Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/07/2023, 02:37

230710-c39a7age32 7

Analysis

  • max time kernel
    209s
  • max time network
    201s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2023, 02:37

General

  • Target

    TLauncher-2.885-Installer-1.1.3.exe

  • Size

    22.6MB

  • MD5

    bd3eefe3f5a4bb0c948251a5d05727e7

  • SHA1

    b18722304d297aa384a024444aadd4e5f54a115e

  • SHA256

    f1b132f7ecf06d2aa1dd007fc7736166af3ee7c177c91587ae43930c65e531e0

  • SHA512

    d7df966eeda90bf074249ba983aac4ba32a7f09fe4bb6d95811951df08f24e55e01c790ffebc3bc50ce7b1c501ff562f0de5e01ca340c8596881f69f8fed932d

  • SSDEEP

    393216:KXGWOLBh2NPfs/dQETVlOBbpFEjdGphRqV56HpkoaH3D8P2Q6YS6x9DOc:K2/BhSHExi73qqHpu34kYbzOc

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 8 IoCs
  • Loads dropped DLL 14 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.885-Installer-1.1.3.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.885-Installer-1.1.3.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:1128
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.885-Installer-1.1.3.exe" "__IRCT:3" "__IRTSS:23661420" "__IRSID:S-1-5-21-3011986978-2180659500-3669311805-1000"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4884
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3204
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:1841988" "__IRSID:S-1-5-21-3011986978-2180659500-3669311805-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          PID:3540
  • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
    "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:1256
    • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
      "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      2⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5104
      • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
        C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe -Xmx1024m -Dfile.encoding=UTF8 -cp C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar; org.tlauncher.tlauncher.rmo.TLauncher
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:4836
        • C:\Windows\system32\icacls.exe
          C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
          4⤵
          • Modifies file permissions
          PID:844
  • C:\Windows\System32\GameBarPresenceWriter.exe
    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
    1⤵
      PID:948
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:4436
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Drops desktop.ini file(s)
      • Checks processor information in registry
      • Modifies registry class
      PID:4936
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
      1⤵
      • Checks processor information in registry
      • Modifies registry class
      PID:1692
    • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
      "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
      1⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1104
      • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
        "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        2⤵
          PID:4020
      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
        1⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:712
        • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          2⤵
            PID:1204
        • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
          "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
          1⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:320
          • C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe
            "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
            2⤵
              PID:4208

          Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\ProgramData\Oracle\Java\.oracle_jre_usage\934bb0918aaa4c7a.timestamp

            Filesize

            76B

            MD5

            6361532d359b018dac808ae34e4b82de

            SHA1

            5792b183157fe986a56896283c2b7300d4dace2b

            SHA256

            87361a39586109548cbd4b76a1810793dd616e685e90ac05946315993281e7af

            SHA512

            9264b0c213231f9e632fb74ac98bb512326ffd8ac5fd1edb4de5b099e1f23c9218b7f6b0b1387a1556a3923c3059422b0bf829f743167d3f4e10f33bb006226e

          • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

            Filesize

            1.8MB

            MD5

            cb50d496ae05fa1c8bfbcb3b7f910bfe

            SHA1

            3ec4d77b73c4d7e9858b11224314e99d082497a8

            SHA256

            7616c72f6659a3a2439d0452190459cd4ceb83fab2307e3e47c9604fa29d9f34

            SHA512

            22051de06c7e52a37ad36250aa095a8ccc0b0e1cdbfa2e9073c146e77e278cbdbe89bdb078dcfd8babf48baec1902b303ac39cc9db4114ce1516b06552dc924d

          • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe

            Filesize

            1.8MB

            MD5

            cb50d496ae05fa1c8bfbcb3b7f910bfe

            SHA1

            3ec4d77b73c4d7e9858b11224314e99d082497a8

            SHA256

            7616c72f6659a3a2439d0452190459cd4ceb83fab2307e3e47c9604fa29d9f34

            SHA512

            22051de06c7e52a37ad36250aa095a8ccc0b0e1cdbfa2e9073c146e77e278cbdbe89bdb078dcfd8babf48baec1902b303ac39cc9db4114ce1516b06552dc924d

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico

            Filesize

            116KB

            MD5

            e043a9cb014d641a56f50f9d9ac9a1b9

            SHA1

            61dc6aed3d0d1f3b8afe3d161410848c565247ed

            SHA256

            9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946

            SHA512

            4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe

            Filesize

            1.8MB

            MD5

            cb50d496ae05fa1c8bfbcb3b7f910bfe

            SHA1

            3ec4d77b73c4d7e9858b11224314e99d082497a8

            SHA256

            7616c72f6659a3a2439d0452190459cd4ceb83fab2307e3e47c9604fa29d9f34

            SHA512

            22051de06c7e52a37ad36250aa095a8ccc0b0e1cdbfa2e9073c146e77e278cbdbe89bdb078dcfd8babf48baec1902b303ac39cc9db4114ce1516b06552dc924d

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG

            Filesize

            339B

            MD5

            e5e9c323b6a9533a09982b2117c61528

            SHA1

            3dc0e877803d6e16b28ce0840e2967cc74494a61

            SHA256

            ba1f3e4598c5716bbfea508fada40b7dfd0989ddabd453e8c8703c04270151fd

            SHA512

            bbfa29299a1e948506f6ec3802aceb27f8aef3a5b2e3c9789a92b2bcc959fc2523d2344739ccc89df370dde6ea23c1db5ffc7e4799b5e532b0ec85dc98996865

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG104.PNG

            Filesize

            644B

            MD5

            d59d425a5672bdb23aced47f2cf4c897

            SHA1

            6eb8bf3f328975250fb0f9fcf56bd1fe530971a9

            SHA256

            09858e3e9eea849635ec67d94dac9b6f0c1f8d4bf021fd4bd2998f7e23069026

            SHA512

            0f45ec639bb40c216dfd858df1a65766fd7ca95d5015ddbeff525dbe5433bb83ff786665864e386c92ce3ab3de0c3e409bd90b93260dc5f8ff5a983dec87b7d7

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG105.PNG

            Filesize

            40KB

            MD5

            5c1172831dec567dbdf05ae8e8a0a7f5

            SHA1

            cf9281b3bbfed132faece1c19ff5c9c0ef700d4a

            SHA256

            4d04ba36110afcd0c4d0e3c214cdfa42fb975bf3f5da6b78fd7e8f6a97eea4c5

            SHA512

            03f5341bb49404d96bf3532d1432ee3b40f377891f7ee1464011bbc7a6c76f0ea7162931fb18d89b5c16950c93bc0288da0ae5bce4f04565b627c92cd9c9972c

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG106.PNG

            Filesize

            1KB

            MD5

            a708af8ccc9c0b2ba65a828eb09651f0

            SHA1

            adefd77a4a1bc13f836b2ff7f773abb69e7f6177

            SHA256

            4ba6951d4f317a5fd8c38ccbdfb7f9731e7c5421b4bd9aeb7f83bff87ef3912a

            SHA512

            6e8e4d511bb8861a0dccba17da26147516ff70feb9ddff816e27e516432c99493a40624e482074f9fca04b9d638060e2bcf1346eeeee24019902c91b23793fff

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG108.PNG

            Filesize

            2KB

            MD5

            9e6e117037f3eea2ac5ba39de4891519

            SHA1

            156773a282502194ebc894922269dfea9fb3ba4c

            SHA256

            43398f595e5a0498cb9303252dcd5d0c0f98c1a1bc843c21debe8386e82700bd

            SHA512

            6afd9968434878ad1b739e298b351a221b00b9f140c475c9ab00d70b7e5ebaf6df6d20c70356db6f6f41c3ccb9ddbc34f1e8b4bf70f5ffcb64f0e0bdc0d9797c

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG19.PNG

            Filesize

            1KB

            MD5

            2003db45b3b05d65f34d7047e68a25bf

            SHA1

            418d27146938b810c31ddb6a1f8075e7be1d2f14

            SHA256

            10cf5fdda26ed5f3762d5a527fd2bac692034b8d848547e5c320037026317310

            SHA512

            8eb6143e3732bde22ba72da70b6ce6ee4ec9c9038334c2380b60e49dc24021792c32a2c7224bf04aa1cd8d77d57b0e3fdaf4606eeb3d4c2985bb9bd91b10738c

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.PNG

            Filesize

            280B

            MD5

            5803b5d5f862418b64caa83396e69c7f

            SHA1

            97b6c8209b8ad65f4f9f3b953fe966bb09ee4e13

            SHA256

            ee340f8560ba2e71d7e6d305b959ff8fa77869dac916287da2bff7ce5aa2e159

            SHA512

            e9bf37f0c89299bfa369a8677ac56b12177dd3153246e5e6a9390577658111b731b0ab987044d30f43e05cb41d79ed31dae3b6f4521f225925920617d0414edd

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG

            Filesize

            281B

            MD5

            60a19921c7ff3c75e28c302f95460994

            SHA1

            07ac64ffbb153c8675e2ce0651afeaa5e8c6652d

            SHA256

            33341d30463fbc7cf3fba5070925569c822b6835aabdb8ef2c3cf09547912d46

            SHA512

            b30b960152dc13b1a9d384c4972169392cd405bdf4d3ecf73f85cf8a9a68a075131b2495c0348f54d43d0e7a279907bc7b76ac103f4a624738cbfc73bbeeba02

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG45.PNG

            Filesize

            438B

            MD5

            1f4c666195230d70d3eb563429d7f2fe

            SHA1

            841e76c2570b50edb29560ff2d4c9a2cd460e4ef

            SHA256

            f1fb2782f6b321afa66a82c686ac0ce11919f38e7f33496f0f0b7241a901019b

            SHA512

            eacb98e7f9cef2f8d2ba13808f1f7a77d4244bac0b4a45ed788628064e8c86c4e15cf091b8adac1539a4705c867e72714c4b7d902ac0c281f04925661d3bce89

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG46.PNG

            Filesize

            206B

            MD5

            6b2addb09533ae5cc0650ebc8779f948

            SHA1

            7bef900d216614f9f498d33b345372e40d872628

            SHA256

            260b130f51840a7b353a640ae69484498c6ec957e37f3bac831a140db533da84

            SHA512

            769bbde3aaac255bd5464acaedae0a5b9ca0e11e9cc9ce0d71cdb4e47ee21fc3610bf43240d52cf2d9bdc74478384f5c1130f0d919927067631d01a1446aece4

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG85.PNG

            Filesize

            43KB

            MD5

            380f7b952bf592f1d46afc860e9634ad

            SHA1

            50c467afe895945bb246b700d66af758662bdbb0

            SHA256

            43303ebbb809356c71c8b040d2fa289106996aa04ccf54d9bf742db763a7213a

            SHA512

            08cba7883a4ed219f9da8537756d75a94219e2a3fb6dd50c81ca607b97388e7aedc19bebaa5d375f533f7ab17d8a748f85589f61a2e09d8a9c591ac5cd0bca8b

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG86.PNG

            Filesize

            1KB

            MD5

            93dfe531659e394eea5e5c7d6e99ccca

            SHA1

            00be7e0e02a48371c120b850410f46dd2cd4718a

            SHA256

            3fffd66684072e9aeafbda1679718a4dd1e569efa7e04df580a487aa9e4e08df

            SHA512

            a67ab0cd46fcb247e1ea47d17017aedd9e7359c739eabded9d2622d11c0a8fd49664ea383209c965d084a52b3134edd5a5be5902f1e85a85102f2c5cbc328af5

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

            Filesize

            1.7MB

            MD5

            1bbf5dd0b6ca80e4c7c77495c3f33083

            SHA1

            e0520037e60eb641ec04d1e814394c9da0a6a862

            SHA256

            bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

            SHA512

            97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd

            Filesize

            1.7MB

            MD5

            1bbf5dd0b6ca80e4c7c77495c3f33083

            SHA1

            e0520037e60eb641ec04d1e814394c9da0a6a862

            SHA256

            bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

            SHA512

            97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

            Filesize

            97KB

            MD5

            da1d0cd400e0b6ad6415fd4d90f69666

            SHA1

            de9083d2902906cacf57259cf581b1466400b799

            SHA256

            7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

            SHA512

            f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd

            Filesize

            97KB

            MD5

            da1d0cd400e0b6ad6415fd4d90f69666

            SHA1

            de9083d2902906cacf57259cf581b1466400b799

            SHA256

            7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

            SHA512

            f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

            Filesize

            1.3MB

            MD5

            a70accbc1f1001cbf1c4a139e4e5d7af

            SHA1

            138de36067af0c8f98e1f7bc4c6bea1d73bc53ab

            SHA256

            b000fef41ce0267255701aacc76c02159d207212c4595437077e7904b7968ca6

            SHA512

            46fde27847dfab38d2f6fefca31677a0d5a5ac775951fc19f1fc0b4ec56969622f0c4f036ecacc05b33854871f03232a4944f3e93a747280cac622503f5c4f04

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

            Filesize

            1.3MB

            MD5

            a70accbc1f1001cbf1c4a139e4e5d7af

            SHA1

            138de36067af0c8f98e1f7bc4c6bea1d73bc53ab

            SHA256

            b000fef41ce0267255701aacc76c02159d207212c4595437077e7904b7968ca6

            SHA512

            46fde27847dfab38d2f6fefca31677a0d5a5ac775951fc19f1fc0b4ec56969622f0c4f036ecacc05b33854871f03232a4944f3e93a747280cac622503f5c4f04

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

            Filesize

            1.3MB

            MD5

            a70accbc1f1001cbf1c4a139e4e5d7af

            SHA1

            138de36067af0c8f98e1f7bc4c6bea1d73bc53ab

            SHA256

            b000fef41ce0267255701aacc76c02159d207212c4595437077e7904b7968ca6

            SHA512

            46fde27847dfab38d2f6fefca31677a0d5a5ac775951fc19f1fc0b4ec56969622f0c4f036ecacc05b33854871f03232a4944f3e93a747280cac622503f5c4f04

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

            Filesize

            326KB

            MD5

            80d93d38badecdd2b134fe4699721223

            SHA1

            e829e58091bae93bc64e0c6f9f0bac999cfda23d

            SHA256

            c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

            SHA512

            9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

            Filesize

            326KB

            MD5

            80d93d38badecdd2b134fe4699721223

            SHA1

            e829e58091bae93bc64e0c6f9f0bac999cfda23d

            SHA256

            c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

            SHA512

            9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.dat

            Filesize

            114KB

            MD5

            4a6a32076a6ec33b804682a0630d916e

            SHA1

            5f59244343506596b8b13145cc7b7685a85b25af

            SHA256

            91106348245a378a20028de836ca8c4f8b21248d6d5b115892f1d915d3f83ab5

            SHA512

            a0ac7f21f4d9c247915615faaaff2e164e6defb58bf015cdd3420a63238df8d3c984545179a4567d48882c4c59b483819f6bf59ca532d2449cd6deb081451fd3

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

            Filesize

            1.3MB

            MD5

            2b2fb67e0f041923ce66c1d1f2d91eee

            SHA1

            31d1a53b1eaa37f6bf7aae060e696f3a5bb15741

            SHA256

            dc7cfb70877d3d264043ddda52da40d3ccb58370c202e12b3a4219432ce4091f

            SHA512

            b74cbec340b65419a65db28ba9f38631a56f4ce15beec267693825c2714d3a000847df0ea4c7054eac3cb76a44fc0b42be97a85de3e71cbba4bad97053330e4b

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

            Filesize

            1.3MB

            MD5

            2b2fb67e0f041923ce66c1d1f2d91eee

            SHA1

            31d1a53b1eaa37f6bf7aae060e696f3a5bb15741

            SHA256

            dc7cfb70877d3d264043ddda52da40d3ccb58370c202e12b3a4219432ce4091f

            SHA512

            b74cbec340b65419a65db28ba9f38631a56f4ce15beec267693825c2714d3a000847df0ea4c7054eac3cb76a44fc0b42be97a85de3e71cbba4bad97053330e4b

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe

            Filesize

            1.3MB

            MD5

            2b2fb67e0f041923ce66c1d1f2d91eee

            SHA1

            31d1a53b1eaa37f6bf7aae060e696f3a5bb15741

            SHA256

            dc7cfb70877d3d264043ddda52da40d3ccb58370c202e12b3a4219432ce4091f

            SHA512

            b74cbec340b65419a65db28ba9f38631a56f4ce15beec267693825c2714d3a000847df0ea4c7054eac3cb76a44fc0b42be97a85de3e71cbba4bad97053330e4b

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

            Filesize

            326KB

            MD5

            80d93d38badecdd2b134fe4699721223

            SHA1

            e829e58091bae93bc64e0c6f9f0bac999cfda23d

            SHA256

            c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

            SHA512

            9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll

            Filesize

            326KB

            MD5

            80d93d38badecdd2b134fe4699721223

            SHA1

            e829e58091bae93bc64e0c6f9f0bac999cfda23d

            SHA256

            c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

            SHA512

            9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

          • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini

            Filesize

            635B

            MD5

            32c804857b52cf3bbfd6be4303b1fe8c

            SHA1

            93c582dc0894d3218bfeceb2e5b6db2a45561881

            SHA256

            297866f99ad9b227f6f5d9945e8cf9fb9f0a43978353f4c7e719b6250a12cc06

            SHA512

            22b73895cbeb2c8c6d08a0ecd69f7345d4f24feeb471fe910bc1406256584563f535fbecae758e5710464951991f56bccbdd1c58da1431979ef4a9c98065d638

          • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

            Filesize

            6.3MB

            MD5

            a09d58d5281883d9b555cb8f99974f57

            SHA1

            f900108770e0ee69a88df27bfeb3aa13322385b0

            SHA256

            dd5891adfd1f98f945cd02c02a231a41c8224ccc350050b65e2b987e075920aa

            SHA512

            0f9fc01df7bd6fcf25893ef1a31d0105e19a853d81d475312c1ad4d3f17b77ad6cba659c4b78bda8040279c91947d9277987447a3795b7acb393a5eb95ae8f3c

          • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

            Filesize

            6.3MB

            MD5

            a09d58d5281883d9b555cb8f99974f57

            SHA1

            f900108770e0ee69a88df27bfeb3aa13322385b0

            SHA256

            dd5891adfd1f98f945cd02c02a231a41c8224ccc350050b65e2b987e075920aa

            SHA512

            0f9fc01df7bd6fcf25893ef1a31d0105e19a853d81d475312c1ad4d3f17b77ad6cba659c4b78bda8040279c91947d9277987447a3795b7acb393a5eb95ae8f3c

          • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

            Filesize

            6.3MB

            MD5

            a09d58d5281883d9b555cb8f99974f57

            SHA1

            f900108770e0ee69a88df27bfeb3aa13322385b0

            SHA256

            dd5891adfd1f98f945cd02c02a231a41c8224ccc350050b65e2b987e075920aa

            SHA512

            0f9fc01df7bd6fcf25893ef1a31d0105e19a853d81d475312c1ad4d3f17b77ad6cba659c4b78bda8040279c91947d9277987447a3795b7acb393a5eb95ae8f3c

          • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe

            Filesize

            6.3MB

            MD5

            a09d58d5281883d9b555cb8f99974f57

            SHA1

            f900108770e0ee69a88df27bfeb3aa13322385b0

            SHA256

            dd5891adfd1f98f945cd02c02a231a41c8224ccc350050b65e2b987e075920aa

            SHA512

            0f9fc01df7bd6fcf25893ef1a31d0105e19a853d81d475312c1ad4d3f17b77ad6cba659c4b78bda8040279c91947d9277987447a3795b7acb393a5eb95ae8f3c

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\aopalliance\aopalliance\1.0\aopalliance-1.0.jar

            Filesize

            4KB

            MD5

            04177054e180d09e3998808efa0401c7

            SHA1

            0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8

            SHA256

            0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08

            SHA512

            3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\github\junrar\junrar\0.7\junrar-0.7.jar

            Filesize

            151KB

            MD5

            75a215b9e921044cd2c88e73f6cb9745

            SHA1

            18cc717b85af0b12ba922abf415c2ff4716f8219

            SHA256

            7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc

            SHA512

            1a44af2f3f8dbfbf38ad5f71ef11b32d5822d734f77af2cdea419fb6af845e894acb60bffbcebb4533068d86b55a22a8b0f74be20b204c2343bdb165d9c787f9

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\guava\guava\19.0\guava-19.0.jar

            Filesize

            2.2MB

            MD5

            43bfc49bdc7324f6daaa60c1ee9f3972

            SHA1

            6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9

            SHA256

            58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4

            SHA512

            834f2bf4a5b35edffde0263409649aeaf34ca9a742ba511a06bb9b01626f9e774d2d3c8ba91a7905929dc8cd5e6471de29f7d0ab10260ece2af709b7fdbe4bc3

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\extentions\guice-assistedinject\4.1.0\guice-assistedinject-4.1.0.jar

            Filesize

            41KB

            MD5

            65912196b6e91f2ceb933001c1fb5c94

            SHA1

            af799dd7e23e6fe8c988da12314582072b07edcb

            SHA256

            663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868

            SHA512

            60b15182130ddfd801dd0438058d641dd5ba9122f2d1e081eb63f5e2c12fff0271d9d47c58925be0be8267ed22ae893ea9d1b251faba17dc1d2552b5d93056de

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\com\google\inject\guice\4.1.0\guice-4.1.0.jar

            Filesize

            658KB

            MD5

            41f66d1d4d250efebde3bbf8b2d55dfa

            SHA1

            eeb69005da379a10071aa4948c48d89250febb07

            SHA256

            9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e

            SHA512

            109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\dnsjava\dnsjava\2.1.8\dnsjava-2.1.8.jar

            Filesize

            307KB

            MD5

            540f330717bca9d29c8762cf6daca443

            SHA1

            eed8a2cbf56cc60d07a189a429ead3067564193c

            SHA256

            52de1ff2a7556ac2cc4284abd7123bc3d6274210fc4e3b1d9ba90efad5f6a153

            SHA512

            a4bcb8bbb43906f42faf1802c504ccc9c616e49afd5dd7db77676d13aaed79a300979ffc2195b680a9c6d5f03466b611b6f1338d824099816aa224b234760f4b

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\javax\inject\javax.inject\1\javax.inject-1.jar

            Filesize

            2KB

            MD5

            289075e48b909e9e74e6c915b3631d2e

            SHA1

            6975da39a7040257bd51d21a231b76c915872d38

            SHA256

            91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff

            SHA512

            e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\log4j\log4j\1.2.17\log4j-1.2.17.jar

            Filesize

            478KB

            MD5

            04a41f0a068986f0f73485cf507c0f40

            SHA1

            5af35056b4d257e4b64b9e8069c0746e8b08629f

            SHA256

            1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9

            SHA512

            3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\net\sf\jopt-simple\jopt-simple\4.9\jopt-simple-4.9.jar

            Filesize

            64KB

            MD5

            39c6476e4de3d4f90ad4ca0ddca48ec2

            SHA1

            ee9e9eaa0a35360dcfeac129ff4923215fd65904

            SHA256

            26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5

            SHA512

            fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\commons\commons-lang3\3.4\commons-lang3-3.4.jar

            Filesize

            424KB

            MD5

            8667a442ee77e509fbe8176b94726eb2

            SHA1

            5fe28b9518e58819180a43a850fbc0dd24b7c050

            SHA256

            734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b

            SHA512

            b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\httpcomponents\fluent-hc\4.5.13\fluent-hc-4.5.13.jar

            Filesize

            30KB

            MD5

            8f7e4f1a95a870ebee87ddacc425362c

            SHA1

            300bf1846737e34b9ea10faae257ca8fdcd0616f

            SHA256

            f883b6b027d5e05c53e48e4fe3548715c52dbd590ffa3f52d039574f1a4d0728

            SHA512

            98e30ed27d6ac078450efe5e236117445c93e05eb280399e056816c52643a3a33adce5e3a885ce8488186f38d05e0fb6c65dfcbaa509be8c6047ef2f0870d9b0

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\apache\logging\log4j\log4j-core\2.14.1\log4j-core-2.14.1.jar

            Filesize

            1.7MB

            MD5

            948dda787593340a7af1a18e328b7b7f

            SHA1

            9141212b8507ab50a45525b545b39d224614528b

            SHA256

            ade7402a70667a727635d5c4c29495f4ff96f061f12539763f6f123973b465b0

            SHA512

            6e41ff42f12deedb8da06cbed73d0a9a5389660b7ee058436f8fcb6b14a6ab3105faf8e3f2c007d38ccc85af1e704505b84be5a80d8e68a434aae82b54b85f70

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\picture-bundle\3.7\picture-bundle-3.7.jar

            Filesize

            2.1MB

            MD5

            904094a40b7d81b12936f43b49952922

            SHA1

            5ccf048dd51a7d0cdd59a1ea6ce2e3b167feacf3

            SHA256

            0cd5746118a3a38b7e6126770bc53c0f7c4641fab786e3d6004a4caace4fc536

            SHA512

            36e2bc67d73319b8f10a572ee3ca6f541aa51ca16c1efea9430111f3a058c9c922a43865b064811117f1c3892e39aee3bc79d7fc5ce20ccd75a13d447ca68911

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\skin-server-API\1.0\skin-server-API-1.0.jar

            Filesize

            14KB

            MD5

            13a8e72587ac6eacfb0986f75e51eb7c

            SHA1

            6c3daf89705427f73e6106d2d4d9619e99c5ecb5

            SHA256

            1fcffa073f722737431e2699b1f3ea48b92a3b825397d8f0d1464e4d4d15a014

            SHA512

            134735390415f60d0c42ff33a060bda508e273b35fc9aab271c20ff23f331b51cf3fa36443009e0987049f6bfb22c4098a1473e65ea0349e719fbf4b528f344e

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tlauncher\tlauncher-resource\1.4\tlauncher-resource-1.4.jar

            Filesize

            3.2MB

            MD5

            acbc8aa5ba5cdddf5f1e67befe8cc597

            SHA1

            63b4bf89744b532e65c1afa3294743d2b3798f2b

            SHA256

            1f46b3a163012f9729905633b5e5e03ce385066ae43138a564729c942f9ca6b9

            SHA512

            d974a032d9af451c0dd51fbc0d64840f3e03eb502f40e4ab60d6722913b8a48d44a75752fcff60656e4d19089570a894222959745af11bcdf93ea1544192fee3

          • C:\Users\Admin\AppData\Roaming\.minecraft\tlauncher_libraries\org\tukaani\xz\1.5\xz-1.5.jar

            Filesize

            97KB

            MD5

            51050e595b308c4aec8ac314f66e18bc

            SHA1

            9c64274b7dbb65288237216e3fae7877fd3f2bee

            SHA256

            86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840

            SHA512

            c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.BMP

            Filesize

            451KB

            MD5

            0b445ace8798426e7185f52b7b7b6d1e

            SHA1

            7a77b46e0848cc9b32283ccb3f91a18c0934c079

            SHA256

            2bbf97ccba3f87d469eac909c4ce8a3f13ed29c8f31b611e7d5cf89a0619eda6

            SHA512

            51523d5b711481293305465a3a3c6a3a50dca984cdc8cca1f4c44f3c21bfa430cd9aac1a8782d9605e6954cbafb307beb6b1a52e9785de1bc3f71067d80c6b6e

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG23.PNG

            Filesize

            1KB

            MD5

            714ff209a00d50ca301063a38165db1d

            SHA1

            1400fdbe5e535b581b34c054183929a7e5548a69

            SHA256

            7749ac363a9f638040d0fb132be254e7569ca94e8e9e7917d1cb78050d2387d6

            SHA512

            d6bb2a5229300b6ad307e430d9e5e02fcbc9316dfbac0b836fcb6cb2f95739716c628d4afef61e8d34dae33f6345550bccd57b3b01cdc5f9335811e5e3fac6e4

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG

            Filesize

            45KB

            MD5

            b3af6be5f4d16abd764157ec3cffb2c4

            SHA1

            bdb2c7ae18e9dd6d2edf3ed59be14ccfc400f4b1

            SHA256

            0e34299965ba1e761daabad45cad9aa27dccaf90a30a4badf5008b6a3d15cb5c

            SHA512

            eaf0951a615dbc0c7d6a364a53fd3401b60f53875f5d9a3bba922eeeadff83cb12b81e4b8cae1c612c3782c3c16b20a6e0d882dd913bbb533277d82af71a317d

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG41.PNG

            Filesize

            457B

            MD5

            6afc90de971a64e963b2b2b2c9cfe0d3

            SHA1

            2198f7fc711a848ee4c20b51e72819b07bb81ce9

            SHA256

            d720258ffe5025af550847c3f674ca9854eb052b0bd964a40b920188d26f3ab4

            SHA512

            e418485b852e6ebed96bd85da59254ff63b7c6e390e71ae3e298252fee980b89942bd26070c4ae6615f44685fb496a87f7549a1ae45e2fcf091c10ae2bef661a

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG42.PNG

            Filesize

            352B

            MD5

            269665f4752b9a668b8ead9b4d6cead8

            SHA1

            9eac14e0358fde1a2d7bbcdaf61eee90b46589bb

            SHA256

            68c133a816069421a9e384aeffdb3dff59945ce69da2a77da947545aead75b27

            SHA512

            0c2040775584d05271b701b3e43c45c621b48e63b537f9d441bddd44d25d18042fdb3a213836c6b52582bb358d7cb08bce9c292f4ce0c79dc0ad879d259fb74e

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG48.PNG

            Filesize

            1KB

            MD5

            6ac1b334813957693405396f4796860b

            SHA1

            0b65e65880496bb6a610bd9f247557ac82d8a977

            SHA256

            2e7817a1fac90ec183ec3d2325162a23078ddff4cd2c387d2b74f7d70321b4aa

            SHA512

            9319cd0beb9a114c334bc82ae618708fef4ef43ca3d70b112f60dcc38a68ecb8c728073c169d65d76e05e72e47624859a48e80e8e44e0e8d2fa4cd425f6f59fb

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG5.PNG

            Filesize

            1KB

            MD5

            14a02d0eb05243706364523f60261125

            SHA1

            d46052613634f65f7b2fb02058edd65acc7f79f0

            SHA256

            3d8a062470073015df141295ca78a41b68b39d24b17f50b212060c3677c02494

            SHA512

            15d99962f96cde8329b981701d2fdc8a46085b6b60d324c41cca5a27ba425fa24567a51b0ed91e2da70c7717e2a70e6882691a509a25d2c6a306527d0507ec61

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG66.PNG

            Filesize

            41KB

            MD5

            93989ba5ff12871a1574740f636c8698

            SHA1

            44c795f434bffd4efcdb915cffd1f18f959e08ba

            SHA256

            8585b72b8a5088e213b97ddb2f25a4bf5502a7c65058817722e0332b6017facb

            SHA512

            bd8f78d1ea50d05a528784b276b846f091a258bb51e27c7e6fb4d8757c05c62c801df570edaba67ad457e7cf3ef2363c777bccf56e9c8b68a74acf2a453825d2

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG67.PNG

            Filesize

            1KB

            MD5

            63710485777644af1779a06c56114dc3

            SHA1

            0c3fa7da31833a1e38acb5a7ef8b67e4fe96bba3

            SHA256

            9b55555c0b68c45073787fe674e622c38b0052baaed0ce72c209248ae2b084e4

            SHA512

            f5d7b20fd5207e71ee59cebffb8efffb5dd5bb24fde40622805da09e2ffc6c9d22fa31830f26780cdb67283d201c473829a116de5a67f3d5aa1a41c44d16adfe

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

            Filesize

            33KB

            MD5

            447e3de7f9420edf2fcf9243e39a55d0

            SHA1

            3c6ccd08585cbc960d6d0d79b2e3fc8135d0329b

            SHA256

            c178ff10771c96a88d0eb2feb1c7faeb3c48becc439f8b0fb904aef71bdad645

            SHA512

            73e682fe676646615d3adecf9d8dab0d8d6676d62d4e57368ed29062176547119a9b7bf965faffe348d094d9aadb7e88f5f55b639ab7de2a67b9ec5f699b5bf5

          • C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml

            Filesize

            6KB

            MD5

            4f7be9736242579cb8afa1af86980dfe

            SHA1

            1c486393847996db4f6b78532dd7bd9a0a924549

            SHA256

            9cecc28716f392d2394829f4cc3f307d08f5aecaf3e2124bdaaa0d6d9c3400b4

            SHA512

            4c55bc2698d8934713e791c015480248198e22efa66dd5ca79ea834b9835c9e85ca8c2869c9b40dc394ae7e27da039f79c392f88472dedc1adfa83dd1e94f1c9

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre-8u281-windows-x64.tar.gz

            Filesize

            58.2MB

            MD5

            d0889c6979f6e4f69d7a9539cd10eadc

            SHA1

            9ef9e23455b8994ecab2c914ed894d9fa7806f37

            SHA256

            bddc4d04cf8221eb2dac90e2ec5441e56ed2486c1f3aebccdc395962fbd58f9f

            SHA512

            b312da895ecf3639e8c4c8e95184526d6cd3e6047d74c0d1f05bdf22d5b5fd685129a332db19d28fa525c862127a65c97c367d0923b4f6eedd5190eb3a99489f

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\java.dll

            Filesize

            160KB

            MD5

            949fc2c63994ec317abcccfc1452ef22

            SHA1

            41d496159e826e894988ad1dcca7918d10e793e5

            SHA256

            6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8

            SHA512

            26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\java.dll

            Filesize

            160KB

            MD5

            949fc2c63994ec317abcccfc1452ef22

            SHA1

            41d496159e826e894988ad1dcca7918d10e793e5

            SHA256

            6cca6ced25b89323900dc9e5f75604c922a78bd70887ef003313f9e2e7b9aca8

            SHA512

            26f13807dce767a89d053690023ca322409dc819120f213944291f06e597a0d4f0a08435251d69a74bc15811540ba7f2472bf5962f0f66515603e34b0cd2815c

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

            Filesize

            270KB

            MD5

            74198e9118b9b57592f08fed2380ddb6

            SHA1

            e5c6541d4a133d434192155f758b750a17a532c5

            SHA256

            a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458

            SHA512

            c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe

            Filesize

            270KB

            MD5

            74198e9118b9b57592f08fed2380ddb6

            SHA1

            e5c6541d4a133d434192155f758b750a17a532c5

            SHA256

            a8c0c9cd921236b8b47c62718638690e74edebdfd555f306ce3247207e032458

            SHA512

            c1838904824f7d7fba36e811a2b81f68beaba2f26b6ba1dd5249c6e3289583b818afb3fd934a08d526c30bd983240dcab0679f6a3f62fb29998430e75df92026

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\management.dll

            Filesize

            40KB

            MD5

            37b0569971b26876e53c6de81a1b3f92

            SHA1

            b11cd13b385201dcfc0c0a493c4590975159b902

            SHA256

            24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b

            SHA512

            d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\management.dll

            Filesize

            40KB

            MD5

            37b0569971b26876e53c6de81a1b3f92

            SHA1

            b11cd13b385201dcfc0c0a493c4590975159b902

            SHA256

            24a6e6375ec24524f4c035184b5e142712940861ddfabc44a48e8848e830f87b

            SHA512

            d030d024e52c3f8ec36fb9cb4bc8d83877256b4eeb89bb2028c7069ff2aea8e9f725b43822ee721f116b2cb2534940366f4be3feb05bc72c2299b190aac9ed97

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

            Filesize

            613KB

            MD5

            c1b066f9e3e2f3a6785161a8c7e0346a

            SHA1

            8b3b943e79c40bc81fdac1e038a276d034bbe812

            SHA256

            99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd

            SHA512

            36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\msvcp140.dll

            Filesize

            613KB

            MD5

            c1b066f9e3e2f3a6785161a8c7e0346a

            SHA1

            8b3b943e79c40bc81fdac1e038a276d034bbe812

            SHA256

            99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd

            SHA512

            36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\net.dll

            Filesize

            100KB

            MD5

            1f06a0a450a470a60370089408237e36

            SHA1

            ab488bc6dd912a4107ee6753d760fa2a0c9ca2f0

            SHA256

            69ae7599e82c5c25906faf7f845421405caad07acdbb5f1021aa56e170c5152b

            SHA512

            1d41781c4b86ff2fe62650f8db32ba6df3cc029d0faf9d4f21a3fdace2f3bd7ab667e70a0055cf7b84b54762ee35dcdd032ccb41bf02787b3e28bb7230ad0ea9

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

            Filesize

            8.2MB

            MD5

            b6eccb52a3c72e3359419bedac89ccad

            SHA1

            e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595

            SHA256

            c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d

            SHA512

            34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\server\jvm.dll

            Filesize

            8.2MB

            MD5

            b6eccb52a3c72e3359419bedac89ccad

            SHA1

            e0448d8ac5a0ddee4ad91c6d373ae6467b3b4595

            SHA256

            c39842d7a68037629d734cef260af727c5346177929030adc00b0adc4671088d

            SHA512

            34b9fe1dda4624afe286440fc607d4b2d2e6a905974748fbb740132c825df6d2638d32f914881a9db79660be821e9ec9ca26c40a1ed382f72d7b70944bce384a

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

            Filesize

            83KB

            MD5

            1453290db80241683288f33e6dd5e80e

            SHA1

            29fb9af50458df43ef40bfc8f0f516d0c0a106fd

            SHA256

            2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

            SHA512

            4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\vcruntime140.dll

            Filesize

            83KB

            MD5

            1453290db80241683288f33e6dd5e80e

            SHA1

            29fb9af50458df43ef40bfc8f0f516d0c0a106fd

            SHA256

            2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

            SHA512

            4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

            Filesize

            51KB

            MD5

            900d7fa750bfddfc160e1732470d305d

            SHA1

            fc5c9fa077eceb5886e3b88fc94ad08937f6387b

            SHA256

            f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e

            SHA512

            243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\verify.dll

            Filesize

            51KB

            MD5

            900d7fa750bfddfc160e1732470d305d

            SHA1

            fc5c9fa077eceb5886e3b88fc94ad08937f6387b

            SHA256

            f6d5e4a6d7b3f960bda6863bbacbde7834460fe83d778b74f7ed1f51bd62a25e

            SHA512

            243ba475580fa58d5b45b2d5c4faaf454136dc761eb293399309ebc5ee8f7caead67aef2482776bc16e87a11baf74d6431c71dd12fadb9d38c4b8af6b839889d

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\zip.dll

            Filesize

            81KB

            MD5

            2bad0abfd30c0bf121f5374f35702fcd

            SHA1

            f88f5c79d8f24d140ffbf88cd245cd9277f69887

            SHA256

            99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8

            SHA512

            f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\bin\zip.dll

            Filesize

            81KB

            MD5

            2bad0abfd30c0bf121f5374f35702fcd

            SHA1

            f88f5c79d8f24d140ffbf88cd245cd9277f69887

            SHA256

            99a91373caf1f2e1fdb0c2c7975e5c8e8b8958bcfa640341dfece09fa4f1a5d8

            SHA512

            f3bf0ba14a8233fe6db50a07d33be809f1b6112ac957be214433ab240a66eee9917890fabbe5e18a3e8ab9abb795a0ffb91755d083a0da4ff419060d15eb134f

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\amd64\jvm.cfg

            Filesize

            634B

            MD5

            499f2a4e0a25a41c1ff80df2d073e4fd

            SHA1

            e2469cbe07e92d817637be4e889ebb74c3c46253

            SHA256

            80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb

            SHA512

            7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\charsets.jar

            Filesize

            2.9MB

            MD5

            67374911df954ceea5e7f39ef34f457d

            SHA1

            a4e92db3d9d0dca3b248f8539e04ef09c8b4fdf3

            SHA256

            1084059cc0a99a04bc55582772311050274bc38710095e3828acb0c3c049c5f1

            SHA512

            7dc21958aabc59c07968b8756138c3f5aaac51d2db74c5b7573476b169c27528e9f3a3484794d189b23cb1ce7f364e916bd7909f2fe5993740f93f3099bca72b

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\ext\meta-index

            Filesize

            1KB

            MD5

            005faac2118450bfcd46ae414da5f0e5

            SHA1

            9f5c887e0505e1bb06bd1fc7975a3219709d061d

            SHA256

            f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8

            SHA512

            8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jce.jar

            Filesize

            115KB

            MD5

            add502acaefc139fe3ae8e7e484a41c3

            SHA1

            cf4be57ad520baa55d9e526c411c4a6e41a029cd

            SHA256

            f583dadafc2e1672da2861428d20d6c91ce702ec7f34bf5f5f97f15ea080395d

            SHA512

            5d43c9d2eb3e89ef8ef2d7a35c3942f641e13bffb324a548b9527374eac305ed3b7d2d73361b18448871c2fd3d14ee50c027969ba90330e22fa19dd7e49b50fb

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jfr.jar

            Filesize

            559KB

            MD5

            7b55067c892d4e543c50dfe339d3c045

            SHA1

            08d82c6684351b73220d25d8dec22107d033a772

            SHA256

            d20e6f6d62f6e392640124fbf4319780130e3cd128bd4823eeb92d2b77b331ca

            SHA512

            dd97f44a5018b361cdbea244c09831488c36a7e4b170533b861930c6ba794068f15b1ce01b3be2dce1f38d68e01ba2ce2f9fda0c936e4bcc0f29c73d548398a1

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\jsse.jar

            Filesize

            1.8MB

            MD5

            dba0bf9f6b98935aedc0fb9a51b595c7

            SHA1

            234537e4eb503680683d447fccc6e6cb6ef6d58e

            SHA256

            6870cf65be3347816aed672938540d119b9442168bafa22821f490e671772799

            SHA512

            454a43cc175436c6c039f9a1608344f7d323243da77dfdcae7f7e61798ea7a6243b9f9d8975968ec8dd5d4ad21579532c15cee52f6e4ded72ca51839b4f7731e

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\meta-index

            Filesize

            2KB

            MD5

            91aa6ea7320140f30379f758d626e59d

            SHA1

            3be2febe28723b1033ccdaa110eaf59bbd6d1f96

            SHA256

            4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4

            SHA512

            03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\resources.jar

            Filesize

            3.4MB

            MD5

            168ce2722069378d518639bf864e5cc7

            SHA1

            d4ec09c71649c578648bbcb487ab4d89d8cdfd39

            SHA256

            7f959725602ff75a444d619a140d2302420afa2dbb1db2fecbbf7b92358901ab

            SHA512

            2ef79da45a0c61aa788661e28a7b26f675e22fe0c2349ddf153a023d0039eb08d3e1999b5c8117c700550256fe5398eebe99cd823279ea1878705db4b998d967

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\rt.jar

            Filesize

            55.9MB

            MD5

            5c062287b4a25eed5c83df127b12d38f

            SHA1

            ac886d9b1a4752d40e785ae3c615ae25ecd915e8

            SHA256

            d2bcebe473f012947406ab488cfa125c356d0bf9d7ed44e247d5370de0600bf6

            SHA512

            f8723b78c5088f110e3aa0d7a55ecbe6d27301f433d2cf778e9217b5424705d913bb1769f6f07a06fb982d0500d3f158716bb08614a601f661a714341065e2cf

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\security\java.security

            Filesize

            49KB

            MD5

            44e161cddfff8b98e40eb76212b5654f

            SHA1

            9d2da007c0747c6dcf7b27e70805fc38f6f521d4

            SHA256

            0457564ff35fcc49b4e33f26e6b46a32b68095034c3bdfc17508d8c4c6b1db0f

            SHA512

            b6f05e107c3a80eab39100ca82475e84bcc02edeb95e1ac8f7fcf5e8e72fc683f09cddb0f4a13c1363556832dfb2f0c94aa460c52c70b5e54063944003235b9b

          • C:\Users\Admin\AppData\Roaming\.tlauncher\jvms\jre1.8.0_281\lib\tzdb.dat

            Filesize

            105KB

            MD5

            87bf51971bb056fd8b4e295905557467

            SHA1

            e2ab9b21bed47a7863566f4f4a1587f2fde744d7

            SHA256

            b0b5edb15f66402c4c2510a7aa800e5284e2cc32946cd44014332ce18c76e5e9

            SHA512

            fabf88cda16226fee963dc75146bc52ce04163ddafb89e84604bfccbc13cabd00aac0d0342c153e85b9511d90e4d5ef03ad75a118d47967e4f1b08eb1356af9f

          • C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties

            Filesize

            51B

            MD5

            0be4039e02088aff2c121cbcb0f89243

            SHA1

            bad869c66d5e6d7fdc95dd100aa5fe68688a0ba3

            SHA256

            25ab0443ac9bc0c48ec875af94452c3f79db5b422e6d2b06441100379f7c6ce3

            SHA512

            6e4dbe19849fc3b3a95b617215d4ffe31d1c5132191a04d3414f53d7a68a7fca6d5d0314cefd602fb5ca75e27259afbc2e6befd033c01c130dcbb556a417590f

          • C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3011986978-2180659500-3669311805-1000\83aa4cc77f591dfc2374580bbd95f6ba_ecc70296-7405-4ae7-81c8-95373cc69196

            Filesize

            45B

            MD5

            c8366ae350e7019aefc9d1e6e6a498c6

            SHA1

            5731d8a3e6568a5f2dfbbc87e3db9637df280b61

            SHA256

            11e6aca8e682c046c83b721eeb5c72c5ef03cb5936c60df6f4993511ddc61238

            SHA512

            33c980d5a638bfc791de291ebf4b6d263b384247ab27f261a54025108f2f85374b579a026e545f81395736dd40fa4696f2163ca17640dd47f1c42bc9971b18cd

          • C:\Users\Admin\Videos\Captures\desktop.ini

            Filesize

            190B

            MD5

            b0d27eaec71f1cd73b015f5ceeb15f9d

            SHA1

            62264f8b5c2f5034a1e4143df6e8c787165fbc2f

            SHA256

            86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

            SHA512

            7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

          • memory/320-2306-0x0000000000400000-0x0000000000417000-memory.dmp

            Filesize

            92KB

          • memory/712-2301-0x0000000000400000-0x0000000000417000-memory.dmp

            Filesize

            92KB

          • memory/1104-2274-0x0000000000400000-0x0000000000417000-memory.dmp

            Filesize

            92KB

          • memory/1204-2325-0x00000000021E0000-0x00000000021E1000-memory.dmp

            Filesize

            4KB

          • memory/1256-1824-0x0000000000400000-0x0000000000417000-memory.dmp

            Filesize

            92KB

          • memory/3540-527-0x0000000000D80000-0x0000000001168000-memory.dmp

            Filesize

            3.9MB

          • memory/3540-536-0x0000000000D80000-0x0000000001168000-memory.dmp

            Filesize

            3.9MB

          • memory/4020-2312-0x0000000002960000-0x0000000002961000-memory.dmp

            Filesize

            4KB

          • memory/4020-2297-0x0000000002960000-0x0000000002961000-memory.dmp

            Filesize

            4KB

          • memory/4836-2283-0x000001E8C0E70000-0x000001E8C0E71000-memory.dmp

            Filesize

            4KB

          • memory/4836-2275-0x000001E8C0E70000-0x000001E8C0E71000-memory.dmp

            Filesize

            4KB

          • memory/4884-524-0x0000000010000000-0x0000000010051000-memory.dmp

            Filesize

            324KB

          • memory/4884-1528-0x0000000010000000-0x0000000010051000-memory.dmp

            Filesize

            324KB

          • memory/4884-520-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-147-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-1542-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-462-0x0000000010000000-0x0000000010051000-memory.dmp

            Filesize

            324KB

          • memory/4884-1543-0x0000000010000000-0x0000000010051000-memory.dmp

            Filesize

            324KB

          • memory/4884-1821-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-588-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-461-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/4884-441-0x00000000064A0000-0x00000000064A3000-memory.dmp

            Filesize

            12KB

          • memory/4884-440-0x0000000010000000-0x0000000010051000-memory.dmp

            Filesize

            324KB

          • memory/4884-1527-0x0000000000560000-0x0000000000948000-memory.dmp

            Filesize

            3.9MB

          • memory/5104-2264-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1846-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1835-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1865-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1887-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1934-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB

          • memory/5104-1891-0x0000000000CF0000-0x0000000000CF1000-memory.dmp

            Filesize

            4KB