Overview

overview

8

Static

static

1

TLauncher-...al.exe

windows7-x64

8

TLauncher-...al.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    110s
  • max time network
    109s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    07/02/2023, 00:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TLauncher-2.871-Installer-1.0.6-global.exe

  • Size

    23.6MB

  • MD5

    7a4472a78d0651e11d20aa08e43cc045

  • SHA1

    aab1d5f80d7399ae2c1982201733be7681d100b1

  • SHA256

    318df7404e6c4d5538a6d31997b95af52bbb8d40caf5553b3cbd9b1bc4f6db96

  • SHA512

    c152c9d21b0615548173dcc61accb1a1afd5b6f98e6ec21f6a7119536397f07a54ad4087669716c3344dd338ce4f24cecf9989d472f65eaa18c87d496f23c681

  • SSDEEP

    393216:gXQLpnUN/n8IPfs/dQETVlOBbpFEj9GZ1GphRqV56Hpk7IXOzDnKI17fyVS:ggLFUp8aHExiTI3qqHp6zvKcfyVS

Score
8/10
discoveryspywarestealerupx

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs
  • Downloads MZ/PE file
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 47 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • UPX packed file 38 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 26 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 1 IoCs
  • Drops file in Windows directory 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies registry class 24 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
    evasionspywaretrojan
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1568
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1910546 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-2.871-Installer-1.0.6-global.exe" "__IRCT:3" "__IRTSS:24771453" "__IRSID:S-1-5-21-3406023954-474543476-3319432036-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1256
      • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
        "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:688
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:1816850 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe" "__IRCT:3" "__IRTSS:1840872" "__IRSID:S-1-5-21-3406023954-474543476-3319432036-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies system certificate store
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:1528
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Enumerates connected drives
            • Modifies system certificate store
            • Suspicious use of WriteProcessMemory
            PID:1608
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x1a4,0x1a8,0x1ac,0x178,0x1b0,0x7131e428,0x7131e438,0x7131e444
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1640
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1960
            • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
              "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --pin-additional-shortcuts=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1608 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20230207011050" --session-guid=2d4d2867-6344-4aff-801a-7c7663dd6476 --server-tracking-blob=MWE3MjM3ZGUxMjZkZTM5Y2RlZjRmYzUxODYwNDFkYmVjMjIxYjU1OGJkZTgwYjBkNzQwMWNkNTVmYmIxNTBkNDp7ImNvdW50cnkiOiJJTiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fbWVkaXVtPWFwYiZ1dG1fc291cmNlPU1TVEwmdXRtX2NhbXBhaWduPU9wZXJhRGVza3RvcCIsInRpbWVzdGFtcCI6IjE2NzU3Mjg2NDcuMDQ1MyIsInVzZXJhZ2VudCI6IlNldHVwIEZhY3RvcnkgOS4wIiwidXRtIjp7ImNhbXBhaWduIjoiT3BlcmFEZXNrdG9wIiwibWVkaXVtIjoiYXBiIiwic291cmNlIjoiTVNUTCJ9LCJ1dWlkIjoiOWQ2OWMwM2ItMTA2My00Mjc1LTg0Y2QtMzA1Y2M3MTFiZjY5In0= --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0C03000000000000
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates connected drives
              • Suspicious use of WriteProcessMemory
              PID:1512
              • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=95.0.4635.25 --initial-client-data=0x1b0,0x1b4,0x1b8,0x178,0x1bc,0x7082e428,0x7082e438,0x7082e444
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1612
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\_sfx.exe"
              6⤵
              • Executes dropped EXE
              PID:1152
            • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe" --version
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:296
              • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=94.0.4606.38 --initial-client-data=0x148,0x14c,0x150,0x11c,0x154,0xf82dc0,0xf82dd0,0xf82ddc
                7⤵
                • Executes dropped EXE
                PID:1896
      • C:\Users\Admin\AppData\Local\Temp\jre-windows.exe
        "C:\Users\Admin\AppData\Local\Temp\jre-windows.exe" STATIC=1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1848
        • C:\Users\Admin\AppData\Local\Temp\jds7178573.tmp\jre-windows.exe
          "C:\Users\Admin\AppData\Local\Temp\jds7178573.tmp\jre-windows.exe" "STATIC=1"
          4⤵
          • Executes dropped EXE
          • Modifies Internet Explorer settings
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of SetWindowsHookEx
          PID:308
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Blocklisted process makes network request
    • Loads dropped DLL
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Checks processor information in registry
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    PID:1760
    • C:\Windows\system32\MsiExec.exe
      C:\Windows\system32\MsiExec.exe -Embedding DCC1DF8E15815315B234BAFE7127B2EF
      2⤵
      • Loads dropped DLL
      PID:1428
    • C:\Program Files\Java\jre1.8.0_351\installer.exe
      "C:\Program Files\Java\jre1.8.0_351\installer.exe" /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_351\\" STATIC=1 INSTALL_SILENT=1 REPAIRMODE=0 ProductCode={26A24AE4-039D-4CA4-87B4-2F64180351F0}
      2⤵
      • Executes dropped EXE
      PID:1200

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
    Filesize

    471B

    MD5

    3dcd2f557214f77450208ef3c5404065

    SHA1

    876b1a4c6a96aba9dae31ffbf0a0ec1afa5f635d

    SHA256

    7f366ddf1645565b2dfb50e99078eb22a9865da6e9604597921fdba53ad6cfa7

    SHA512

    e4b0b3b521f0788366803668b657052b3aa25bc1d3a8e9472ac75db83ddefdf733237c21bec2b9a8605dd4238ade3a6cf3485be228e09ed7d91e734e977984a4

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    808646352e63ba9e85f5a49514a2a39e

    SHA1

    fd7ec283e6a09fe9f725ff5018e2ee584a74e74a

    SHA256

    f38882768c77fbc64902061e8df6a4dd420e0ab38b30d1ef7ecc67615e2774c2

    SHA512

    5396add01a6becf13cbd80eaf3623ad35d9a39e4a6da3e7ab9d446a656aacbedfcab71bc31c99d16050adc5b031e10aed199f9ce36a69c70750c838a33299bb0

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4185fa22c1a40750679982adc455a907

    SHA1

    2ebe21a01d479062086283430e45b41b194be800

    SHA256

    9acf5a533b978b6cb93a7aa87b25aee0e9fd0dfb995d00976c36e558873bf9ed

    SHA512

    7a9a2e13a98f340ccc4ca3d8aef81412a3a2cc46cb0d2801de3219b0ffc1456dddf9a5e2b90e513b19526d0f1d73f41efcdae34d8fa2fd250db7e96dfa41c8cc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4185fa22c1a40750679982adc455a907

    SHA1

    2ebe21a01d479062086283430e45b41b194be800

    SHA256

    9acf5a533b978b6cb93a7aa87b25aee0e9fd0dfb995d00976c36e558873bf9ed

    SHA512

    7a9a2e13a98f340ccc4ca3d8aef81412a3a2cc46cb0d2801de3219b0ffc1456dddf9a5e2b90e513b19526d0f1d73f41efcdae34d8fa2fd250db7e96dfa41c8cc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_ADE4E4D3A3BCBCA5C39C54D362D88565
    Filesize

    434B

    MD5

    b1a842d127685f562fa97707f81706e0

    SHA1

    b6dacca0e0b88049be9260ff6c58b1fb4b240a79

    SHA256

    b6cc72c9331a3fe0ccc0d21df69e34e2ba029ac2e5d236e8876a45a1affc9cb1

    SHA512

    fd4ac759a7329b7c653df9330e7b5a0be8f68b5b6a51b40516ef7c4ba32c7f04d958d2d1014c000a8767c128dedf2e4f6bfd65c5d35f1a00c266472387fed975

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\_sfx.exe
    Filesize

    1.7MB

    MD5

    0238df215bf6943892daf85de8ad433a

    SHA1

    3d905e4e2c0e9170df61b7a199321847691f945e

    SHA256

    a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

    SHA512

    fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\_sfx.exe
    Filesize

    1.7MB

    MD5

    0238df215bf6943892daf85de8ad433a

    SHA1

    3d905e4e2c0e9170df61b7a199321847691f945e

    SHA256

    a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

    SHA512

    fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
    Filesize

    602B

    MD5

    0f487fd09fff59906b744aff658b4c40

    SHA1

    9e5169fa51d706955abcc13225e4710d9a83ab20

    SHA256

    631b70839ddd25cf621379e2c6474f16c0f5ef80bc0925d652f27bddb80c1451

    SHA512

    f154c21ac2ee7c5ed8ecc08a4cdb1518f7722c18edbd444165fbcf5e8fc790c2ff97d04c6bb7df200b5db40c0b57c667dc3ac8de09fd7f688d41c98ef81b1722

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
    Filesize

    40B

    MD5

    509028cb4cb5796c11fd46a57f439fd2

    SHA1

    4daf0173cffe10927cc4bfb90dbc4f2fd9d68b8a

    SHA256

    6b62f6d59828acb6ff5948f85419e46ea52c58950ec32a01a19e266bf541d648

    SHA512

    4e911c40695cb004d934db7c95e5284d81fd036b92ef20d4eb17f2b14573210ad43d983c2805e8ce3087a237beeaa4c27bb19b614ad08c3911141d0644521f86

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\_sfx.exe
    Filesize

    1.7MB

    MD5

    0238df215bf6943892daf85de8ad433a

    SHA1

    3d905e4e2c0e9170df61b7a199321847691f945e

    SHA256

    a7818aca6acbe347df13d51d9750f6a852c5aa2a58580f7f2015113e0a3e06d7

    SHA512

    fc6c12e359b9a4ce84ef878f29648a4c97c38fd12ed80996c5e03829833220010fff9c751a99f399dad3529bda6438424194ed18236addfbe430343807aaad69

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\assistant\assistant_installer.exe
    Filesize

    2.1MB

    MD5

    9df6e2fbb7e38964f35016bf91ef7424

    SHA1

    d0c1266dc46814bc6165cf6a69e90581228989a7

    SHA256

    3573825f31875d403832de8e06aabc2adbdf0c5279d80ea62dfcb1f159f06c1d

    SHA512

    b14c2224ae10c80429205a39791745b1627c1a487176c06aa105d0689e77fb0b86427e1a7d5aef5d06460070b3df4ebea41db67d54e221ea25979b3bb5318d3e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\opera_package
    Filesize

    86.8MB

    MD5

    7f98c2aa3a2b1a46caf94752d2e73907

    SHA1

    105b7b96c23d403008f603a1e3cc4c7162884fe3

    SHA256

    8f85c61fe1ca76f4c8e2dcb5f51758de73c85d25817cfab70540fa193d3ee417

    SHA512

    57f46f5af493f73472f7c664f12156cf8e18126a3f91e4c313d1ec185c78dad9301e09db38396cf811ada24eecd01b4b705384ca61da5f640c7ad38f3860b1e0

    Download Submit

  • \Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202302070110501\opera_package
    Filesize

    86.8MB

    MD5

    7f98c2aa3a2b1a46caf94752d2e73907

    SHA1

    105b7b96c23d403008f603a1e3cc4c7162884fe3

    SHA256

    8f85c61fe1ca76f4c8e2dcb5f51758de73c85d25817cfab70540fa193d3ee417

    SHA512

    57f46f5af493f73472f7c664f12156cf8e18126a3f91e4c313d1ec185c78dad9301e09db38396cf811ada24eecd01b4b705384ca61da5f640c7ad38f3860b1e0

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302070110467691608.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302070110490471640.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302070110507631960.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302070110528221512.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\Opera_installer_2302070110531181612.dll
    Filesize

    4.6MB

    MD5

    914ec7fb3d69e977440248ef30323636

    SHA1

    2aa31e599769f34d0cb6e979947ca5728db9b009

    SHA256

    528117e7c698fbe7ad3036aef77f99ab8af74316def7a4ba60f738c40168c203

    SHA512

    ff62901ffe79bbc8ffe6cce3efc8f13e71f13a41772b8d0180614b6ba80d5b9db1094a97cf3d239057dca2efdd7b0adc217f3ddce5111267c50ec9d0d1125b3a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\AdditionalExecuteTL.exe
    Filesize

    1.8MB

    MD5

    aa4de04ccc16b74a4c2301da8d621ec1

    SHA1

    d05c6d8200f6e6b1283df82d24d687adc47d9664

    SHA256

    e2b0c8e54983b6fcd847a891c5443cb321fb4f0c9106ec8ed6a37cab5ebcc81b

    SHA512

    28d62bbe394bc2300d60263971cdee15fa417c6fcc7e44ecd2b3b567821e99953377383d137b0827f3f904d30deb508732bcb77cd37d444032d6ffc25c60712e

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
    Filesize

    1.7MB

    MD5

    1bbf5dd0b6ca80e4c7c77495c3f33083

    SHA1

    e0520037e60eb641ec04d1e814394c9da0a6a862

    SHA256

    bc6bd19ab0977ac794e18e2c82ace3116bf0537711a352638efd2d8d847c140b

    SHA512

    97bc810871868217f944bc5e60ab642f161c1f082bc9e4122094f10b4e309a6d96e3dd695553a20907cb8fea5aef4802f5a2f0a852328c1a1cd85944022abaab

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
    Filesize

    97KB

    MD5

    da1d0cd400e0b6ad6415fd4d90f69666

    SHA1

    de9083d2902906cacf57259cf581b1466400b799

    SHA256

    7a79b049bdc3b6e4d101691888360f4f993098f3e3a8beefff4ac367430b1575

    SHA512

    f12f64670f158c2e846e78b7b5d191158268b45ecf3c288f02bbee15ae10c4a62e67fb3481da304ba99da2c68ac44d713a44a458ef359db329b6fef3d323382a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
    Filesize

    1.3MB

    MD5

    7e08af319c9eb3297e09ca7bb8387de4

    SHA1

    4cf091f77a3eb9437ef33985e64bd10c1257284f

    SHA256

    6c006c982746826a613bc0f09890955a1cdca309d9d98572aed35ad782dd11c8

    SHA512

    bb7aaebd3f6c1ff18bd0cb9eb9347894f0785dc011ec9765d9bc180de9b60769c891151626fdef88aa3fd53ae6246c1cb91f723933da54920bfbc8a5a24f8851

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
    Filesize

    1.3MB

    MD5

    e801c5847f5f9d207db53aaaf5c6f3a2

    SHA1

    8e6818ce66555e2cca92e5c5f32551fb4a91645e

    SHA256

    196eb4b81988326f6b44b1efcc4fa7a31a289bcf3893a16c3db6f889aa439b03

    SHA512

    303ab54112fd38a36c10484037f8ff4eeadd0c6f7dde18cf4f3b7f64bf7f7756b30f634427be1cf596ec995f41923c8678040a9a06244129f2337a3fe2f9bab3

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.1.dll
    Filesize

    326KB

    MD5

    80d93d38badecdd2b134fe4699721223

    SHA1

    e829e58091bae93bc64e0c6f9f0bac999cfda23d

    SHA256

    c572a6103af1526f97e708a229a532fd02100a52b949f721052107f1f55e0c59

    SHA512

    9f28073cc186b55ef64661c2e4f6fe1c112785a262b9d8e9a431703fdb1000f1d8cc0b2a3c153c822cfd48782ae945742ccb07beae4d6388d5d0b4df03103bd4

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • \Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
    Filesize

    2.7MB

    MD5

    54dbcbc80cbcef9397ccabc9d77ee7e3

    SHA1

    6a4a4c14a81e5ea97f8a0f71bb47ba4063983999

    SHA256

    eb89483154f770a0f6bfa7b7cd1ce6c0fe8f17b623788684c914d3bf57e344f7

    SHA512

    a00e4fab3e3bd79795efc18f084ade309166ab71858e8dda89075ddacb8e96ee7ab28f8170a297c7c1c23346d327df66ddc46ef1e330306a83114e91f2a39d87

    Download Submit

  • memory/308-173-0x000007FEFBD41000-0x000007FEFBD43000-memory.dmp

    Filesize

    8KB

    Download

  • memory/688-93-0x0000000002FF0000-0x00000000033D8000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/688-94-0x0000000002FF0000-0x00000000033D8000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/688-92-0x0000000002FF0000-0x00000000033D8000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1256-72-0x0000000001160000-0x0000000001548000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1256-64-0x0000000001160000-0x0000000001548000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1256-70-0x0000000010000000-0x0000000010051000-memory.dmp

    Filesize

    324KB

    Download

  • memory/1256-71-0x00000000005A0000-0x00000000005A3000-memory.dmp

    Filesize

    12KB

    Download

  • memory/1256-151-0x0000000004BE0000-0x0000000004BF0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1256-88-0x0000000004BE0000-0x0000000004BF0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1512-147-0x00000000028E0000-0x0000000002E27000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1512-146-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1528-110-0x0000000005640000-0x0000000005B87000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1528-111-0x0000000005640000-0x0000000005B87000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1528-112-0x0000000005640000-0x0000000005B87000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1528-109-0x0000000005640000-0x0000000005B87000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1528-106-0x0000000002690000-0x00000000026A0000-memory.dmp

    Filesize

    64KB

    Download

  • memory/1528-95-0x0000000000C70000-0x0000000001058000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1528-119-0x0000000000C70000-0x0000000001058000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1568-62-0x0000000002D80000-0x0000000003168000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1568-63-0x0000000002D80000-0x0000000003168000-memory.dmp

    Filesize

    3.9MB

    Download

  • memory/1568-54-0x0000000075BE1000-0x0000000075BE3000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1608-135-0x00000000037D0000-0x0000000003D17000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1608-154-0x0000000002FF0000-0x0000000003537000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1608-121-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1608-122-0x0000000002930000-0x0000000002E77000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1608-153-0x0000000002930000-0x0000000002E77000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1608-132-0x0000000002FF0000-0x0000000003537000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1612-148-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1640-155-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1640-120-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download

  • memory/1960-129-0x0000000000400000-0x0000000000947000-memory.dmp

    Filesize

    5.3MB

    Download