Overview

overview

8

Static

static

8

TLauncher-....1.exe

windows10-ltsc_2021-x64

7

TLauncher-....1.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    480s
  • max time network
    442s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-es
  • resource tags

    arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
  • submitted
    20/06/2026, 01:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TLauncher-Installer-1.9.5.1.exe
  • Size 25.5MB
  • Sample260620-bpbbkacx4j
  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojanupx

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in System32 directory 16 IoCs
  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 18 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 45 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 31 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1500
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-2409539145-3342400454-2096821238-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1268
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4480
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-2409539145-3342400454-2096821238-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4796
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4704
            • C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe --silent --allusers=0 --server-tracking-blob=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
              6⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Modifies system certificate store
              • Suspicious use of WriteProcessMemory
              PID:4068
              • C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff70bfd7e08,0x7ff70bfd7e14,0x7ff70bfd7e20
                7⤵
                • Executes dropped EXE
                PID:3312
              • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\installer.exe" --version
                7⤵
                • Executes dropped EXE
                PID:976
              • C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4068 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_20260620022155" --session-guid=93b6ff5c-4feb-416c-834c-6097d39222e3 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=9008000000000000
                7⤵
                • Executes dropped EXE
                • Enumerates connected drives
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4348
                • C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff70bfd7e08,0x7ff70bfd7e14,0x7ff70bfd7e20
                  8⤵
                  • Executes dropped EXE
                  PID:588
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --backend --initial-pid=4068 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551" --session-guid=93b6ff5c-4feb-416c-834c-6097d39222e3 --server-tracking-blob="ZTNjNmJlY2I1N2Q5YjgzZDFmOWU2NzE3ZGRkZTZiYTY2NjVhZDY4OWViMTc0Y2YwMGIyNmQ2YjY4OTc5NGViZDp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yLz91dG1fc291cmNlPU1TVEwmdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249T3BlcmFHWCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MTkxODUxNS44NzI1IiwidXNlcmFnZW50IjoiU2V0dXAgRmFjdG9yeSA4LjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJPcGVyYUdYIiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJNU1RMIn0sInV1aWQiOiJiZjA1ZDVlNS1iMjg4LTQyNDgtOTZlNC1mZTliN2VmZTliNDcifQ== " --silent --desktopshortcut=1 --install-subfolder=132.0.5905.43
                  8⤵
                  • Executes dropped EXE
                  • Enumerates connected drives
                  • Modifies registry class
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of WriteProcessMemory
                  PID:4916
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6cbc97e08,0x7ff6cbc97e14,0x7ff6cbc97e20
                    9⤵
                    • Executes dropped EXE
                    PID:1288
                  • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • System Location Discovery: System Language Discovery
                    • Enumerates system info in registry
                    • Modifies Internet Explorer settings
                    • Suspicious use of WriteProcessMemory
                    PID:1756
                    • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x394b80,0x394b8c,0x394b98
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      PID:1804
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:4904
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x514b80,0x514b8c,0x514b98
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:4780
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Enumerates system info in registry
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        • Suspicious use of WriteProcessMemory
                        PID:3780
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:3268
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                            13⤵
                            • Executes dropped EXE
                            PID:1144
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:3892
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0xd4,0xd8,0x150,0x98,0x154,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                            13⤵
                            • Executes dropped EXE
                            PID:1856
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0xa68378,0xa68384,0xa68390
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:2464
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Suspicious use of WriteProcessMemory
                            PID:2312
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x14c,0x150,0x154,0x148,0x158,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                              14⤵
                              • Executes dropped EXE
                              PID:2300
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Suspicious use of WriteProcessMemory
                            PID:4340
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                              14⤵
                              • Executes dropped EXE
                              PID:2808
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:736
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x154,0x158,0x15c,0x150,0x160,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                              14⤵
                              • Executes dropped EXE
                              PID:1184
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • Drops file in Windows directory
                    • Checks processor information in registry
                    • Enumerates system info in registry
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:1532
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x154,0x158,0x15c,0x150,0x160,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                      10⤵
                      • Executes dropped EXE
                      PID:2932
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,7759506027900873188,17648861880503076699,262144 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1824 /prefetch:2
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:2892
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=2000,i,6927153711992660352,4204881846031291424,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2008 /prefetch:11
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • System Time Discovery
                      • Enumerates system info in registry
                      PID:1628
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=2320,i,10919771500899332470,11315492706593696485,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=1364 /prefetch:13
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:4584
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3032,i,12002616218687282485,16884747597355280728,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3272 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:3336
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3048,i,9954904937291278466,14192043508405799075,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3292 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:2172
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3076,i,14646309071750801469,1366111895772205124,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3332 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:2832
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3060,i,12126800563805082411,11895413128763194578,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3312 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:1076
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3004,i,1603896155594766052,16926758244618258096,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3224 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:2304
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=3016,i,10154525839744010466,13596376356217948866,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3244 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:4456
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3836,i,14242800388232871781,1102283500338562242,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3940 /prefetch:1
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:3260
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                      10⤵
                      • Executes dropped EXE
                      PID:2904
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4596,i,9616050711613561975,17799656258037221281,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4604 /prefetch:1
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:4208
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4828,i,5686492575066159891,7027888694929485333,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4832 /prefetch:9
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5164
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4988,i,3774403767908407638,15987378694141298087,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5216
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5220,i,2974846026709033717,2499322408225241959,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5232 /prefetch:1
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:5264
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5244,i,18075812511541871418,5174135080971537444,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5412 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5280
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5264,i,7538682294779439097,6937788490133790311,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5424 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5308
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5260,i,2675004108829854622,14772864586747187204,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5468 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5316
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5268,i,10502929237640400852,8005229230203274145,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5476 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5324
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6304,i,790781883931185346,2169075933841305640,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6340 /prefetch:9
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:5940
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6636,i,978727600074985092,13592021862638256971,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6680 /prefetch:9
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6052
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6876,i,13838929236139094671,2310115220298240921,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6880 /prefetch:9
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6212
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5756,i,17841103387082152027,13867141339780320979,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5252 /prefetch:1
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6352
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7344,i,14352748265931574814,1687957778591838882,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7352 /prefetch:12
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6504
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7500,i,2141672629693635623,15632598138021472052,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6660 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6612
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7520,i,8781057991717206502,5560925215526585992,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7296 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6624
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7088,i,10303932709409644756,7913994277558884479,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6560 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6656
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7144,i,3242032051932351354,10627550917063713595,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7752 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6672
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7784,i,11465043314915569002,11574881086622016518,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7800 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6680
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=7756,i,4353859650851970166,8019476900258533825,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8040 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6696
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8208,i,8089995643496988167,16647318455739427868,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8220 /prefetch:14
                      10⤵
                      • Executes dropped EXE
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6724
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8232,i,15697836992441949528,11926361162835533373,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8336 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6736
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8492,i,12289427813400340209,18388583201042882367,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8500 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6748
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8640,i,15213018644068184942,16682792432264104529,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8652 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6780
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8656,i,16239575212165673272,14082562680443986634,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8680 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6788
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8936,i,2005842723693143591,6078243054627879146,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8948 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6812
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9152,i,7156155428506226277,12032437966592914621,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9128 /prefetch:9
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7048
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9308,i,9079487705301801229,11297377872081701122,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9316 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5556
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9180,i,7545893558529874482,10154963214916079420,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9524 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:5672
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=9096,i,9476475379013692714,10759014192818009986,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9140 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5860
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10176,i,17237724441793858672,4762142870766484642,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10180 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6920
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=10304,i,14989575486108374961,3729280328553572882,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10320 /prefetch:14
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7120
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9952,i,4403101739703634024,14942175317397250064,2097152 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10520 /prefetch:1
                      10⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7136
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                      10⤵
                        PID:2544
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff717d03900,0x7ff717d0390c,0x7ff717d03918
                          11⤵
                            PID:5484
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=8008,i,11493000784443526182,7397607743204162411,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5244 /prefetch:14
                          10⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:5644
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25 --metrics-shmem-handle=5620,i,11326050314163272629,1145873316889802814,524288 --field-trial-handle=1840,i,6427182602728014978,17474040780244923164,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1844,i,11114245115996850217,18401314920054457769,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3968 /prefetch:14
                          10⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:5504
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=es --pipeid --producttype --requesttype=shutdown --version=132.0.5905.43 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=132.0.5905.43 --firstrunts=1781918539 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                          10⤵
                          • Enumerates system info in registry
                          PID:5904
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff717d03900,0x7ff717d0390c,0x7ff717d03918
                            11⤵
                              PID:2628
                    • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                      7⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      PID:2232
                    • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe" --version
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2272
                      • C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x394b80,0x394b8c,0x394b98
                        8⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:3008
            • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
              "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
              3⤵
              • System Location Discovery: System Language Discovery
              PID:5964
              • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                4⤵
                • Suspicious use of SetWindowsHookEx
                PID:5740
                • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                  "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                  5⤵
                  • Modifies registry class
                  • Suspicious use of SetWindowsHookEx
                  PID:6768
                  • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                    C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.282.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9369.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9369 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • System Time Discovery
                    • Checks processor information in registry
                    • Suspicious use of SetWindowsHookEx
                    PID:6132
                    • C:\Windows\SYSTEM32\cmd.exe
                      cmd.exe /C chcp 437 & wmic CPU get NAME
                      7⤵
                        PID:2000
                        • C:\Windows\system32\chcp.com
                          chcp 437
                          8⤵
                            PID:1620
                          • C:\Windows\System32\Wbem\WMIC.exe
                            wmic CPU get NAME
                            8⤵
                            • Suspicious use of AdjustPrivilegeToken
                            PID:6200
                        • C:\Windows\SYSTEM32\cmd.exe
                          cmd.exe /C chcp 437 & set processor
                          7⤵
                            PID:556
                            • C:\Windows\system32\chcp.com
                              chcp 437
                              8⤵
                                PID:5404
                            • C:\Windows\SYSTEM32\cmd.exe
                              cmd.exe /C chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                              7⤵
                                PID:6944
                                • C:\Windows\system32\chcp.com
                                  chcp 437
                                  8⤵
                                    PID:4756
                                  • C:\Windows\system32\dxdiag.exe
                                    dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                                    8⤵
                                    • Drops file in System32 directory
                                    • Drops file in Windows directory
                                    • Checks SCSI registry key(s)
                                    • Modifies registry class
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of SetWindowsHookEx
                                    PID:2880
                                • C:\Windows\SYSTEM32\cmd.exe
                                  cmd.exe /C chcp 437 & wmic qfe get HotFixID
                                  7⤵
                                    PID:6932
                                    • C:\Windows\system32\chcp.com
                                      chcp 437
                                      8⤵
                                        PID:6784
                                      • C:\Windows\System32\Wbem\WMIC.exe
                                        wmic qfe get HotFixID
                                        8⤵
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:7024
                                    • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
                                      C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe "-Dos.name=Windows 10" -Dos.version=10.0 -Xmx10922M -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=32M -Dfml.ignoreInvalidMinecraftCertificates=true -Dfml.ignorePatchDiscrepancies=true -Djava.net.preferIPv4Stack=true -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\natives -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\tl_skin_cape_1.8.9\1.37\tl_skin_cape_1.8.9-1.37.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-tree\6.2\asm-tree-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm\6.2\asm-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-commons\6.2\asm-commons-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.12\launchwrapper-1.12.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\netty\1.8.8\netty-1.8.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\3.4.0\jna-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.23.Final\netty-all-4.0.23.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\17.0\guava-17.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.3.2\commons-lang3-3.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\authlib\1.7.211\authlib-1.7.211.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\realms\1.7.59\realms-1.7.59.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\6.5\twitch-6.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\1.8.9.jar -Dminecraft.applet.TargetDirectory=C:\Users\Admin\AppData\Roaming\.minecraft -DlibraryDirectory=C:\Users\Admin\AppData\Roaming\.minecraft\libraries -Dcountry=${country} -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\client-1.7.xml org.tlauncher.Launch1_8_9 --username pepe --version 1.8.9 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.8 --uuid 006ca5cd402f4d9dac8126f20e7c873f --accessToken null --userProperties {} --userType mojang --width 925 --height 530
                                      7⤵
                                        PID:6404
                                      • C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
                                        C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe "-Dos.name=Windows 10" -Dos.version=10.0 -Xmx10922M -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=32M -Dfml.ignoreInvalidMinecraftCertificates=true -Dfml.ignorePatchDiscrepancies=true -Djava.net.preferIPv4Stack=true -Djava.library.path=C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\natives -cp C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\tl_skin_cape_1.8.9\1.37\tl_skin_cape_1.8.9-1.37.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-tree\6.2\asm-tree-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm\6.2\asm-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-commons\6.2\asm-commons-6.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.12\launchwrapper-1.12.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\netty\1.8.8\netty-1.8.8.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\3.4.0\jna-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.23.Final\netty-all-4.0.23.Final.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\17.0\guava-17.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.3.2\commons-lang3-3.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\authlib\1.7.211\authlib-1.7.211.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\realms\1.7.59\realms-1.7.59.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar;C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\6.5\twitch-6.5.jar;C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\1.8.9.jar -Dminecraft.applet.TargetDirectory=C:\Users\Admin\AppData\Roaming\.minecraft -DlibraryDirectory=C:\Users\Admin\AppData\Roaming\.minecraft\libraries -Dcountry=${country} -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.minecraft\assets\log_configs\client-1.7.xml org.tlauncher.Launch1_8_9 --username pepe --version 1.8.9 --gameDir C:\Users\Admin\AppData\Roaming\.minecraft --assetsDir C:\Users\Admin\AppData\Roaming\.minecraft\assets --assetIndex 1.8 --uuid 006ca5cd402f4d9dac8126f20e7c873f --accessToken null --userProperties {} --userType mojang --width 925 --height 530
                                        7⤵
                                          PID:6040
                            • C:\Windows\system32\wbem\unsecapp.exe
                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                              1⤵
                                PID:1220
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                1⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Enumerates system info in registry
                                • Suspicious use of WriteProcessMemory
                                PID:4104
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffeaeee4ff0,0x7ffeaeee5000,0x7ffeaeee5010
                                  2⤵
                                  • Executes dropped EXE
                                  PID:3700
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                1⤵
                                  PID:6816
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff717d03900,0x7ff717d0390c,0x7ff717d03918
                                    2⤵
                                      PID:6272
                                  • C:\Windows\System32\GameBarPresenceWriter.exe
                                    "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                    1⤵
                                    • Network Service Discovery
                                    PID:7160
                                  • C:\Windows\system32\OpenWith.exe
                                    C:\Windows\system32\OpenWith.exe -Embedding
                                    1⤵
                                    • Suspicious behavior: GetForegroundWindowSpam
                                    • Suspicious use of SetWindowsHookEx
                                    PID:5764
                                  • C:\Windows\system32\svchost.exe
                                    C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                    1⤵
                                    • Checks processor information in registry
                                    • Modifies registry class
                                    PID:7140
                                  • C:\Windows\System32\svchost.exe
                                    C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                                    1⤵
                                    • Checks processor information in registry
                                    • Modifies data under HKEY_USERS
                                    PID:1416

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Reconnaissance

                                        Resource Development

                                        Initial Access

                                        Execution

                                        Persistence

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Registry Run Keys / Startup Folder

                                        1
                                        T1547.001

                                        Event Triggered Execution

                                        1
                                        T1546

                                        Component Object Model Hijacking

                                        1
                                        T1546.015

                                        Privilege Escalation

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Registry Run Keys / Startup Folder

                                        1
                                        T1547.001

                                        Event Triggered Execution

                                        1
                                        T1546

                                        Component Object Model Hijacking

                                        1
                                        T1546.015

                                        Defense Evasion

                                        Modify Registry

                                        3
                                        T1112

                                        Subvert Trust Controls

                                        1
                                        T1553

                                        Install Root Certificate

                                        1
                                        T1553.004

                                        Credential Access

                                        Credentials from Password Stores

                                        1
                                        T1555

                                        Credentials from Web Browsers

                                        1
                                        T1555.003

                                        Unsecured Credentials

                                        1
                                        T1552

                                        Credentials In Files

                                        1
                                        T1552.001

                                        Discovery

                                        Network Service Discovery

                                        1
                                        T1046

                                        Peripheral Device Discovery

                                        2
                                        T1120

                                        Query Registry

                                        6
                                        T1012

                                        System Information Discovery

                                        5
                                        T1082

                                        System Location Discovery

                                        1
                                        T1614

                                        System Language Discovery

                                        1
                                        T1614.001

                                        System Network Configuration Discovery

                                        1
                                        T1016

                                        Internet Connection Discovery

                                        1
                                        T1016.001

                                        System Time Discovery

                                        1
                                        T1124

                                        Lateral Movement

                                        Collection

                                        Data from Local System

                                        1
                                        T1005

                                        Command and Control

                                        Exfiltration

                                        Impact

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                        • Size 471B
                                        • SHA256 c3ce1ca3eecff5d3dc504967b7f0b7be12f2c2cd71378212d18aae69032711cb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                        • Size 416B
                                        • SHA256 5fc7f4acaf4882c676eb73da85c3db351ceb25bc5bfdfaf716fa3f8635d0d6fd
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        132.0.5905.43.manifest
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\132.0.5905.43.manifest
                                        • Size 225B
                                        • SHA256 0eb93f246ca9ae50ab6056af4cc5746fe244ec4ccdb38175b2eb2e80286a27c7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-100.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100.png
                                        • Size 2KB
                                        • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-100_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100_contrast-white.png
                                        • Size 1KB
                                        • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-140.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140.png
                                        • Size 3KB
                                        • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-140_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140_contrast-white.png
                                        • Size 2KB
                                        • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-180.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180.png
                                        • Size 3KB
                                        • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-180_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180_contrast-white.png
                                        • Size 3KB
                                        • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-80.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80.png
                                        • Size 1KB
                                        • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        150x150Logo.scale-80_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80_contrast-white.png
                                        • Size 1KB
                                        • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-100.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100.png
                                        • Size 1KB
                                        • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-100_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100_contrast-white.png
                                        • Size 1KB
                                        • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-140.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140.png
                                        • Size 1KB
                                        • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-140_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140_contrast-white.png
                                        • Size 1KB
                                        • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-180.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180.png
                                        • Size 2KB
                                        • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-180_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180_contrast-white.png
                                        • Size 2KB
                                        • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-80.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80.png
                                        • Size 1KB
                                        • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        70x70Logo.scale-80_contrast-white.png
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80_contrast-white.png
                                        • Size 901B
                                        • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        CChromaEditorLibrary64.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CChromaEditorLibrary64.dll
                                        • Size 145KB
                                        • SHA256 d092a6ac9e3b41c80e6d8eb09cce8efeb22e142bba4551c5c680273de0e4341a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        CUESDK.x64_2017.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CUESDK.x64_2017.dll
                                        • Size 474KB
                                        • SHA256 7c46fd5e0338361ad3528f3dec72dcb4a9ae20d386fcb1cc214a801737108b3a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        assistant_package
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\assistant_package
                                        • Size 3.6MB
                                        • SHA256 6cb3ed0b791b2319305c23a43353a5db2081b4013289162d54ceade5b2b7e203
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        d3dcompiler_47.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\d3dcompiler_47.dll
                                        • Size 4.5MB
                                        • SHA256 31b57aa72c8773469132d587b5de1ce6c1d672e7a1c02b51bc7be114f17af437
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dxcompiler.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxcompiler.dll
                                        • Size 24.5MB
                                        • SHA256 47c488edf53904b9bf7fca8907a6b6940557f3ea01127845abcd9e518cefb13f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dxil.dll
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxil.dll
                                        • Size 1.5MB
                                        • SHA256 e86e64046a4ed5050b16defac296e4ef4abd936f7cdceb47aa2fe498867fa761
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        files_list
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\files_list
                                        • Size 4KB
                                        • SHA256 ee7e23266f512e69b95afa630f4539d894290ba35a026e93aba0425c390b0219
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                                        • Size 9.1MB
                                        • SHA256 9614c38d5fea1c81e2f421f27c1d427ba7083085a2eb9ab17e3285e8bb0dde8a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        custom_partner_content.json
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\resources\custom_partner_content.json
                                        • Size 245KB
                                        • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        opera_autoupdate.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                        • Size 7.3MB
                                        • SHA256 16cefd55a520531da67d80730c89eaca7acf6cbe7eb618c5198b6821e8bf5a6b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        opera.exe
                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        • Size 2.8MB
                                        • SHA256 5cd0fd3cf2f5debada24ad0e8cacf6a271b82056b8a1ea6d0b345bb1ea282c8e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        +JXF15871352858586454833.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF15871352858586454833.tmp
                                        • Size 424KB
                                        • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        +JXF16389016593528291734.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF16389016593528291734.tmp
                                        • Size 477KB
                                        • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        +JXF1752481244654639374.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF1752481244654639374.tmp
                                        • Size 156KB
                                        • SHA256 7149f8f1d8b0386ab74427c78d660e211c572ffd901897f86475319d28248083
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        +JXF2685789905679178450.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF2685789905679178450.tmp
                                        • Size 141KB
                                        • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        +JXF8273329215589893745.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF8273329215589893745.tmp
                                        • Size 132KB
                                        • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Navegador Opera GX.lnk
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\Navegador Opera GX.lnk
                                        • Size 1KB
                                        • SHA256 b22a5f07bb6d2017b27c46e26627cd3e6f13f8dd8211043fa1344b0e7d26b642
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                        • Size 2.8MB
                                        • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        assistant_installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\assistant_installer.exe
                                        • Size 2.5MB
                                        • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dbgcore.DLL
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\dbgcore.DLL
                                        • Size 196KB
                                        • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dbghelp.dll
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\assistant\dbghelp.dll
                                        • Size 1.8MB
                                        • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        installer_prefs_include.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\installer_prefs_include.json
                                        • Size 242B
                                        • SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer_prefs_include.json
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\installer_prefs_include.json
                                        • Size 971B
                                        • SHA256 05678c7fe1608cbd127e92d5e916e2d2ce8e9374291ef2cc709c0c952b651a18
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer_prefs_include.json.backup
                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\32156398-5f8b-4d17-9cf1-82ac07bcaff8 Opera GX Installer Temp\opera_package_202606200221551\installer_prefs_include.json.backup
                                        • Size 227B
                                        • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        installer.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS062713AA\installer.exe
                                        • Size 9.1MB
                                        • SHA256 33566d50268068e1fab01b06431773c863627abcfa5e0614ecae1443ebfefa61
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        200.ico
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                        • Size 116KB
                                        • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        BrowserInstaller.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                        • Size 3.7MB
                                        • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG1.BMP
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                        • Size 12KB
                                        • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG14.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                        • Size 43KB
                                        • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG15.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                        • Size 644B
                                        • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        IRIMG17.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                                        • Size 40KB
                                        • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG18.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG18.PNG
                                        • Size 40KB
                                        • SHA256 80666acf155840ac346f6b292ed552afb59cdd222c86bcc52ba98379df438fcc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG2.BMP
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                        • Size 12KB
                                        • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG3.BMP
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                        • Size 12KB
                                        • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG3.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                                        • Size 475B
                                        • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        IRIMG4.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
                                        • Size 368B
                                        • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        IRIMG9.PNG
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                                        • Size 438B
                                        • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        IRZip.lmd
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                        • Size 400KB
                                        • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Wow64.lmd
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                        • Size 252KB
                                        • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        irsetup.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                        • Size 1.8MB
                                        • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lua5.3.dll
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                                        • Size 395KB
                                        • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        irsetup.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                        • Size 1.7MB
                                        • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lua5.3.dll
                                        • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                                        • Size 395KB
                                        • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        opera-installer-bro.exe
                                        • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                        • Size 3.9MB
                                        • SHA256 013b67c853e5753530e88445be9218b891f40710be5b84bd6cda4ad736e27d91
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        setuparguments.ini
                                        • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                        • Size 802B
                                        • SHA256 9801df5ca72be44b534281424cffe703279b9d9ed715c8cd4220a89ad16d1f84
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        TLauncher.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                        • Size 9.2MB
                                        • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        TlauncherProfiles.json
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\TlauncherProfiles.json
                                        • Size 427B
                                        • SHA256 b389608366e142a358c6be624a740f1256f2f02f813c5e6e1da67e44264d80f8
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        gson-2.2.4.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4\gson-2.2.4.jar
                                        • Size 185KB
                                        • SHA256 c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        guava-17.0.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\17.0\guava-17.0.jar
                                        • Size 2.1MB
                                        • SHA256 8c36a80ea613d0b6b8040a17cf837c5bbe3677bc1b06a058a6c174fdb787ebbc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        icu4j-core-mojang-51.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2\icu4j-core-mojang-51.2.jar
                                        • Size 1.6MB
                                        • SHA256 147592c5eb8e11fc8394125954f877acf25918bae13aa210c2825aefc3030ed8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        authlib-1.5.21.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.21\authlib-1.5.21.jar
                                        • Size 62KB
                                        • SHA256 ce7a9c86ebebf30b89929026f4a0a3c58ce0f4d47937d6dc086ae4fd0c77544a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        netty-1.8.8.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\netty\1.8.8\netty-1.8.8.jar
                                        • Size 15KB
                                        • SHA256 cae3de169e7695ef30079349c5ea81790bd10c04c4037196fd4fdc07b6d43934
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        realms-1.7.59.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\mojang\realms\1.7.59\realms-1.7.59.jar
                                        • Size 1.1MB
                                        • SHA256 4a6a90ed956609d6cd3a7f84622fcac87d22e9a5d4858c6d1e965af860d07a63
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        codecjorbis-20101023.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023\codecjorbis-20101023.jar
                                        • Size 101KB
                                        • SHA256 6c4b4e50e608763564afa1bde2d25ece9dd715e7c9129540faa1faded4896506
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        codecwav-20101023.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023\codecwav-20101023.jar
                                        • Size 5KB
                                        • SHA256 bb7d17b340afe6abdfbfdaa03683bce4aef39a64887dbab0636eaff3cf2d59ba
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        libraryjavasound-20101123.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123\libraryjavasound-20101123.jar
                                        • Size 21KB
                                        • SHA256 333bbefeff5eb1722dc9b8d2e26c38bc69c1efa07d0ca870480f29d8858aa336
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        librarylwjglopenal-20100824.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824\librarylwjglopenal-20100824.jar
                                        • Size 18KB
                                        • SHA256 107d11509f6af59b8c2ba23df828bc5d3c4e067b58f3d858c7deb90ca5308f84
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        soundsystem-20120107.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107\soundsystem-20120107.jar
                                        • Size 63KB
                                        • SHA256 2882d64550240dd0c026724da664d9f97ef205c91d6a85273d10790d88608f34
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        commons-codec-1.9.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9\commons-codec-1.9.jar
                                        • Size 257KB
                                        • SHA256 ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        commons-io-2.4.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4\commons-io-2.4.jar
                                        • Size 180KB
                                        • SHA256 cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        commons-logging-1.1.3.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3\commons-logging-1.1.3.jar
                                        • Size 60KB
                                        • SHA256 70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        netty-all-4.0.23.Final.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.23.Final\netty-all-4.0.23.Final.jar
                                        • Size 1.7MB
                                        • SHA256 50510e9c9874b539b98ef931fe7eeeb002f6b5b1976ea37669b9493426294561
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jna-3.4.0.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\jna\3.4.0\jna-3.4.0.jar
                                        • Size 985KB
                                        • SHA256 3bff6a1489b8e54cf130344bc5e8744db331045ad2fc736612576e1d80eb1f48
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        platform-3.4.0.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\dev\jna\platform\3.4.0\platform-3.4.0.jar
                                        • Size 892KB
                                        • SHA256 ea89d5090c8303ba4e9a0056e6d8a20429f3e021411e950bfd9eba3b6e6cf15c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jinput-platform-2.0.5-natives-windows.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput-platform\2.0.5\jinput-platform-2.0.5-natives-windows.jar
                                        • Size 151KB
                                        • SHA256 24afbd5e1fab17da57d16a4d3f19d53f36155ef46a9976484201a4bb9722287f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jinput-2.0.5.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5\jinput-2.0.5.jar
                                        • Size 203KB
                                        • SHA256 79b5a4f5829e1a49a415711f7fb8eb5b9ad22defa72929fda2da96ec30d3f018
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jutils-1.0.0.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0\jutils-1.0.0.jar
                                        • Size 7KB
                                        • SHA256 c3334ff39cf0ab3b54925619101054c90098b7c733b1e7834c7b75e4c41e84a5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        launchwrapper-1.12.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.12\launchwrapper-1.12.jar
                                        • Size 32KB
                                        • SHA256 57f402b626d16cc2705bf2a37add7adbb074f0ca3b3102fa6e23aa303dae682f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jopt-simple-4.6.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.6\jopt-simple-4.6.jar
                                        • Size 61KB
                                        • SHA256 3fcfbe3203c2ea521bf7640484fd35d6303186ea2e08e72f032d640ca067ffda
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jopt-simple-5.0.3.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.3\jopt-simple-5.0.3.jar
                                        • Size 76KB
                                        • SHA256 6f45c00908265947c39221035250024f2caec9a15c1c8cf553ebeecee289f342
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        commons-compress-1.8.1.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1\commons-compress-1.8.1.jar
                                        • Size 356KB
                                        • SHA256 5fca136503f86ecc6cb61fbd17b137d59e56b45c7a5494e6b8fd3cabd4697fbd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        commons-lang3-3.3.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.3.2\commons-lang3-3.3.2.jar
                                        • Size 403KB
                                        • SHA256 6b81d10754dadf184d386011486e6509c2cc0c3d33565ced4fb4402b9413d47d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        httpclient-4.3.3.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3\httpclient-4.3.3.jar
                                        • Size 575KB
                                        • SHA256 9844cc9b5440d65a88d28bcba9d771374d2dfdab898848cda164611091633013
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        httpcore-4.3.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2\httpcore-4.3.2.jar
                                        • Size 275KB
                                        • SHA256 abd02320e2356f89d054dae4cf02306bef20a9cf7865b3ac94ec7552b4f1528b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        log4j-api-2.0-beta9.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9\log4j-api-2.0-beta9.jar
                                        • Size 105KB
                                        • SHA256 eb0ca9bdd938f80711152a758d6bc331a8b0d769199d457294dc67ed03f73498
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        log4j-core-2.0-beta9.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9\log4j-core-2.0-beta9.jar
                                        • Size 665KB
                                        • SHA256 dcde6033b205433d6e9855c93740f798951fa3a3f252035a768d9f356fde806d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lwjgl-platform-2.9.4-nightly-20150209-natives-windows.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.4-nightly-20150209\lwjgl-platform-2.9.4-nightly-20150209-natives-windows.jar
                                        • Size 599KB
                                        • SHA256 f2e1f2c6bd7511a7504f389b8b716f5d8dc2fdc71e29c89b52644314cf0a228e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lwjgl-2.9.4-nightly-20150209.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.4-nightly-20150209\lwjgl-2.9.4-nightly-20150209.jar
                                        • Size 1022KB
                                        • SHA256 833e721817f70d1445eec13d8ce5a86e12af70efac5014356302e2bbc68b3fe2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lwjgl_util-2.9.4-nightly-20150209.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.4-nightly-20150209\lwjgl_util-2.9.4-nightly-20150209.jar
                                        • Size 169KB
                                        • SHA256 034456b132a336b72757325bb7aaf99e075681ee5650d2bea21717bd485de42f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        asm-commons-6.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-commons\6.2\asm-commons-6.2.jar
                                        • Size 77KB
                                        • SHA256 15545913db06c987aa404f028e33501d9f27f8ced612f73727e3547ac4de878c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        asm-tree-6.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-tree\6.2\asm-tree-6.2.jar
                                        • Size 49KB
                                        • SHA256 02317d9ed739dab470a96f44de712fde51a811362ca26852b34324388e61257c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        asm-6.2.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm\6.2\asm-6.2.jar
                                        • Size 108KB
                                        • SHA256 917bda888bc543187325d5fbc1034207eed152574ef78df1734ca0aee40b7fc8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        authlib-1.7.211.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\authlib\1.7.211\authlib-1.7.211.jar
                                        • Size 68KB
                                        • SHA256 0e38e6067487dc227fdedc45f927ddfb98521d77d6dcc31ec9be0e8f2542fdbd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        netty-1.8.8.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\netty\1.8.8\netty-1.8.8.jar
                                        • Size 17KB
                                        • SHA256 9c704b87dbd5a13570ce9865fb0a4a4640cb2b65834dc34596ec0c344bc514d1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        tl_skin_cape_1.8.9-1.37.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\org\tlauncher\tl_skin_cape_1.8.9\1.37\tl_skin_cape_1.8.9-1.37.jar
                                        • Size 605KB
                                        • SHA256 d71c412a62cb3fb00dbcf8fc83926f6ae9a7efddda161977431fff95537a351e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        oshi-core-1.1.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\oshi-project\oshi-core\1.1\oshi-core-1.1.jar
                                        • Size 30KB
                                        • SHA256 27901e5d4d60d3502571d5e6358fc89e3fcf874138b69d495d139bcc3e169404
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        twitch-external-platform-4.5-natives-windows-64.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-external-platform\4.5\twitch-external-platform-4.5-natives-windows-64.jar
                                        • Size 7.1MB
                                        • SHA256 6428eb438f53afc563d58c7f2a563ca9fcaae80db3520af744de5e5db1c9df6a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        twitch-platform-6.5-natives-windows-64.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform\6.5\twitch-platform-6.5-natives-windows-64.jar
                                        • Size 566KB
                                        • SHA256 75337e7362e489a6f8c9712aeced9e131e82a3ce851cafbd4d03fda284cc7116
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        twitch-6.5.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\6.5\twitch-6.5.jar
                                        • Size 54KB
                                        • SHA256 3b90f9f7ad968b9588482e3a09b6e7d0d81c6cf7c214c5cecd8120e3ee509ae9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        client.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\libraries\v1\objects\3870888a6c3d349d3771a3e9d16c9bf5e076b908\client.jar
                                        • Size 8.1MB
                                        • SHA256 14f0d96d1a56fb4f5c3b2233d00699525893fe5ce3dcf181e7de59120595d298
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        COPYRIGHT
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\COPYRIGHT
                                        • Size 3KB
                                        • SHA256 89471aea3957922df21c7088d2687c4e43f5ff14e635e7d971083dde540b45e3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        LICENSE
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\LICENSE
                                        • Size 40B
                                        • SHA256 23f9a5c12fa839650595a32872b7360b9e030c7213580fb27dd9185538a5828c
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        README.txt
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\README.txt
                                        • Size 46B
                                        • SHA256 963095cf8db76fb8071fd19a3110718a42f2ab42b27a3adfd9ec58981c3e88d2
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        THIRDPARTYLICENSEREADME-JAVAFX.txt
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\THIRDPARTYLICENSEREADME-JAVAFX.txt
                                        • Size 107KB
                                        • SHA256 38995534df44e0526f8c8c8d479c778a4b34627cfd69f19213cfbe019a7261ba
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        THIRDPARTYLICENSEREADME.txt
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\THIRDPARTYLICENSEREADME.txt
                                        • Size 174KB
                                        • SHA256 70ab017c19119bcaf5c79bbda41ed727d5adaf15640831c94ba8e12ac315c350
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Welcome.html
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\Welcome.html
                                        • Size 955B
                                        • SHA256 84599b5f0c5eca91886b743c17a9614e77facf1e31f6f11fc59a60dd60dd40df
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        JAWTAccessBridge-64.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\JAWTAccessBridge-64.dll
                                        • Size 15KB
                                        • SHA256 fa500ce4398a6292b98d0a7ac2a29c9022c54761d40765ccbcb25fc081fa96c9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        JavaAccessBridge-64.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\JavaAccessBridge-64.dll
                                        • Size 139KB
                                        • SHA256 dc3f53a86259d60e82d675ef593a322832a3d9561ff3e0a1cf9c222443252683
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        WindowsAccessBridge-64.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\WindowsAccessBridge-64.dll
                                        • Size 108KB
                                        • SHA256 69cd12bc4ec5bd7f0e506542b5d47f503f91f2236adbd39e6e191445060cf1e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        awt.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\awt.dll
                                        • Size 1.4MB
                                        • SHA256 ac612d2bc779ccb51cef132cb0a060695ab124f5ab9a94dc29f7692d91509233
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        bci.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\bci.dll
                                        • Size 16KB
                                        • SHA256 f4f50a215bc327c5f016b55bd57223e242498d0008256a42a0d399d4a7e71f3c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dcpr.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dcpr.dll
                                        • Size 156KB
                                        • SHA256 9053f78ccf014cad648f65653a433c79390bfd9bc78ed902b1e11f122f9fb34f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        decora_sse.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\decora_sse.dll
                                        • Size 84KB
                                        • SHA256 d7a921706d51e59f57a2f7ae89a887f79c9523a8da355a99a6ff7b4c58b5d1ff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        deploy.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\deploy.dll
                                        • Size 563KB
                                        • SHA256 240e962a459979f4c67020f9f6c21492dde53ef03fc79f150a02e2bed3146986
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dt_shmem.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dt_shmem.dll
                                        • Size 29KB
                                        • SHA256 4c2c7af7c10979815703ae81da7e8801227479ec49a53ddc0683d6d4dc4cdd00
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dt_socket.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dt_socket.dll
                                        • Size 24KB
                                        • SHA256 03090eed8fecc57a717f9b8b90e63cdfe5fdacae857f4432007266a7adbaab7c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        deployJava1.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dtplugin\deployJava1.dll
                                        • Size 989KB
                                        • SHA256 8b90bd96ee62daf37a1bb4b803bee0755c894944e4a41f810e3b74e8a0a3802a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        npdeployJava1.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\dtplugin\npdeployJava1.dll
                                        • Size 1.1MB
                                        • SHA256 b3c10bf5498457a76bba3b413d0c54b03a4915e5df72576f976e1ad6d2450012
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        eula.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\eula.dll
                                        • Size 133KB
                                        • SHA256 ce253c68a41d3567034f486d7bc9fad9d4c92edb99e91d551a7123bcc0e5a0e7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        fontmanager.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\fontmanager.dll
                                        • Size 267KB
                                        • SHA256 ebc7d009c0bee5a45efa60b0e74c6926fb57e583d3c4e8614442dbaa14f9a874
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        fxplugins.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\fxplugins.dll
                                        • Size 183KB
                                        • SHA256 bcd0598cc4d26f93e072be401b47663985733a1e9913d6f5d87395bab4a58e93
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        glass.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\glass.dll
                                        • Size 250KB
                                        • SHA256 0d69c26ce8b1abac19cb9b226e79455f1edbca235a3384cd3a671f158f209e2d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        glib-lite.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\glib-lite.dll
                                        • Size 445KB
                                        • SHA256 3dee62dad9ec1e7e3fac1495519da1c2f0bba7e655bfaa98e5dd9f0d3e3463c0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        gstreamer-lite.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\gstreamer-lite.dll
                                        • Size 607KB
                                        • SHA256 48c1fff8414681a5b4e26aa6a790c30d0851c5b097f8c1e1330e2aa6d5f697bc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        hprof.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\hprof.dll
                                        • Size 154KB
                                        • SHA256 b938282cf0611875143cf1acc63fa3ee639e89c08dd6c0fe2efc32f2d258f52d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        instrument.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\instrument.dll
                                        • Size 120KB
                                        • SHA256 2e9bfb362b1bbcc079bc138fa0bd255f5a623538bd97ef94aaf7d168c0e3471d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        j2pcsc.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\j2pcsc.dll
                                        • Size 18KB
                                        • SHA256 bd8d9aced5f039dc09fb6962bdd5a023d86a580ebce3bc71f06915754c33ed79
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        j2pkcs11.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\j2pkcs11.dll
                                        • Size 62KB
                                        • SHA256 3a698fadaa6376dcb05b8f5e1d2bd5088842ca2fe48781ce2fa4b1f51f197aba
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jaas_nt.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jaas_nt.dll
                                        • Size 20KB
                                        • SHA256 c1a880cb336c0cb1e39213a58f58726f419e54dc0990326b0074813c16aef8d4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jabswitch.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jabswitch.exe
                                        • Size 33KB
                                        • SHA256 4219fdd8ea118be869a497a0f777488af516ff087d34b76bed3868d6e8f457c4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java-rmi.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java-rmi.exe
                                        • Size 15KB
                                        • SHA256 0ca356ea7a0f04094b2d8e2e35748386dcef67a7c216457f89ac8231626ad550
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java.dll
                                        • Size 154KB
                                        • SHA256 3e060e1aafa2fe99f06c34db84a49d3a2f994c1a0dbef40f37dbafd45cd69533
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java.exe
                                        • Size 201KB
                                        • SHA256 26d7b2c990c1d12829e3105ac9b1120d834839c49c08caa4c05ee424721e5639
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java_crw_demo.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\java_crw_demo.dll
                                        • Size 29KB
                                        • SHA256 fd0213cbee471fb42128e407b77050eb3bbd4d3e09ee04fef9db68b3d134f5ad
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javacpl.cpl
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javacpl.cpl
                                        • Size 166KB
                                        • SHA256 195957a4ec7b249c714a4b99d2c01b50ef33a1a1c98a7e6a9ae6bc6361079794
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javacpl.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javacpl.exe
                                        • Size 75KB
                                        • SHA256 bb80d933bf5c60ee911dc22fcc7d715e4461bc72fd2061da1c74d270c1f73528
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javafx_font.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_font.dll
                                        • Size 73KB
                                        • SHA256 23e7c7d52933f9a3856f28070e283ad536976ce0cbf06600175ab1eb86c9d15b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javafx_font_t2k.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_font_t2k.dll
                                        • Size 526KB
                                        • SHA256 7cb155cd02afe8020ea958841bbff831d6dcecd465e91ee766500620521fb9d2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javafx_iio.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javafx_iio.dll
                                        • Size 133KB
                                        • SHA256 57454c33bc533fa038635eaeb5e7d2ee7e7c9090884485d146810960e47be11e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaw.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
                                        • Size 202KB
                                        • SHA256 32546ecf1236769d2d777331f90282fb97589bec75da11c8e727d61d3d4c988a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaws.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaws.exe
                                        • Size 314KB
                                        • SHA256 60f2898c91ef0f253b61d8325d2d22b2baba1a4a4e1b67d47a40ffac511e95a5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jawt.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jawt.dll
                                        • Size 14KB
                                        • SHA256 6feb5b3df1f15227bb5d308dade3672d6f7e9f9f4403c23caa34bb36bdb84f7d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jdwp.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jdwp.dll
                                        • Size 196KB
                                        • SHA256 16ae6fa97b099fd87db19fe8d2f12a16c847a217e87bab6476d92587ad01933a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfr.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfr.dll
                                        • Size 26KB
                                        • SHA256 f92a630f80bdee6760ec822777fff2f02107fdfe6775adacf1df0249207a3f27
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfxmedia.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfxmedia.dll
                                        • Size 135KB
                                        • SHA256 a6d925c88809e24d85cb86023cca259fbef81387bb6625de53741286c589672d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfxwebkit.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jfxwebkit.dll
                                        • Size 19.8MB
                                        • SHA256 5678716d0cb2d2cf2edf44077455ffc8ddfe2b48f4dc36d9c2066add58a65468
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jjs.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jjs.exe
                                        • Size 15KB
                                        • SHA256 326d3b02e3edddc9b51a11c3b62bfb79dd60441cc4faa2afbaa60877b4e9de21
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jli.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jli.dll
                                        • Size 170KB
                                        • SHA256 d35e289838fb91c55107c76d8224e4c561ac0d37627b19775ae289f551387272
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2iexp.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2iexp.dll
                                        • Size 283KB
                                        • SHA256 db84ba217329dc2131b4082e6b589f29c099a116f7bff49db27ca22aa529cb9e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2launcher.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2launcher.exe
                                        • Size 99KB
                                        • SHA256 04bea7aab6eedc3a3f3787711f368247668800596921b8da551d1a4694d510c9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2native.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2native.dll
                                        • Size 19KB
                                        • SHA256 38d2ec45e685d96b21e0ae9951719222b008baa6617a17a39b46825831a2f8f3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2ssv.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jp2ssv.dll
                                        • Size 207KB
                                        • SHA256 49e8eec6a8d9c5fea7dbbca6b049041606c1249ae93e2c31a9d3024feeb9cc51
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jpeg.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jpeg.dll
                                        • Size 181KB
                                        • SHA256 a150da0043f3739cdb54c8e51d664d314f54eddf9f13cee18e5bec1d3eec74cd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jsdt.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsdt.dll
                                        • Size 18KB
                                        • SHA256 356e766557e00eabbcb4d49d23aeb001604a8b52b5b5fc037261adadfd57d3b8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jsound.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsound.dll
                                        • Size 34KB
                                        • SHA256 5434dff18247d1fcbc848118489f858b07c0f7edf4fbb0cb418fd31281bd8f94
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jsoundds.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\jsoundds.dll
                                        • Size 30KB
                                        • SHA256 9708de28bdf8098527b6c029ea448bc0989e47ad8dbba1b0580f5737645295bc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        kcms.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\kcms.dll
                                        • Size 215KB
                                        • SHA256 0588e40307a498df5bbd0596212ed264a179415663bf51e7114dd3772ba30f85
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        keytool.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\keytool.exe
                                        • Size 15KB
                                        • SHA256 f374d5c3d59bb4d0967c355c0a6a8e723072481925ea3d8b536694affed58ff7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        kinit.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\kinit.exe
                                        • Size 15KB
                                        • SHA256 5682b4b2b6c86a439382c3406615e62bbcc9ba1665ac682a1db2fa338fd918de
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        klist.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\klist.exe
                                        • Size 15KB
                                        • SHA256 ddcb5eab8f50382401d653ca55fbf4161911ca84b4ed8b0f3e0ad1328df9931d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ktab.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ktab.exe
                                        • Size 15KB
                                        • SHA256 e2cb9b6ba58a5561e4e4c1ee4a492d6fa02fdaa23f756b59fb0aa90c4a49f4e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        lcms.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\lcms.dll
                                        • Size 228KB
                                        • SHA256 e017016d966edda3e09d78dd68b349f2478ae944208634adb6c3480adfb4bd4d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        management.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\management.dll
                                        • Size 36KB
                                        • SHA256 1b067978dfc615e7512216dda00d54621e9f335ecba7dc267d7f1d632936566f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        mlib_image.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\mlib_image.dll
                                        • Size 638KB
                                        • SHA256 c6af6349ceba0fd2b08c4f60f7ef257f40c802b6ec697fc1122894283f41541e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msvcr100.dll.tlauncherdownload
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\msvcr100.dll.tlauncherdownload
                                        • Size 809KB
                                        • SHA256 1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        net.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\net.dll
                                        • Size 92KB
                                        • SHA256 6f230ca8eea5f6ed768db850563d4038ae12d9c78ec28ee2eb33184bbcc0ade2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        nio.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\nio.dll
                                        • Size 58KB
                                        • SHA256 7f1a54f4f22d0acf09c2f157187a3f4dd2dc53a60edf78941a33bf40bf0fd504
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        npt.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\npt.dll
                                        • Size 18KB
                                        • SHA256 5cd9041a126738fa41668dbbe97c62c7498bfa942caeca8eeda5967eded1007c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        orbd.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\orbd.exe
                                        • Size 15KB
                                        • SHA256 24abbf5d53ea5ae7bb37312ca33da03fb8e82cd9e76488a5ee8577986f7d5247
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        pack200.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\pack200.exe
                                        • Size 15KB
                                        • SHA256 ba59a4a536ed7f55be605efb8af7bc17c25c221212f90ee6d7e2291f4128e5b1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        npjp2.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\plugin2\npjp2.dll
                                        • Size 223KB
                                        • SHA256 f5e85d13081af51803d768e134cab7667065358193647063b72dc971fd85e5f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        policytool.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\policytool.exe
                                        • Size 16KB
                                        • SHA256 64f73ca3d02938ec83c4ddc875722986fc42b894fdd3d451e72726da06ae3559
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        prism_common.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_common.dll
                                        • Size 56KB
                                        • SHA256 8460c620d7f9023bde0671377a0b92af5396f799d955840c3bf7d8d1a52d5197
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        prism_d3d.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_d3d.dll
                                        • Size 162KB
                                        • SHA256 40dc50b9538c07eaf51f8d96b25b9d2bb07022d06c38fc29ca62294a5e0f9644
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        prism_es2.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_es2.dll
                                        • Size 47KB
                                        • SHA256 72b349e181e7650cbfc108d2135ce598a689e2711db98de57d2e89a9f0f10284
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        prism_sw.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\prism_sw.dll
                                        • Size 55KB
                                        • SHA256 32115e66573c933df3503cb045085c300d62e212eeff84e1c922b567a49ab491
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        resource.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\resource.dll
                                        • Size 14KB
                                        • SHA256 6e8def8bacf87cb4e814beac1be718c9c7648808f098a9a839c3bb1b94f4281c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmid.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\rmid.exe
                                        • Size 15KB
                                        • SHA256 5034b8281a50fe866a232181409c2a529dcd6a00db70a076fc23c37f6f0815a6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmiregistry.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\rmiregistry.exe
                                        • Size 16KB
                                        • SHA256 261292991ee976b8be501eb02bce8da4f281bd010db7a338f08c3c3e74787469
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Xusage.txt
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\server\Xusage.txt
                                        • Size 1KB
                                        • SHA256 37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        jvm.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\server\jvm.dll
                                        • Size 8.3MB
                                        • SHA256 04d85639dacb86c6efca146051681608727f0376ca5293b9f83b232fc4db6a54
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        servertool.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\servertool.exe
                                        • Size 16KB
                                        • SHA256 6450298e910f2cbecacda298db7f5ab1f79fb301db5e8a93f4f46c0266086b99
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        splashscreen.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\splashscreen.dll
                                        • Size 205KB
                                        • SHA256 bc4f9e01334e4ed1c2883af3030aefce4808cea3d2f406df7f505d645094007a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ssv.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ssv.dll
                                        • Size 538KB
                                        • SHA256 50b68306c7438ba089690b16533e1ce44f92ff73237597defbdd41de231622cc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ssvagent.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\ssvagent.exe
                                        • Size 64KB
                                        • SHA256 0c957f502f22393aec107ea670e7de19e4adc2be0c8c1b0898d5ff5bffd65bc9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunec.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\sunec.dll
                                        • Size 131KB
                                        • SHA256 da7fbd2ca77d8bbe3fc17b89ae37fd0a7c2956a0bc592de539a5c466278a330c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunmscapi.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\sunmscapi.dll
                                        • Size 31KB
                                        • SHA256 8217b2fda3d8892032136c180a262ed4ed877bc0a8d25b47dfc5e34b7e3861ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        t2k.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\t2k.dll
                                        • Size 248KB
                                        • SHA256 3279a0ed45eeaa51f932b5255ccf709964f33ed7e4e5844a8f07ab4f2ba910dc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        tnameserv.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\tnameserv.exe
                                        • Size 15KB
                                        • SHA256 0fbed22765850f988959d80e38f21a81da7dedb1f912ceb8c6d8faa78bc93ea4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        unpack.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\unpack.dll
                                        • Size 78KB
                                        • SHA256 515a2a8293f06d9c94f23d6d6d4e8e89cfb367255c88f0ed1a0e233a1500a9b1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        unpack200.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\unpack200.exe
                                        • Size 192KB
                                        • SHA256 cc8d67216b1e04d7a41bf62f9c1088cd65a3d21796c5a562851e841b3afa28cf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        verify.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\verify.dll
                                        • Size 48KB
                                        • SHA256 238f96dc1effcb719a9efe8472c34aa880e2cff4af94e26b8a48b5c00695d688
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        w2k_lsa_auth.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\w2k_lsa_auth.dll
                                        • Size 23KB
                                        • SHA256 c435649e8b088686d08c5fef31167067a3dac6b168e0e4a0a31dc4dae2bccfeb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        wsdetect.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\wsdetect.dll
                                        • Size 188KB
                                        • SHA256 c37efb9fe3fb0ed305ca80d2c8a29f63410d2734a5d636370ea44d5a06f4831c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        zip.dll
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\zip.dll
                                        • Size 75KB
                                        • SHA256 d62088f0dc6aff56b2bc71185a88b225d61700bca55fcc721c9e9d5b02459790
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        accessibility.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\accessibility.properties
                                        • Size 155B
                                        • SHA256 a46372b05ce9f40f5d5a775c90d7aa60687cd91aaa7374c499f0221229bf344e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        jvm.cfg
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\amd64\jvm.cfg
                                        • Size 634B
                                        • SHA256 80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        calendars.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\calendars.properties
                                        • Size 1KB
                                        • SHA256 d93fb6d3451d1b82256b0e31aae7850152fa5df76f116a9d669aa4ace6bb68b4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        charsets.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\charsets.jar
                                        • Size 2.9MB
                                        • SHA256 89c072777c3ffbb5a9df29a3b38f36041f39c022deb602ff8eb4e74ccff3f76f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        classlist
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\classlist
                                        • Size 78KB
                                        • SHA256 406b68d923e9ce01f19194bca03eaaf9fc0efce6590713b6d066485cd94d1339
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        CIEXYZ.pf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\CIEXYZ.pf
                                        • Size 50KB
                                        • SHA256 207d748a76c10e5fa10ec7d0494e31ab72f2bacab591371f2e9653961321fe9c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        GRAY.pf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\GRAY.pf
                                        • Size 632B
                                        • SHA256 081caac386d968add4c2d722776e259380dcf78a306e14cc790b040ab876d424
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        LINEAR_RGB.pf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\LINEAR_RGB.pf
                                        • Size 1KB
                                        • SHA256 712036aa1951427d42e3e190e714f420ca8c2dd97ef01fcd0675ee54b920db46
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        PYCC.pf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\PYCC.pf
                                        • Size 268KB
                                        • SHA256 48122294b5c08c69b7fe1db28904969dcb6edc9aa5076e3f8768bf48b76204d0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sRGB.pf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\cmm\sRGB.pf
                                        • Size 3KB
                                        • SHA256 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        content-types.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\content-types.properties
                                        • Size 5KB
                                        • SHA256 46f47b3883c7244a819ae1161113fe9d2375f881b75c9b3012d7a6b3497e030a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        currency.data
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\currency.data
                                        • Size 3KB
                                        • SHA256 5a55dbb9f6dd2bd6024e9f9e81b26d7fa72e74c13a0e8b0a7d5c4715a08c5739
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        deploy.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy.jar
                                        • Size 2.1MB
                                        • SHA256 d53bea3e1daefa313e8a116566e35d6653e7d9062623521a06acc265925259ef
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ffjcext.zip
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\ffjcext.zip
                                        • Size 13KB
                                        • SHA256 4b59033c9c8b45b276d0802bff94c611cef4c620c9e1cb1cf2927783b3da5bd7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages.properties
                                        • Size 2KB
                                        • SHA256 926ccadaec649f621590d1aa5e915481016564e7ab28390c8d68bdaaf4785f1f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_de.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_de.properties
                                        • Size 3KB
                                        • SHA256 c9399a33bb9c75345130b99d1d7ce886d9148f1936543587848c47b8540da640
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_es.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_es.properties
                                        • Size 3KB
                                        • SHA256 be987d93e23ab7318db095727dedd8461ba6d98b9409ef8fc7f5c79fa9666b84
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_fr.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_fr.properties
                                        • Size 3KB
                                        • SHA256 8deeec35ed29348f5755801f42675e3bf3fa7ad4b1e414acca283c4da40e4d77
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_it.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_it.properties
                                        • Size 3KB
                                        • SHA256 550954f1f80fe0e73d74eb10ad529b454d5ebc626eb94a6b294d7d2acf06f372
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_ja.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_ja.properties
                                        • Size 6KB
                                        • SHA256 8d499c1cb14d58e968a823e11d5b114408c010b053b3b38cfef7ebf9fb49096f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages_ko.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_ko.properties
                                        • Size 5KB
                                        • SHA256 4de0d5ceaf4eb8c8c657246cb91ff8dfd6903cda274b8ed9eda531bdd6d499ea
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        messages_pt_BR.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_pt_BR.properties
                                        • Size 3KB
                                        • SHA256 40aeb9eb0ab79be2d25764cbc16e5388a3be12ebaf10e96837feeecf44354948
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_sv.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_sv.properties
                                        • Size 3KB
                                        • SHA256 5ccee63720fcac2a136cf1fa90cbac05040f89ffe8c082c2d067247bfcd76b87
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_zh_CN.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_zh_CN.properties
                                        • Size 3KB
                                        • SHA256 a1752a0175f490f61e0aad46dc6887c19711f078309062d5260e164ac844f61a
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        messages_zh_TW.properties.tlauncherdownload
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\messages_zh_TW.properties.tlauncherdownload
                                        • Size 3KB
                                        • SHA256 ff4a3a92bc92cb08d2c32c435810440fd264edd63e56efa39430e0240c835620
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        splash.gif
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\splash.gif
                                        • Size 8KB
                                        • SHA256 113b01304ebbf3cc729a5ca3452dda2093bd8b3ddc2ba29e5e1c1605661f90be
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        [email protected]
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\deploy\[email protected]
                                        • Size 14KB
                                        • SHA256 9dd5ccd6bdfdaad38f7d05a14661108e629fdd207fc7776268b566f7941e1435
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        access-bridge-64.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\access-bridge-64.jar
                                        • Size 183KB
                                        • SHA256 6486ccb862ff85099f5fd281c65d537cc53accc789bdeed380295c30815d0106
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        cldrdata.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\cldrdata.jar
                                        • Size 3.7MB
                                        • SHA256 2ce081a8a12e944e2d0b1de28a8cd5fb09420e6319d6cf8b944a2c6350d2b8ef
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dnsns.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\dnsns.jar
                                        • Size 8KB
                                        • SHA256 11716897463ee8cce7f2aeec8d1154e6b7ac1dcb8cb588776380f731a6a2f5c5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jaccess.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\jaccess.jar
                                        • Size 43KB
                                        • SHA256 fa110300329b45911946df1a48111878dacfa897bac1f0fad954d19670be5be9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfxrt.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\jfxrt.jar
                                        • Size 17.3MB
                                        • SHA256 856891e3726d8f97ab1045c1c9f7df351cf7d5c1bb22fd233ab965a1748c33d3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        localedata.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\localedata.jar
                                        • Size 1.1MB
                                        • SHA256 f23b65d023674e663f812e06968cef1ac479a146342f605b9b95c1cc668fec95
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        meta-index
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\meta-index
                                        • Size 1KB
                                        • SHA256 f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        nashorn.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\nashorn.jar
                                        • Size 1.9MB
                                        • SHA256 de5595dd213fd8198447d4d3b681c22273df3327475b96df3a964f0f8da7cdce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunec.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunec.jar
                                        • Size 38KB
                                        • SHA256 869ea30322a9db85878a15fc0120dfd486d10df1d8fb3adeda0ec3863b08dce5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunjce_provider.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunjce_provider.jar
                                        • Size 271KB
                                        • SHA256 453889131438a5bce6a3dd353b33112ebf6482002f376225ca808e313d96794d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunmscapi.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunmscapi.jar
                                        • Size 31KB
                                        • SHA256 1f910115e8e774ff59252124e293bc24ba6a2fcee50fb888054493efcccdcaea
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        sunpkcs11.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\sunpkcs11.jar
                                        • Size 243KB
                                        • SHA256 67768756ddd5c7ab6ace309a5d51554efcee45e2ff5d7257ff06e1ce55f2b162
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        zipfs.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\ext\zipfs.jar
                                        • Size 67KB
                                        • SHA256 8989822cf07be9cf0e0a2221748f23aece60e357db9aa8626cd93ea0734dc713
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        flavormap.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\flavormap.properties
                                        • Size 3KB
                                        • SHA256 c2748e07b59398cc40cacccd47fc98a70c562f84067e9272383b45a8df72a692
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        fontconfig.bfc
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fontconfig.bfc
                                        • Size 3KB
                                        • SHA256 aae23acc42f217a63d675f930d077939765b97e9c528b5659842515ca975111f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        fontconfig.properties.src
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fontconfig.properties.src
                                        • Size 10KB
                                        • SHA256 2f3067fb80574523307836e50990f575aa50aca3bc4fed9bcbdea291d36012a2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaBrightDemiBold.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightDemiBold.ttf
                                        • Size 73KB
                                        • SHA256 72cee3e6df72ad577af49c59dca2d0541060f95a881845950595e5614c486244
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaBrightDemiItalic.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightDemiItalic.ttf
                                        • Size 73KB
                                        • SHA256 895c5262cdb6297c13725515f849ed70609dbd7c49974a382e8bbfe4a3d75f8c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaBrightItalic.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightItalic.ttf
                                        • Size 78KB
                                        • SHA256 d68819a70b60ff68ca945ef5ad358c31829e43ec25024a99d17174c626575e06
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaBrightRegular.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaBrightRegular.ttf
                                        • Size 336KB
                                        • SHA256 0faaaca3c730857d3e50fba1bbad4ca2330add217b35e22b7e67f02809fac923
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaSansDemiBold.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaSansDemiBold.ttf
                                        • Size 310KB
                                        • SHA256 53773357d739f89bc10087ab2a829ba057649784a9acbffee18a488b2dccb9ee
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaSansRegular.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaSansRegular.ttf
                                        • Size 681KB
                                        • SHA256 f8d877b0b64600e736dfe436753e8e11acb022e59b5d7723d7d221d81dc2fcde
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaTypewriterBold.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaTypewriterBold.ttf
                                        • Size 228KB
                                        • SHA256 fc908259013b90f1cbc597a510c6dd7855bf9e7830abe3fc3612ab4092edcde2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        LucidaTypewriterRegular.ttf
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\fonts\LucidaTypewriterRegular.ttf
                                        • Size 237KB
                                        • SHA256 d9d0aab0354c3856df81afac49bdc586e930a77428cb499007dde99ed31152ff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        hijrah-config-umalqura.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\hijrah-config-umalqura.properties
                                        • Size 13KB
                                        • SHA256 69becfe0d45b62bbdbcf6fe111a8a3a041fb749b6cf38e8a2f670607e17c9ee2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        cursors.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\cursors.properties
                                        • Size 1KB
                                        • SHA256 7b8b63f78e2f732bd58bf8f16144c4802c513a52970c18dc0bdb789dd04078e4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        win32_CopyDrop32x32.gif
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_CopyDrop32x32.gif
                                        • Size 165B
                                        • SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        win32_CopyNoDrop32x32.gif.tlauncherdownload
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_CopyNoDrop32x32.gif.tlauncherdownload
                                        • Size 153B
                                        • SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        win32_LinkDrop32x32.gif
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_LinkDrop32x32.gif
                                        • Size 168B
                                        • SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        win32_MoveDrop32x32.gif
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\images\cursors\win32_MoveDrop32x32.gif
                                        • Size 147B
                                        • SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        javafx.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\javafx.properties
                                        • Size 55B
                                        • SHA256 b5b67c9f896edb103afea16d1d408c85e396fa8baad0f6a668895b380415d043
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        javaws.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\javaws.jar
                                        • Size 475KB
                                        • SHA256 b571800798892db3394dd8c8f7b2b374dad5bb133d33152392d07da29612de29
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jce.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jce.jar
                                        • Size 111KB
                                        • SHA256 c57cf3b05d552d8a573b31a46e97a13201cf1df8f0d5cd4645514ba9a3f1c6a8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfr.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfr.jar
                                        • Size 542KB
                                        • SHA256 1bbcb162afe5db029fa889fde95ac0551f01395bce09fcc749feb26b5a10e6da
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        default.jfc
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfr\default.jfc
                                        • Size 19KB
                                        • SHA256 0e90e5023f69c44497f1886bc11fcdc8caf8e5bdb0fbd86ac653327a61e51451
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        profile.jfc
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfr\profile.jfc
                                        • Size 19KB
                                        • SHA256 0f459267c79fec84d7c01f1bc7085821248d91d16324af7eef04274a243bed38
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jfxswt.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jfxswt.jar
                                        • Size 33KB
                                        • SHA256 f883ded4b82416eaa277ad35e44b19ed004560057ec77e050225d84d4268d35d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jsse.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jsse.jar
                                        • Size 609KB
                                        • SHA256 01f78f5ea1e65eb0e71b1e5aaf05af13c0ba2854eb4705a8185c386a5a6245a3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jvm.hprof.txt
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\jvm.hprof.txt
                                        • Size 4KB
                                        • SHA256 b055bf25b07e5ac70e99b897fb8152f288769065b5b84387362bb9cc2e6c9d38
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        logging.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\logging.properties
                                        • Size 2KB
                                        • SHA256 ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        management-agent.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management-agent.jar
                                        • Size 381B
                                        • SHA256 8f981c688a4b5cbfbe0898b918b803eee332338a352e7bb18292627dbcd5d56f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        jmxremote.access
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\jmxremote.access
                                        • Size 3KB
                                        • SHA256 439158eb513525feda19e0e4153ccf36a08fe6a39c0c6ceeb9fcee86899dd33c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        jmxremote.password.template
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\jmxremote.password.template
                                        • Size 2KB
                                        • SHA256 3d83e336c9a24d09a16063ea1355885e07f7a176a37543463596b5db8d82f8fa
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        snmp.acl.template
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\management\snmp.acl.template
                                        • Size 3KB
                                        • SHA256 f1dc97da5a5d220ed5d5b71110ce8200b16cac50622b33790bb03e329c751ced
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        meta-index
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\meta-index
                                        • Size 2KB
                                        • SHA256 4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        net.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\net.properties
                                        • Size 2KB
                                        • SHA256 5d62f39e6eb46c7a731b6997a14acfeb63f5c95dfcef8de3d4d94b5d571372c6
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        plugin.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\plugin.jar
                                        • Size 989KB
                                        • SHA256 e5b9117b6115002bf99921476fe2ee8cfd8e2baefb484a33c0969d2af3f4471c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        psfont.properties.ja
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\psfont.properties.ja
                                        • Size 2KB
                                        • SHA256 0c790de696536165913685785ea8cbe1ac64acf09e2c8d92d802083a6da09393
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        psfontj2d.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\psfontj2d.properties
                                        • Size 10KB
                                        • SHA256 7d51936fa3fd5812ae51f9f5657e0e70487dca810b985607b6c5d6603f5e6c98
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        resources.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\resources.jar
                                        • Size 3.3MB
                                        • SHA256 d4d63c2e0743c901ac579c5bcd7b438a3c02619aec1a148cd335b37bf9600c57
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        US_export_policy.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\US_export_policy.jar
                                        • Size 2KB
                                        • SHA256 90012f900cf749a0e52a0775966ef575d390ad46388c49d512838983a554a870
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        blacklist
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\blacklist
                                        • Size 3KB
                                        • SHA256 6c73c877b36d4abd086cb691959b180513ac5abc0c87fe9070d2d5426d3dbf71
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        blacklisted.certs
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\blacklisted.certs
                                        • Size 2KB
                                        • SHA256 96572f243f31c2ef81a6e627542e596f6a9295cff3c7ae095c1b595cb1457ded
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        cacerts
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\cacerts
                                        • Size 161KB
                                        • SHA256 edfd543b4e264779933bdacd7abf6fbca98a1cd69fd60c2c42f36256930b2817
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java.policy
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\java.policy
                                        • Size 2KB
                                        • SHA256 b8582889b0df36065093c642ed0f9fa2a94cc0dc6fde366980cfd818ec957250
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        java.security
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\java.security
                                        • Size 23KB
                                        • SHA256 c50c923c2b0dc5a3c598671be2cd980f7f06e7254cce04a1fe498f6e17fce3ec
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaws.policy
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\javaws.policy
                                        • Size 98B
                                        • SHA256 b7a87d1f3f4b7ba1d19d0460fa4b63bd1093afc514d67fe3c356247236326425
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        local_policy.jar
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\security\local_policy.jar
                                        • Size 3KB
                                        • SHA256 b8becc3ef2e7ff7d2165dd1a4e13b9c59fd626f20a26af9a32277c1f4b5d5bc7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        sound.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\sound.properties
                                        • Size 1KB
                                        • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        tzdb.dat
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\tzdb.dat
                                        • Size 98KB
                                        • SHA256 79f315b59efa1c8eb1c43b8a56cf4b2efbfa7a0d8cd1f49ea3ff3c67ad095945
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        tzmappings
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\lib\tzmappings
                                        • Size 8KB
                                        • SHA256 d936ee24810b747c54192b4b5a279f21179fe3ceb42d113d025a368ebb7cb5a7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        release
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\release
                                        • Size 527B
                                        • SHA256 6231a6bd08e537b72b90929fd90a7f576eae91b6dead14412ac3638139d6d913
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        servers.dat
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\servers.dat
                                        • Size 19B
                                        • SHA256 985449c999da7567b984131b6b10b73e8f0435b3cb17d5838bbea0570ed1d367
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        TLauncherAdditional.json
                                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\versions\1.8.9\TLauncherAdditional.json
                                        • Size 208B
                                        • SHA256 f44d555f8c1dc093dac4c50a6992c0ca3c539876e636b7127f3d76e480facff5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        InnerStateServer-1.3.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\InnerStateServer-1.3.json
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        IRIMG1.PNG
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
                                        • Size 45KB
                                        • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG10.PNG
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG10.PNG
                                        • Size 206B
                                        • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        IRIMG12.PNG
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG12.PNG
                                        • Size 40KB
                                        • SHA256 37d9536955ff0cd5c6cd6ee5349fc2241961355dabed1ee15f000b76fd4c4efc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG13.PNG
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
                                        • Size 41KB
                                        • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG14.BMP
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG14.BMP
                                        • Size 451KB
                                        • SHA256 f53498584e1054602763ba61506ed748e61ccc46c4cf0eff2477e77406cf713d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IRIMG4.BMP
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
                                        • Size 451KB
                                        • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        uninstall.xml
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                        • Size 21KB
                                        • SHA256 c93a7782e96f1d3514368299916f96b2c2d93e424ea2b8f007d36efa71f992bf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        uninstall.xml
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                        • Size 10KB
                                        • SHA256 2f6bf8499d000d279f115d66701b6161dfb62a7b6f9ef40594e5a2f771331749
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        uninstall.xml
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                        • Size 10KB
                                        • SHA256 0bc43114d1e6061b6e431ba80703a04ce58c112254444bee97916b8d14ed1389
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        version_manifest.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                                        • Size 199KB
                                        • SHA256 00b4bd865582c21e0d1103cf534469bb0592dd4206ac31a705a1f079ea33daae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        1.8.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\v1\packages\f6ad102bcaa53b1a58358f16e376d548d44933ec\1.8.json
                                        • Size 76KB
                                        • SHA256 14e3aa58cf578fd8573985ca96bf075d8be05477be988664a09446c7a76f4142
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        manifest.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\03828bb8455f3cef94869286a0d941dd16933239\manifest.json
                                        • Size 78KB
                                        • SHA256 5f5d38401ae3c0ceb945e34bfcd43dbdc85694f8447d6bb17c762f8149b7de55
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        1.8.9.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_piston-meta.mojang.com\v1\packages\d546f1707a3f2b7d034eece5ea2e311eda875787\1.8.9.json
                                        • Size 17KB
                                        • SHA256 341af5f47a6b5bc137bfe681f4f3533e081041290aabbf9d7ebeae9881de768f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        inner_servers-1.2.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.2.json
                                        • Size 6KB
                                        • SHA256 669f9c7417bafc723d8bae5c2d10a01d1579ee1e038ee7f77dcd8256875b2c08
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        index_es.html
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_es.html
                                        • Size 56KB
                                        • SHA256 93f23c032daf0acc8f9bae23275c96562daa2fdc65a10bc80a16fbad1675d8e4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        libraries-1.7.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                                        • Size 365KB
                                        • SHA256 d4ce6740244db00a95ca1b1c1120ead62ce73026ad8b55cce15a5a0903dc28fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        additional_assets-1.1.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                                        • Size 190KB
                                        • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        version_manifest.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                                        • Size 12KB
                                        • SHA256 ebace30304f4a7cdc61a56c996ae17566a50616d3d1f4509c6251658a3dc641b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        version_manifest.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                                        • Size 48KB
                                        • SHA256 2b9fcc2c73b756ddebf60ea3d576e05ae5480befd2b34c016c452e162de47c22
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        additional_hot_servers-1.0.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                                        • Size 35KB
                                        • SHA256 7672a2d7fbd1190c17c8f721bf1d3865789c71d5e1a9ef775f9ce2bcbdfb8c1d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        hot_servers-1.0.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                                        • Size 57KB
                                        • SHA256 e26bb57922d41f70c85c96f069a37eccf2b03fd0e8d33458599f981bcf248b4c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java_configuration.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_rescl.tl.vg\b\jvm\java_configuration.json
                                        • Size 13KB
                                        • SHA256 b490908c9bda7f4ed5220145dee8dd1ee9ad92a210080adec3c183b0f0a50a8b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dependencies.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9369\dependencies.json
                                        • Size 25KB
                                        • SHA256 f25fb93425e2fdd712de5d06c36bc0da4ec5c07a17c7cbd4fe2ecc9b68090b89
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        resources.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9369\resources.json
                                        • Size 17KB
                                        • SHA256 581d5e1f979f718cb57124103d2372f1b6f7e789dd45ccc77dc9378fff541258
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        appConfig.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                                        • Size 4KB
                                        • SHA256 18d1cc05c126707902ab7859455a406d98712f7f3d01e420a2decd8790fafa4e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaConfig21.json
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                                        • Size 3KB
                                        • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        starter-core-1.268-v3.exe
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v3.exe
                                        • Size 9.2MB
                                        • SHA256 a92a1dea42081672b52a60748064d443f4366f98e04a189fd3b56b24816f26d6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        COPYRIGHT
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                                        • Size 35B
                                        • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        LICENSE
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                                        • Size 33B
                                        • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        ADDITIONAL_LICENSE_INFO
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                                        • Size 51B
                                        • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ASSEMBLY_EXCEPTION
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                                        • Size 46B
                                        • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        LICENSE
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                                        • Size 35B
                                        • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        tlauncher-2.0.properties
                                        • Path C:\Users\Admin\AppData\Roaming\.tlauncher\tlauncher-2.0.properties
                                        • Size 1KB
                                        • SHA256 a8fc1c39efc7d4a82ff6981756e31dc178829148c2c3dc549df9e5b4325db8de
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        Navegador Opera GX.lnk
                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Navegador Opera GX.lnk
                                        • Size 2KB
                                        • SHA256 13669072a05ec74c7a95645cbdf31fe68f4afe12e7a9079feab8d0207494540b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        0143f40d-f669-40d4-8e3c-bb381e783bce.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\0143f40d-f669-40d4-8e3c-bb381e783bce.tmp
                                        • Size 3KB
                                        • SHA256 d5bb656bd2242802c4aa33417d111ee0ee8de07de14a3bd1dc8ffa95059cb3c1
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        settings.dat
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                        • Size 40B
                                        • SHA256 8cacc2fc002a13357508b64f104357819cf6112b6ffeb0b704d670c13e8e892f
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        5efff9c9-af5c-42e4-b493-492b866c635a.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\5efff9c9-af5c-42e4-b493-492b866c635a.tmp
                                        • Size 171B
                                        • SHA256 1ac6ae1ee11aae9ef109bf0f23886885fb9b54289e9b5c15c7fdc7c9ee0a45eb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        99610939-f627-458b-8d9c-b46e6dca6e4e.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\99610939-f627-458b-8d9c-b46e6dca6e4e.tmp
                                        • Size 162KB
                                        • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        66927ad8-a8dc-4475-aa3d-cb68a901567d.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\66927ad8-a8dc-4475-aa3d-cb68a901567d.tmp
                                        • Size 48B
                                        • SHA256 5d33bb53bdaf6bfdb5c66da618df2625d0f687d54bf70b12b5272016f630a3ba
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        the-real-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 672B
                                        • SHA256 0c47a9c18d46230a99f416191ea92d12cfa05f5ba82dfdb7ef4541730e1c0686
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        CURRENT
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        MANIFEST-000001
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                        • Size 41B
                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        4797e0c4-66e2-4d6c-b795-c8e6e8ea2fed.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\4797e0c4-66e2-4d6c-b795-c8e6e8ea2fed.tmp
                                        • Size 27KB
                                        • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        61df3580-0069-43f6-86a8-9514ad623ee5.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\61df3580-0069-43f6-86a8-9514ad623ee5.tmp
                                        • Size 27KB
                                        • SHA256 1cf990618d717d9febe7f274ca61fa0f03d3ff5265fca7080f51999e3dd38ea9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        8b3cb832-4a7e-4bda-81a9-5c9457ee1665.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\8b3cb832-4a7e-4bda-81a9-5c9457ee1665.tmp
                                        • Size 27KB
                                        • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ae8c2bad-588a-490a-8d74-5349827e468c.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ae8c2bad-588a-490a-8d74-5349827e468c.tmp
                                        • Size 27KB
                                        • SHA256 35f2a396e255a1ed1779b56fb097e46f6e17119c2ba84fe609a01cccbdfcc18c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        c76053c1-3281-452c-97e4-7eb4ac3b9cb9.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\c76053c1-3281-452c-97e4-7eb4ac3b9cb9.tmp
                                        • Size 27KB
                                        • SHA256 f5c9674ecba70bfabdfee3de3b5d3de36401afc3371ef013eeb204568b27d4a2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        de1d2441-2828-4dbd-8d69-4bb654e96d5e.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\de1d2441-2828-4dbd-8d69-4bb654e96d5e.tmp
                                        • Size 27KB
                                        • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ec515391-1be3-4976-bdad-6dd52137a1b0.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ec515391-1be3-4976-bdad-6dd52137a1b0.tmp
                                        • Size 27KB
                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        85a0bdff-466f-4d37-8ee2-334eeb4b4b14.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\85a0bdff-466f-4d37-8ee2-334eeb4b4b14.tmp
                                        • Size 72B
                                        • SHA256 39e4afdd95fd1ad07f2a559f4acedff882e74e17e3a11c368fc889f85c3583cc
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        the-real-index
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 144B
                                        • SHA256 9683dea027a7601d50e03c4022dac817d631c4ac593b0345c687d8e1d3550138
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        e6563619-5a41-496b-b740-e045f9eeff18.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\e6563619-5a41-496b-b740-e045f9eeff18.tmp
                                        • Size 381B
                                        • SHA256 77fbf1a1277ff4b37141e4d28c540b4f56f236490257eb87db1978ca1c1b8a25
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 893B
                                        • SHA256 340a4b9f89d45eed20ca5c51cef084694ba7f4ad36e750b0c787549db2478d07
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 8a45d7b60442fb7fa3bf460ed410f28105c4d07b7220c1302f071afef6c89993
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 5aad1262d1390bd9db88d9ec61e0921391d6fb81f42006941fb0e645c3dcd10f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 29f7c98b1d41e1c07f2f73480d86cfdc4dc82a76a1961a391ceb6efa00680bd2
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 c720b14f13122b0b7be10df1ab4819389d7bf2b1b343bc6c0c93a2e53cce2711
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 eb27c426792284a0c7c6cbef544d3679333dd636a8cad40badd49b7e098bd685
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 5306ad19884a4a9aadc34c92f7c107e385ed1cdf9567d93d44ee57e4ac8daa81
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 493B
                                        • SHA256 50f3f5c15f0d597f59234f671ec0fd03fc447674b6f77268203f908a05ce7a1d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 605B
                                        • SHA256 b42c57d1ba8b1ad2afc12a2cc10e85c9adfefc79a43d6d9296fc8000eee31d80
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 717B
                                        • SHA256 a2279cbf3983b3aeadad837572257a113a9cf10a0e8119951aaca84df7bb0a3c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 3e5ff6343a22d5322c11fba87eba9f6eb86fc8fd8768f780f57e749d70f214e7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 4c1d353adb31507d6717a5cffbfc91f306a284e6fe84e9009c6cf2dce8c7f968
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 58714838f76b83f2eeb9a8c6a75c414a48c4a5620a8d48355da3f95c9c8f1d06
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 bea34826ff46935e1bfa121c2ba11492a660cdc4d824ab27963be43f451566ab
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 3a8ae30d2c628a6c033fcb3ec5e02a39f70b7d8af5406adc91fa8ea1f46d408b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 0f9c77b1ee75dc0d441d11906dcaf269b4934bba5ee3aa1b2d373808350e4c3f
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 3f0827a1ec0267d227cde39b5d2217566734e5be732a74db9c59f25f5ee2f506
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 d4e2229c22a297a41efb4e9ea0f4a80c4e1335fc7245ce921622f0972a2a8468
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 1KB
                                        • SHA256 56b1a122817252dc09675644174a46e3b72a3e356a37d6654a83ae5dcd3d0c43
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 1fd3bcddf99dad475f44000ad7156ecd9f92a5fd7253d792db62880c2813cb95
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 7e31581c1c388a52887b535004923bdc6faaee0ea2561a07cf603fd7eb8882fe
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 9e3779c4ab539ef7a154dd7a4ba31859818244f45dafeefe6a6ad732512f5b4d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 e024a0b31038777700a4638d76ae22d711fcf330d9919b85f76206069645fa82
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 aacd61145d80fc184626cf5bfc3fef86cee9436de4fd13f9bbc586260546e92a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 442e687806cc2923226b6ec2fca1b569f2ec797c874f5c41125ba2b97e52a4fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 9KB
                                        • SHA256 2f9713e6c269d9540051904430ba4c83d6d643fe3b38716ac3054f5ae207bd60
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 0ead3aceead966aa0f6f38032de2cc115a01ed79f2cfc702ee23856ca0615aab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 8KB
                                        • SHA256 be6bc3411f97bae273f566bc343d7e9522e98c130b7a8b76660fe92f0e609c07
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 8a63ada7cc99a7442a016fc6e065c1ed91a89778053254d3fa4cd5a9248847a3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 df7ca3c7abaad089b2884beeada6ff8c09a384fc4617e99a4ec9a11b422600e9
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 2cba102efcd950e5895267718e44898d20758b9585d9be8089f3172db05f7f46
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 2KB
                                        • SHA256 d1e984c988639c7f4226b5a87331011c8861ef6674d6c3d6ceabd7fc66f1cf44
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 08ba41d19e5f30669418f81d65fa35024aa49fdaeb480d67ecdda239e4e10fdc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 a0ab76cc4f3db5c234593eef33e2ec98b0a6d0b8e8fecd1f5cc9d5b59fcd00cb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 f064b83d6eab830a2ebcdb5719112edd148f12b805c761e598126402f84b46e5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 f40ce1de6c08175bbee886c9fd194b0bf974840504629485413197498c7734b1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 11KB
                                        • SHA256 aa6ad42813d6201b72e5b9eceae139f6ac61c194ba2e92b0cee8880cbcfad41e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 5fc6d1f3507a15266a9c7634cb621764cda7526a2c536540116a274ceb0141c9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9310f88-d5b5-43cd-b34a-1b2e67eaeb04.raw
                                        • Size 10KB
                                        • SHA256 811cbd91a421064ab0057db87b437130c0890de7d4e8d7d5ed7f9e56787b019e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dcc67027-b3fc-4453-afd2-ece704b47f58.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\dcc67027-b3fc-4453-afd2-ece704b47f58.tmp
                                        • Size 15KB
                                        • SHA256 a2667cadcc38c29a3da4d522fd7133318c0cacc3439a2d79c51dcf599ef5cfa9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        e84b0fa5-4646-4bc2-a9bf-56e6ead6184b.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\e84b0fa5-4646-4bc2-a9bf-56e6ead6184b.tmp
                                        • Size 327B
                                        • SHA256 a22562f32a34e7f106d3bb4338ae415d5dafb24c7c577150bc09b9c0a36ca61e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        fc4cdeab-2f5f-4fe0-9a1e-03a4aa57419f.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\fc4cdeab-2f5f-4fe0-9a1e-03a4aa57419f.tmp
                                        • Size 173B
                                        • SHA256 a488981135fb540fae24d34d3fbbd6536f442085e06a256cabd5e14429e6e42a
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 586B
                                        • SHA256 c123d7c3cd8f63bcd8e762ce63dcf778048f544f7289a1170d4193a6e4825813
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 524B
                                        • SHA256 e55590ecfb4487ca220991c39dc5c44c6a239702e18f44e2e100e640d8919f05
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 2KB
                                        • SHA256 2c4ae366ff6bf0ebf034f7391dbafa01c2a40a6c18933f4f900714d04df3b9bf
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 cc4de5aa1d34ecbd7e3f45a01e533bb72bacf63be5e3bcbc9b9211767d70bd3c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 1b1f3cfed14fd9df1d5409df7c82bef6c1f01fdd3d900333b77d23a4ebe81fac
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 a6ef756731aae1dd0a7761694b2bbc46cbb4090ea14f6998cde4f26a9e886130
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 90144193ed84f19153a3245e20757f8634f9064b9382cc6b142e0ab0f17692a6
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 f6a090ad3b5615227771be9050103fd50e4a753fd8faf8888793785b6a1c0f3c
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 e6dffdfaa93462a43c567076f0050ea4b185b666abe691e080521d9db74a08d7
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 3KB
                                        • SHA256 e258e6cb55296c191be8750671b6152bc5aba6d9e04308fdc56864fda1d2ac57
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 426B
                                        • SHA256 aa80d3a2388a526434e6b02f7ad2ad6fd2f83a1e402526b70f513ef5a7f8dff5
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.0.930942376
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.0.930942376
                                        • Size 1KB
                                        • SHA256 0d23a23be3ae0cb5d1c7dfa71c25242e64c8162a02d1a0c810ccf542a4c13e6b
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 200B
                                        • SHA256 313cc254d0939a8cabd5305dc02294a515b9e73a5bbc3384458d874d6307a658
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 261B
                                        • SHA256 5d46c02117d7162b51706ba20b492ef2048203d1307cd38028f8679658aca45e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 385B
                                        • SHA256 c416dfce2336e85a6d8edc2dc500fc0ef5eb96b1bcd76e85b3165095aa6d8cac
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 2KB
                                        • SHA256 6395927321504784aaf7273a2fb208cbced096e248ad31d422bba2deca8721b8
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 545B
                                        • SHA256 2d262aede6357a4c2c6c98553946c89d550f46bf04da707ae21c89bb1b0a4a14
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 1KB
                                        • SHA256 ee71c872157669ed5a451312d042bd84ca30f661a7e2f44ffc25d80011fb6214
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 2KB
                                        • SHA256 4102a26b94f93dcad2dc0bb35374def3aecb95307efd429ffd68a6e7bf032023
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 8cbeb19d47a7e8297906960ba3a0e1ab9a3ef1689516ba47cbfb5f44e2a09598
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 483B
                                        • SHA256 5059bfa72e8419acb16cb75a5bd3c6550c5125f54945b177b7723ce5d0bd48a9
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 fe1109de09857a92ac4a6694673bb555998a74de61733d9983b8a12b66266c61
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 cf40ab0e798a6403200a3ba3bf2d9b1aa5d51679408eb1d4f94d299a18f1f2f9
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 5eeb5b0db4a3b7d985d32b43e777f45da953e81e0c7120623296cb02811ef63a
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 5ef7316b2e21e12aa2abb55fa1232e883e03c79b1d00a56c1cb2567775b01529
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.1.1534461669
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.1.1534461669
                                        • Size 3KB
                                        • SHA256 6a0bd26c52223379b5484bd2df3aac0a19c6d44b40642bd4204190eda685b6e4
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        ssdfp1532.2.1229762039
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1532.2.1229762039
                                        • Size 217B
                                        • SHA256 5e067e9954b26c5e658d9820189c7861b02c02b8bab2ca55fbf3a517f23815dc
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        data_0
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                        • Size 8KB
                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_1
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                        • Size 264KB
                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_2
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                        • Size 8KB
                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        data_3
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                        • Size 8KB
                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                        • MD5 SHA1 SHA512 SSDEEP
                                        Submit Download

                                        Local State
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                        • Size 3KB
                                        • SHA256 2bbeddc6fb72c75e037b4ea27244669a44a85d3d1b876ca09bc6df0bffbf9874
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        a5eb0fdc-52fb-4c00-8a48-115ff7bdfb5c.tmp
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\a5eb0fdc-52fb-4c00-8a48-115ff7bdfb5c.tmp
                                        • Size 151B
                                        • SHA256 5cc655b1b32d24e07a1d31cd0ab3df53e119c509e90384c9083778370cf2caae
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        assistant_prefs.json
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                        • Size 151B
                                        • SHA256 aa74daa418331f99a041bf1afc8a0b19c8cbd0f037ada32e40b93e03db03f4da
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        es-ES-3-0.bdic
                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\dictionaries\es-ES-3-0.bdic
                                        • Size 766KB
                                        • SHA256 e6334dcf080aaeca679db70565762a2c296ff5780c1af263530ac7345736bfa9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        memory/1268-2617-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-711-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-14-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-1564-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-557-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-2388-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-585-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-600-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/1268-641-0x0000000000BB0000-0x00000000011B1000-memory.dmp
                                        Download

                                        memory/2880-5169-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5178-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5176-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5175-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5174-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5173-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5179-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5177-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5167-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2880-5168-0x00000269A8790000-0x00000269A8791000-memory.dmp
                                        Download

                                        memory/2892-3218-0x0000014520510000-0x0000014521D94000-memory.dmp
                                        Download

                                        memory/4584-1868-0x00007FFEE3650000-0x00007FFEE3651000-memory.dmp
                                        Download

                                        memory/4584-1867-0x00007FFEE2F20000-0x00007FFEE2F21000-memory.dmp
                                        Download

                                        memory/4796-645-0x0000000000040000-0x0000000000637000-memory.dmp
                                        Download

                                        memory/4796-2601-0x0000000000040000-0x0000000000637000-memory.dmp
                                        Download

                                        memory/4796-2389-0x0000000000040000-0x0000000000637000-memory.dmp
                                        Download

                                        memory/4796-712-0x0000000000040000-0x0000000000637000-memory.dmp
                                        Download

                                        memory/5740-3253-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-2762-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3045-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3130-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3210-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3044-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3121-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3260-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3331-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-3348-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5740-2646-0x00000221B3520000-0x00000221B3521000-memory.dmp
                                        Download

                                        memory/5964-2614-0x0000000000400000-0x0000000000420000-memory.dmp
                                        Download

                                        memory/6132-5269-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5265-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5264-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5266-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5267-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5263-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5268-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5262-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6132-5261-0x0000016E96260000-0x0000016E97260000-memory.dmp
                                        Download

                                        memory/6768-3564-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-4629-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3569-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3568-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3655-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3680-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3678-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3754-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3963-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3969-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-4595-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3572-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-5096-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3502-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3467-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3456-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3449-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3424-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3409-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3397-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download

                                        memory/6768-3351-0x00000193CD690000-0x00000193CD691000-memory.dmp
                                        Download