bd42f77b4ccb45c87aeb8845214

      SHA256

      2e3d98e961d62512a950ac66134a6a4bd2615e191e7308a6fc52a5bf0e2a8b71

      SHA512

      2c3225bf38ecca5656dd60a9003f248fbb38097bb71cf4168fee2eee4e8056b11b971b973e753cd92a5375a0ecd88d54e44aacdf135821da1b78235abd823c81

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG
      Filesize

      1KB

      MD5

      35dc064624279a6587516c92f4259235

      SHA1

      898662913850b22ef17fd702d85c416794321222

      SHA256

      6498efd71fe1f92ab1fd602c074fd2c013b96d8a6280555d8ef54115bbcde1b2

      SHA512

      8227905652eb6e87fec020d389793961a795ce572963d57d672282ba05e930c8b8d6f49d4c2dd07563cae08243069aba66b214acbd1362d1ec64417c13323651

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
      Filesize

      1.7MB

      MD5

      1bbf5dd0b6ca80e4c7c77495c3f33083

      SHA1

      e0520037e60eb641ec04d1e814394c9da0a6a862

      SHA256

      bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

      SHA512

      97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
      Filesize

      1.7MB

      MD5

      1bbf5dd0b6ca80e4c7c77495c3f33083

      SHA1

      e0520037e60eb641ec04d1e814394c9da0a6a862

      SHA256

      bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

      SHA512

      97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
      Filesize

      97KB

      MD5

      da1d0cd400e0b6ad6415fd4d90f69666

      SHA1

      de9083d2902906cacf57259cf581b1466400b799

      SHA256

      7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

      SHA512

      f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
      Filesize

      97KB

      MD5

      da1d0cd400e0b6ad6415fd4d90f69666

      SHA1

      de9083d2902906cacf57259cf581b1466400b799

      SHA256

      7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

      SHA512

      f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      8f36e70842e3210b8725f210554e2c91

      SHA1

      dc91404cf9dd570a06895af5873c82d37d1a92c9

      SHA256

      2f79e6a69bb38839d9e07cfeb0a9295ccd08f907cef3f47142db8d5ec792599c

      SHA512

      3661caee41c90f687f30ae72e7104ed4cbababb99d44c2d9c68f195c57ef7f1a88ea8f4e07eb7b0df167de28cd5534f2ebf8e4ecc6e725457306c6c21b82bdc2

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      8f36e70842e3210b8725f210554e2c91

      SHA1

      dc91404cf9dd570a06895af5873c82d37d1a92c9

      SHA256

      2f79e6a69bb38839d9e07cfeb0a9295ccd08f907cef3f47142db8d5ec792599c

      SHA512

      3661caee41c90f687f30ae72e7104ed4cbababb99d44c2d9c68f195c57ef7f1a88ea8f4e07eb7b0df167de28cd5534f2ebf8e4ecc6e725457306c6c21b82bdc2

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      Filesize

      1.3MB

      MD5

      8f36e70842e3210b8725f210554e2c91

      SHA1

      dc91404cf9dd570a06895af5873c82d37d1a92c9

      SHA256

      2f79e6a69bb38839d9e07cfeb0a9295ccd08f907cef3f47142db8d5ec792599c

      SHA512

      3661caee41c90f687f30ae72e7104ed4cbababb99d44c2d9c68f195c57ef7f1a88ea8f4e07eb7b0df167de28cd5534f2ebf8e4ecc6e725457306c6c21b82bdc2

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat
      Filesize

      110KB

      MD5

      dc1091f32258495a5313da54870b0768

      SHA1

      26eb9cfd00861bb55fdb4e25bd3427b5b137c148

      SHA256

      ebd2b290264dfc287b3ed4fda4aa6680f71a2997e15a8e1003696d9000a17d23

      SHA512

      8f084e376a8e0e5bc3ae34d24d114e29ade6f4a5bb59fb5a291bc9c427df1ec8539b1d7d5fb1609f2a4087f2eb17b445f8b9e2751dca0717c06ac2207ad4e639

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
      Filesize

      1.3MB

      MD5

      e7bbc7b426cee4b8027a00b11f06ef34

      SHA1

      926fad387ede328d3cfd9da80d0b303a865cca98

      SHA256

      e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

      SHA512

      f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
      Filesize

      326KB

      MD5

      80d93d38badecdd2b134fe4699721223

      SHA1

      e829e58091bae93bc64e0c6f9f0bac999cfda23d

      SHA256

      c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

      SHA512

      9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
      Filesize

      2.6MB

      MD5

      637a619acf14bcf7e8b70ea0ea1a8c8f

      SHA1

      9b50ef7563d34908c45f7aa3b5d237874b78f549

      SHA256

      a1b73d7ab7139319a9b77223218a16365e732e37236530aad2fc7d9fd8233dce

      SHA512

      1e748603c0b22ae1ef51b67bc164a4c124acbcc80b8345e80d2abf0689efb19fd285efc004b6cece55b5be74e68a7e737752b09a518ade3fae610d44ef597193

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
      Filesize

      646B

      MD5

      26a2355ec6ed7786b2ea9b702d1bdd00

      SHA1

      fbaecadcecc4701c6173a3cc76762034f2b4ff25

      SHA256

      5b04126fe9823fa8c408f70ecfecc011d688b4d3398032c12782dec9313e0825

      SHA512

      e32b699752aabf17cc1a7e217dced904bcd194dd3119b8568310c85cd41fd2039f480b9da80a149bccc68f64ab7c83c217f91e726c364637274b3975621d1a40

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      4.4MB

      MD5

      36b0cf922898be229d7192c142bbef0b

      SHA1

      28056ae3088f21097a305b505d898be3408ae67e

      SHA256

      a68acea31bb170b0cd85ba1ed9db349b4a9091780ad280c1649583c010df750f

      SHA512

      e6733d90656cc370eaad55d30a8a39384933cebfc8109020fe8c3302b44b14882f159b768bfb98df00666d7f9629835a146a77b46b5caea13786e959b2d0199d

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      6.3MB

      MD5

      f08d9bbc61cff8e8c3504524c3220bef

      SHA1

      b4268c667469620bb528c04eaa819d508159b398

      SHA256

      2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

      SHA512

      a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      6.3MB

      MD5

      f08d9bbc61cff8e8c3504524c3220bef

      SHA1

      b4268c667469620bb528c04eaa819d508159b398

      SHA256

      2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

      SHA512

      a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      6.3MB

      MD5

      f08d9bbc61cff8e8c3504524c3220bef

      SHA1

      b4268c667469620bb528c04eaa819d508159b398

      SHA256

      2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

      SHA512

      a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      Filesize

      6.3MB

      MD5

      f08d9bbc61cff8e8c3504524c3220bef

      SHA1

      b4268c667469620bb528c04eaa819d508159b398

      SHA256

      2c4d8b48344ae221e349e525ac16eb364ffb5ab8deae80c7caa28dd5967cabdb

      SHA512

      a64a03d959487399fb57e1bd062c0e9f88a17ff9b3ad15e6b96a4b7332341d0fc9186ef99b2ab9bdcfa51864f21d08bce48479202c01d15470916e90fb09fef4

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG12.BMP
      Filesize

      451KB

      MD5

      72140762686e56435d154a429210c04f

      SHA1

      ba8aedeb5729dd4c4175d7a72e87d43074a58e8e

      SHA256

      6319580128c2b8e048e78d5e5eaaf7bf14fdb3ef5ffe6c35e8856204a9b6430b

      SHA512

      d73f114d65c067455025023c1676a59a0bf262e19da3883e05a8ddf5ca1206bcf1a552e922715604bdac507bc0f01265a563ef7b34c7d2afef9504e15d649c93

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG
      Filesize

      1KB

      MD5

      4a087a588ab5100411444675b96c8b89

      SHA1

      2893640f722d1dfb1251ecfbd2b397112a546133

      SHA256

      2e0ac52afe35d27ef951956c5d42f405f3a2fafc61d7590a358c21524dbcfe82

      SHA512

      77460dcf21c04566a31fc57f4a88b8dc8a1e007dee06c8e2ff59d15cff9161767582e913c49b2dd2bf131139ac85065386f71de1c9c457915872aebb754c905e

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
      Filesize

      45KB

      MD5

      0e405c87b6110dd8960c7b71f9ffe4f3

      SHA1

      ee700d17287ef52879e75dbcda77bfcc33049717

      SHA256

      5da7ac89f64c5a50f1c779c278be8d798590201f748b17f91bc117f785b2bb29

      SHA512

      1059c647d32f5e1f0f0f61e76fe44e1ae84c13f99511898aae0f3cddcdeb7b08b96f140d89f0548a7478904b2a981d2f4b228c6162449158c817e241164a5798

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG
      Filesize

      457B

      MD5

      f3d9e5d67703a59ea81d5e661f425a8b

      SHA1

      8ad7586f0f0d5a9934518158fbe93ca98aedfff9

      SHA256

      2c48c7bbc556d68b13a8ae4d4a86392d20e03e860c52cfc56b678fb0cbdea94a

      SHA512

      d6792bac91175015d297269979152bc2a306e23f4ad183f2216914d82943d40d40aec149bce9cb47aec38f80ad68ed878321cce74f10a7d81a5c8b2ad2cda51a

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG
      Filesize

      352B

      MD5

      21cb7168b7a2adafaf298e87767d9b11

      SHA1

      00d1f66e15b38c024ce019f82f6db9597ffd54c8

      SHA256

      5ee86596338d44325d820c8b74bab895c842038766b3952c6c70572a9f3df1c2

      SHA512

      afe756f3a755301317b9c5124bed1396d752206c3b2e5faa42ef82312fbbb1a46dbccc943da2399c54868d772c6b335e55dcb2069af6b5956225c9b956c09e2d

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG45.PNG
      Filesize

      438B

      MD5

      842bceedfb1bea13bc67b8857539142c

      SHA1

      6f595e9f375e32cc7b89f1e1906bf3bf6adbbae0

      SHA256

      98d04bdaf68e5ba7dcc89d2f49dac646eb354915622bc0cd80f3b563a2404580

      SHA512

      738c42ff17575b577de56083c716d01619b544c67901449b02f1d776fa46795a7fe258a9b20ce949e59b3381125bf333152adc42e4481ae531987362e791c07e

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG46.PNG
      Filesize

      206B

      MD5

      bbb7566d1df1670f17398815e5bbf8f7

      SHA1

      d4862a872c8b39ba162d09bd01b698f92795f837

      SHA256

      57645422c10c9e410f14a25c636a372067fbd3f0da6aebf32feb2c070abb3c92

      SHA512

      b8869dae59b15399981d0f12fa26fcb169987b1d0749b2e36e4fc0350b352de7f8625b54dd152d2d446fb118080d10620583213afefbc0052fcad167902baca1

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG
      Filesize

      1KB

      MD5

      e1f85e62f3a619b5848378c2cf3169ec

      SHA1

      0241e34ad99ba73e5e145b0ef5135c924c72ab27

      SHA256

      ae85581f385f730fbf3e9c774f194eed3a2059861846428d1059e6d92f1ea1e0

      SHA512

      2a57eda6c58a40d4fa149e9f553acb80e5898d91f2bf0100f6a95be8a38a0ed298cef56cd29336481c69144091b4b0ab639ec3272eba835f889ccf4018f0dd61

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG
      Filesize

      1KB

      MD5

      8fd6a83316ed70cda0ae74aec12d58fc

      SHA1

      3678eb7e2a44e84a96329b6d1f19f077e6aaec88

      SHA256

      fda2188de607703dd49250383af8f8cbe4e2c62badbf008763fe8e55979dffc3

      SHA512

      eb19a1cd4dd1b0f9a0e377dff057e2fa9869c327347a5f7947b30d437c3e524e8da809f55db5b6936e21589d5a5c8057dc14b213dfee65b4764fa22149633c3d

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG
      Filesize

      41KB

      MD5

      bee7f4219c017cf50f97816d34c29d52

      SHA1

      cb7c2ea34610a93cb50eb430730654753fa0a179

      SHA256

      3c6aa37937a0279192aaa990ea30e524d2fac9aceac1899e2b51400c6394447d

      SHA512

      32ba8131e38039fad9bf44a61b6f393e81557fc94c8d4993c10186480c19669a2f3697aaac123e084712d4c4a3c8c182a82dcf08405247a7010e455bde707c17

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG
      Filesize

      1KB

      MD5

      a446d4015f66de165c4bc5fb3eae6bde

      SHA1

      bf5c7fd6783dd31a0188282f3fcd45f96b6923ac

      SHA256

      3dfd2ca144a10e1cedd9294753d561df3f28cc50b6682971f06de4bc6c9a58b0

      SHA512

      0907a019b280a41f7bb913e478c7d2df94eabdaa65674ab9ff0170557e747e4f1e8e4a2792d1669bb400e471359eca81127dc53a7ee412cfcc793b642ace0d52

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
      Filesize

      33KB

      MD5

      dd19a14048b1777f7237d31e9e199be6

      SHA1

      77833192995e166b3335ac4014d1ceef6ade62ff

      SHA256

      09de34cb0a6aaf755cf4730d296448ccac4b60aed331ae9ed84dc8a245ba11ba

      SHA512

      4088e9c742acf33ffcf6f52bb566334b2a7c98dee2e7343835e24eb2a99c1ccff0f1449b7ce9cc089c7e06da32a54bd4f84d7806459047244f017b42f57d6b53

      Download Submit

    • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
      Filesize

      6KB

      MD5

      586146cddeb390d3af2c14b3fd0e6e66

      SHA1

      c1a2cd2b2091ecb74bab37f09ba9ad2d6642f4ef

      SHA256

      e825639de1c58f49c9e74dd0b99739ef347efaa46bd072688713947dc448f3f0

      SHA512

      8bfe25cb105010519677f10f0d68f8feec56cb854dcaaa8258c3f0d947b5939826f572b5f8d5700391cbde7b54c56ad702affda67fbe4482dabc0f63b8ae758a

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
      Filesize

      40B

      MD5

      5f17c1c0878378dfb374f511f695db73

      SHA1

      0dcbe85b057bcb477506c3e3f43d763bc7c20cad

      SHA256

      9389cfdb20b6a5b19dff3e2ad961cd7a27852f617b10adcef2ccadbd5573b8d8

      SHA512

      51d6c78ff12eb0cba44ea061ee74c2be1abe55d510d53f1546bcff38f2fcd6cf5ec56adfa9630a4ec48be00d3355f50a6029b882283a955a61f4f40205913f04

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
      Filesize

      40B

      MD5

      5f17c1c0878378dfb374f511f695db73

      SHA1

      0dcbe85b057bcb477506c3e3f43d763bc7c20cad

      SHA256

      9389cfdb20b6a5b19dff3e2ad961cd7a27852f617b10adcef2ccadbd5573b8d8

      SHA512

      51d6c78ff12eb0cba44ea061ee74c2be1abe55d510d53f1546bcff38f2fcd6cf5ec56adfa9630a4ec48be00d3355f50a6029b882283a955a61f4f40205913f04

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
      Filesize

      40B

      MD5

      5f17c1c0878378dfb374f511f695db73

      SHA1

      0dcbe85b057bcb477506c3e3f43d763bc7c20cad

      SHA256

      9389cfdb20b6a5b19dff3e2ad961cd7a27852f617b10adcef2ccadbd5573b8d8

      SHA512

      51d6c78ff12eb0cba44ea061ee74c2be1abe55d510d53f1546bcff38f2fcd6cf5ec56adfa9630a4ec48be00d3355f50a6029b882283a955a61f4f40205913f04

      Download Submit

    • memory/992-589-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/992-535-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/2380-1886-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

      Download

    • memory/2668-2018-0x0000000000E90000-0x0000000000E91000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2668-1988-0x0000000000E90000-0x0000000000E91000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2668-1991-0x0000000000E90000-0x0000000000E91000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2668-2022-0x0000000000E90000-0x0000000000E91000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2724-1674-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-1968-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-523-0x0000000010000000-0x0000000010051000-memory.dmp

      Filesize

      324KB

      Download

    • memory/2724-1607-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-479-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-468-0x0000000010000000-0x0000000010051000-memory.dmp

      Filesize

      324KB

      Download

    • memory/2724-467-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-440-0x0000000006340000-0x0000000006343000-memory.dmp

      Filesize

      12KB

      Download

    • memory/2724-439-0x0000000010000000-0x0000000010051000-memory.dmp

      Filesize

      324KB

      Download

    • memory/2724-241-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-522-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2724-601-0x00000000001D0000-0x00000000005B8000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/2812-570-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/2812-600-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/3432-599-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/3432-561-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/3492-559-0x0000000000950000-0x0000000000E5E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/4192-542-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/4192-590-0x0000000000D50000-0x000000000125E000-memory.dmp

      Filesize

      5.1MB

      Download

    • memory/4344-510-0x0000000000B20000-0x0000000000F08000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/4344-540-0x0000000000B20000-0x0000000000F08000-memory.dmp

      Filesize

      3.9MB

      Download

    • memory/4380-1985-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

      Download

    • memory/4728-2030-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

      Download

    • memory/4876-2009-0x0000000000950000-0x0000000000951000-memory.dmp

      Filesize

      4KB

      Download

    • memory/4876-2020-0x0000000000950000-0x0000000000951000-memory.dmp

      Filesize

      4KB

      Download

    • memory/4876-2028-0x0000000000950000-0x0000000000951000-memory.dmp

      Filesize

      4KB

      Download