Overview

overview

8

Static

static

1

TLauncher-....9.exe

windows7-x64

8

TLauncher-....9.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2023, 19:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.841-Installer-0.9.9.exe

  • Size

    20.9MB

  • MD5

    5675f2640ad4e9e34321b29bddb11966

  • SHA1

    c6b56fdc28e09882ffd448b4b537c1ff40ab7f5f

  • SHA256

    ffbb5e0443c913550792393b1a61b203047bdee74010ac72e516c0153ed0f5cf

  • SHA512

    0adee1a9fd7e6dcbe37f3d306753880a5007dfd849935730e351af542ff2eac1b1416f9ab6e87bfc1ed4d856e1733d79c4080e02eba4b2365652a02cf7cf094a

  • SSDEEP

    393216:1XoBZ5rqg9tYto0fs/dQETVlOBbpFEj9GZdqV56HpkV3sZH3oegnU:14h9WTHExiTTqqHp8aH2U

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 30 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • UPX packed file 42 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 3 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.9.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.9.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:980
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1908426 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.841-Installer-0.9.9.exe" "__IRCT:3" "__IRTSS:21949908" "__IRSID:S-1-5-21-4063495947-34355257-727531523-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1960
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1956
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1814730 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1839152" "__IRSID:S-1-5-21-4063495947-34355257-727531523-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies system certificate store
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1648
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Modifies system certificate store
            • Suspicious use of WriteProcessMemory
            PID:1688
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x1a4,0x1a8,0x1ac,0x178,0x1b0,0x718ae428,0x718ae438,0x718ae444
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:580
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1144
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1688 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230204192357" --session-guid=b08aafdc-6d6e-481e-b3dc-16ac537d4498 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=3403000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of WriteProcessMemory
              PID:1296
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x1b0,0x1b4,0x1b8,0x178,0x1bc,0x70dbe428,0x70dbe438,0x70dbe444
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:268
              • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe" --backend --initial-pid=1688 --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571" --session-guid=b08aafdc-6d6e-481e-b3dc-16ac537d4498 --server-tracking-blob=OGZhMDVlZDU1MTA3NGYyZDc2MmQzMmQwNTQ1MjY5MjIwYjAxZDM3YTExZmExMTYyYzM3ZDA3Njg0MzI0MmNkZDp7ImNvdW50cnkiOiJJTiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fbWVkaXVtPWFwYiZ1dG1fc291cmNlPU1TVEwmdXRtX2NhbXBhaWduPU9wZXJhRGVza3RvcCIsInRpbWVzdGFtcCI6IjE2NzU1Mzg2MzUuMzIxMCIsInVzZXJhZ2VudCI6IlNldHVwIEZhY3RvcnkgOS4wIiwidXRtIjp7ImNhbXBhaWduIjoiT3BlcmFEZXNrdG9wIiwibWVkaXVtIjoiYXBiIiwic291cmNlIjoiTVNUTCJ9LCJ1dWlkIjoiYWFkODBmMTEtOGM5NS00YmVjLTk3NDctNDViNzQ2ZWY1MDUxIn0= --silent --desktopshortcut=1 --install-subfolder=95.0.4635.25
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates connected drives
                • Modifies registry class
                PID:544
                • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\installer.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x174,0x178,0x17c,0x148,0x180,0x7fef6aea908,0x7fef6aea918,0x7fef6aea928
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:664
                • C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe" --start-maximized
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:1384
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --start-maximized --ran-launcher
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    PID:892
                    • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_crashreporter.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x15c,0x160,0x164,0x130,0x168,0x7feeea51a18,0x7feeea51a28,0x7feeea51a38
                      10⤵
                      • Executes dropped EXE
                      PID:2060
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1120 --field-trial-handle=1192,i,10430517311747263356,17376262885825470609,131072 /prefetch:2
                      10⤵
                      • Executes dropped EXE
                      PID:2228
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --mojo-platform-channel-handle=1428 --field-trial-handle=1192,i,10430517311747263356,17376262885825470609,131072 /prefetch:8
                      10⤵
                      • Executes dropped EXE
                      PID:2332
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\_sfx.exe"
              6⤵
              • Executes dropped EXE
              PID:900
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1404
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x148,0x14c,0x150,0x11c,0x154,0xb52dc0,0xb52dd0,0xb52ddc
                7⤵
                • Executes dropped EXE
                PID:1488
      • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
        "C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1
        3⤵
        • Executes dropped EXE
        PID:584
  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --start-maximized --ran-launcher --flag-switches-begin --flag-switches-end --enable-quic --lowered-browser
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Adds Run key to start application
    • Drops file in Program Files directory
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2488
    • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_crashreporter.exe
      C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_crashreporter.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x15c,0x160,0x164,0x130,0x168,0x7feeea51a18,0x7feeea51a28,0x7feeea51a38
      2⤵
      • Executes dropped EXE
      PID:2532
    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1068 --field-trial-handle=1032,i,2384415356100994799,4450269093424484460,131072 /prefetch:2
      2⤵
      • Executes dropped EXE
      PID:2684
    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --start-stack-profiler --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --mojo-platform-channel-handle=1360 --field-trial-handle=1032,i,2384415356100994799,4450269093424484460,131072 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:2820
    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --mojo-platform-channel-handle=1504 --field-trial-handle=1032,i,2384415356100994799,4450269093424484460,131072 /prefetch:8
      2⤵
      • Executes dropped EXE
      PID:2836
    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --with-feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --with-feature:booking-modal=off --with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner=on --with-feature:tiktok-panel=off --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --ab_tests=DNA-77043-test:DNA-77043 --mojo-platform-channel-handle=1992 --field-trial-handle=1032,i,2384415356100994799,4450269093424484460,131072 /prefetch:8
      2⤵
        PID:2968
      • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1
        2⤵
        • Executes dropped EXE
        PID:2260
        • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe
          C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x138,0x13c,0x140,0x10c,0x144,0x13ffecbd8,0x13ffecbe8,0x13ffecbf8
          3⤵
          • Executes dropped EXE
          PID:2284
    • C:\Windows\system32\taskeng.exe
      taskeng.exe {CF0D625F-41C7-4E96-B1F9-628F3DC5397A} S-1-5-21-4063495947-34355257-727531523-1000:RYNKSFQE\Admin:Interactive:[1]
      1⤵
        PID:2244
        • C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe
          C:\Users\Admin\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate --autoupdaterequesttype=automatic --autoupdateoperaversion=95.0.4635.25 --newautoupdaterlogic
          2⤵
          • Executes dropped EXE
          PID:1564
          • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
            3⤵
            • Executes dropped EXE
            PID:2456
          • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe" --pipeid=oauc_task_pipedcbb8f53eff625f232ff45d764476217 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015" --scheduledtask
            3⤵
            • Executes dropped EXE
            PID:2372
            • C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\95.0.4635.25\opera_autoupdate.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015 /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\Crash Reports" --crash-count-file=C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\crash_count.txt --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x138,0x13c,0x140,0x10c,0x144,0x13fa4cbd8,0x13fa4cbe8,0x13fa4cbf8
              4⤵
              • Executes dropped EXE
              PID:1528

      Network

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
        Filesize

        471B

        MD5

        570a1c546824166fb3c177c773629737

        SHA1

        db8cd214efba988d4e32bb8115ad4b7aae2c14e7

        SHA256

        12fb880a046d91c209588ed155147d84958042a4ab20b2c84dcd31891ac6a840

        SHA512

        f8e2c755bfd47f01d938af797a72b7f6998f2bb9d3ea87e894dc3e7d52126efeb9e8ee2bb803d12cb64ee5c6d8faabc37f1ef390551f5fde2f16afddaea3bab8

        Download Submit

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        Filesize

        344B

        MD5

        65958cd469ac29a22f05c20c9025d272

        SHA1

        75aae955b834eff9e4e624a0e5b0a378d7698249

        SHA256

        b41ea07be49d57eec65cfa32fe6567b0ed5672a4c40b762a74ccd5cb93d9f4f8

        SHA512

        d9fecff7ba11cda995f06d47c24d5cc26b7ee2110d023fe40457ff165dcc25703ee3319ff21d74dc106058cb55baa5a8e71707f85a84550b2d3e345a5759ba53

        Download Submit

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
        Filesize

        434B

        MD5

        a190d6d85fa52319aaab02e7207f56d3

        SHA1

        706c0d8ce31449810033867be2126168b95fd2e9

        SHA256

        8e931b4ef8d85cc993ff2359a7ef43232bc4bcbdcaa44e86a27ff6c75d0daecc

        SHA512

        40941f430715ec42aa60730bbfaec608664f6df718be4c193d524df526bed7c60c1178af426159169c883889ce5d0c47459b53a9fa6afa9b99ac76c004741f00

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\_sfx.exe
        Filesize

        1.7MB

        MD5

        0238df215bf6943892daf85de8ad433a

        SHA1

        3d905e4e2c0e9170df61b7a199321847691f945e

        SHA256

        a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

        SHA512

        fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\_sfx.exe
        Filesize

        1.7MB

        MD5

        0238df215bf6943892daf85de8ad433a

        SHA1

        3d905e4e2c0e9170df61b7a199321847691f945e

        SHA256

        a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

        SHA512

        fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
        Filesize

        2.1MB

        MD5

        9df6e2fbb7e38964f35016bf91ef7424

        SHA1

        d0c1266dc46814bc6165cf6a69e90581228989a7

        SHA256

        3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

        SHA512

        b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
        Filesize

        2.1MB

        MD5

        9df6e2fbb7e38964f35016bf91ef7424

        SHA1

        d0c1266dc46814bc6165cf6a69e90581228989a7

        SHA256

        3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

        SHA512

        b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
        Filesize

        2.1MB

        MD5

        9df6e2fbb7e38964f35016bf91ef7424

        SHA1

        d0c1266dc46814bc6165cf6a69e90581228989a7

        SHA256

        3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

        SHA512

        b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
        Filesize

        326KB

        MD5

        80d93d38badecdd2b134fe4699721223

        SHA1

        e829e58091bae93bc64e0c6f9f0bac999cfda23d

        SHA256

        c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

        SHA512

        9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
        Filesize

        326KB

        MD5

        80d93d38badecdd2b134fe4699721223

        SHA1

        e829e58091bae93bc64e0c6f9f0bac999cfda23d

        SHA256

        c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

        SHA512

        9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        Filesize

        602B

        MD5

        574f3d215906a5c1966fe79d758992f5

        SHA1

        8a872396172604b9977901c1ae0a5033a75c3bf5

        SHA256

        76846495ffcb2435162597c3b33901f13c0dafda02c8a11ec751c54368fb3d5d

        SHA512

        1e5abb85e210d21dd596f181570f9d3312097fc6cfab1825696a6c831225b2fe4a7644369e9a054b1f608909c6b124ef32618295a1932565c610b7b69a3776a0

        Download Submit

      • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
        Filesize

        40B

        MD5

        c06dbf9f691f39136fc3fa8f84022342

        SHA1

        ac1ff9d2b3f097ff111d905eab197ff7eedd5571

        SHA256

        ac28585e6315923201868d7dc7ab8a50b07e599dd1553858bfab515d9f12d27d

        SHA512

        e159d19fb7d42939b2c0946a6346d6244070305ccd162260eb53096e58ad8843c0ef5f9df933922c2894a0d96106f9d22ec52ab653cdafca2bfe7e65890898ff

        Download Submit

      • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
        Filesize

        40B

        MD5

        c06dbf9f691f39136fc3fa8f84022342

        SHA1

        ac1ff9d2b3f097ff111d905eab197ff7eedd5571

        SHA256

        ac28585e6315923201868d7dc7ab8a50b07e599dd1553858bfab515d9f12d27d

        SHA512

        e159d19fb7d42939b2c0946a6346d6244070305ccd162260eb53096e58ad8843c0ef5f9df933922c2894a0d96106f9d22ec52ab653cdafca2bfe7e65890898ff

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\_sfx.exe
        Filesize

        1.7MB

        MD5

        0238df215bf6943892daf85de8ad433a

        SHA1

        3d905e4e2c0e9170df61b7a199321847691f945e

        SHA256

        a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

        SHA512

        fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
        Filesize

        2.1MB

        MD5

        9df6e2fbb7e38964f35016bf91ef7424

        SHA1

        d0c1266dc46814bc6165cf6a69e90581228989a7

        SHA256

        3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

        SHA512

        b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\assistant\assistant_installer.exe
        Filesize

        2.1MB

        MD5

        9df6e2fbb7e38964f35016bf91ef7424

        SHA1

        d0c1266dc46814bc6165cf6a69e90581228989a7

        SHA256

        3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

        SHA512

        b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\opera_package
        Filesize

        86.8MB

        MD5

        7f98c2aa3a2b1a46caf94752d2e73907

        SHA1

        105b7b96c23d403008f603a1e3cc4c7162884fe3

        SHA256

        8f85c61fe1ca76f4c8e2dcb5f51758de73c85d25817cfab70540fa193d3ee417

        SHA512

        57f46f5af493f73472f7c664f12156cf8e18126a3f91e4c313d1ec185c78dad9301e09db38396cf811ada24eecd01b4b705384ca61da5f640c7ad38f3860b1e0

        Download Submit

      • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302041923571\opera_package
        Filesize

        86.8MB

        MD5

        7f98c2aa3a2b1a46caf94752d2e73907

        SHA1

        105b7b96c23d403008f603a1e3cc4c7162884fe3

        SHA256

        8f85c61fe1ca76f4c8e2dcb5f51758de73c85d25817cfab70540fa193d3ee417

        SHA512

        57f46f5af493f73472f7c664f12156cf8e18126a3f91e4c313d1ec185c78dad9301e09db38396cf811ada24eecd01b4b705384ca61da5f640c7ad38f3860b1e0

        Download Submit

      • \Users\Admin\AppData\Local\Temp\Opera_installer_2302041923542681688.dll
        Filesize

        4.6MB

        MD5

        914ec7fb3d69e977440248ef30323636

        SHA1

        2aa31e599769f34d0cb6e979947ca5728db9b009

        SHA256

        528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

        SHA512

        ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\Opera_installer_230204192354658580.dll
        Filesize

        4.6MB

        MD5

        914ec7fb3d69e977440248ef30323636

        SHA1

        2aa31e599769f34d0cb6e979947ca5728db9b009

        SHA256

        528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

        SHA512

        ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\Opera_installer_2302041923559691144.dll
        Filesize

        4.6MB

        MD5

        914ec7fb3d69e977440248ef30323636

        SHA1

        2aa31e599769f34d0cb6e979947ca5728db9b009

        SHA256

        528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

        SHA512

        ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\Opera_installer_2302041923585121296.dll
        Filesize

        4.6MB

        MD5

        914ec7fb3d69e977440248ef30323636

        SHA1

        2aa31e599769f34d0cb6e979947ca5728db9b009

        SHA256

        528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

        SHA512

        ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\Opera_installer_230204192359962268.dll
        Filesize

        4.6MB

        MD5

        914ec7fb3d69e977440248ef30323636

        SHA1

        2aa31e599769f34d0cb6e979947ca5728db9b009

        SHA256

        528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

        SHA512

        ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        Filesize

        1.8MB

        MD5

        f8996d2158a69a12b4bc99edd28100bc

        SHA1

        892887691df881fe432e09b618e90f50447340e6

        SHA256

        866836c68a3c7b313fa6a0ab6d7b9d74112ca07e4709487951ff572938eff547

        SHA512

        d6856d91ded75901a4af914e66bcdd904a51a2aba24e4762a2986f9a5f4b42f5b758b91c37ee5c9783c5797f19026e7f31e73d0e063f71bf5df8355a3213dd44

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
        Filesize

        1.7MB

        MD5

        1bbf5dd0b6ca80e4c7c77495c3f33083

        SHA1

        e0520037e60eb641ec04d1e814394c9da0a6a862

        SHA256

        bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

        SHA512

        97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
        Filesize

        97KB

        MD5

        da1d0cd400e0b6ad6415fd4d90f69666

        SHA1

        de9083d2902906cacf57259cf581b1466400b799

        SHA256

        7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

        SHA512

        f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
        Filesize

        1.3MB

        MD5

        9b78f3622c0a8ba5547043a956471e7f

        SHA1

        0492908faf8aa45d5be8f6bc4fd5db4f4ad7d4b6

        SHA256

        17cc160cd38b3af007bd86ccbbe6d48852961435b18b5b3ef56eaf0841ba32a3

        SHA512

        496691d164995ad99faea8641ec3c67119ebfb524f3b260335c386b74c82759534234e9896f67944e735fe32616728feb1a5b039395070a581d73f161ae43a23

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
        Filesize

        326KB

        MD5

        80d93d38badecdd2b134fe4699721223

        SHA1

        e829e58091bae93bc64e0c6f9f0bac999cfda23d

        SHA256

        c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

        SHA512

        9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
        Filesize

        1.3MB

        MD5

        e7bbc7b426cee4b8027a00b11f06ef34

        SHA1

        926fad387ede328d3cfd9da80d0b303a865cca98

        SHA256

        e7a43c6f10e3e65b8462b6d67c91c628db5402d3209f549e90998c875cf21538

        SHA512

        f08b4833c1dcb9c2b0f8c90e092275795fda3c20aaec6590504c20a93cb6d50b8ce11301bc3a42d9417c78ddb25a5e991fad688c39d1dede3fce0b67f3e13e70

        Download Submit

      • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
        Filesize

        326KB

        MD5

        80d93d38badecdd2b134fe4699721223

        SHA1

        e829e58091bae93bc64e0c6f9f0bac999cfda23d

        SHA256

        c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

        SHA512

        9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
        Filesize

        2.7MB

        MD5

        7623c723350b8db3fb190e9a1e0b0e62

        SHA1

        08a8ca45c15af2fbe1b3f3376fc424239840a02f

        SHA256

        26f73a7fafe57cd6b1e3883db77e82978c47452d829417599e554f6d394f027a

        SHA512

        1425a083341e4e293dadc9d25141bc557834e798a366555b90ef4f8c2798fa1ebfc94bcfe412e3cb3d074c3929b08826e3b9b96afe6afb6af86f9317593fc319

        Download Submit

      • memory/268-143-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/268-205-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/580-127-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/580-210-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/584-170-0x000007FEFC2F1000-0x000007FEFC2F3000-memory.dmp

        Filesize

        8KB

        Download

      • memory/892-204-0x0000000002770000-0x0000000002780000-memory.dmp

        Filesize

        64KB

        Download

      • memory/980-54-0x00000000766D1000-0x00000000766D3000-memory.dmp

        Filesize

        8KB

        Download

      • memory/980-67-0x0000000002BF0000-0x0000000002FD8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/980-66-0x0000000002BF0000-0x0000000002FD8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/980-73-0x0000000002BF0000-0x0000000002FD8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/980-65-0x0000000002BF0000-0x0000000002FD8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1144-130-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1144-124-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1296-168-0x00000000028F0000-0x0000000002E37000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1296-142-0x00000000028F0000-0x0000000002E37000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1296-141-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1296-203-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1648-111-0x0000000005700000-0x0000000005C47000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1648-107-0x0000000005700000-0x0000000005C47000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1648-105-0x0000000000AC0000-0x0000000000EA8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1648-121-0x0000000000AC0000-0x0000000000EA8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1648-108-0x0000000005700000-0x0000000005C47000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-164-0x0000000003420000-0x0000000003967000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-125-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-126-0x0000000002910000-0x0000000002E57000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-129-0x0000000003420000-0x0000000003967000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-140-0x0000000003920000-0x0000000003E67000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1688-206-0x0000000000400000-0x0000000000947000-memory.dmp

        Filesize

        5.3MB

        Download

      • memory/1956-99-0x0000000002CC0000-0x00000000030A8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1956-98-0x0000000002CC0000-0x00000000030A8000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1960-149-0x0000000002D10000-0x0000000002D20000-memory.dmp

        Filesize

        64KB

        Download

      • memory/1960-74-0x0000000001020000-0x0000000001408000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1960-84-0x0000000002D10000-0x0000000002D20000-memory.dmp

        Filesize

        64KB

        Download

      • memory/1960-68-0x0000000001020000-0x0000000001408000-memory.dmp

        Filesize

        3.9MB

        Download

      • memory/1960-71-0x0000000010000000-0x0000000010051000-memory.dmp

        Filesize

        324KB

        Download

      • memory/1960-72-0x0000000000460000-0x0000000000463000-memory.dmp

        Filesize

        12KB

        Download