Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

TLauncher-....1.exe

windows7-x64

8

TLauncher-....1.exe

windows10-2004-x64

8

Resubmissions

05/01/2023, 21:46 UTC

230105-1mphvaha6x 8

05/01/2023, 21:41 UTC

230105-1j6b7aha5y 8

Analysis

  • max time kernel
    115s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2023, 21:46 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.86-Installer-1.0.1.exe

  • Size

    21.7MB

  • MD5

    f643be370cc9763a17f7746b1b6a0243

  • SHA1

    c65391f59a6e1421d783eaf43eb9661cfd476f82

  • SHA256

    5ab5f39d143b6ff77df2fd5026ac8e4788edfd3de27a4e1fa4b420a7d2f61d38

  • SHA512

    5ce377dc1a4a59723cf2b969c0cadb3197e5bf61d0064e2e8c94a0be9d4fd1cd9b33e05078a17e89f54b763e180be32ce14b46949a58ff47e5df18183291142f

  • SSDEEP

    393216:WXYwVCtYto0fs/dQETVlOBbpFEj9GZdqV56HpkbGCST7yuk9sLx:WowVCWTHExiTTqqHpMsV

Score
8/10
adwarediscoverypersistencespywarestealerupx

Malware Config

Signatures

  • Blocklisted process makes network request 3 IoCs
  • Downloads MZ/PE file
  • Executes dropped EXE 36 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • UPX packed file 45 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 27 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 6 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1388
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1908426 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.86-Installer-1.0.1.exe" "__IRCT:3" "__IRTSS:22693301" "__IRSID:S-1-5-21-4063495947-34355257-727531523-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:588
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1908
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1814730 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1839152" "__IRSID:S-1-5-21-4063495947-34355257-727531523-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies system certificate store
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:552
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Modifies system certificate store
            • Suspicious use of WriteProcessMemory
            PID:1400
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x1a4,0x1a8,0x1ac,0x178,0x1b0,0x71878658,0x71878668,0x71878674
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1848
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1568
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1400 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230105214711" --session-guid=a434fbc3-42f8-4ddb-bd2a-90baf3c6b966 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1003000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of WriteProcessMemory
              PID:664
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x1b0,0x1b4,0x1b8,0x178,0x1bc,0x70e88658,0x70e88668,0x70e88674
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1648
              • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\installer.exe" --backend --initial-pid=1400 --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111" --session-guid=a434fbc3-42f8-4ddb-bd2a-90baf3c6b966 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=94.0.4606.54
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates connected drives
                • Modifies registry class
                PID:1252
                • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\installer.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x174,0x178,0x17c,0x148,0x180,0x7fef6b02c98,0x7fef6b02ca8,0x7fef6b02cb8
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:1980
                • C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe" --start-maximized
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:2072
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --start-maximized --ran-launcher
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2104
                    • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_crashreporter.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x15c,0x160,0x164,0x130,0x168,0x7feeec49490,0x7feeec494a0,0x7feeec494b0
                      10⤵
                      • Executes dropped EXE
                      PID:2132
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:cashback=on --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1152 --field-trial-handle=1240,i,9383946931744441390,18422416504931151824,131072 /prefetch:2
                      10⤵
                      • Executes dropped EXE
                      PID:2376
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:cashback=on --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --mojo-platform-channel-handle=1396 --field-trial-handle=1240,i,9383946931744441390,18422416504931151824,131072 /prefetch:8
                      10⤵
                      • Executes dropped EXE
                      PID:2520
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\_sfx.exe"
              6⤵
              • Executes dropped EXE
              PID:2004
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:396
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x148,0x14c,0x150,0x11c,0x154,0x12a2dc0,0x12a2dd0,0x12a2ddc
                7⤵
                • Executes dropped EXE
                PID:2032
      • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
        "C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1
        3⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:1280
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:472
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x520
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1768
    • C:\Windows\system32\msiexec.exe
      C:\Windows\system32\msiexec.exe /V
      1⤵
      • Blocklisted process makes network request
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      PID:2264
      • C:\Program Files\Java\jre1.8.0_51\installer.exe
        "C:\Program Files\Java\jre1.8.0_51\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_51\\" STATIC=1 REPAIRMODE=0
        2⤵
        • Executes dropped EXE
        • Registers COM server for autorun
        • Installs/modifies Browser Helper Object
        • Drops file in Program Files directory
        • Modifies Internet Explorer settings
        • Modifies registry class
        PID:1992
        • C:\ProgramData\Oracle\Java\installcache_x64\bspatch.exe
          "bspatch.exe" baseimagefam8 newimage diff
          3⤵
          • Executes dropped EXE
          PID:1600
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\deploy.pack" "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar"
          3⤵
          • Executes dropped EXE
          PID:2532
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\javaws.pack" "C:\Program Files\Java\jre1.8.0_51\lib\javaws.jar"
          3⤵
          • Executes dropped EXE
          PID:2576
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\plugin.pack" "C:\Program Files\Java\jre1.8.0_51\lib\plugin.jar"
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          PID:796
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\rt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\rt.jar"
          3⤵
          • Executes dropped EXE
          PID:2224
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\charsets.pack" "C:\Program Files\Java\jre1.8.0_51\lib\charsets.jar"
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          PID:2736
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\jsse.pack" "C:\Program Files\Java\jre1.8.0_51\lib\jsse.jar"
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          PID:2584
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\localedata.jar"
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          PID:2744
        • C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\unpack200.exe" -r "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.pack" "C:\Program Files\Java\jre1.8.0_51\lib\ext\jfxrt.jar"
          3⤵
          • Executes dropped EXE
          PID:1792
        • C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -Xshare:dump
          3⤵
          • Executes dropped EXE
          PID:1856
        • C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe
          "C:\Program Files\Java\jre1.8.0_51\bin\javaws.exe" -wait -fix -permissions -silent
          3⤵
            PID:2816
            • C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe
              "C:\Program Files\Java\jre1.8.0_51\bin\javaw.exe" -classpath "C:\Program Files\Java\jre1.8.0_51\lib\deploy.jar" com.sun.deploy.panel.JreLocator
              4⤵
                PID:2380
              • C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe
                "C:\Program Files\Java\jre1.8.0_51\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files\Java\jre1.8.0_51" -vma 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 -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==
                4⤵
                  PID:2652
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --start-maximized --ran-launcher --flag-switches-begin --flag-switches-end --enable-quic --lowered-browser
            1⤵
            • Executes dropped EXE
            • Checks computer location settings
            • Adds Run key to start application
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2660
            • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_crashreporter.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x15c,0x160,0x164,0x130,0x168,0x7feeec49490,0x7feeec494a0,0x7feeec494b0
              2⤵
              • Executes dropped EXE
              PID:2692
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:cashback=on --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1096 --field-trial-handle=1152,i,8712957418122469146,17137218189607560312,131072 /prefetch:2
              2⤵
                PID:2904
              • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1
                2⤵
                • Executes dropped EXE
                PID:2072
                • C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_autoupdate.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\94.0.4606.54\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.54 --initial-client-data=0x138,0x13c,0x140,0x10c,0x144,0x1403dab38,0x1403dab48,0x1403dab58
                  3⤵
                  • Executes dropped EXE
                  PID:2392
            • C:\Windows\system32\taskeng.exe
              taskeng.exe {C43868BE-85BA-4441-8143-1BAC3FC45CF7} S-1-5-21-4063495947-34355257-727531523-1000:RYNKSFQE\Admin:Interactive:[1]
              1⤵
                PID:2076
                • C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate --autoupdaterequesttype=automatic --autoupdateoperaversion=94.0.4606.54 --newautoupdaterlogic
                  2⤵
                  • Executes dropped EXE
                  PID:2480
                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                    3⤵
                    • Executes dropped EXE
                    PID:1188

              Network

              • flag-unknown
                DNS
                dl2.tlauncher.org
                irsetup.exe
                Remote address:
                8.8.8.8:53
                Request
                dl2.tlauncher.org
                IN A
                Response
                dl2.tlauncher.org
                IN A
                104.20.234.70
                dl2.tlauncher.org
                IN A
                104.20.235.70
              • flag-unknown
                GET
                https://dl2.tlauncher.org/check_latest_tl.php?optime=0
                irsetup.exe
                Remote address:
                104.20.234.70:443
                Request
                GET /check_latest_tl.php?optime=0 HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: dl2.tlauncher.org
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Date: Thu, 05 Jan 2023 21:46:43 GMT
                Content-Type: text/plain;charset=UTF-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                content-description: File Transfer
                Cache-Control: no-store
                pragma: public
                CF-Cache-Status: DYNAMIC
                Server: cloudflare
                CF-RAY: 784f68850ea383db-BRU
                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
              • flag-unknown
                DNS
                net.geo.opera.com
                irsetup.exe
                Remote address:
                8.8.8.8:53
                Request
                net.geo.opera.com
                IN A
                Response
                net.geo.opera.com
                IN CNAME
                eu.net.opera.com
                eu.net.opera.com
                IN A
                185.26.182.111
                eu.net.opera.com
                IN A
                185.26.182.112
              • flag-unknown
                GET
                https://net.geo.opera.com/opera/stable/windows?utm_medium=apb&utm_source=MSTL&utm_campaign=OperaDesktop
                irsetup.exe
                Remote address:
                185.26.182.111:443
                Request
                GET /opera/stable/windows?utm_medium=apb&utm_source=MSTL&utm_campaign=OperaDesktop HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: net.geo.opera.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:04 GMT
                Content-Type: application/octet-stream
                Transfer-Encoding: chunked
                Connection: keep-alive
                Content-Disposition: attachment; filename=OperaSetup.exe
                ETag: "b5cbb9fa7c4ca3f8ee6df2efabfcbc08"
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                DNS
                tlauncher.org
                irsetup.exe
                Remote address:
                8.8.8.8:53
                Request
                tlauncher.org
                IN A
                Response
                tlauncher.org
                IN A
                104.20.234.70
                tlauncher.org
                IN A
                104.20.235.70
              • flag-unknown
                DNS
                desktop-netinstaller-sub.osp.opera.software
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                desktop-netinstaller-sub.osp.opera.software
                IN A
                Response
                desktop-netinstaller-sub.osp.opera.software
                IN CNAME
                submit-target.osp.opera.software
                submit-target.osp.opera.software
                IN CNAME
                submit.geo.opera.com
                submit.geo.opera.com
                IN CNAME
                submit-am4.osp.opera.software
                submit-am4.osp.opera.software
                IN A
                82.145.217.121
              • flag-unknown
                DNS
                autoupdate.geo.opera.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                autoupdate.geo.opera.com
                IN A
                Response
                autoupdate.geo.opera.com
                IN CNAME
                eu-autoupdate.opera.com
                eu-autoupdate.opera.com
                IN A
                185.26.182.124
                eu-autoupdate.opera.com
                IN A
                185.26.182.123
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 817
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:14 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 253
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:15 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 247
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:15 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 450
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:17 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                GET
                https://autoupdate.geo.opera.com/geolocation/
                opera-installer-bro.exe
                Remote address:
                185.26.182.124:443
                Request
                GET /geolocation/ HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: autoupdate.geo.opera.com
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:14 GMT
                Content-Type: application/json; charset=utf-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                Allow: HEAD, GET
                Cache-Control: no-cache, no-store, must-revalidate, max-age=0
                Pragma: no-cache
                Expires: Thu, 1 Jan 1970 00:00:01 GMT
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                POST
                https://autoupdate.geo.opera.com/v2/netinstaller/Stable/windows/x64
                opera-installer-bro.exe
                Remote address:
                185.26.182.124:443
                Request
                POST /v2/netinstaller/Stable/windows/x64 HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: autoupdate.geo.opera.com
                Content-Length: 528
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:17 GMT
                Content-Type: application/json; charset=utf-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                Allow: GET, HEAD, POST
                Cache-Control: no-cache, no-store, must-revalidate, max-age=0
                Pragma: no-cache
                Expires: Thu, 1 Jan 1970 00:00:01 GMT
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                POST
                https://autoupdate.geo.opera.com/api/prefs/?product=Opera&version=94.0.4606.54
                opera-installer-bro.exe
                Remote address:
                185.26.182.124:443
                Request
                POST /api/prefs/?product=Opera&version=94.0.4606.54 HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: autoupdate.geo.opera.com
                Content-Length: 528
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:48 GMT
                Content-Type: application/json; charset=utf-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                Allow: HEAD, GET, POST
                Cache-Control: no-cache, no-store, must-revalidate, max-age=0
                Pragma: no-cache
                Expires: Thu, 1 Jan 1970 00:00:01 GMT
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                DNS
                features.opera-api.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                features.opera-api.com
                IN A
                Response
                features.opera-api.com
                IN CNAME
                features.geo.opera.com
                features.geo.opera.com
                IN CNAME
                am4-features.opera-api.com
                am4-features.opera-api.com
                IN CNAME
                am4.lb.opera.technology
                am4.lb.opera.technology
                IN A
                82.145.216.15
                am4.lb.opera.technology
                IN A
                82.145.216.16
              • flag-unknown
                GET
                https://features.opera-api.com/api/v2/features?country=US&language=en&uuid=aab0263e-7f0f-4148-9ba2-77953a31de2a&product=&channel=Stable&version=94.0.4606.54
                opera-installer-bro.exe
                Remote address:
                82.145.216.15:443
                Request
                GET /api/v2/features?country=US&language=en&uuid=aab0263e-7f0f-4148-9ba2-77953a31de2a&product=&channel=Stable&version=94.0.4606.54 HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: features.opera-api.com
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:15 GMT
                Content-Type: application/json; charset=UTF-8
                Content-Length: 1592
                Connection: keep-alive
                Cache-Control: max-age=3474
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                DNS
                download.opera.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                download.opera.com
                IN A
                Response
                download.opera.com
                IN CNAME
                download.geo.opera.com
                download.geo.opera.com
                IN CNAME
                eu-download.opera.com
                eu-download.opera.com
                IN A
                185.26.182.117
                eu-download.opera.com
                IN A
                185.26.182.122
              • flag-unknown
                GET
                https://download.opera.com/download/get/?id=59942&autoupdate=1&ni=1&stream=stable&utm_campaign=OperaDesktop&utm_medium=apb&utm_source=MSTL&niuid=ff609fca-2f18-41f0-bc66-feb1f30879d6
                opera-installer-bro.exe
                Remote address:
                185.26.182.117:443
                Request
                GET /download/get/?id=59942&autoupdate=1&ni=1&stream=stable&utm_campaign=OperaDesktop&utm_medium=apb&utm_source=MSTL&niuid=ff609fca-2f18-41f0-bc66-feb1f30879d6 HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: download.opera.com
                Cache-Control: no-cache
                Response
                HTTP/1.1 302 Found
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:17 GMT
                Content-Type: text/html; charset=utf-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                Location: https://download5.operacdn.com/pub/opera/desktop/94.0.4606.54/win/Opera_94.0.4606.54_Autoupdate_x64.exe
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                GET
                https://download.opera.com/download/get/?id=59886&autoupdate=1&ni=1
                opera-installer-bro.exe
                Remote address:
                185.26.182.117:443
                Request
                GET /download/get/?id=59886&autoupdate=1&ni=1 HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Host: download.opera.com
                Cache-Control: no-cache
                Response
                HTTP/1.1 302 Found
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:36 GMT
                Content-Type: text/html; charset=utf-8
                Transfer-Encoding: chunked
                Connection: keep-alive
                Location: https://download3.operacdn.com/pub/.assistant/94.0.4606.38/Assistant_94.0.4606.38_Setup.exe
                Strict-Transport-Security: max-age=31536000; includeSubDomains
              • flag-unknown
                DNS
                download5.operacdn.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                download5.operacdn.com
                IN A
                Response
                download5.operacdn.com
                IN A
                104.18.2.211
                download5.operacdn.com
                IN A
                104.18.3.211
              • flag-unknown
                GET
                https://download5.operacdn.com/pub/opera/desktop/94.0.4606.54/win/Opera_94.0.4606.54_Autoupdate_x64.exe
                opera-installer-bro.exe
                Remote address:
                104.18.2.211:443
                Request
                GET /pub/opera/desktop/94.0.4606.54/win/Opera_94.0.4606.54_Autoupdate_x64.exe HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Connection: Keep-Alive
                Cache-Control: no-cache
                Host: download5.operacdn.com
                Response
                HTTP/1.1 200 OK
                Date: Thu, 05 Jan 2023 21:47:18 GMT
                Content-Type: application/octet-stream
                Content-Length: 90915256
                Connection: keep-alive
                Last-Modified: Wed, 04 Jan 2023 13:43:10 GMT
                ETag: "63b5826e-56b41b8"
                Strict-Transport-Security: max-age=31536000; includeSubDomains
                CF-Cache-Status: HIT
                Age: 115042
                Accept-Ranges: bytes
                Server: cloudflare
                CF-RAY: 784f6961ad1b0bd2-AMS
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 494
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:27 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 247
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:27 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 247
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:30 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 267
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:33 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                DNS
                advancedrepository.com
                irsetup.exe
                Remote address:
                8.8.8.8:53
                Request
                advancedrepository.com
                IN A
                Response
                advancedrepository.com
                IN A
                46.4.112.226
              • flag-unknown
                GET
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /update/lch/TLauncher-2.871.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:30 GMT
                Content-Type: application/octet-stream
                Content-Length: 5474496
                Last-Modified: Tue, 06 Dec 2022 06:13:41 GMT
                Connection: keep-alive
                ETag: "638edd95-5388c0"
                Expires: Thu, 19 Jan 2023 21:47:30 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                GET
                https://advancedrepository.com/client/jre-windows-x64.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /client/jre-windows-x64.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:31 GMT
                Content-Type: application/octet-stream
                Content-Length: 43221600
                Last-Modified: Tue, 22 Dec 2020 12:01:38 GMT
                Connection: keep-alive
                ETag: "5fe1e022-2938260"
                Expires: Thu, 19 Jan 2023 21:47:31 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 316
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:36 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 267
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:37 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 247
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:37 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                DNS
                download3.operacdn.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                download3.operacdn.com
                IN A
                Response
                download3.operacdn.com
                IN CNAME
                v2.download3.operacdn.com.edgekey.net
                v2.download3.operacdn.com.edgekey.net
                IN CNAME
                e125010.dscf.akamaiedge.net
                e125010.dscf.akamaiedge.net
                IN A
                95.101.74.151
                e125010.dscf.akamaiedge.net
                IN A
                95.101.74.146
              • flag-unknown
                GET
                https://download3.operacdn.com/pub/.assistant/94.0.4606.38/Assistant_94.0.4606.38_Setup.exe
                opera-installer-bro.exe
                Remote address:
                95.101.74.151:443
                Request
                GET /pub/.assistant/94.0.4606.38/Assistant_94.0.4606.38_Setup.exe HTTP/1.1
                User-Agent: Opera NetInstaller/94.0.4606.54
                Connection: Keep-Alive
                Cache-Control: no-cache
                Host: download3.operacdn.com
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Content-Type: application/octet-stream
                Content-Length: 1802888
                Last-Modified: Tue, 20 Dec 2022 11:13:09 GMT
                ETag: "63a198c5-1b8288"
                Accept-Ranges: bytes
                Date: Thu, 05 Jan 2023 21:47:36 GMT
                Connection: keep-alive
                Strict-Transport-Security: max-age=31536000 ; includeSubDomains
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 247
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:47:48 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                DNS
                javadl-esd-secure.oracle.com
                jre-windows.exe
                Remote address:
                8.8.8.8:53
                Request
                javadl-esd-secure.oracle.com
                IN A
                Response
                javadl-esd-secure.oracle.com
                IN CNAME
                javadl-esd-secure.oracle.com.edgekey.net
                javadl-esd-secure.oracle.com.edgekey.net
                IN CNAME
                e13073.g.akamaiedge.net
                e13073.g.akamaiedge.net
                IN A
                23.40.2.175
              • flag-unknown
                GET
                https://javadl-esd-secure.oracle.com/update/1.8.0/1.8.0_51-b16.xml
                jre-windows.exe
                Remote address:
                23.40.2.175:443
                Request
                GET /update/1.8.0/1.8.0_51-b16.xml HTTP/1.1
                Accept: */*
                User-Agent: java_installer
                Host: javadl-esd-secure.oracle.com
                Connection: Keep-Alive
                Response
                HTTP/1.1 200 OK
                Accept-Ranges: bytes
                Content-Type: application/xml
                ETag: "5ff5abb880487e7d6aeed30813d1e622:1603130795.677537"
                Last-Modified: Mon, 19 Oct 2020 18:03:10 GMT
                Server: AkamaiNetStorage
                Content-Length: 910
                Expires: Thu, 05 Jan 2023 21:47:52 GMT
                Cache-Control: max-age=0, no-cache
                Pragma: no-cache
                Date: Thu, 05 Jan 2023 21:47:52 GMT
                Connection: keep-alive
                Access-Control-Allow-Origin: *
              • flag-unknown
                DNS
                www.microsoft.com
                jre-windows.exe
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                173.223.113.131
              • flag-unknown
                DNS
                rps-svcs.sun.com
                jre-windows.exe
                Remote address:
                8.8.8.8:53
                Request
                rps-svcs.sun.com
                IN A
                Response
                rps-svcs.sun.com
                IN CNAME
                rps-svcs.sun.com.edgesuite.net
                rps-svcs.sun.com.edgesuite.net
                IN CNAME
                a1448.b.akamai.net
                a1448.b.akamai.net
                IN A
                23.72.252.147
                a1448.b.akamai.net
                IN A
                23.72.252.128
              • flag-unknown
                HEAD
                http://rps-svcs.sun.com/services/countrylookup
                jre-windows.exe
                Remote address:
                23.72.252.147:80
                Request
                HEAD /services/countrylookup HTTP/1.1
                Accept: */*
                User-Agent: jucheck
                Host: rps-svcs.sun.com
                Content-Length: 0
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: AkamaiGHost
                Mime-Version: 1.0
                Content-Type: text/html
                Content-Length: 268
                Expires: Thu, 05 Jan 2023 21:47:52 GMT
                Date: Thu, 05 Jan 2023 21:47:52 GMT
                Connection: keep-alive
                Country: NL
              • flag-unknown
                DNS
                javadl.oracle.com
                jre-windows.exe
                Remote address:
                8.8.8.8:53
                Request
                javadl.oracle.com
                IN A
                Response
                javadl.oracle.com
                IN CNAME
                ds-javadl.oracle.com.edgekey.net
                ds-javadl.oracle.com.edgekey.net
                IN CNAME
                e13073.dscx.akamaiedge.net
                e13073.dscx.akamaiedge.net
                IN A
                69.192.71.29
              • flag-unknown
                GET
                http://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg
                jre-windows.exe
                Remote address:
                69.192.71.29:80
                Request
                GET /webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg HTTP/1.1
                Accept: */*
                User-Agent: java_installer
                Host: javadl.oracle.com
                Connection: Keep-Alive
                Response
                HTTP/1.1 301 Moved Permanently
                Server: AkamaiGHost
                Content-Length: 0
                Location: https://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg
                Date: Thu, 05 Jan 2023 21:47:52 GMT
                Connection: keep-alive
              • flag-unknown
                GET
                https://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg
                jre-windows.exe
                Remote address:
                69.192.71.29:443
                Request
                GET /webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg HTTP/1.1
                Accept: */*
                User-Agent: java_installer
                Host: javadl.oracle.com
                Connection: Keep-Alive
                Response
                HTTP/1.1 404 Not Found
                Content-Type: text/html; charset=UTF-8
                Content-Length: 22
                X-Content-Type-Options: nosniff
                X-Frame-Options: DENY
                Date: Thu, 05 Jan 2023 21:47:52 GMT
                Connection: keep-alive
              • flag-unknown
                GET
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /update/lch/TLauncher-2.871.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:52 GMT
                Content-Type: application/octet-stream
                Content-Length: 5474496
                Last-Modified: Tue, 06 Dec 2022 06:13:41 GMT
                Connection: keep-alive
                ETag: "638edd95-5388c0"
                Expires: Thu, 19 Jan 2023 21:47:52 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                GET
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /update/lch/TLauncher-2.871.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:53 GMT
                Content-Type: application/octet-stream
                Content-Length: 5474496
                Last-Modified: Tue, 06 Dec 2022 06:13:41 GMT
                Connection: keep-alive
                ETag: "638edd95-5388c0"
                Expires: Thu, 19 Jan 2023 21:47:53 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                GET
                https://advancedrepository.com/client/jre-windows-x64.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /client/jre-windows-x64.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:55 GMT
                Content-Type: application/octet-stream
                Content-Length: 43221600
                Last-Modified: Tue, 22 Dec 2020 12:01:38 GMT
                Connection: keep-alive
                ETag: "5fe1e022-2938260"
                Expires: Thu, 19 Jan 2023 21:47:55 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                GET
                https://advancedrepository.com/client/jre-windows-x64.exe
                irsetup.exe
                Remote address:
                46.4.112.226:443
                Request
                GET /client/jre-windows-x64.exe HTTP/1.1
                Accept: */*
                Content-Type: application/x-www-form-urlencoded
                User-Agent: Setup Factory 9.0
                Host: advancedrepository.com
                Connection: Keep-Alive
                Cache-Control: no-cache
                Response
                HTTP/1.1 200 OK
                Server: nginx
                Date: Thu, 05 Jan 2023 21:47:59 GMT
                Content-Type: application/octet-stream
                Content-Length: 43221600
                Last-Modified: Tue, 22 Dec 2020 12:01:38 GMT
                Connection: keep-alive
                ETag: "5fe1e022-2938260"
                Expires: Thu, 19 Jan 2023 21:47:59 GMT
                Cache-Control: max-age=1209600
                Access-Control-Allow-Origin: *
                Cache-Control: public
                Accept-Ranges: bytes
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 277
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 279
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 271
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 273
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 264
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 266
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 264
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 266
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 269
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 271
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 262
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 264
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 273
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 275
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 262
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 264
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 265
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 267
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 269
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 271
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 266
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 268
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 273
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 275
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 280
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 282
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 256
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 258
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:02 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                POST
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                opera-installer-bro.exe
                Remote address:
                82.145.217.121:443
                Request
                POST /v1/binary HTTP/1.1
                Authorization: Basic dmFBZUV4c1JXQmViWm9McmNpVGlFSFpmWUdXeUlXMFo6
                User-Agent: Opera installer
                Host: desktop-netinstaller-sub.osp.opera.software
                Content-Length: 248
                Cache-Control: no-cache
                Response
                HTTP/1.1 201 CREATED
                Server: nginx/1.18.0
                Date: Thu, 05 Jan 2023 21:48:04 GMT
                Content-Type: text/html; charset=utf-8
                Content-Length: 36
                Connection: keep-alive
              • flag-unknown
                DNS
                autoupdate.geo.opera.com
                opera-installer-bro.exe
                Remote address:
                8.8.8.8:53
                Request
                autoupdate.geo.opera.com
                IN A
                Response
                autoupdate.geo.opera.com
                IN CNAME
                eu2-autoupdate.opera.com
                eu2-autoupdate.opera.com
                IN A
                82.145.216.20
                eu2-autoupdate.opera.com
                IN A
                82.145.216.19
              • 104.20.234.70:443
                https://dl2.tlauncher.org/check_latest_tl.php?optime=0
                tls, http
                irsetup.exe
                1.1kB
                 6.3kB
                 11
                12

                HTTP Request

                GET https://dl2.tlauncher.org/check_latest_tl.php?optime=0

                HTTP Response

                200
              • 185.26.182.111:443
                https://net.geo.opera.com/opera/stable/windows?utm_medium=apb&utm_source=MSTL&utm_campaign=OperaDesktop
                tls, http
                irsetup.exe
                50.9kB
                 2.9MB
                 1093
                2075

                HTTP Request

                GET https://net.geo.opera.com/opera/stable/windows?utm_medium=apb&utm_source=MSTL&utm_campaign=OperaDesktop

                HTTP Response

                200
              • 104.20.234.70:443
                tlauncher.org
                tls
                irsetup.exe
                722 B
                 5.5kB
                 9
                8
              • 82.145.217.121:443
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                tls, http
                opera-installer-bro.exe
                3.9kB
                 4.9kB
                 17
                17

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201
              • 185.26.182.124:443
                https://autoupdate.geo.opera.com/geolocation/
                tls, http
                opera-installer-bro.exe
                818 B
                 4.4kB
                 8
                8

                HTTP Request

                GET https://autoupdate.geo.opera.com/geolocation/

                HTTP Response

                200
              • 185.26.182.124:443
                https://autoupdate.geo.opera.com/api/prefs/?product=Opera&version=94.0.4606.54
                tls, http
                opera-installer-bro.exe
                2.3kB
                 6.0kB
                 11
                11

                HTTP Request

                POST https://autoupdate.geo.opera.com/v2/netinstaller/Stable/windows/x64

                HTTP Response

                200

                HTTP Request

                POST https://autoupdate.geo.opera.com/api/prefs/?product=Opera&version=94.0.4606.54

                HTTP Response

                200
              • 82.145.216.15:443
                https://features.opera-api.com/api/v2/features?country=US&language=en&uuid=aab0263e-7f0f-4148-9ba2-77953a31de2a&product=&channel=Stable&version=94.0.4606.54
                tls, http
                opera-installer-bro.exe
                927 B
                 5.3kB
                 8
                8

                HTTP Request

                GET https://features.opera-api.com/api/v2/features?country=US&language=en&uuid=aab0263e-7f0f-4148-9ba2-77953a31de2a&product=&channel=Stable&version=94.0.4606.54

                HTTP Response

                200
              • 185.26.182.117:443
                https://download.opera.com/download/get/?id=59886&autoupdate=1&ni=1
                tls, http
                opera-installer-bro.exe
                1.2kB
                 5.1kB
                 10
                10

                HTTP Request

                GET https://download.opera.com/download/get/?id=59942&autoupdate=1&ni=1&stream=stable&utm_campaign=OperaDesktop&utm_medium=apb&utm_source=MSTL&niuid=ff609fca-2f18-41f0-bc66-feb1f30879d6

                HTTP Response

                302

                HTTP Request

                GET https://download.opera.com/download/get/?id=59886&autoupdate=1&ni=1

                HTTP Response

                302
              • 104.18.2.211:443
                https://download5.operacdn.com/pub/opera/desktop/94.0.4606.54/win/Opera_94.0.4606.54_Autoupdate_x64.exe
                tls, http
                opera-installer-bro.exe
                1.7MB
                 93.9MB
                 37004
                69188

                HTTP Request

                GET https://download5.operacdn.com/pub/opera/desktop/94.0.4606.54/win/Opera_94.0.4606.54_Autoupdate_x64.exe

                HTTP Response

                200
              • 82.145.217.121:443
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                tls, http
                opera-installer-bro.exe
                3.4kB
                 5.4kB
                 17
                17

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201
              • 46.4.112.226:443
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                tls, http
                irsetup.exe
                96.5kB
                 5.7MB
                 2085
                4086

                HTTP Request

                GET https://advancedrepository.com/update/lch/TLauncher-2.871.exe

                HTTP Response

                200
              • 46.4.112.226:443
                https://advancedrepository.com/client/jre-windows-x64.exe
                tls, http
                irsetup.exe
                812.4kB
                 44.7MB
                 17032
                31961

                HTTP Request

                GET https://advancedrepository.com/client/jre-windows-x64.exe

                HTTP Response

                200
              • 82.145.217.121:443
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                tls, http
                opera-installer-bro.exe
                2.6kB
                 4.5kB
                 15
                14

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201
              • 95.101.74.151:443
                https://download3.operacdn.com/pub/.assistant/94.0.4606.38/Assistant_94.0.4606.38_Setup.exe
                tls, http
                opera-installer-bro.exe
                33.2kB
                 1.9MB
                 710
                1345

                HTTP Request

                GET https://download3.operacdn.com/pub/.assistant/94.0.4606.38/Assistant_94.0.4606.38_Setup.exe

                HTTP Response

                200
              • 82.145.217.121:443
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                tls, http
                opera-installer-bro.exe
                1.2kB
                 1.0kB
                 10
                9

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201
              • 23.40.2.175:443
                https://javadl-esd-secure.oracle.com/update/1.8.0/1.8.0_51-b16.xml
                tls, http
                jre-windows.exe
                934 B
                 6.1kB
                 9
                12

                HTTP Request

                GET https://javadl-esd-secure.oracle.com/update/1.8.0/1.8.0_51-b16.xml

                HTTP Response

                200
              • 23.72.252.147:80
                http://rps-svcs.sun.com/services/countrylookup
                http
                jre-windows.exe
                357 B
                 610 B
                 4
                4

                HTTP Request

                HEAD http://rps-svcs.sun.com/services/countrylookup

                HTTP Response

                200
              • 69.192.71.29:80
                http://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg
                http
                jre-windows.exe
                372 B
                 666 B
                 4
                4

                HTTP Request

                GET http://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg

                HTTP Response

                301
              • 69.192.71.29:443
                https://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg
                tls, http
                jre-windows.exe
                909 B
                 5.2kB
                 8
                11

                HTTP Request

                GET https://javadl.oracle.com/webapps/download/GetFile/1.8.0_51-b16/windows-i586/Java3BillDevices_en.jpg

                HTTP Response

                404
              • 46.4.112.226:443
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                tls, http
                irsetup.exe
                96.2kB
                 5.7MB
                 2077
                4082

                HTTP Request

                GET https://advancedrepository.com/update/lch/TLauncher-2.871.exe

                HTTP Response

                200
              • 46.4.112.226:443
                https://advancedrepository.com/update/lch/TLauncher-2.871.exe
                tls, http
                irsetup.exe
                3.4kB
                 99.5kB
                 60
                76

                HTTP Request

                GET https://advancedrepository.com/update/lch/TLauncher-2.871.exe

                HTTP Response

                200
              • 46.4.112.226:443
                https://advancedrepository.com/client/jre-windows-x64.exe
                tls, http
                irsetup.exe
                3.3kB
                 98.0kB
                 59
                75

                HTTP Request

                GET https://advancedrepository.com/client/jre-windows-x64.exe

                HTTP Response

                200
              • 46.4.112.226:443
                https://advancedrepository.com/client/jre-windows-x64.exe
                tls, http
                irsetup.exe
                3.4kB
                 99.5kB
                 60
                76

                HTTP Request

                GET https://advancedrepository.com/client/jre-windows-x64.exe

                HTTP Response

                200
              • 82.145.217.121:443
                https://desktop-netinstaller-sub.osp.opera.software/v1/binary
                tls, http
                opera-installer-bro.exe
                16.9kB
                 11.5kB
                 37
                37

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201

                HTTP Request

                POST https://desktop-netinstaller-sub.osp.opera.software/v1/binary

                HTTP Response

                201
              • 82.145.216.20:443
                autoupdate.geo.opera.com
                tls
                7.5kB
                 4.9kB
                 14
                12
              • 8.8.8.8:53
                dl2.tlauncher.org
                dns
                irsetup.exe
                63 B
                 95 B
                 1
                1

                DNS Request

                dl2.tlauncher.org

                DNS Response

                104.20.234.70
                104.20.235.70

              • 8.8.8.8:53
                net.geo.opera.com
                dns
                irsetup.exe
                63 B
                 116 B
                 1
                1

                DNS Request

                net.geo.opera.com

                DNS Response

                185.26.182.111
                185.26.182.112

              • 8.8.8.8:53
                tlauncher.org
                dns
                irsetup.exe
                59 B
                 91 B
                 1
                1

                DNS Request

                tlauncher.org

                DNS Response

                104.20.234.70
                104.20.235.70

              • 8.8.8.8:53
                desktop-netinstaller-sub.osp.opera.software
                dns
                opera-installer-bro.exe
                89 B
                 192 B
                 1
                1

                DNS Request

                desktop-netinstaller-sub.osp.opera.software

                DNS Response

                82.145.217.121

              • 8.8.8.8:53
                autoupdate.geo.opera.com
                dns
                opera-installer-bro.exe
                70 B
                 130 B
                 1
                1

                DNS Request

                autoupdate.geo.opera.com

                DNS Response

                185.26.182.124
                185.26.182.123

              • 8.8.8.8:53
                features.opera-api.com
                dns
                opera-installer-bro.exe
                68 B
                 197 B
                 1
                1

                DNS Request

                features.opera-api.com

                DNS Response

                82.145.216.15
                82.145.216.16

              • 8.8.8.8:53
                download.opera.com
                dns
                opera-installer-bro.exe
                64 B
                 149 B
                 1
                1

                DNS Request

                download.opera.com

                DNS Response

                185.26.182.117
                185.26.182.122

              • 8.8.8.8:53
                download5.operacdn.com
                dns
                opera-installer-bro.exe
                68 B
                 100 B
                 1
                1

                DNS Request

                download5.operacdn.com

                DNS Response

                104.18.2.211
                104.18.3.211

              • 8.8.8.8:53
                advancedrepository.com
                dns
                irsetup.exe
                68 B
                 84 B
                 1
                1

                DNS Request

                advancedrepository.com

                DNS Response

                46.4.112.226

              • 8.8.8.8:53
                download3.operacdn.com
                dns
                opera-installer-bro.exe
                68 B
                 189 B
                 1
                1

                DNS Request

                download3.operacdn.com

                DNS Response

                95.101.74.151
                95.101.74.146

              • 8.8.8.8:53
                javadl-esd-secure.oracle.com
                dns
                jre-windows.exe
                74 B
                 178 B
                 1
                1

                DNS Request

                javadl-esd-secure.oracle.com

                DNS Response

                23.40.2.175

              • 8.8.8.8:53
                www.microsoft.com
                dns
                jre-windows.exe
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                173.223.113.131

              • 8.8.8.8:53
                rps-svcs.sun.com
                dns
                jre-windows.exe
                62 B
                 167 B
                 1
                1

                DNS Request

                rps-svcs.sun.com

                DNS Response

                23.72.252.147
                23.72.252.128

              • 8.8.8.8:53
                javadl.oracle.com
                dns
                jre-windows.exe
                63 B
                 162 B
                 1
                1

                DNS Request

                javadl.oracle.com

                DNS Response

                69.192.71.29

              • 8.8.8.8:53
                autoupdate.geo.opera.com
                dns
                opera-installer-bro.exe
                70 B
                 131 B
                 1
                1

                DNS Request

                autoupdate.geo.opera.com

                DNS Response

                82.145.216.20
                82.145.216.19

              MITRE ATT&CK Enterprise v6

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                Filesize

                61KB

                MD5

                fc4666cbca561e864e7fdf883a9e6661

                SHA1

                2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

                SHA256

                10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

                SHA512

                c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

                Download Submit

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
                Filesize

                471B

                MD5

                41807ce61515d8093965fa2cc07dcaae

                SHA1

                1129589b93a4a1e17a112eaad40708927d0ec00d

                SHA256

                19301b786f7a070c73ecca26759df9cd3254ded77670055750fb6a6792384ae0

                SHA512

                ff5f0c54901099e1b9c4436c95af7a035e43e8a3ccfc121eae62117c39b7b61c3e6472cecf442fe2110bd2fb63dd17bb36052516427936b7fc65790781596e36

                Download Submit

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                Filesize

                342B

                MD5

                e6823024ce0811621f2f6fe58247c8e7

                SHA1

                dd66c0e53043299b3e0aedd591dad50ba4de453e

                SHA256

                ab066806adcde095da69af01f82a7be1debe2468c6ced1c4dc088d5adfad4bee

                SHA512

                831e60921fa23e493f2a2ce16e29bf8f44161a094c3b0d2a1384f6573416de903d48f217aeef02b3e07923bb8a98fb773682bd61877a71e2e82b118cd3a6c81f

                Download Submit

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                Filesize

                342B

                MD5

                f05f41aec0d60f3b9efdf03f0eb1f856

                SHA1

                509469ad658251c048afa2e97de1c66d25301484

                SHA256

                f5c6f0c98d376fe8c7c0034f58ea01067346b2a8a47f5681aa49f9af689c5d38

                SHA512

                38c4946ee5bd7f3458f52ce14e699c526f750f6ce06f5a238faaa9c3457ab50e69881918884cc6624d96fa86e421b93747e3b21035ece072fd999360f022cdf6

                Download Submit

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                Filesize

                342B

                MD5

                08ee1d59ce69dcb3fdf1d7a0467a6d33

                SHA1

                3ad3ffeed00d301d26ed96bc3e78b15c610f180a

                SHA256

                9a078706ccff52b263bbc5290938721deb1344f787ca65553a05b312073f6d4e

                SHA512

                2221b4d27f3f4700aa550f0a1e651181096c9c26696a912a9ff1c7885a0ceb750ca60941fdb43a940169c53f1de60d5c8cef54656dcd26d07284448bfea18637

                Download Submit

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
                Filesize

                434B

                MD5

                b1e3362ddab5ae8d3d2d3978442a049a

                SHA1

                19351179e41dbe4cfc5ddc84b26fbe97308dccec

                SHA256

                8b9b08184b715a55e78ac6aa3132b08e76f38b403afda38222e1c03e621d637f

                SHA512

                ca9869cbd4905f28921bbea3087f2f38bbe288d018126b747b07b334ea4e7c8a99d2a6789b9d7e442e8dfb8dbeccadaf0ea2e6564c53fed400e0700fd6be38a7

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\_sfx.exe
                Filesize

                1.7MB

                MD5

                0238df215bf6943892daf85de8ad433a

                SHA1

                3d905e4e2c0e9170df61b7a199321847691f945e

                SHA256

                a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

                SHA512

                fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\_sfx.exe
                Filesize

                1.7MB

                MD5

                0238df215bf6943892daf85de8ad433a

                SHA1

                3d905e4e2c0e9170df61b7a199321847691f945e

                SHA256

                a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

                SHA512

                fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
                Filesize

                2.1MB

                MD5

                9df6e2fbb7e38964f35016bf91ef7424

                SHA1

                d0c1266dc46814bc6165cf6a69e90581228989a7

                SHA256

                3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

                SHA512

                b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
                Filesize

                2.1MB

                MD5

                9df6e2fbb7e38964f35016bf91ef7424

                SHA1

                d0c1266dc46814bc6165cf6a69e90581228989a7

                SHA256

                3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

                SHA512

                b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
                Filesize

                326KB

                MD5

                80d93d38badecdd2b134fe4699721223

                SHA1

                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                SHA256

                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                SHA512

                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
                Filesize

                326KB

                MD5

                80d93d38badecdd2b134fe4699721223

                SHA1

                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                SHA256

                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                SHA512

                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                Filesize

                601B

                MD5

                db03ce498e00b4f0d8b43bc6cb9317bc

                SHA1

                880199b8c4888475868b5b534f7b88545acc7c2d

                SHA256

                478c96a9fa1f0dcad7b8c108edd2b634d8fd802b38ca330759e032c5f814fd02

                SHA512

                434ef9c0576f6208b8b1ad635662db5b43c3ec16eea14c4ec3a63cffdc7ef3d34b668a0adfeb334380019bcf7cc715aa8a430bc28ba7957fc9723971bde951c1

                Download Submit

              • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                Filesize

                40B

                MD5

                630cbfe9165a16f857935aa997cc6816

                SHA1

                4dcd078becf2ccdd2f5de5475277f6ed810f2c4d

                SHA256

                69d56612faf7ffe83516708d4d88177e1f30bdcd8d1da0119847fb00a86e17ac

                SHA512

                6d4d7d07937702b4401369c8597a3ba9f0584febd407631d5cd9abe828b0bfe15be30c32bc342c8e33e3df52505b8857bb41d2ea9cc013c2e1efc57237af36be

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\_sfx.exe
                Filesize

                1.7MB

                MD5

                0238df215bf6943892daf85de8ad433a

                SHA1

                3d905e4e2c0e9170df61b7a199321847691f945e

                SHA256

                a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

                SHA512

                fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
                Filesize

                2.1MB

                MD5

                9df6e2fbb7e38964f35016bf91ef7424

                SHA1

                d0c1266dc46814bc6165cf6a69e90581228989a7

                SHA256

                3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

                SHA512

                b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\assistant\assistant_installer.exe
                Filesize

                2.1MB

                MD5

                9df6e2fbb7e38964f35016bf91ef7424

                SHA1

                d0c1266dc46814bc6165cf6a69e90581228989a7

                SHA256

                3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

                SHA512

                b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\opera_package
                Filesize

                86.7MB

                MD5

                9d67cc3d70baf3702cc379c2df51f5db

                SHA1

                257bc84d1ce4e4505e25d7fb3b29255b69c59878

                SHA256

                adcc61fddb491c75edb7a836f70b6261a8c975a569f3f3a7a8468c4315e2c89b

                SHA512

                04c85ce7d564b3efe1a46d80c8d4f7fc0fe25877ac56e4a1c9b20d892f5e0e0ff3b986ea6fd5470d010abc3f0b676093dd9fbc6e7e11d45e0b9e547dd22682f9

                Download Submit

              • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202301052147111\opera_package
                Filesize

                86.7MB

                MD5

                9d67cc3d70baf3702cc379c2df51f5db

                SHA1

                257bc84d1ce4e4505e25d7fb3b29255b69c59878

                SHA256

                adcc61fddb491c75edb7a836f70b6261a8c975a569f3f3a7a8468c4315e2c89b

                SHA512

                04c85ce7d564b3efe1a46d80c8d4f7fc0fe25877ac56e4a1c9b20d892f5e0e0ff3b986ea6fd5470d010abc3f0b676093dd9fbc6e7e11d45e0b9e547dd22682f9

                Download Submit

              • \Users\Admin\AppData\Local\Temp\Opera_installer_2301052147061091400.dll
                Filesize

                4.3MB

                MD5

                abd49f95860291b4bea7ed2a17516f3d

                SHA1

                728f48e85427acf242f65da8dee22588c373e9aa

                SHA256

                1da2b7d6cea59b309a892d4ddb64a1f4d8fefd9b9d65da0b3aa0d42e4cedb8bf

                SHA512

                64c32133cee5f62a59cfbfad4742c1479ec2ab53188e09c97a18a062795e62cba3132f1b01b5748b91a4e6f010be933229eb7dc640ecbc7f7c8fda8a3efe7e94

                Download Submit

              • \Users\Admin\AppData\Local\Temp\Opera_installer_2301052147069521848.dll
                Filesize

                4.3MB

                MD5

                abd49f95860291b4bea7ed2a17516f3d

                SHA1

                728f48e85427acf242f65da8dee22588c373e9aa

                SHA256

                1da2b7d6cea59b309a892d4ddb64a1f4d8fefd9b9d65da0b3aa0d42e4cedb8bf

                SHA512

                64c32133cee5f62a59cfbfad4742c1479ec2ab53188e09c97a18a062795e62cba3132f1b01b5748b91a4e6f010be933229eb7dc640ecbc7f7c8fda8a3efe7e94

                Download Submit

              • \Users\Admin\AppData\Local\Temp\Opera_installer_2301052147114911568.dll
                Filesize

                4.3MB

                MD5

                abd49f95860291b4bea7ed2a17516f3d

                SHA1

                728f48e85427acf242f65da8dee22588c373e9aa

                SHA256

                1da2b7d6cea59b309a892d4ddb64a1f4d8fefd9b9d65da0b3aa0d42e4cedb8bf

                SHA512

                64c32133cee5f62a59cfbfad4742c1479ec2ab53188e09c97a18a062795e62cba3132f1b01b5748b91a4e6f010be933229eb7dc640ecbc7f7c8fda8a3efe7e94

                Download Submit

              • \Users\Admin\AppData\Local\Temp\Opera_installer_230105214711944664.dll
                Filesize

                4.3MB

                MD5

                abd49f95860291b4bea7ed2a17516f3d

                SHA1

                728f48e85427acf242f65da8dee22588c373e9aa

                SHA256

                1da2b7d6cea59b309a892d4ddb64a1f4d8fefd9b9d65da0b3aa0d42e4cedb8bf

                SHA512

                64c32133cee5f62a59cfbfad4742c1479ec2ab53188e09c97a18a062795e62cba3132f1b01b5748b91a4e6f010be933229eb7dc640ecbc7f7c8fda8a3efe7e94

                Download Submit

              • \Users\Admin\AppData\Local\Temp\Opera_installer_2301052147140501648.dll
                Filesize

                4.3MB

                MD5

                abd49f95860291b4bea7ed2a17516f3d

                SHA1

                728f48e85427acf242f65da8dee22588c373e9aa

                SHA256

                1da2b7d6cea59b309a892d4ddb64a1f4d8fefd9b9d65da0b3aa0d42e4cedb8bf

                SHA512

                64c32133cee5f62a59cfbfad4742c1479ec2ab53188e09c97a18a062795e62cba3132f1b01b5748b91a4e6f010be933229eb7dc640ecbc7f7c8fda8a3efe7e94

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
                Filesize

                1.8MB

                MD5

                f8996d2158a69a12b4bc99edd28100bc

                SHA1

                892887691df881fe432e09b618e90f50447340e6

                SHA256

                866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

                SHA512

                d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                Filesize

                1.7MB

                MD5

                1bbf5dd0b6ca80e4c7c77495c3f33083

                SHA1

                e0520037e60eb641ec04d1e814394c9da0a6a862

                SHA256

                bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

                SHA512

                97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                Filesize

                97KB

                MD5

                da1d0cd400e0b6ad6415fd4d90f69666

                SHA1

                de9083d2902906cacf57259cf581b1466400b799

                SHA256

                7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

                SHA512

                f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                Filesize

                1.3MB

                MD5

                1313bb5df6c6e0d5c358735044fbebef

                SHA1

                cac3e2e3ed63dc147318e18f202a9da849830a91

                SHA256

                7590d0f21687327812a6c61d0429c6df1345b97c53ad7115f03bd4cb2e4f4c8d

                SHA512

                596d877b3906f877f124d705933391478ed425ad860ca5341493f04050c4605fc8e9a1c890859105da1b6817da5e874e0afaabbc86a80597f296e642795fc33c

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
                Filesize

                326KB

                MD5

                80d93d38badecdd2b134fe4699721223

                SHA1

                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                SHA256

                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                SHA512

                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                Filesize

                1.3MB

                MD5

                e7bbc7b426cee4b8027a00b11f06ef34

                SHA1

                926fad387ede328d3cfd9da80d0b303a865cca98

                SHA256

                e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

                SHA512

                f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

                Download Submit

              • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
                Filesize

                326KB

                MD5

                80d93d38badecdd2b134fe4699721223

                SHA1

                e829e58091bae93bc64e0c6f9f0bac999cfda23d

                SHA256

                c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

                SHA512

                9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                Filesize

                2.7MB

                MD5

                b5cbb9fa7c4ca3f8ee6df2efabfcbc08

                SHA1

                84b466fff4ff080368d63b953afc81769e08b3bb

                SHA256

                75037fe4f227fd4f98b82ad28ce63830b332e8006c15172f9a7d300245f1fc51

                SHA512

                f6dee3f4f4b5efdb10e1d95dc59835b20ad61b431abdd316e765099d24bc45d1cd9b08e714387b807dfc731c5f413118f063a405de36c88ddf70c11cac98d6c6

                Download Submit

              • memory/472-60-0x000007FEFC331000-0x000007FEFC333000-memory.dmp

                Filesize

                8KB

                Download

              • memory/552-112-0x0000000000B80000-0x0000000000B90000-memory.dmp

                Filesize

                64KB

                Download

              • memory/552-105-0x0000000000DF0000-0x00000000011D8000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/552-116-0x0000000005660000-0x0000000005B6C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/552-117-0x0000000005660000-0x0000000005B6C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/552-115-0x0000000005660000-0x0000000005B6C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/552-114-0x0000000005660000-0x0000000005B6C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/552-123-0x0000000000DF0000-0x00000000011D8000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/588-153-0x0000000004A60000-0x0000000004A70000-memory.dmp

                Filesize

                64KB

                Download

              • memory/588-73-0x0000000000FB0000-0x0000000001398000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/588-74-0x00000000002B0000-0x00000000002DC000-memory.dmp

                Filesize

                176KB

                Download

              • memory/588-71-0x0000000010000000-0x0000000010051000-memory.dmp

                Filesize

                324KB

                Download

              • memory/588-72-0x00000000002B0000-0x00000000002DC000-memory.dmp

                Filesize

                176KB

                Download

              • memory/588-68-0x0000000000FB0000-0x0000000001398000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/588-83-0x0000000004A60000-0x0000000004A70000-memory.dmp

                Filesize

                64KB

                Download

              • memory/664-147-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/664-215-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1388-67-0x0000000002DE0000-0x00000000031C8000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/1388-66-0x0000000002DE0000-0x00000000031C8000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/1388-54-0x0000000075711000-0x0000000075713000-memory.dmp

                Filesize

                8KB

                Download

              • memory/1400-156-0x0000000003870000-0x0000000003D7C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-154-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-157-0x00000000033F0000-0x00000000038FC000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-137-0x0000000003870000-0x0000000003D7C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-140-0x00000000033F0000-0x00000000038FC000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-219-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-118-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1400-128-0x00000000028F0000-0x0000000002DFC000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1568-134-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1600-266-0x0000000000400000-0x0000000000417000-memory.dmp

                Filesize

                92KB

                Download

              • memory/1600-262-0x0000000000400000-0x0000000000417000-memory.dmp

                Filesize

                92KB

                Download

              • memory/1600-264-0x0000000000230000-0x0000000000247000-memory.dmp

                Filesize

                92KB

                Download

              • memory/1600-265-0x0000000000230000-0x0000000000247000-memory.dmp

                Filesize

                92KB

                Download

              • memory/1600-263-0x0000000000230000-0x0000000000247000-memory.dmp

                Filesize

                92KB

                Download

              • memory/1648-152-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1648-217-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1848-222-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1848-127-0x0000000000400000-0x000000000090C000-memory.dmp

                Filesize

                5.0MB

                Download

              • memory/1908-103-0x0000000002C80000-0x0000000003068000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/1908-102-0x0000000002C80000-0x0000000003068000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/1908-101-0x0000000002C80000-0x0000000003068000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/1908-104-0x0000000002C80000-0x0000000003068000-memory.dmp

                Filesize

                3.9MB

                Download

              • memory/2104-218-0x00000000022A0000-0x00000000022B0000-memory.dmp

                Filesize

                64KB

                Download

              • memory/2380-293-0x00000000023A0000-0x00000000033A0000-memory.dmp

                Filesize

                16.0MB

                Download

              • memory/2652-297-0x00000000002B0000-0x00000000002BA000-memory.dmp

                Filesize

                40KB

                Download

              • memory/2652-301-0x00000000002B0000-0x00000000002BA000-memory.dmp

                Filesize

                40KB

                Download

              • memory/2652-309-0x00000000027A0000-0x00000000037A0000-memory.dmp

                Filesize

                16.0MB

                Download

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.